What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Malwarebytes picking up 'Adware.GamePlayLab' and won't del

10 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My HP Pavillion laptop had very frequent problems with blue screening, and on booting up, would often go into standby mode, even when going through Safe-Mode, and would do this a number of times before working. Well I got a new PC, and decided to dig this laptop out again, and I deleted virtually everything off of it, bar Chrome, AVG, and Malwarebytes. So I did a disk check; that all checked out apparently. Did an AVG scan; perfectly fine, no threats detected. Tried Malwarebytes and it found two 'registry keys'. Both named 'Adware.GamePlayLabs' so I went to google and found plenty of posts about it being harmful to security and private information and is very dangerous. So sorry if that post was pretty long, I just wanted to get everything out in the open. And I hope someone can help me out. Thanks again :) Here is the 'DDS' copy/ paste: . DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by [removed] at 12:28:51.89 on 27/04/2013 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.7.2 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4092.1536 [GMT 1:00] . AV: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} . ============== Running Processes =============== . C:\PROGRA~2\AVG\AVG2013\avgrsa.exe C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe C:\Windows\system32\conhost.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\SysWOW64\svchost.exe -k Akamai C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe C:\Windows\SysWOW64\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\SysWOW64\PnkBstrA.exe C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe The DDS program told me to 'Zip' the 'attach' file it gave me. So I think I managed to zip it correctly, and I think I attached it properly too. Sorry if I didn't quite to it correctly, and I will happily attach the normal 'txt' file, if it will help :)
Post #2
Hello and Posted Image

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
  • Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
  • Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
  • Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
  • Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
  • Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  • Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!

The DDS log you posted doesn't appear to be complete. Can you please open it again with Notepad and make sure the entire log is highlighted and then repost the contents? If thats all that appears to be there, then let's run DDS again and see if we get a longer log.

Let's also run the following to be on the safe side (this isnt going to fix anything, it's just going to give me some additional information):




Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.
  • Download TDSSKiller and save it to your Desktop.
  • Extract its contents to your desktop.
  • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.


    🖼Click to load external image (Posted Image)

  • If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.


    🖼Click to load external image (Posted Image)

  • If a suspicious file is detected, the default action will be Skip, click on Continue.


    🖼Click to load external image (Posted Image)

  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.


    🖼Click to load external image (Posted Image)

  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
Post #3
Thank you very much for getting back to me, I checked the DDS log, and my copy and paste skills don't seem to be very up to scratch, seeing as the log continued on for quite a length. Here is the DDS log in full form. . DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by [removed] at 12:28:51.89 on 27/04/2013 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.7.2 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4092.1536 [GMT 1:00] . AV: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} . ============== Running Processes =============== . C:\PROGRA~2\AVG\AVG2013\avgrsa.exe C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe C:\Windows\system32\conhost.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\SysWOW64\svchost.exe -k Akamai C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe C:\Windows\SysWOW64\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\SysWOW64\PnkBstrA.exe C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe C:\Program Files (x86)\AVG\AVG2013\avgemca.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\IDT\WDM\sttray64.exe C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe C:\Users\Marshall\AppData\Local\Akamai\netsession_win.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Users\Marshall\AppData\Local\Akamai\netsession_win.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\taskeng.exe c:\Program Files (x86)\Hewlett-Packard\Media\Live TV\TVAgent.exe c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe C:\Windows\system32\taskhost.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marshall\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Marshall\Downloads\dds.scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://google.com/ uWindow Title = Internet Explorer, optimized for Bing and MSN uInternet Settings,ProxyOverride = BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden uRun: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s uRun: [Google Update] "C:\Users\Marshall\AppData\Local\Google\Update\GoogleUpdate.exe" /c uRun: [Akamai NetSession Interface] "C:\Users\Marshall\AppData\Local\Akamai\netsession_win.exe" uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start mRun: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam" mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) mPolicies-system: HideFastUserSwitching = 0 (0x0) IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 IE: Free YouTube Download - C:\Users\Marshall\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm IE: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL Trusted Zone: teagames.com\www DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} - hxxp://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection32.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File mRun-x64: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe mRun-x64: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm . ============= SERVICES / DRIVERS =============== . R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2013-2-8 71480] R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2013-2-8 311096] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2013-2-8 116536] R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2013-2-8 45880] R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2013-2-26 246072] R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2013-2-8 206136] R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2013-2-14 239416] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-14 59904] R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-14 27136] R2 AODDriver4.1;AODDriver4.1;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-3-5 53888] R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-2-27 4937264] R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-2-19 282624] R2 ezSharedSvc;Easybits Shared Services for Windows;C:\Windows\system32\svchost.exe -k netsvcs [2009-7-14 27136] R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-4-27 418376] R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-4-27 701512] R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2012-6-20 46136] R3 enecir;ENE CIR Receiver;C:\Windows\System32\drivers\enecir.sys [2009-6-29 70656] R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-4-27 25928] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-3-24 215040] R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2010-3-24 36408] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-14 17920] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-9-24 136176] S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944] S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-3-24 35104] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\drivers\ssudbus.sys [2011-10-7 95544] S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-9-24 136176] S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;C:\Windows\System32\drivers\LGBusEnum.sys [2009-11-23 22408] S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;C:\Windows\System32\drivers\LGVirHid.sys [2009-11-23 16008] S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368] S3 RzSynapse;Razer Driver;C:\Windows\System32\drivers\RzSynapse.sys [2011-3-31 126464] S3 rzudd;Razer Mouse Driver;C:\Windows\System32\drivers\rzudd.sys [2012-1-12 74240] S3 SaiK0CCB;SaiK0CCB;C:\Windows\System32\drivers\SaiK0CCB.sys [2011-3-23 176136] S3 SaiU0CCB;SaiU0CCB;C:\Windows\System32\drivers\SaiU0CCB.sys [2011-3-23 41352] S3 ScreamBAudioSvc;ScreamBee Audio;C:\Windows\System32\drivers\ScreamingBAudio64.sys [2010-7-1 38992] S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864] S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312] S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:\Windows\System32\drivers\ssadbus.sys [2011-10-7 157672] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:\Windows\System32\drivers\ssadmdfl.sys [2011-10-7 16872] S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:\Windows\System32\drivers\ssadmdm.sys [2011-10-7 177640] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\drivers\ssudmdm.sys [2011-10-7 203320] S3 TFsExDisk;TFsExDisk;C:\Windows\System32\drivers\TFsExDisk.sys [2011-1-23 16392] S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-21 59392] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-22 1255736] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120] S4 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-7-27 63960] S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-10 256904] S4 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe [2010-11-30 89600] S4 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-8-5 203264] S4 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-4-5 361984] S4 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-10-31 227896] S4 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S4 HiPatchService;Hi-Rez Studios Authenticate and Update Service;C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe –> C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [?] S4 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-6-21 85560] S4 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-3-28 94264] S4 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2011-5-13 30520] . =============== Created Last 30 ================ . 2013-04-27 00:03:31 46080 —-a-w- C:\Windows\System32\atmlib.dll 2013-04-27 00:03:31 367616 —-a-w- C:\Windows\System32\atmfd.dll 2013-04-27 00:03:31 34304 —-a-w- C:\Windows\SysWow64\atmlib.dll 2013-04-27 00:03:31 295424 —-a-w- C:\Windows\SysWow64\atmfd.dll 2013-04-26 23:57:25 ——– d—–w- C:\Program Files (x86)\Skype 2013-04-26 23:15:28 25928 —-a-w- C:\Windows\System32\drivers\mbam.sys 2013-04-26 23:15:28 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-04-26 23:11:03 ——– d—–w- C:\Users\Marshall\AppData\Local\Programs 2013-04-26 22:30:42 9317456 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{7F8FF8D0-BD55-4B67-9CA1-E76390096947}\mpengine.dll 2013-04-26 22:01:28 ——– d—–w- C:\Users\Marshall\AppData\Roaming\AVG2013 2013-04-26 21:59:58 ——– d—–w- C:\Users\Marshall\AppData\Roaming\TuneUp Software 2013-04-26 21:58:29 ——– d—–w- C:\PROGRA~3\AVG2013 2013-04-26 21:40:11 ——– d—–w- C:\Users\Marshall\AppData\Local\MFAData 2013-04-26 21:40:11 ——– d—–w- C:\Users\Marshall\AppData\Local\Avg2013 2013-04-26 21:14:42 750592 —-a-w- C:\Windows\System32\win32spl.dll 2013-04-26 21:14:41 492032 —-a-w- C:\Windows\SysWow64\win32spl.dll 2013-04-26 21:13:59 3717632 —-a-w- C:\Windows\System32\mstscax.dll 2013-04-26 21:13:58 3217408 —-a-w- C:\Windows\SysWow64\mstscax.dll 2013-04-26 21:13:56 44032 —-a-w- C:\Windows\System32\tsgqec.dll 2013-04-26 21:13:56 158720 —-a-w- C:\Windows\System32\aaclient.dll 2013-04-26 21:13:56 131584 —-a-w- C:\Windows\SysWow64\aaclient.dll 2013-04-26 21:13:55 36864 —-a-w- C:\Windows\SysWow64\tsgqec.dll 2013-04-26 21:13:08 2048 —-a-w- C:\Windows\SysWow64\tzres.dll 2013-04-26 21:13:08 2048 —-a-w- C:\Windows\System32\tzres.dll 2013-04-26 21:13:08 ——– d—–w- C:\Program Files (x86)\GUMB0D8.tmp 2013-04-26 21:12:19 3153408 —-a-w- C:\Windows\System32\win32k.sys 2013-04-26 21:12:17 1656680 —-a-w- C:\Windows\System32\drivers\ntfs.sys 2013-04-26 21:12:15 19968 —-a-w- C:\Windows\System32\drivers\usb8023.sys 2013-04-26 21:12:13 2002432 —-a-w- C:\Windows\System32\msxml6.dll 2013-04-26 21:12:10 1882624 —-a-w- C:\Windows\System32\msxml3.dll 2013-04-26 21:12:07 1389568 —-a-w- C:\Windows\SysWow64\msxml6.dll 2013-04-26 21:12:06 1236992 —-a-w- C:\Windows\SysWow64\msxml3.dll 2013-04-26 21:11:01 478208 —-a-w- C:\Windows\System32\dpnet.dll 2013-04-26 21:11:01 376832 —-a-w- C:\Windows\SysWow64\dpnet.dll 2013-04-26 21:09:08 1913192 —-a-w- C:\Windows\System32\drivers\tcpip.sys 2013-04-26 21:09:07 288088 —-a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS 2013-04-26 21:09:04 715776 —-a-w- C:\Windows\System32\kerberos.dll 2013-04-26 21:09:04 542208 —-a-w- C:\Windows\SysWow64\kerberos.dll 2013-04-26 21:09:01 95744 —-a-w- C:\Windows\System32\synceng.dll 2013-04-26 21:09:01 78336 —-a-w- C:\Windows\SysWow64\synceng.dll . ==================== Find3M ==================== . 2013-04-26 22:01:07 71048 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2013-04-26 22:01:07 691592 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2013-03-19 06:04:06 5550424 —-a-w- C:\Windows\System32\ntoskrnl.exe 2013-03-19 05:46:56 43520 —-a-w- C:\Windows\System32\csrsrv.dll 2013-03-19 05:04:13 3968856 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe 2013-03-19 05:04:10 3913560 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe 2013-03-19 04:47:50 6656 —-a-w- C:\Windows\SysWow64\apisetschema.dll 2013-03-19 03:06:33 112640 —-a-w- C:\Windows\System32\smss.exe 2013-03-12 00:10:56 282744 ——w- C:\Windows\System32\MpSigStub.exe 2013-02-26 22:40:46 246072 —-a-w- C:\Windows\System32\drivers\avgidsdrivera.sys 2013-02-22 06:27:49 2312704 —-a-w- C:\Windows\System32\jscript9.dll 2013-02-22 06:20:51 1392128 —-a-w- C:\Windows\System32\wininet.dll 2013-02-22 06:19:37 1494528 —-a-w- C:\Windows\System32\inetcpl.cpl 2013-02-22 06:15:48 173056 —-a-w- C:\Windows\System32\ieUnatt.exe 2013-02-22 06:15:23 599040 —-a-w- C:\Windows\System32\vbscript.dll 2013-02-22 06:12:41 2382848 —-a-w- C:\Windows\System32\mshtml.tlb 2013-02-22 03:46:00 1800704 —-a-w- C:\Windows\SysWow64\jscript9.dll 2013-02-22 03:38:00 1129472 —-a-w- C:\Windows\SysWow64\wininet.dll 2013-02-22 03:37:50 1427968 —-a-w- C:\Windows\SysWow64\inetcpl.cpl 2013-02-22 03:34:17 142848 —-a-w- C:\Windows\SysWow64\ieUnatt.exe 2013-02-22 03:34:03 420864 —-a-w- C:\Windows\SysWow64\vbscript.dll 2013-02-22 03:31:46 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb 2013-02-14 02:52:46 239416 —-a-w- C:\Windows\System32\drivers\avgtdia.sys 2013-02-08 03:37:56 116536 —-a-w- C:\Windows\System32\drivers\avgmfx64.sys 2013-02-08 03:37:54 311096 —-a-w- C:\Windows\System32\drivers\avgloga.sys 2013-02-08 03:37:50 71480 —-a-w- C:\Windows\System32\drivers\avgidsha.sys 2013-02-08 03:37:42 206136 —-a-w- C:\Windows\System32\drivers\avgldx64.sys 2013-02-08 03:37:40 45880 —-a-w- C:\Windows\System32\drivers\avgrkx64.sys . ============= FINISH: 12:29:33.21 =============== I used the Kaspersky TDSSkiller. It found 1 threat, as opposed to the Malwarbytes 2. I did not ask for it to be cured, and it did not require a reboot. So here is the report log in full. 13:17:54.0187 3620 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 13:17:54.0507 3620 ============================================================ 13:17:54.0507 3620 Current date / time: 2013/04/30 13:17:54.0507 13:17:54.0507 3620 SystemInfo: 13:17:54.0508 3620 13:17:54.0508 3620 OS Version: 6.1.7601 ServicePack: 1.0 13:17:54.0508 3620 Product type: Workstation 13:17:54.0508 3620 ComputerName: MARSHALL-PC 13:17:54.0508 3620 UserName: Marshall 13:17:54.0508 3620 Windows directory: C:\Windows 13:17:54.0508 3620 System windows directory: C:\Windows 13:17:54.0508 3620 Running under WOW64 13:17:54.0508 3620 Processor architecture: Intel x64 13:17:54.0508 3620 Number of processors: 2 13:17:54.0508 3620 Page size: 0x1000 13:17:54.0508 3620 Boot type: Normal boot 13:17:54.0508 3620 ============================================================ 13:17:55.0536 3620 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 13:17:55.0541 3620 ============================================================ 13:17:55.0541 3620 \Device\Harddisk0\DR0: 13:17:55.0541 3620 MBR partitions: 13:17:55.0541 3620 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800 13:17:55.0541 3620 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x387C8800 13:17:55.0541 3620 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3882C800, BlocksNum 0x1B25800 13:17:55.0541 3620 \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x3A352000, BlocksNum 0x33830 13:17:55.0541 3620 ============================================================ 13:17:55.0558 3620 C: <-> \Device\Harddisk0\DR0\Partition2 13:17:55.0663 3620 D: <-> \Device\Harddisk0\DR0\Partition3 13:17:55.0670 3620 E: <-> \Device\Harddisk0\DR0\Partition4 13:17:55.0670 3620 ============================================================ 13:17:55.0670 3620 Initialize success 13:17:55.0670 3620 ============================================================ 13:17:59.0116 4088 ============================================================ 13:17:59.0116 4088 Scan started 13:17:59.0116 4088 Mode: Manual; 13:17:59.0116 4088 ============================================================ 13:17:59.0953 4088 ================ Scan system memory ======================== 13:17:59.0953 4088 System memory - ok 13:17:59.0953 4088 ================ Scan services ============================= 13:18:00.0132 4088 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 13:18:00.0135 4088 1394ohci - ok 13:18:00.0164 4088 [ 5C368F4B04ED2A923E6AFCA2D37BAFF5 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys 13:18:00.0170 4088 Accelerometer - ok 13:18:00.0206 4088 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 13:18:00.0208 4088 ACPI - ok 13:18:00.0223 4088 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 13:18:00.0226 4088 AcpiPmi - ok 13:18:00.0348 4088 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 13:18:00.0350 4088 AdobeARMservice - ok 13:18:00.0459 4088 [ 479901C99FA62D1C3261B7ACB1228DAD ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 13:18:00.0464 4088 AdobeFlashPlayerUpdateSvc - ok 13:18:00.0510 4088 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 13:18:00.0513 4088 adp94xx - ok 13:18:00.0541 4088 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 13:18:00.0544 4088 adpahci - ok 13:18:00.0563 4088 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 13:18:00.0564 4088 adpu320 - ok 13:18:00.0586 4088 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 13:18:00.0587 4088 AeLookupSvc - ok 13:18:00.0708 4088 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe 13:18:00.0711 4088 AESTFilters - ok 13:18:00.0753 4088 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 13:18:00.0760 4088 AFD - ok 13:18:00.0800 4088 [ 98022774D9930ECBB292E70DB7601DF6 ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys 13:18:00.0827 4088 AgereSoftModem - ok 13:18:00.0855 4088 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 13:18:00.0858 4088 agp440 - ok 13:18:00.0996 4088 [ C7074BD8D4B8F564859ED373433030AE ] Akamai c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll 13:18:00.0996 4088 Suspicious file (Hidden): c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll. md5: C7074BD8D4B8F564859ED373433030AE 13:18:01.0004 4088 Akamai ( HiddenFile.Multi.Generic ) - warning 13:18:01.0005 4088 Akamai - detected HiddenFile.Multi.Generic (1) 13:18:01.0034 4088 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 13:18:01.0037 4088 ALG - ok 13:18:01.0056 4088 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 13:18:01.0057 4088 aliide - ok 13:18:01.0105 4088 [ BCC32BF5EBB5DFD4380FA053D3651949 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 13:18:01.0109 4088 AMD External Events Utility - ok 13:18:01.0198 4088 AMD FUEL Service - ok 13:18:01.0209 4088 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 13:18:01.0210 4088 amdide - ok 13:18:01.0237 4088 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys 13:18:01.0239 4088 amdiox64 - ok 13:18:01.0270 4088 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 13:18:01.0274 4088 AmdK8 - ok 13:18:01.0304 4088 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 13:18:01.0304 4088 AmdPPM - ok 13:18:01.0331 4088 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 13:18:01.0332 4088 amdsata - ok 13:18:01.0351 4088 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 13:18:01.0353 4088 amdsbs - ok 13:18:01.0367 4088 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 13:18:01.0368 4088 amdxata - ok 13:18:01.0393 4088 [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1 c:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys 13:18:01.0396 4088 AODDriver4.1 - ok 13:18:01.0534 4088 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 13:18:01.0568 4088 AppID - ok 13:18:01.0667 4088 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 13:18:01.0699 4088 AppIDSvc - ok 13:18:01.0728 4088 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 13:18:01.0730 4088 Appinfo - ok 13:18:01.0779 4088 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 13:18:01.0781 4088 Apple Mobile Device - ok 13:18:01.0800 4088 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 13:18:01.0801 4088 arc - ok 13:18:01.0815 4088 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 13:18:01.0817 4088 arcsas - ok 13:18:01.0899 4088 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 13:18:01.0902 4088 aspnet_state - ok 13:18:01.0928 4088 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 13:18:01.0932 4088 AsyncMac - ok 13:18:01.0961 4088 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 13:18:01.0961 4088 atapi - ok 13:18:02.0017 4088 [ F8633CDD09647A64EE8DB550630427FF ] athr C:\Windows\system32\DRIVERS\athrx.sys 13:18:02.0051 4088 athr - ok 13:18:02.0111 4088 [ 3B9014FB7CE9E20FD726321C7DB7D8B0 ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys 13:18:02.0114 4088 AtiHdmiService - ok 13:18:02.0236 4088 [ A29087680A1C3B049E3C05438E8FF2B8 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys 13:18:02.0332 4088 atikmdag - ok 13:18:02.0362 4088 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys 13:18:02.0363 4088 AtiPcie - ok 13:18:02.0402 4088 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 13:18:02.0406 4088 AudioEndpointBuilder - ok 13:18:02.0427 4088 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 13:18:02.0431 4088 AudioSrv - ok 13:18:02.0580 4088 [ 0D8244A9DB70BC6C36E2FB56F6039AB6 ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe 13:18:02.0666 4088 AVGIDSAgent - ok 13:18:02.0694 4088 [ AC6CB348F67B6B1B75C0EFB8927A8B03 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys 13:18:02.0699 4088 AVGIDSDriver - ok 13:18:02.0730 4088 [ 2940FACB6EF92BD1936E4A1E2502468E ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys 13:18:02.0731 4088 AVGIDSHA - ok 13:18:02.0759 4088 [ 54B66C4AEEC6C4F742F3569EBA03EBB8 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys 13:18:02.0764 4088 Avgldx64 - ok 13:18:02.0792 4088 [ 13667B5D6310228A9FEF2BA5FCD9081F ] Avgloga C:\Windows\system32\DRIVERS\avgloga.sys 13:18:02.0794 4088 Avgloga - ok 13:18:02.0818 4088 [ BE82F9A1F2CCF4CE746D0C645D94079E ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys 13:18:02.0819 4088 Avgmfx64 - ok 13:18:02.0832 4088 [ 5D11620DEF66F9DC9468FEE385A8429B ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys 13:18:02.0832 4088 Avgrkx64 - ok 13:18:02.0848 4088 [ 71309F30D4F4565EC611FE3FC33A3A0F ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys 13:18:02.0853 4088 Avgtdia - ok 13:18:02.0892 4088 [ DC98337F0D2A9F6C0B6FB682297ECE3B ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe 13:18:02.0894 4088 avgwd - ok 13:18:02.0932 4088 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 13:18:02.0935 4088 AxInstSV - ok 13:18:02.0959 4088 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 13:18:02.0967 4088 b06bdrv - ok 13:18:03.0002 4088 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 13:18:03.0007 4088 b57nd60a - ok 13:18:03.0039 4088 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 13:18:03.0042 4088 BDESVC - ok 13:18:03.0051 4088 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 13:18:03.0054 4088 Beep - ok 13:18:03.0115 4088 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 13:18:03.0133 4088 BFE - ok 13:18:03.0159 4088 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 13:18:03.0185 4088 BITS - ok 13:18:03.0211 4088 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 13:18:03.0219 4088 blbdrive - ok 13:18:03.0309 4088 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 13:18:03.0326 4088 Bonjour Service - ok 13:18:03.0371 4088 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 13:18:03.0372 4088 bowser - ok 13:18:03.0387 4088 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 13:18:03.0389 4088 BrFiltLo - ok 13:18:03.0397 4088 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 13:18:03.0399 4088 BrFiltUp - ok 13:18:03.0423 4088 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 13:18:03.0427 4088 Browser - ok 13:18:03.0449 4088 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 13:18:03.0455 4088 Brserid - ok 13:18:03.0465 4088 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 13:18:03.0468 4088 BrSerWdm - ok 13:18:03.0496 4088 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 13:18:03.0498 4088 BrUsbMdm - ok 13:18:03.0509 4088 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 13:18:03.0511 4088 BrUsbSer - ok 13:18:03.0545 4088 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys 13:18:03.0548 4088 BthEnum - ok 13:18:03.0579 4088 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 13:18:03.0582 4088 BTHMODEM - ok 13:18:03.0614 4088 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 13:18:03.0617 4088 BthPan - ok 13:18:03.0648 4088 [ 64C198198501F7560EE41D8D1EFA7952 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys 13:18:03.0666 4088 BTHPORT - ok 13:18:03.0682 4088 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 13:18:03.0685 4088 bthserv - ok 13:18:03.0702 4088 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys 13:18:03.0705 4088 BTHUSB - ok 13:18:03.0742 4088 [ 4BDBDB86ABBA924E029FB2683BE7C505 ] btwaudio C:\Windows\system32\drivers\btwaudio.sys 13:18:03.0745 4088 btwaudio - ok 13:18:03.0772 4088 [ 5C849BD7C78791C5CEE9F4651D7FE38D ] btwavdt C:\Windows\system32\drivers\btwavdt.sys 13:18:03.0778 4088 btwavdt - ok 13:18:03.0821 4088 [ 31DA517946FFE416442E864592548F8A ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 13:18:03.0847 4088 btwdins - ok 13:18:03.0868 4088 [ 6149301DC3F81D6F9667A3FBAC410975 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys 13:18:03.0870 4088 btwl2cap - ok 13:18:03.0886 4088 [ 3E1991AFA851A36DC978B0A1B0535C8B ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys 13:18:03.0888 4088 btwrchid - ok 13:18:03.0918 4088 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 13:18:03.0921 4088 cdfs - ok 13:18:03.0967 4088 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 13:18:03.0971 4088 cdrom - ok 13:18:04.0007 4088 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 13:18:04.0010 4088 CertPropSvc - ok 13:18:04.0040 4088 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 13:18:04.0043 4088 circlass - ok 13:18:04.0070 4088 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 13:18:04.0073 4088 CLFS - ok 13:18:04.0123 4088 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 13:18:04.0127 4088 clr_optimization_v2.0.50727_32 - ok 13:18:04.0168 4088 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 13:18:04.0171 4088 clr_optimization_v2.0.50727_64 - ok 13:18:04.0265 4088 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 13:18:04.0279 4088 clr_optimization_v4.0.30319_32 - ok 13:18:04.0319 4088 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 13:18:04.0323 4088 clr_optimization_v4.0.30319_64 - ok 13:18:04.0350 4088 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 13:18:04.0352 4088 CmBatt - ok 13:18:04.0373 4088 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 13:18:04.0373 4088 cmdide - ok 13:18:04.0411 4088 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys 13:18:04.0414 4088 CNG - ok 13:18:04.0490 4088 [ C7A0E61D5714AC20DE52D4F66EC773B8 ] Com4QLBEx C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe 13:18:04.0495 4088 Com4QLBEx - ok 13:18:04.0516 4088 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 13:18:04.0517 4088 Compbatt - ok 13:18:04.0554 4088 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 13:18:04.0557 4088 CompositeBus - ok 13:18:04.0566 4088 COMSysApp - ok 13:18:04.0585 4088 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 13:18:04.0587 4088 crcdisk - ok 13:18:04.0618 4088 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 13:18:04.0620 4088 CryptSvc - ok 13:18:04.0649 4088 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 13:18:04.0654 4088 DcomLaunch - ok 13:18:04.0684 4088 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 13:18:04.0688 4088 defragsvc - ok 13:18:04.0723 4088 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 13:18:04.0725 4088 DfsC - ok 13:18:04.0750 4088 [ F551CBB5DB009B980A03F64B09946F75 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys 13:18:04.0753 4088 dg_ssudbus - ok 13:18:04.0779 4088 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 13:18:04.0781 4088 Dhcp - ok 13:18:04.0803 4088 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 13:18:04.0803 4088 discache - ok 13:18:04.0836 4088 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 13:18:04.0837 4088 Disk - ok 13:18:04.0870 4088 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 13:18:04.0872 4088 Dnscache - ok 13:18:04.0920 4088 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 13:18:04.0925 4088 dot3svc - ok 13:18:04.0962 4088 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 13:18:04.0964 4088 DPS - ok 13:18:04.0984 4088 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 13:18:04.0986 4088 drmkaud - ok 13:18:05.0025 4088 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 13:18:05.0051 4088 DXGKrnl - ok 13:18:05.0085 4088 EagleX64 - ok 13:18:05.0120 4088 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 13:18:05.0122 4088 EapHost - ok 13:18:05.0187 4088 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 13:18:05.0265 4088 ebdrv - ok 13:18:05.0293 4088 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 13:18:05.0294 4088 EFS - ok 13:18:05.0346 4088 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 13:18:05.0363 4088 ehRecvr - ok 13:18:05.0386 4088 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 13:18:05.0389 4088 ehSched - ok 13:18:05.0421 4088 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 13:18:05.0425 4088 elxstor - ok 13:18:05.0458 4088 [ 524C79054636D2E5751169005006460B ] enecir C:\Windows\system32\DRIVERS\enecir.sys 13:18:05.0463 4088 enecir - ok 13:18:05.0485 4088 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 13:18:05.0487 4088 ErrDev - ok 13:18:05.0524 4088 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 13:18:05.0527 4088 EventSystem - ok 13:18:05.0551 4088 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 13:18:05.0556 4088 exfat - ok 13:18:05.0575 4088 ezSharedSvc - ok 13:18:05.0589 4088 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 13:18:05.0593 4088 fastfat - ok 13:18:05.0639 4088 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 13:18:05.0660 4088 Fax - ok 13:18:05.0676 4088 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 13:18:05.0679 4088 fdc - ok 13:18:05.0693 4088 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 13:18:05.0696 4088 fdPHost - ok 13:18:05.0711 4088 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 13:18:05.0712 4088 FDResPub - ok 13:18:05.0724 4088 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 13:18:05.0725 4088 FileInfo - ok 13:18:05.0740 4088 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 13:18:05.0742 4088 Filetrace - ok 13:18:05.0752 4088 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 13:18:05.0755 4088 flpydisk - ok 13:18:05.0792 4088 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 13:18:05.0794 4088 FltMgr - ok 13:18:05.0834 4088 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 13:18:05.0860 4088 FontCache - ok 13:18:05.0901 4088 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 13:18:05.0903 4088 FontCache3.0.0.0 - ok 13:18:05.0916 4088 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 13:18:05.0918 4088 FsDepends - ok 13:18:05.0947 4088 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 13:18:05.0948 4088 Fs_Rec - ok 13:18:05.0984 4088 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 13:18:05.0985 4088 fvevol - ok 13:18:06.0015 4088 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 13:18:06.0017 4088 gagp30kx - ok 13:18:06.0075 4088 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe 13:18:06.0079 4088 GamesAppService - ok 13:18:06.0118 4088 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 13:18:06.0124 4088 gpsvc - ok 13:18:06.0201 4088 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 13:18:06.0205 4088 gupdate - ok 13:18:06.0232 4088 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 13:18:06.0234 4088 gupdatem - ok 13:18:06.0259 4088 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys 13:18:06.0261 4088 hamachi - ok 13:18:06.0276 4088 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 13:18:06.0279 4088 hcw85cir - ok 13:18:06.0318 4088 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 13:18:06.0324 4088 HdAudAddService - ok 13:18:06.0345 4088 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 13:18:06.0348 4088 HDAudBus - ok 13:18:06.0364 4088 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 13:18:06.0366 4088 HidBatt - ok 13:18:06.0387 4088 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 13:18:06.0390 4088 HidBth - ok 13:18:06.0411 4088 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 13:18:06.0413 4088 HidIr - ok 13:18:06.0434 4088 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 13:18:06.0436 4088 hidserv - ok 13:18:06.0468 4088 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 13:18:06.0469 4088 HidUsb - ok 13:18:06.0506 4088 HiPatchService - ok 13:18:06.0540 4088 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 13:18:06.0543 4088 hkmsvc - ok 13:18:06.0569 4088 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 13:18:06.0574 4088 HomeGroupListener - ok 13:18:06.0604 4088 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 13:18:06.0607 4088 HomeGroupProvider - ok 13:18:06.0670 4088 [ 170233B8D743EFE35F462A5D516B93E3 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 13:18:06.0672 4088 HP Support Assistant Service - ok 13:18:06.0859 4088 [ BCC4A8B2E2E902F52E7F2E7D8E125765 ] HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe 13:18:06.0867 4088 HPDrvMntSvc.exe - ok 13:18:06.0913 4088 [ 4E0BEC0F78096FFD6D3314B497FC49D3 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys 13:18:06.0914 4088 hpdskflt - ok 13:18:06.0981 4088 [ 9AF482D058BE59CC28BCE52E7C4B747C ] HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys 13:18:06.0985 4088 HpqKbFiltr - ok 13:18:07.0163 4088 [ EC9739A46F1F83C6E52A7A4697F44A65 ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 13:18:07.0184 4088 hpqwmiex - ok 13:18:07.0227 4088 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 13:18:07.0228 4088 HpSAMD - ok 13:18:07.0264 4088 [ FC7C13B5A9E9BE23B7AE72BBC7FDB278 ] hpsrv C:\Windows\system32\Hpservice.exe 13:18:07.0267 4088 hpsrv - ok 13:18:07.0305 4088 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 13:18:07.0309 4088 HTTP - ok 13:18:07.0335 4088 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 13:18:07.0336 4088 hwpolicy - ok 13:18:07.0374 4088 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 13:18:07.0377 4088 i8042prt - ok 13:18:07.0405 4088 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 13:18:07.0408 4088 iaStorV - ok 13:18:07.0457 4088 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 13:18:07.0475 4088 idsvc - ok 13:18:07.0890 4088 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 13:18:07.0995 4088 igfx - ok 13:18:08.0029 4088 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 13:18:08.0030 4088 iirsp - ok 13:18:08.0066 4088 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 13:18:08.0087 4088 IKEEXT - ok 13:18:08.0110 4088 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 13:18:08.0111 4088 intelide - ok 13:18:08.0129 4088 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 13:18:08.0131 4088 intelppm - ok 13:18:08.0154 4088 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 13:18:08.0158 4088 IPBusEnum - ok 13:18:08.0184 4088 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 13:18:08.0187 4088 IpFilterDriver - ok 13:18:08.0222 4088 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 13:18:08.0230 4088 iphlpsvc - ok 13:18:08.0253 4088 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 13:18:08.0255 4088 IPMIDRV - ok 13:18:08.0276 4088 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 13:18:08.0279 4088 IPNAT - ok 13:18:08.0295 4088 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 13:18:08.0297 4088 IRENUM - ok 13:18:08.0328 4088 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 13:18:08.0329 4088 isapnp - ok 13:18:08.0349 4088 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 13:18:08.0355 4088 iScsiPrt - ok 13:18:08.0383 4088 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 13:18:08.0385 4088 kbdclass - ok 13:18:08.0408 4088 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 13:18:08.0410 4088 kbdhid - ok 13:18:08.0420 4088 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 13:18:08.0421 4088 KeyIso - ok 13:18:08.0458 4088 [ B3BE7E30681EAA8EC96CC9A33E582435 ] KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys 13:18:08.0460 4088 KMWDFILTER - ok 13:18:08.0483 4088 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 13:18:08.0484 4088 KSecDD - ok 13:18:08.0497 4088 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 13:18:08.0498 4088 KSecPkg - ok 13:18:08.0509 4088 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 13:18:08.0512 4088 ksthunk - ok 13:18:08.0537 4088 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 13:18:08.0544 4088 KtmRm - ok 13:18:08.0573 4088 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 13:18:08.0579 4088 LanmanServer - ok 13:18:08.0600 4088 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 13:18:08.0603 4088 LanmanWorkstation - ok 13:18:08.0634 4088 [ FA529FB35694C24BF98A9EF67C1CD9D0 ] LGBusEnum C:\Windows\system32\drivers\LGBusEnum.sys 13:18:08.0636 4088 LGBusEnum - ok 13:18:08.0673 4088 [ 94B29CE153765E768F004FB3440BE2B0 ] LGVirHid C:\Windows\system32\drivers\LGVirHid.sys 13:18:08.0676 4088 LGVirHid - ok 13:18:08.0703 4088 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 13:18:08.0704 4088 lltdio - ok 13:18:08.0730 4088 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 13:18:08.0736 4088 lltdsvc - ok 13:18:08.0746 4088 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 13:18:08.0748 4088 lmhosts - ok 13:18:08.0769 4088 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 13:18:08.0770 4088 LSI_FC - ok 13:18:08.0793 4088 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 13:18:08.0794 4088 LSI_SAS - ok 13:18:08.0803 4088 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 13:18:08.0804 4088 LSI_SAS2 - ok 13:18:08.0826 4088 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 13:18:08.0827 4088 LSI_SCSI - ok 13:18:08.0842 4088 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 13:18:08.0844 4088 luafv - ok 13:18:08.0867 4088 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 13:18:08.0868 4088 MBAMProtector - ok 13:18:08.0909 4088 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe 13:18:08.0911 4088 MBAMScheduler - ok 13:18:08.0948 4088 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 13:18:08.0952 4088 MBAMService - ok 13:18:08.0988 4088 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 13:18:08.0993 4088 Mcx2Svc - ok 13:18:09.0015 4088 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 13:18:09.0016 4088 megasas - ok 13:18:09.0041 4088 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 13:18:09.0043 4088 MegaSR - ok 13:18:09.0071 4088 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 13:18:09.0073 4088 MMCSS - ok 13:18:09.0094 4088 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 13:18:09.0096 4088 Modem - ok 13:18:09.0117 4088 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 13:18:09.0118 4088 monitor - ok 13:18:09.0146 4088 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 13:18:09.0147 4088 mouclass - ok 13:18:09.0171 4088 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 13:18:09.0172 4088 mouhid - ok 13:18:09.0203 4088 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 13:18:09.0204 4088 mountmgr - ok 13:18:09.0234 4088 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 13:18:09.0236 4088 mpio - ok 13:18:09.0250 4088 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 13:18:09.0251 4088 mpsdrv - ok 13:18:09.0287 4088 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 13:18:09.0293 4088 MpsSvc - ok 13:18:09.0323 4088 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 13:18:09.0327 4088 MRxDAV - ok 13:18:09.0353 4088 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 13:18:09.0355 4088 mrxsmb - ok 13:18:09.0385 4088 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 13:18:09.0387 4088 mrxsmb10 - ok 13:18:09.0401 4088 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 13:18:09.0402 4088 mrxsmb20 - ok 13:18:09.0423 4088 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 13:18:09.0423 4088 msahci - ok 13:18:09.0437 4088 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 13:18:09.0438 4088 msdsm - ok 13:18:09.0456 4088 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 13:18:09.0461 4088 MSDTC - ok 13:18:09.0484 4088 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 13:18:09.0485 4088 Msfs - ok 13:18:09.0492 4088 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 13:18:09.0494 4088 mshidkmdf - ok 13:18:09.0521 4088 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 13:18:09.0522 4088 msisadrv - ok 13:18:09.0557 4088 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 13:18:09.0562 4088 MSiSCSI - ok 13:18:09.0565 4088 msiserver - ok 13:18:09.0588 4088 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 13:18:09.0590 4088 MSKSSRV - ok 13:18:09.0603 4088 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 13:18:09.0605 4088 MSPCLOCK - ok 13:18:09.0615 4088 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 13:18:09.0617 4088 MSPQM - ok 13:18:09.0647 4088 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 13:18:09.0649 4088 MsRPC - ok 13:18:09.0677 4088 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 13:18:09.0678 4088 mssmbios - ok 13:18:09.0691 4088 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 13:18:09.0693 4088 MSTEE - ok 13:18:09.0701 4088 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 13:18:09.0704 4088 MTConfig - ok 13:18:09.0726 4088 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 13:18:09.0727 4088 Mup - ok 13:18:09.0760 4088 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 13:18:09.0768 4088 napagent - ok 13:18:09.0789 4088 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 13:18:09.0791 4088 NativeWifiP - ok 13:18:09.0820 4088 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys 13:18:09.0826 4088 NDIS - ok 13:18:09.0842 4088 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 13:18:09.0845 4088 NdisCap - ok 13:18:09.0872 4088 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 13:18:09.0874 4088 NdisTapi - ok 13:18:09.0905 4088 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 13:18:09.0906 4088 Ndisuio - ok 13:18:09.0939 4088 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 13:18:09.0943 4088 NdisWan - ok 13:18:09.0951 4088 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 13:18:09.0954 4088 NDProxy - ok 13:18:09.0964 4088 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 13:18:09.0965 4088 NetBIOS - ok 13:18:09.0998 4088 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 13:18:10.0002 4088 NetBT - ok 13:18:10.0013 4088 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 13:18:10.0015 4088 Netlogon - ok 13:18:10.0047 4088 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 13:18:10.0054 4088 Netman - ok 13:18:10.0090 4088 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:18:10.0093 4088 NetMsmqActivator - ok 13:18:10.0097 4088 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:18:10.0099 4088 NetPipeActivator - ok 13:18:10.0120 4088 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 13:18:10.0124 4088 netprofm - ok 13:18:10.0129 4088 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:18:10.0131 4088 NetTcpActivator - ok 13:18:10.0136 4088 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:18:10.0137 4088 NetTcpPortSharing - ok 13:18:10.0263 4088 [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys 13:18:10.0384 4088 netw5v64 - ok 13:18:10.0408 4088 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 13:18:10.0409 4088 nfrd960 - ok 13:18:10.0446 4088 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll 13:18:10.0449 4088 NlaSvc - ok 13:18:10.0461 4088 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 13:18:10.0461 4088 Npfs - ok 13:18:10.0487 4088 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 13:18:10.0489 4088 nsi - ok 13:18:10.0502 4088 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 13:18:10.0503 4088 nsiproxy - ok 13:18:10.0555 4088 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 13:18:10.0583 4088 Ntfs - ok 13:18:10.0595 4088 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 13:18:10.0597 4088 Null - ok 13:18:10.0633 4088 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 13:18:10.0634 4088 nvraid - ok 13:18:10.0649 4088 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 13:18:10.0651 4088 nvstor - ok 13:18:10.0682 4088 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 13:18:10.0686 4088 nv_agp - ok 13:18:10.0845 4088 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 13:18:10.0852 4088 odserv - ok 13:18:10.0880 4088 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 13:18:10.0883 4088 ohci1394 - ok 13:18:10.0935 4088 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 13:18:10.0938 4088 ose - ok 13:18:10.0965 4088 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 13:18:10.0971 4088 p2pimsvc - ok 13:18:10.0986 4088 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 13:18:10.0994 4088 p2psvc - ok 13:18:11.0012 4088 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 13:18:11.0015 4088 Parport - ok 13:18:11.0041 4088 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 13:18:11.0042 4088 partmgr - ok 13:18:11.0056 4088 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 13:18:11.0059 4088 PcaSvc - ok 13:18:11.0071 4088 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 13:18:11.0072 4088 pci - ok 13:18:11.0103 4088 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 13:18:11.0104 4088 pciide - ok 13:18:11.0121 4088 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 13:18:11.0126 4088 pcmcia - ok 13:18:11.0148 4088 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 13:18:11.0149 4088 pcw - ok 13:18:11.0171 4088 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 13:18:11.0175 4088 PEAUTH - ok 13:18:11.0249 4088 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 13:18:11.0252 4088 PerfHost - ok 13:18:11.0301 4088 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 13:18:11.0331 4088 pla - ok 13:18:11.0371 4088 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 13:18:11.0374 4088 PlugPlay - ok 13:18:11.0402 4088 PnkBstrA - ok 13:18:11.0418 4088 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 13:18:11.0422 4088 PNRPAutoReg - ok 13:18:11.0435 4088 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 13:18:11.0439 4088 PNRPsvc - ok 13:18:11.0458 4088 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 13:18:11.0466 4088 PolicyAgent - ok 13:18:11.0488 4088 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 13:18:11.0491 4088 Power - ok 13:18:11.0527 4088 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 13:18:11.0530 4088 PptpMiniport - ok 13:18:11.0549 4088 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 13:18:11.0551 4088 Processor - ok 13:18:11.0573 4088 [ 5C78838B4D166D1A27DB3A8A820C799A ] ProfSvc C:\Windows\system32\profsvc.dll 13:18:11.0576 4088 ProfSvc - ok 13:18:11.0589 4088 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 13:18:11.0590 4088 ProtectedStorage - ok 13:18:11.0620 4088 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 13:18:11.0621 4088 Psched - ok 13:18:11.0666 4088 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 13:18:11.0692 4088 ql2300 - ok 13:18:11.0707 4088 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 13:18:11.0708 4088 ql40xx - ok 13:18:11.0731 4088 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 13:18:11.0736 4088 QWAVE - ok 13:18:11.0755 4088 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 13:18:11.0756 4088 QWAVEdrv - ok 13:18:11.0767 4088 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 13:18:11.0769 4088 RasAcd - ok 13:18:11.0792 4088 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 13:18:11.0795 4088 RasAgileVpn - ok 13:18:11.0807 4088 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 13:18:11.0811 4088 RasAuto - ok 13:18:11.0825 4088 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 13:18:11.0829 4088 Rasl2tp - ok 13:18:11.0863 4088 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 13:18:11.0870 4088 RasMan - ok 13:18:11.0880 4088 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 13:18:11.0882 4088 RasPppoe - ok 13:18:11.0897 4088 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 13:18:11.0900 4088 RasSstp - ok 13:18:11.0911 4088 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 13:18:11.0916 4088 rdbss - ok 13:18:11.0938 4088 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 13:18:11.0940 4088 rdpbus - ok 13:18:11.0950 4088 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 13:18:11.0951 4088 RDPCDD - ok 13:18:11.0968 4088 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 13:18:11.0969 4088 RDPENCDD - ok 13:18:11.0975 4088 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 13:18:11.0976 4088 RDPREFMP - ok 13:18:12.0004 4088 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 13:18:12.0009 4088 RDPWD - ok 13:18:12.0033 4088 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 13:18:12.0034 4088 rdyboost - ok 13:18:12.0056 4088 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 13:18:12.0060 4088 RemoteAccess - ok 13:18:12.0071 4088 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 13:18:12.0075 4088 RemoteRegistry - ok 13:18:12.0108 4088 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 13:18:12.0112 4088 RFCOMM - ok 13:18:12.0183 4088 [ 498EB62A160674E793FA40FD65390625 ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 13:18:12.0189 4088 RichVideo - ok 13:18:12.0216 4088 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 13:18:12.0218 4088 RpcEptMapper - ok 13:18:12.0232 4088 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 13:18:12.0236 4088 RpcLocator - ok 13:18:12.0266 4088 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 13:18:12.0270 4088 RpcSs - ok 13:18:12.0296 4088 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 13:18:12.0297 4088 rspndr - ok 13:18:12.0327 4088 [ B49DC435AE3695BAC5623DD94B05732D ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 13:18:12.0332 4088 RTL8167 - ok 13:18:12.0376 4088 [ 24510C4A77ABA3B07AEFA840DB888637 ] RzSynapse C:\Windows\system32\DRIVERS\RzSynapse.sys 13:18:12.0379 4088 RzSynapse - ok 13:18:12.0406 4088 [ 1542F66D82BE5A0AFB366CC115A8E8E5 ] rzudd C:\Windows\system32\DRIVERS\rzudd.sys 13:18:12.0409 4088 rzudd - ok 13:18:12.0455 4088 [ 7449B5949BB85742CDF247BE7F9B653A ] SaiK0CCB C:\Windows\system32\DRIVERS\SaiK0CCB.sys 13:18:12.0459 4088 SaiK0CCB - ok 13:18:12.0484 4088 [ 64BC6CC8FD3408DF37EA488D88D54A4A ] SaiMini C:\Windows\system32\DRIVERS\SaiMini.sys 13:18:12.0486 4088 SaiMini - ok 13:18:12.0521 4088 [ 6A78C024625926CC4B67B3E6AD14910A ] SaiNtBus C:\Windows\system32\drivers\SaiBus.sys 13:18:12.0523 4088 SaiNtBus - ok 13:18:12.0562 4088 [ 325F2AAB1DF5F37D6AEE3C1DB1D9FEE1 ] SaiU0CCB C:\Windows\system32\DRIVERS\SaiU0CCB.sys 13:18:12.0564 4088 SaiU0CCB - ok 13:18:12.0571 4088 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 13:18:12.0572 4088 SamSs - ok 13:18:12.0596 4088 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 13:18:12.0597 4088 sbp2port - ok 13:18:12.0621 4088 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 13:18:12.0626 4088 SCardSvr - ok 13:18:12.0656 4088 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 13:18:12.0658 4088 scfilter - ok 13:18:12.0705 4088 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 13:18:12.0731 4088 Schedule - ok 13:18:12.0762 4088 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 13:18:12.0763 4088 SCPolicySvc - ok 13:18:12.0792 4088 [ 8B56BDCE6A303DDE63D63440D1CF9AD1 ] ScreamBAudioSvc C:\Windows\system32\drivers\ScreamingBAudio64.sys 13:18:12.0794 4088 ScreamBAudioSvc - ok 13:18:12.0835 4088 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys 13:18:12.0838 4088 sdbus - ok 13:18:12.0852 4088 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 13:18:12.0858 4088 SDRSVC - ok 13:18:12.0904 4088 [ 16A252022535B680046F6E34E136D378 ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 13:18:12.0906 4088 SeaPort - ok 13:18:12.0935 4088 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 13:18:12.0937 4088 secdrv - ok 13:18:12.0947 4088 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 13:18:12.0951 4088 seclogon - ok 13:18:12.0971 4088 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 13:18:12.0973 4088 SENS - ok 13:18:12.0987 4088 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 13:18:12.0990 4088 SensrSvc - ok 13:18:13.0005 4088 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 13:18:13.0008 4088 Serenum - ok 13:18:13.0027 4088 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 13:18:13.0030 4088 Serial - ok 13:18:13.0064 4088 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 13:18:13.0066 4088 sermouse - ok 13:18:13.0100 4088 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 13:18:13.0104 4088 SessionEnv - ok 13:18:13.0114 4088 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 13:18:13.0116 4088 sffdisk - ok 13:18:13.0125 4088 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 13:18:13.0127 4088 sffp_mmc - ok 13:18:13.0139 4088 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 13:18:13.0142 4088 sffp_sd - ok 13:18:13.0152 4088 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 13:18:13.0154 4088 sfloppy - ok 13:18:13.0176 4088 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 13:18:13.0183 4088 SharedAccess - ok 13:18:13.0200 4088 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 13:18:13.0204 4088 ShellHWDetection - ok 13:18:13.0225 4088 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 13:18:13.0226 4088 SiSRaid2 - ok 13:18:13.0235 4088 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 13:18:13.0236 4088 SiSRaid4 - ok 13:18:13.0271 4088 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 13:18:13.0274 4088 SkypeUpdate - ok 13:18:13.0301 4088 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 13:18:13.0303 4088 Smb - ok 13:18:13.0342 4088 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 13:18:13.0344 4088 SNMPTRAP - ok 13:18:13.0353 4088 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 13:18:13.0353 4088 spldr - ok 13:18:13.0372 4088 [ B96C17B5DC1424D56EEA3A99E97428CD ] Spooler C:\Windows\System32\spoolsv.exe 13:18:13.0377 4088 Spooler - ok 13:18:13.0453 4088 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 13:18:13.0523 4088 sppsvc - ok 13:18:13.0533 4088 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 13:18:13.0536 4088 sppuinotify - ok 13:18:13.0574 4088 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 13:18:13.0581 4088 srv - ok 13:18:13.0596 4088 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 13:18:13.0603 4088 srv2 - ok 13:18:13.0629 4088 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS 13:18:13.0636 4088 SrvHsfHDA - ok 13:18:13.0672 4088 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS 13:18:13.0701 4088 SrvHsfV92 - ok 13:18:13.0724 4088 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 13:18:13.0742 4088 SrvHsfWinac - ok 13:18:13.0763 4088 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 13:18:13.0766 4088 srvnet - ok 13:18:13.0803 4088 [ 8F8324ED1DE63FFC7B1A02CD2D963C72 ] ssadbus C:\Windows\system32\DRIVERS\ssadbus.sys 13:18:13.0807 4088 ssadbus - ok 13:18:13.0833 4088 [ 58221EFCB74167B73667F0024C661CE0 ] ssadmdfl C:\Windows\system32\DRIVERS\ssadmdfl.sys 13:18:13.0836 4088 ssadmdfl - ok 13:18:13.0861 4088 [ 4DA7C71BFAC5AD71255B7E4CAB980163 ] ssadmdm C:\Windows\system32\DRIVERS\ssadmdm.sys 13:18:13.0865 4088 ssadmdm - ok 13:18:13.0897 4088 [ ED161B91FDF7EAA39469D72D463D5F4E ] sscdbus C:\Windows\system32\DRIVERS\sscdbus.sys 13:18:13.0901 4088 sscdbus - ok 13:18:13.0922 4088 [ 4CB09E77593DBD8D7AF33B37375CA715 ] sscdmdfl C:\Windows\system32\DRIVERS\sscdmdfl.sys 13:18:13.0924 4088 sscdmdfl - ok 13:18:13.0951 4088 [ C7B4CF53497A6E5363F3439427663882 ] sscdmdm C:\Windows\system32\DRIVERS\sscdmdm.sys 13:18:13.0955 4088 sscdmdm - ok 13:18:13.0981 4088 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 13:18:13.0986 4088 SSDPSRV - ok 13:18:13.0997 4088 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 13:18:13.0999 4088 SstpSvc - ok 13:18:14.0042 4088 [ 90C3D4D7B7F8F4B722EBF40B2304AB66 ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys 13:18:14.0047 4088 ssudmdm - ok 13:18:14.0146 4088 [ 7595D53EE8E8B0BAA9A2DDDE867EBB0C ] STacSV C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe 13:18:14.0151 4088 STacSV - ok 13:18:14.0171 4088 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 13:18:14.0172 4088 stexstor - ok 13:18:14.0216 4088 [ DFFBC024DFC7BB05B2129E05CBC7A201 ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 13:18:14.0224 4088 STHDA - ok 13:18:14.0273 4088 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 13:18:14.0290 4088 stisvc - ok 13:18:14.0317 4088 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 13:18:14.0320 4088 swenum - ok 13:18:14.0346 4088 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 13:18:14.0363 4088 swprv - ok 13:18:14.0406 4088 [ 924D711941956F7420A4925592BE8253 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 13:18:14.0412 4088 SynTP - ok 13:18:14.0459 4088 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 13:18:14.0527 4088 SysMain - ok 13:18:14.0557 4088 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 13:18:14.0561 4088 TabletInputService - ok 13:18:14.0580 4088 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 13:18:14.0587 4088 TapiSrv - ok 13:18:14.0600 4088 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 13:18:14.0603 4088 TBS - ok 13:18:14.0649 4088 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 13:18:14.0686 4088 Tcpip - ok 13:18:14.0732 4088 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 13:18:14.0743 4088 TCPIP6 - ok 13:18:14.0778 4088 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 13:18:14.0781 4088 tcpipreg - ok 13:18:14.0800 4088 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 13:18:14.0802 4088 TDPIPE - ok 13:18:14.0821 4088 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 13:18:14.0824 4088 TDTCP - ok 13:18:14.0860 4088 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 13:18:14.0864 4088 tdx - ok 13:18:14.0887 4088 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 13:18:14.0890 4088 TermDD - ok 13:18:14.0914 4088 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 13:18:14.0935 4088 TermService - ok 13:18:14.0971 4088 [ CE4B6956E4E12492715A53076E58761F ] TFsExDisk C:\Windows\System32\Drivers\TFsExDisk.sys 13:18:14.0974 4088 TFsExDisk - ok 13:18:14.0985 4088 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 13:18:14.0987 4088 Themes - ok 13:18:15.0012 4088 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 13:18:15.0014 4088 THREADORDER - ok 13:18:15.0030 4088 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 13:18:15.0034 4088 TrkWks - ok 13:18:15.0066 4088 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 13:18:15.0070 4088 TrustedInstaller - ok 13:18:15.0098 4088 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 13:18:15.0101 4088 tssecsrv - ok 13:18:15.0147 4088 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 13:18:15.0150 4088 TsUsbFlt - ok 13:18:15.0185 4088 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 13:18:15.0188 4088 tunnel - ok 13:18:15.0207 4088 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 13:18:15.0210 4088 uagp35 - ok 13:18:15.0234 4088 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 13:18:15.0240 4088 udfs - ok 13:18:15.0260 4088 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 13:18:15.0263 4088 UI0Detect - ok 13:18:15.0291 4088 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 13:18:15.0294 4088 uliagpkx - ok 13:18:15.0317 4088 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys 13:18:15.0320 4088 umbus - ok 13:18:15.0336 4088 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 13:18:15.0338 4088 UmPass - ok 13:18:15.0365 4088 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 13:18:15.0372 4088 upnphost - ok 13:18:15.0400 4088 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 13:18:15.0402 4088 USBAAPL64 - ok 13:18:15.0431 4088 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 13:18:15.0434 4088 usbaudio - ok 13:18:15.0462 4088 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 13:18:15.0464 4088 usbccgp - ok 13:18:15.0498 4088 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 13:18:15.0501 4088 usbcir - ok 13:18:15.0522 4088 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 13:18:15.0525 4088 usbehci - ok 13:18:15.0571 4088 [ 44D9C773FEBFF10593B50DDFC2D6BC27 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys 13:18:15.0573 4088 usbfilter - ok 13:18:15.0598 4088 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 13:18:15.0604 4088 usbhub - ok 13:18:15.0618 4088 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 13:18:15.0620 4088 usbohci - ok 13:18:15.0641 4088 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 13:18:15.0644 4088 usbprint - ok 13:18:15.0663 4088 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 13:18:15.0666 4088 usbscan - ok 13:18:15.0677 4088 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 13:18:15.0681 4088 USBSTOR - ok 13:18:15.0692 4088 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 13:18:15.0695 4088 usbuhci - ok 13:18:15.0714 4088 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys 13:18:15.0719 4088 usbvideo - ok 13:18:15.0740 4088 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 13:18:15.0742 4088 UxSms - ok 13:18:15.0756 4088 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 13:18:15.0757 4088 VaultSvc - ok 13:18:15.0780 4088 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 13:18:15.0781 4088 vdrvroot - ok 13:18:15.0830 4088 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 13:18:15.0847 4088 vds - ok 13:18:15.0863 4088 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 13:18:15.0865 4088 vga - ok 13:18:15.0892 4088 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 13:18:15.0895 4088 VgaSave - ok 13:18:15.0913 4088 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 13:18:15.0918 4088 vhdmp - ok 13:18:15.0944 4088 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 13:18:15.0945 4088 viaide - ok 13:18:15.0978 4088 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 13:18:15.0979 4088 volmgr - ok 13:18:16.0007 4088 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 13:18:16.0010 4088 volmgrx - ok 13:18:16.0042 4088 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 13:18:16.0045 4088 volsnap - ok 13:18:16.0081 4088 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 13:18:16.0083 4088 vsmraid - ok 13:18:16.0133 4088 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 13:18:16.0168 4088 VSS - ok 13:18:16.0181 4088 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 13:18:16.0184 4088 vwifibus - ok 13:18:16.0200 4088 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 13:18:16.0203 4088 vwififlt - ok 13:18:16.0222 4088 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 13:18:16.0223 4088 vwifimp - ok 13:18:16.0249 4088 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 13:18:16.0256 4088 W32Time - ok 13:18:16.0280 4088 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 13:18:16.0283 4088 WacomPen - ok 13:18:16.0322 4088 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 13:18:16.0324 4088 WANARP - ok 13:18:16.0328 4088 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 13:18:16.0329 4088 Wanarpv6 - ok 13:18:16.0385 4088 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 13:18:16.0411 4088 WatAdminSvc - ok 13:18:16.0458 4088 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 13:18:16.0493 4088 wbengine - ok 13:18:16.0508 4088 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 13:18:16.0514 4088 WbioSrvc - ok 13:18:16.0529 4088 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 13:18:16.0537 4088 wcncsvc - ok 13:18:16.0548 4088 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 13:18:16.0552 4088 WcsPlugInService - ok 13:18:16.0577 4088 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys 13:18:16.0578 4088 Wd - ok 13:18:16.0605 4088 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 13:18:16.0610 4088 Wdf01000 - ok 13:18:16.0624 4088 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 13:18:16.0628 4088 WdiServiceHost - ok 13:18:16.0632 4088 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 13:18:16.0634 4088 WdiSystemHost - ok 13:18:16.0652 4088 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 13:18:16.0658 4088 WebClient - ok 13:18:16.0670 4088 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 13:18:16.0681 4088 Wecsvc - ok 13:18:16.0701 4088 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 13:18:16.0707 4088 wercplsupport - ok 13:18:16.0725 4088 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 13:18:16.0729 4088 WerSvc - ok 13:18:16.0744 4088 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 13:18:16.0746 4088 WfpLwf - ok 13:18:16.0756 4088 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 13:18:16.0759 4088 WIMMount - ok 13:18:16.0777 4088 WinDefend - ok 13:18:16.0796 4088 WinHttpAutoProxySvc - ok 13:18:16.0845 4088 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 13:18:16.0850 4088 Winmgmt - ok 13:18:16.0893 4088 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 13:18:16.0945 4088 WinRM - ok 13:18:17.0003 4088 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 13:18:17.0005 4088 WinUsb - ok 13:18:17.0032 4088 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 13:18:17.0039 4088 Wlansvc - ok 13:18:17.0150 4088 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 13:18:17.0202 4088 wlidsvc - ok 13:18:17.0362 4088 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 13:18:17.0363 4088 WmiAcpi - ok 13:18:17.0435 4088 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 13:18:17.0469 4088 wmiApSrv - ok 13:18:17.0509 4088 WMPNetworkSvc - ok 13:18:17.0521 4088 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 13:18:17.0524 4088 WPCSvc - ok 13:18:17.0557 4088 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 13:18:17.0561 4088 WPDBusEnum - ok 13:18:17.0579 4088 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 13:18:17.0582 4088 ws2ifsl - ok 13:18:17.0591 4088 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 13:18:17.0595 4088 wscsvc - ok 13:18:17.0598 4088 WSearch - ok 13:18:17.0654 4088 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 13:18:17.0698 4088 wuauserv - ok 13:18:17.0712 4088 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 13:18:17.0714 4088 WudfPf - ok 13:18:17.0746 4088 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 13:18:17.0751 4088 WUDFRd - ok 13:18:17.0779 4088 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 13:18:17.0781 4088 wudfsvc - ok 13:18:17.0800 4088 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 13:18:17.0805 4088 WwanSvc - ok 13:18:17.0826 4088 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys 13:18:17.0832 4088 yukonw7 - ok 13:18:17.0859 4088 ================ Scan global =============================== 13:18:17.0880 4088 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 13:18:17.0907 4088 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 13:18:17.0916 4088 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 13:18:17.0941 4088 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 13:18:17.0954 4088 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 13:18:17.0957 4088 [Global] - ok 13:18:17.0958 4088 ================ Scan MBR ================================== 13:18:17.0971 4088 [ 4ECCC12ED442CA63B0D0C40C1D2AB4A8 ] \Device\Harddisk0\DR0 13:18:18.0212 4088 \Device\Harddisk0\DR0 - ok 13:18:18.0212 4088 ================ Scan VBR ================================== 13:18:18.0215 4088 [ BF922BB3C781D59F73A55A3D6B536806 ] \Device\Harddisk0\DR0\Partition1 13:18:18.0217 4088 \Device\Harddisk0\DR0\Partition1 - ok 13:18:18.0227 4088 [ 79ECBF39404B50918B661BAAB9142AD9 ] \Device\Harddisk0\DR0\Partition2 13:18:18.0230 4088 \Device\Harddisk0\DR0\Partition2 - ok 13:18:18.0260 4088 [ 87998DDA67582EDBDD048DE70ACF6ABB ] \Device\Harddisk0\DR0\Partition3 13:18:18.0262 4088 \Device\Harddisk0\DR0\Partition3 - ok 13:18:18.0279 4088 [ 9E1BB25FEFD7521A109F17F2E152E554 ] \Device\Harddisk0\DR0\Partition4 13:18:18.0281 4088 \Device\Harddisk0\DR0\Partition4 - ok 13:18:18.0281 4088 ============================================================ 13:18:18.0281 4088 Scan finished 13:18:18.0281 4088 ============================================================ 13:18:18.0290 0688 Detected object count: 1 13:18:18.0290 0688 Actual detected object count: 1 13:18:42.0681 0688 Akamai ( HiddenFile.Multi.Generic ) - skipped by user 13:18:42.0681 0688 Akamai ( HiddenFile.Multi.Generic ) - User select action: Skip 13:19:19.0629 2656 ============================================================ 13:19:19.0629 2656 Scan started 13:19:19.0629 2656 Mode: Manual; 13:19:19.0629 2656 ============================================================ 13:19:20.0087 2656 ================ Scan system memory ======================== 13:19:20.0087 2656 System memory - ok 13:19:20.0087 2656 ================ Scan services ============================= 13:19:20.0296 2656 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 13:19:20.0297 2656 1394ohci - ok 13:19:20.0320 2656 [ 5C368F4B04ED2A923E6AFCA2D37BAFF5 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys 13:19:20.0321 2656 Accelerometer - ok 13:19:20.0353 2656 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 13:19:20.0356 2656 ACPI - ok 13:19:20.0371 2656 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 13:19:20.0372 2656 AcpiPmi - ok 13:19:20.0438 2656 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 13:19:20.0439 2656 AdobeARMservice - ok 13:19:20.0516 2656 [ 479901C99FA62D1C3261B7ACB1228DAD ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 13:19:20.0518 2656 AdobeFlashPlayerUpdateSvc - ok 13:19:20.0550 2656 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 13:19:20.0553 2656 adp94xx - ok 13:19:20.0582 2656 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 13:19:20.0584 2656 adpahci - ok 13:19:20.0603 2656 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 13:19:20.0604 2656 adpu320 - ok 13:19:20.0626 2656 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 13:19:20.0627 2656 AeLookupSvc - ok 13:19:20.0715 2656 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe 13:19:20.0716 2656 AESTFilters - ok 13:19:20.0744 2656 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 13:19:20.0748 2656 AFD - ok 13:19:20.0783 2656 [ 98022774D9930ECBB292E70DB7601DF6 ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys 13:19:20.0790 2656 AgereSoftModem - ok 13:19:20.0813 2656 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 13:19:20.0814 2656 agp440 - ok 13:19:20.0929 2656 [ C7074BD8D4B8F564859ED373433030AE ] Akamai c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll 13:19:20.0930 2656 Suspicious file (Hidden): c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll. md5: C7074BD8D4B8F564859ED373433030AE 13:19:20.0938 2656 Akamai ( HiddenFile.Multi.Generic ) - warning 13:19:20.0938 2656 Akamai - detected HiddenFile.Multi.Generic (1) 13:19:20.0959 2656 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 13:19:20.0961 2656 ALG - ok 13:19:20.0973 2656 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 13:19:20.0973 2656 aliide - ok 13:19:20.0997 2656 [ BCC32BF5EBB5DFD4380FA053D3651949 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 13:19:20.0998 2656 AMD External Events Utility - ok 13:19:21.0040 2656 AMD FUEL Service - ok 13:19:21.0052 2656 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 13:19:21.0052 2656 amdide - ok 13:19:21.0071 2656 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys 13:19:21.0072 2656 amdiox64 - ok 13:19:21.0088 2656 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 13:19:21.0089 2656 AmdK8 - ok 13:19:21.0113 2656 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 13:19:21.0113 2656 AmdPPM - ok 13:19:21.0140 2656 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 13:19:21.0141 2656 amdsata - ok 13:19:21.0161 2656 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 13:19:21.0162 2656 amdsbs - ok 13:19:21.0176 2656 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 13:19:21.0177 2656 amdxata - ok 13:19:21.0202 2656 [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1 c:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys 13:19:21.0203 2656 AODDriver4.1 - ok 13:19:21.0228 2656 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 13:19:21.0229 2656 AppID - ok 13:19:21.0246 2656 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 13:19:21.0247 2656 AppIDSvc - ok 13:19:21.0273 2656 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 13:19:21.0275 2656 Appinfo - ok 13:19:21.0324 2656 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 13:19:21.0325 2656 Apple Mobile Device - ok 13:19:21.0345 2656 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 13:19:21.0346 2656 arc - ok 13:19:21.0361 2656 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 13:19:21.0362 2656 arcsas - ok 13:19:21.0436 2656 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 13:19:21.0437 2656 aspnet_state - ok 13:19:21.0457 2656 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 13:19:21.0458 2656 AsyncMac - ok 13:19:21.0489 2656 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 13:19:21.0490 2656 atapi - ok 13:19:21.0537 2656 [ F8633CDD09647A64EE8DB550630427FF ] athr C:\Windows\system32\DRIVERS\athrx.sys 13:19:21.0546 2656 athr - ok 13:19:21.0582 2656 [ 3B9014FB7CE9E20FD726321C7DB7D8B0 ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys 13:19:21.0583 2656 AtiHdmiService - ok 13:19:21.0691 2656 [ A29087680A1C3B049E3C05438E8FF2B8 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys 13:19:21.0724 2656 atikmdag - ok 13:19:21.0753 2656 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys 13:19:21.0754 2656 AtiPcie - ok 13:19:21.0790 2656 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 13:19:21.0795 2656 AudioEndpointBuilder - ok 13:19:21.0815 2656 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 13:19:21.0820 2656 AudioSrv - ok 13:19:21.0944 2656 [ 0D8244A9DB70BC6C36E2FB56F6039AB6 ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe 13:19:21.0971 2656 AVGIDSAgent - ok 13:19:21.0992 2656 [ AC6CB348F67B6B1B75C0EFB8927A8B03 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys 13:19:21.0994 2656 AVGIDSDriver - ok 13:19:22.0003 2656 [ 2940FACB6EF92BD1936E4A1E2502468E ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys 13:19:22.0004 2656 AVGIDSHA - ok 13:19:22.0015 2656 [ 54B66C4AEEC6C4F742F3569EBA03EBB8 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys 13:19:22.0017 2656 Avgldx64 - ok 13:19:22.0032 2656 [ 13667B5D6310228A9FEF2BA5FCD9081F ] Avgloga C:\Windows\system32\DRIVERS\avgloga.sys 13:19:22.0034 2656 Avgloga - ok 13:19:22.0050 2656 [ BE82F9A1F2CCF4CE746D0C645D94079E ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys 13:19:22.0051 2656 Avgmfx64 - ok 13:19:22.0057 2656 [ 5D11620DEF66F9DC9468FEE385A8429B ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys 13:19:22.0057 2656 Avgrkx64 - ok 13:19:22.0071 2656 [ 71309F30D4F4565EC611FE3FC33A3A0F ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys 13:19:22.0073 2656 Avgtdia - ok 13:19:22.0099 2656 [ DC98337F0D2A9F6C0B6FB682297ECE3B ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe 13:19:22.0102 2656 avgwd - ok 13:19:22.0130 2656 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 13:19:22.0132 2656 AxInstSV - ok 13:19:22.0150 2656 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 13:19:22.0153 2656 b06bdrv - ok 13:19:22.0176 2656 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 13:19:22.0178 2656 b57nd60a - ok 13:19:22.0205 2656 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 13:19:22.0206 2656 BDESVC - ok 13:19:22.0217 2656 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 13:19:22.0218 2656 Beep - ok 13:19:22.0256 2656 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 13:19:22.0261 2656 BFE - ok 13:19:22.0300 2656 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 13:19:22.0307 2656 BITS - ok 13:19:22.0336 2656 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 13:19:22.0337 2656 blbdrive - ok 13:19:22.0496 2656 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 13:19:22.0498 2656 Bonjour Service - ok 13:19:22.0528 2656 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 13:19:22.0529 2656 bowser - ok 13:19:22.0545 2656 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 13:19:22.0545 2656 BrFiltLo - ok 13:19:22.0554 2656 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 13:19:22.0555 2656 BrFiltUp - ok 13:19:22.0580 2656 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 13:19:22.0582 2656 Browser - ok 13:19:22.0607 2656 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 13:19:22.0609 2656 Brserid - ok 13:19:22.0623 2656 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 13:19:22.0624 2656 BrSerWdm - ok 13:19:22.0645 2656 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 13:19:22.0646 2656 BrUsbMdm - ok 13:19:22.0658 2656 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 13:19:22.0659 2656 BrUsbSer - ok 13:19:22.0678 2656 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys 13:19:22.0679 2656 BthEnum - ok 13:19:22.0703 2656 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 13:19:22.0704 2656 BTHMODEM - ok 13:19:22.0730 2656 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 13:19:22.0731 2656 BthPan - ok 13:19:22.0764 2656 [ 64C198198501F7560EE41D8D1EFA7952 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys 13:19:22.0768 2656 BTHPORT - ok 13:19:22.0782 2656 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 13:19:22.0783 2656 bthserv - ok 13:19:22.0802 2656 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys 13:19:22.0803 2656 BTHUSB - ok 13:19:22.0826 2656 [ 4BDBDB86ABBA924E029FB2683BE7C505 ] btwaudio C:\Windows\system32\drivers\btwaudio.sys 13:19:22.0827 2656 btwaudio - ok 13:19:22.0847 2656 [ 5C849BD7C78791C5CEE9F4651D7FE38D ] btwavdt C:\Windows\system32\drivers\btwavdt.sys 13:19:22.0849 2656 btwavdt - ok 13:19:22.0896 2656 [ 31DA517946FFE416442E864592548F8A ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 13:19:22.0902 2656 btwdins - ok 13:19:22.0926 2656 [ 6149301DC3F81D6F9667A3FBAC410975 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys 13:19:22.0927 2656 btwl2cap - ok 13:19:22.0945 2656 [ 3E1991AFA851A36DC978B0A1B0535C8B ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys 13:19:22.0946 2656 btwrchid - ok 13:19:22.0969 2656 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 13:19:22.0970 2656 cdfs - ok 13:19:23.0001 2656 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 13:19:23.0002 2656 cdrom - ok 13:19:23.0033 2656 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 13:19:23.0034 2656 CertPropSvc - ok 13:19:23.0058 2656 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 13:19:23.0059 2656 circlass - ok 13:19:23.0088 2656 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 13:19:23.0090 2656 CLFS - ok 13:19:23.0140 2656 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 13:19:23.0141 2656 clr_optimization_v2.0.50727_32 - ok 13:19:23.0177 2656 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 13:19:23.0178 2656 clr_optimization_v2.0.50727_64 - ok 13:19:23.0233 2656 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 13:19:23.0234 2656 clr_optimization_v4.0.30319_32 - ok 13:19:23.0246 2656 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 13:19:23.0247 2656 clr_optimization_v4.0.30319_64 - ok 13:19:23.0268 2656 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 13:19:23.0269 2656 CmBatt - ok 13:19:23.0291 2656 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 13:19:23.0292 2656 cmdide - ok 13:19:23.0329 2656 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys 13:19:23.0332 2656 CNG - ok 13:19:23.0376 2656 [ C7A0E61D5714AC20DE52D4F66EC773B8 ] Com4QLBEx C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe 13:19:23.0377 2656 Com4QLBEx - ok 13:19:23.0393 2656 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 13:19:23.0394 2656 Compbatt - ok 13:19:23.0423 2656 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 13:19:23.0424 2656 CompositeBus - ok 13:19:23.0428 2656 COMSysApp - ok 13:19:23.0453 2656 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 13:19:23.0454 2656 crcdisk - ok 13:19:23.0487 2656 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 13:19:23.0489 2656 CryptSvc - ok 13:19:23.0518 2656 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 13:19:23.0522 2656 DcomLaunch - ok 13:19:23.0550 2656 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 13:19:23.0552 2656 defragsvc - ok 13:19:23.0584 2656 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 13:19:23.0585 2656 DfsC - ok 13:19:23.0610 2656 [ F551CBB5DB009B980A03F64B09946F75 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys 13:19:23.0611 2656 dg_ssudbus - ok 13:19:23.0639 2656 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 13:19:23.0642 2656 Dhcp - ok 13:19:23.0663 2656 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 13:19:23.0664 2656 discache - ok 13:19:23.0680 2656 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 13:19:23.0681 2656 Disk - ok 13:19:23.0714 2656 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 13:19:23.0716 2656 Dnscache - ok 13:19:23.0747 2656 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 13:19:23.0749 2656 dot3svc - ok 13:19:23.0773 2656 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 13:19:23.0775 2656 DPS - ok 13:19:23.0786 2656 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 13:19:23.0787 2656 drmkaud - ok 13:19:23.0820 2656 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 13:19:23.0826 2656 DXGKrnl - ok 13:19:23.0832 2656 EagleX64 - ok 13:19:23.0857 2656 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 13:19:23.0858 2656 EapHost - ok 13:19:23.0924 2656 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 13:19:23.0942 2656 ebdrv - ok 13:19:23.0964 2656 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 13:19:23.0965 2656 EFS - ok 13:19:24.0008 2656 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 13:19:24.0013 2656 ehRecvr - ok 13:19:24.0031 2656 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 13:19:24.0032 2656 ehSched - ok 13:19:24.0059 2656 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 13:19:24.0062 2656 elxstor - ok 13:19:24.0087 2656 [ 524C79054636D2E5751169005006460B ] enecir C:\Windows\system32\DRIVERS\enecir.sys 13:19:24.0088 2656 enecir - ok 13:19:24.0114 2656 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 13:19:24.0115 2656 ErrDev - ok 13:19:24.0137 2656 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 13:19:24.0140 2656 EventSystem - ok 13:19:24.0165 2656 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 13:19:24.0166 2656 exfat - ok 13:19:24.0172 2656 ezSharedSvc - ok 13:19:24.0185 2656 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 13:19:24.0187 2656 fastfat - ok 13:19:24.0219 2656 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 13:19:24.0224 2656 Fax - ok 13:19:24.0240 2656 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 13:19:24.0241 2656 fdc - ok 13:19:24.0257 2656 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 13:19:24.0258 2656 fdPHost - ok 13:19:24.0266 2656 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 13:19:24.0268 2656 FDResPub - ok 13:19:24.0279 2656 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 13:19:24.0280 2656 FileInfo - ok 13:19:24.0295 2656 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 13:19:24.0296 2656 Filetrace - ok 13:19:24.0308 2656 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 13:19:24.0309 2656 flpydisk - ok 13:19:24.0339 2656 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 13:19:24.0341 2656 FltMgr - ok 13:19:24.0382 2656 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 13:19:24.0389 2656 FontCache - ok 13:19:24.0431 2656 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 13:19:24.0432 2656 FontCache3.0.0.0 - ok 13:19:24.0446 2656 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 13:19:24.0447 2656 FsDepends - ok 13:19:24.0478 2656 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 13:19:24.0479 2656 Fs_Rec - ok 13:19:24.0506 2656 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 13:19:24.0508 2656 fvevol - ok 13:19:24.0529 2656 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 13:19:24.0530 2656 gagp30kx - ok 13:19:24.0573 2656 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe 13:19:24.0574 2656 GamesAppService - ok 13:19:24.0607 2656 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 13:19:24.0613 2656 gpsvc - ok 13:19:24.0675 2656 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 13:19:24.0676 2656 gupdate - ok 13:19:24.0681 2656 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 13:19:24.0682 2656 gupdatem - ok 13:19:24.0707 2656 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys 13:19:24.0708 2656 hamachi - ok 13:19:24.0724 2656 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 13:19:24.0725 2656 hcw85cir - ok 13:19:24.0757 2656 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 13:19:24.0760 2656 HdAudAddService - ok 13:19:24.0777 2656 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 13:19:24.0778 2656 HDAudBus - ok 13:19:24.0795 2656 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 13:19:24.0796 2656 HidBatt - ok 13:19:24.0818 2656 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 13:19:24.0819 2656 HidBth - ok 13:19:24.0834 2656 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 13:19:24.0835 2656 HidIr - ok 13:19:24.0857 2656 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 13:19:24.0858 2656 hidserv - ok 13:19:24.0883 2656 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 13:19:24.0884 2656 HidUsb - ok 13:19:24.0887 2656 HiPatchService - ok 13:19:24.0913 2656 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 13:19:24.0915 2656 hkmsvc - ok 13:19:24.0942 2656 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 13:19:24.0945 2656 HomeGroupListener - ok 13:19:24.0970 2656 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 13:19:24.0972 2656 HomeGroupProvider - ok 13:19:25.0011 2656 [ 170233B8D743EFE35F462A5D516B93E3 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 13:19:25.0012 2656 HP Support Assistant Service - ok 13:19:25.0043 2656 [ BCC4A8B2E2E902F52E7F2E7D8E125765 ] HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe 13:19:25.0044 2656 HPDrvMntSvc.exe - ok 13:19:25.0064 2656 [ 4E0BEC0F78096FFD6D3314B497FC49D3 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys 13:19:25.0065 2656 hpdskflt - ok 13:19:25.0074 2656 [ 9AF482D058BE59CC28BCE52E7C4B747C ] HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys 13:19:25.0075 2656 HpqKbFiltr - ok 13:19:25.0116 2656 [ EC9739A46F1F83C6E52A7A4697F44A65 ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 13:19:25.0121 2656 hpqwmiex - ok 13:19:25.0147 2656 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 13:19:25.0148 2656 HpSAMD - ok 13:19:25.0176 2656 [ FC7C13B5A9E9BE23B7AE72BBC7FDB278 ] hpsrv C:\Windows\system32\Hpservice.exe 13:19:25.0177 2656 hpsrv - ok 13:19:25.0208 2656 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 13:19:25.0213 2656 HTTP - ok 13:19:25.0239 2656 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 13:19:25.0239 2656 hwpolicy - ok 13:19:25.0269 2656 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 13:19:25.0270 2656 i8042prt - ok 13:19:25.0300 2656 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 13:19:25.0303 2656 iaStorV - ok 13:19:25.0336 2656 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 13:19:25.0341 2656 idsvc - ok 13:19:25.0455 2656 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 13:19:25.0488 2656 igfx - ok 13:19:25.0528 2656 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 13:19:25.0529 2656 iirsp - ok 13:19:25.0557 2656 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 13:19:25.0563 2656 IKEEXT - ok 13:19:25.0577 2656 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 13:19:25.0577 2656 intelide - ok 13:19:25.0603 2656 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 13:19:25.0604 2656 intelppm - ok 13:19:25.0629 2656 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 13:19:25.0630 2656 IPBusEnum - ok 13:19:25.0658 2656 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 13:19:25.0659 2656 IpFilterDriver - ok 13:19:25.0697 2656 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 13:19:25.0701 2656 iphlpsvc - ok 13:19:25.0735 2656 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 13:19:25.0736 2656 IPMIDRV - ok 13:19:25.0750 2656 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 13:19:25.0751 2656 IPNAT - ok 13:19:25.0761 2656 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 13:19:25.0762 2656 IRENUM - ok 13:19:25.0796 2656 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 13:19:25.0797 2656 isapnp - ok 13:19:25.0816 2656 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 13:19:25.0818 2656 iScsiPrt - ok 13:19:25.0832 2656 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 13:19:25.0833 2656 kbdclass - ok 13:19:25.0841 2656 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 13:19:25.0842 2656 kbdhid - ok 13:19:25.0853 2656 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 13:19:25.0854 2656 KeyIso - ok 13:19:25.0883 2656 [ B3BE7E30681EAA8EC96CC9A33E582435 ] KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys 13:19:25.0884 2656 KMWDFILTER - ok 13:19:25.0908 2656 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 13:19:25.0909 2656 KSecDD - ok 13:19:25.0922 2656 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 13:19:25.0923 2656 KSecPkg - ok 13:19:25.0928 2656 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 13:19:25.0929 2656 ksthunk - ok 13:19:25.0953 2656 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 13:19:25.0957 2656 KtmRm - ok 13:19:25.0990 2656 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 13:19:25.0993 2656 LanmanServer - ok 13:19:26.0017 2656 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 13:19:26.0019 2656 LanmanWorkstation - ok 13:19:26.0043 2656 [ FA529FB35694C24BF98A9EF67C1CD9D0 ] LGBusEnum C:\Windows\system32\drivers\LGBusEnum.sys 13:19:26.0043 2656 LGBusEnum - ok 13:19:26.0065 2656 [ 94B29CE153765E768F004FB3440BE2B0 ] LGVirHid C:\Windows\system32\drivers\LGVirHid.sys 13:19:26.0066 2656 LGVirHid - ok 13:19:26.0078 2656 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 13:19:26.0079 2656 lltdio - ok 13:19:26.0105 2656 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 13:19:26.0108 2656 lltdsvc - ok 13:19:26.0122 2656 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 13:19:26.0123 2656 lmhosts - ok 13:19:26.0136 2656 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 13:19:26.0137 2656 LSI_FC - ok 13:19:26.0160 2656 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 13:19:26.0162 2656 LSI_SAS - ok 13:19:26.0170 2656 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 13:19:26.0171 2656 LSI_SAS2 - ok 13:19:26.0193 2656 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 13:19:26.0194 2656 LSI_SCSI - ok 13:19:26.0210 2656 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 13:19:26.0211 2656 luafv - ok 13:19:26.0235 2656 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 13:19:26.0235 2656 MBAMProtector - ok 13:19:26.0276 2656 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe 13:19:26.0278 2656 MBAMScheduler - ok 13:19:26.0307 2656 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 13:19:26.0311 2656 MBAMService - ok 13:19:26.0339 2656 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 13:19:26.0341 2656 Mcx2Svc - ok 13:19:26.0366 2656 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 13:19:26.0367 2656 megasas - ok 13:19:26.0391 2656 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 13:19:26.0393 2656 MegaSR - ok 13:19:26.0421 2656 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 13:19:26.0423 2656 MMCSS - ok 13:19:26.0444 2656 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 13:19:26.0445 2656 Modem - ok 13:19:26.0459 2656 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 13:19:26.0460 2656 monitor - ok 13:19:26.0488 2656 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 13:19:26.0489 2656 mouclass - ok 13:19:26.0497 2656 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 13:19:26.0498 2656 mouhid - ok 13:19:26.0529 2656 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 13:19:26.0530 2656 mountmgr - ok 13:19:26.0559 2656 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 13:19:26.0561 2656 mpio - ok 13:19:26.0575 2656 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 13:19:26.0576 2656 mpsdrv - ok 13:19:26.0612 2656 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 13:19:26.0618 2656 MpsSvc - ok 13:19:26.0648 2656 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 13:19:26.0649 2656 MRxDAV - ok 13:19:26.0678 2656 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 13:19:26.0679 2656 mrxsmb - ok 13:19:26.0710 2656 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 13:19:26.0712 2656 mrxsmb10 - ok 13:19:26.0726 2656 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 13:19:26.0727 2656 mrxsmb20 - ok 13:19:26.0732 2656 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 13:19:26.0733 2656 msahci - ok 13:19:26.0745 2656 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 13:19:26.0746 2656 msdsm - ok 13:19:26.0764 2656 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 13:19:26.0766 2656 MSDTC - ok 13:19:26.0785 2656 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 13:19:26.0785 2656 Msfs - ok 13:19:26.0801 2656 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 13:19:26.0801 2656 mshidkmdf - ok 13:19:26.0830 2656 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 13:19:26.0830 2656 msisadrv - ok 13:19:26.0857 2656 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 13:19:26.0859 2656 MSiSCSI - ok 13:19:26.0863 2656 msiserver - ok 13:19:26.0880 2656 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 13:19:26.0881 2656 MSKSSRV - ok 13:19:26.0895 2656 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 13:19:26.0895 2656 MSPCLOCK - ok 13:19:26.0907 2656 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 13:19:26.0908 2656 MSPQM - ok 13:19:26.0938 2656 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 13:19:26.0941 2656 MsRPC - ok 13:19:26.0969 2656 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 13:19:26.0970 2656 mssmbios - ok 13:19:26.0983 2656 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 13:19:26.0984 2656 MSTEE - ok 13:19:26.0993 2656 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 13:19:26.0994 2656 MTConfig - ok 13:19:27.0010 2656 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 13:19:27.0011 2656 Mup - ok 13:19:27.0043 2656 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 13:19:27.0047 2656 napagent - ok 13:19:27.0064 2656 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 13:19:27.0067 2656 NativeWifiP - ok 13:19:27.0096 2656 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys 13:19:27.0101 2656 NDIS - ok 13:19:27.0118 2656 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 13:19:27.0119 2656 NdisCap - ok 13:19:27.0131 2656 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 13:19:27.0132 2656 NdisTapi - ok 13:19:27.0164 2656 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 13:19:27.0165 2656 Ndisuio - ok 13:19:27.0198 2656 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 13:19:27.0199 2656 NdisWan - ok 13:19:27.0210 2656 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 13:19:27.0211 2656 NDProxy - ok 13:19:27.0223 2656 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 13:19:27.0224 2656 NetBIOS - ok 13:19:27.0257 2656 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 13:19:27.0258 2656 NetBT - ok 13:19:27.0272 2656 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 13:19:27.0273 2656 Netlogon - ok 13:19:27.0298 2656 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 13:19:27.0301 2656 Netman - ok 13:19:27.0415 2656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:19:27.0416 2656 NetMsmqActivator - ok 13:19:27.0421 2656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:19:27.0423 2656 NetPipeActivator - ok 13:19:27.0445 2656 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 13:19:27.0448 2656 netprofm - ok 13:19:27.0453 2656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:19:27.0455 2656 NetTcpActivator - ok 13:19:27.0459 2656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 13:19:27.0461 2656 NetTcpPortSharing - ok 13:19:27.0654 2656 [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys 13:19:27.0685 2656 netw5v64 - ok 13:19:27.0708 2656 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 13:19:27.0709 2656 nfrd960 - ok 13:19:27.0738 2656 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll 13:19:27.0740 2656 NlaSvc - ok 13:19:27.0752 2656 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 13:19:27.0753 2656 Npfs - ok 13:19:27.0763 2656 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 13:19:27.0765 2656 nsi - ok 13:19:27.0777 2656 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 13:19:27.0778 2656 nsiproxy - ok 13:19:27.0830 2656 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 13:19:27.0840 2656 Ntfs - ok 13:19:27.0854 2656 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 13:19:27.0855 2656 Null - ok 13:19:27.0883 2656 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 13:19:27.0885 2656 nvraid - ok 13:19:27.0900 2656 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 13:19:27.0901 2656 nvstor - ok 13:19:27.0933 2656 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 13:19:27.0934 2656 nv_agp - ok 13:19:28.0005 2656 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 13:19:28.0008 2656 odserv - ok 13:19:28.0040 2656 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 13:19:28.0041 2656 ohci1394 - ok 13:19:28.0062 2656 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 13:19:28.0063 2656 ose - ok 13:19:28.0092 2656 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 13:19:28.0095 2656 p2pimsvc - ok 13:19:28.0112 2656 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 13:19:28.0117 2656 p2psvc - ok 13:19:28.0139 2656 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 13:19:28.0140 2656 Parport - ok 13:19:28.0160 2656 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 13:19:28.0161 2656 partmgr - ok 13:19:28.0175 2656 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 13:19:28.0177 2656 PcaSvc - ok 13:19:28.0206 2656 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 13:19:28.0208 2656 pci - ok 13:19:28.0238 2656 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 13:19:28.0239 2656 pciide - ok 13:19:28.0256 2656 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 13:19:28.0258 2656 pcmcia - ok 13:19:28.0283 2656 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 13:19:28.0284 2656 pcw - ok 13:19:28.0306 2656 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 13:19:28.0310 2656 PEAUTH - ok 13:19:28.0376 2656 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 13:19:28.0377 2656 PerfHost - ok 13:19:28.0428 2656 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 13:19:28.0437 2656 pla - ok 13:19:28.0472 2656 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 13:19:28.0476 2656 PlugPlay - ok 13:19:28.0480 2656 PnkBstrA - ok 13:19:28.0496 2656 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 13:19:28.0498 2656 PNRPAutoReg - ok 13:19:28.0513 2656 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 13:19:28.0516 2656 PNRPsvc - ok 13:19:28.0536 2656 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 13:19:28.0539 2656 PolicyAgent - ok 13:19:28.0565 2656 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 13:19:28.0568 2656 Power - ok 13:19:28.0596 2656 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 13:19:28.0597 2656 PptpMiniport - ok 13:19:28.0618 2656 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 13:19:28.0619 2656 Processor - ok 13:19:28.0634 2656 [ 5C78838B4D166D1A27DB3A8A820C799A ] ProfSvc C:\Windows\system32\profsvc.dll 13:19:28.0637 2656 ProfSvc - ok 13:19:28.0650 2656 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 13:19:28.0651 2656 ProtectedStorage - ok 13:19:28.0681 2656 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 13:19:28.0682 2656 Psched - ok 13:19:28.0718 2656 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 13:19:28.0727 2656 ql2300 - ok 13:19:28.0760 2656 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 13:19:28.0761 2656 ql40xx - ok 13:19:28.0784 2656 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 13:19:28.0786 2656 QWAVE - ok 13:19:28.0807 2656 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 13:19:28.0808 2656 QWAVEdrv - ok 13:19:28.0819 2656 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 13:19:28.0820 2656 RasAcd - ok 13:19:28.0837 2656 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 13:19:28.0838 2656 RasAgileVpn - ok 13:19:28.0851 2656 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 13:19:28.0854 2656 RasAuto - ok 13:19:28.0870 2656 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 13:19:28.0871 2656 Rasl2tp - ok 13:19:28.0907 2656 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 13:19:28.0910 2656 RasMan - ok 13:19:28.0924 2656 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 13:19:28.0925 2656 RasPppoe - ok 13:19:28.0933 2656 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 13:19:28.0935 2656 RasSstp - ok 13:19:28.0948 2656 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 13:19:28.0950 2656 rdbss - ok 13:19:28.0974 2656 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 13:19:28.0974 2656 rdpbus - ok 13:19:28.0986 2656 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 13:19:28.0987 2656 RDPCDD - ok 13:19:28.0996 2656 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 13:19:28.0997 2656 RDPENCDD - ok 13:19:29.0003 2656 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 13:19:29.0004 2656 RDPREFMP - ok 13:19:29.0032 2656 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 13:19:29.0034 2656 RDPWD - ok 13:19:29.0060 2656 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 13:19:29.0062 2656 rdyboost - ok 13:19:29.0084 2656 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 13:19:29.0086 2656 RemoteAccess - ok 13:19:29.0107 2656 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 13:19:29.0109 2656 RemoteRegistry - ok 13:19:29.0128 2656 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 13:19:29.0129 2656 RFCOMM - ok 13:19:29.0175 2656 [ 498EB62A160674E793FA40FD65390625 ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 13:19:29.0176 2656 RichVideo - ok 13:19:29.0186 2656 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 13:19:29.0188 2656 RpcEptMapper - ok 13:19:29.0202 2656 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 13:19:29.0203 2656 RpcLocator - ok 13:19:29.0236 2656 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 13:19:29.0240 2656 RpcSs - ok 13:19:29.0266 2656 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 13:19:29.0267 2656 rspndr - ok 13:19:29.0298 2656 [ B49DC435AE3695BAC5623DD94B05732D ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 13:19:29.0299 2656 RTL8167 - ok 13:19:29.0330 2656 [ 24510C4A77ABA3B07AEFA840DB888637 ] RzSynapse C:\Windows\system32\DRIVERS\RzSynapse.sys 13:19:29.0331 2656 RzSynapse - ok 13:19:29.0360 2656 [ 1542F66D82BE5A0AFB366CC115A8E8E5 ] rzudd C:\Windows\system32\DRIVERS\rzudd.sys 13:19:29.0361 2656 rzudd - ok 13:19:29.0392 2656 [ 7449B5949BB85742CDF247BE7F9B653A ] SaiK0CCB C:\Windows\system32\DRIVERS\SaiK0CCB.sys 13:19:29.0393 2656 SaiK0CCB - ok 13:19:29.0421 2656 [ 64BC6CC8FD3408DF37EA488D88D54A4A ] SaiMini C:\Windows\system32\DRIVERS\SaiMini.sys 13:19:29.0422 2656 SaiMini - ok 13:19:29.0441 2656 [ 6A78C024625926CC4B67B3E6AD14910A ] SaiNtBus C:\Windows\system32\drivers\SaiBus.sys 13:19:29.0442 2656 SaiNtBus - ok 13:19:29.0466 2656 [ 325F2AAB1DF5F37D6AEE3C1DB1D9FEE1 ] SaiU0CCB C:\Windows\system32\DRIVERS\SaiU0CCB.sys 13:19:29.0467 2656 SaiU0CCB - ok 13:19:29.0475 2656 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 13:19:29.0476 2656 SamSs - ok 13:19:29.0500 2656 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 13:19:29.0501 2656 sbp2port - ok 13:19:29.0525 2656 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 13:19:29.0528 2656 SCardSvr - ok 13:19:29.0552 2656 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 13:19:29.0553 2656 scfilter - ok 13:19:29.0593 2656 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 13:19:29.0601 2656 Schedule - ok 13:19:29.0625 2656 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 13:19:29.0626 2656 SCPolicySvc - ok 13:19:29.0655 2656 [ 8B56BDCE6A303DDE63D63440D1CF9AD1 ] ScreamBAudioSvc C:\Windows\system32\drivers\ScreamingBAudio64.sys 13:19:29.0656 2656 ScreamBAudioSvc - ok 13:19:29.0681 2656 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys 13:19:29.0682 2656 sdbus - ok 13:19:29.0699 2656 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 13:19:29.0701 2656 SDRSVC - ok 13:19:29.0743 2656 [ 16A252022535B680046F6E34E136D378 ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 13:19:29.0744 2656 SeaPort - ok 13:19:29.0765 2656 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 13:19:29.0766 2656 secdrv - ok 13:19:29.0794 2656 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 13:19:29.0795 2656 seclogon - ok 13:19:29.0817 2656 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 13:19:29.0819 2656 SENS - ok 13:19:29.0824 2656 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 13:19:29.0826 2656 SensrSvc - ok 13:19:29.0844 2656 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 13:19:29.0844 2656 Serenum - ok 13:19:29.0857 2656 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 13:19:29.0858 2656 Serial - ok 13:19:29.0886 2656 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 13:19:29.0887 2656 sermouse - ok 13:19:29.0922 2656 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 13:19:29.0924 2656 SessionEnv - ok 13:19:29.0952 2656 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 13:19:29.0953 2656 sffdisk - ok 13:19:29.0963 2656 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 13:19:29.0964 2656 sffp_mmc - ok 13:19:29.0978 2656 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 13:19:29.0978 2656 sffp_sd - ok 13:19:29.0990 2656 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 13:19:29.0991 2656 sfloppy - ok 13:19:30.0014 2656 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 13:19:30.0017 2656 SharedAccess - ok 13:19:30.0046 2656 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 13:19:30.0050 2656 ShellHWDetection - ok 13:19:30.0071 2656 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 13:19:30.0072 2656 SiSRaid2 - ok 13:19:30.0081 2656 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 13:19:30.0082 2656 SiSRaid4 - ok 13:19:30.0109 2656 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 13:19:30.0110 2656 SkypeUpdate - ok 13:19:30.0131 2656 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 13:19:30.0132 2656 Smb - ok 13:19:30.0156 2656 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 13:19:30.0158 2656 SNMPTRAP - ok 13:19:30.0166 2656 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 13:19:30.0167 2656 spldr - ok 13:19:30.0186 2656 [ B96C17B5DC1424D56EEA3A99E97428CD ] Spooler C:\Windows\System32\spoolsv.exe 13:19:30.0190 2656 Spooler - ok 13:19:30.0267 2656 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 13:19:30.0287 2656 sppsvc - ok 13:19:30.0313 2656 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 13:19:30.0315 2656 sppuinotify - ok 13:19:30.0354 2656 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 13:19:30.0357 2656 srv - ok 13:19:30.0376 2656 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 13:19:30.0379 2656 srv2 - ok 13:19:30.0393 2656 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS 13:19:30.0396 2656 SrvHsfHDA - ok 13:19:30.0427 2656 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS 13:19:30.0436 2656 SrvHsfV92 - ok 13:19:30.0464 2656 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 13:19:30.0468 2656 SrvHsfWinac - ok 13:19:30.0485 2656 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 13:19:30.0487 2656 srvnet - ok 13:19:30.0507 2656 [ 8F8324ED1DE63FFC7B1A02CD2D963C72 ] ssadbus C:\Windows\system32\DRIVERS\ssadbus.sys 13:19:30.0509 2656 ssadbus - ok 13:19:30.0523 2656 [ 58221EFCB74167B73667F0024C661CE0 ] ssadmdfl C:\Windows\system32\DRIVERS\ssadmdfl.sys 13:19:30.0524 2656 ssadmdfl - ok 13:19:30.0542 2656 [ 4DA7C71BFAC5AD71255B7E4CAB980163 ] ssadmdm C:\Windows\system32\DRIVERS\ssadmdm.sys 13:19:30.0544 2656 ssadmdm - ok 13:19:30.0578 2656 [ ED161B91FDF7EAA39469D72D463D5F4E ] sscdbus C:\Windows\system32\DRIVERS\sscdbus.sys 13:19:30.0580 2656 sscdbus - ok 13:19:30.0604 2656 [ 4CB09E77593DBD8D7AF33B37375CA715 ] sscdmdfl C:\Windows\system32\DRIVERS\sscdmdfl.sys 13:19:30.0604 2656 sscdmdfl - ok 13:19:30.0633 2656 [ C7B4CF53497A6E5363F3439427663882 ] sscdmdm C:\Windows\system32\DRIVERS\sscdmdm.sys 13:19:30.0634 2656 sscdmdm - ok 13:19:30.0662 2656 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 13:19:30.0665 2656 SSDPSRV - ok 13:19:30.0678 2656 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 13:19:30.0680 2656 SstpSvc - ok 13:19:30.0715 2656 [ 90C3D4D7B7F8F4B722EBF40B2304AB66 ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys 13:19:30.0717 2656 ssudmdm - ok 13:19:30.0811 2656 [ 7595D53EE8E8B0BAA9A2DDDE867EBB0C ] STacSV C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe 13:19:30.0813 2656 STacSV - ok 13:19:30.0836 2656 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 13:19:30.0837 2656 stexstor - ok 13:19:30.0873 2656 [ DFFBC024DFC7BB05B2129E05CBC7A201 ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 13:19:30.0876 2656 STHDA - ok 13:19:30.0913 2656 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 13:19:30.0918 2656 stisvc - ok 13:19:30.0949 2656 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 13:19:30.0950 2656 swenum - ok 13:19:30.0978 2656 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 13:19:30.0982 2656 swprv - ok 13:19:31.0022 2656 [ 924D711941956F7420A4925592BE8253 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 13:19:31.0024 2656 SynTP - ok 13:19:31.0074 2656 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 13:19:31.0085 2656 SysMain - ok 13:19:31.0114 2656 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 13:19:31.0117 2656 TabletInputService - ok 13:19:31.0129 2656 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 13:19:31.0132 2656 TapiSrv - ok 13:19:31.0142 2656 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 13:19:31.0144 2656 TBS - ok 13:19:31.0190 2656 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 13:19:31.0201 2656 Tcpip - ok 13:19:31.0256 2656 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 13:19:31.0267 2656 TCPIP6 - ok 13:19:31.0295 2656 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 13:19:31.0296 2656 tcpipreg - ok 13:19:31.0317 2656 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 13:19:31.0318 2656 TDPIPE - ok 13:19:31.0338 2656 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 13:19:31.0338 2656 TDTCP - ok 13:19:31.0369 2656 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 13:19:31.0370 2656 tdx - ok 13:19:31.0395 2656 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 13:19:31.0396 2656 TermDD - ok 13:19:31.0422 2656 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 13:19:31.0427 2656 TermService - ok 13:19:31.0454 2656 [ CE4B6956E4E12492715A53076E58761F ] TFsExDisk C:\Windows\System32\Drivers\TFsExDisk.sys 13:19:31.0455 2656 TFsExDisk - ok 13:19:31.0468 2656 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 13:19:31.0470 2656 Themes - ok 13:19:31.0496 2656 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 13:19:31.0497 2656 THREADORDER - ok 13:19:31.0513 2656 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 13:19:31.0516 2656 TrkWks - ok 13:19:31.0566 2656 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 13:19:31.0567 2656 TrustedInstaller - ok 13:19:31.0589 2656 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 13:19:31.0590 2656 tssecsrv - ok 13:19:31.0614 2656 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 13:19:31.0615 2656 TsUsbFlt - ok 13:19:31.0644 2656 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 13:19:31.0645 2656 tunnel - ok 13:19:31.0665 2656 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 13:19:31.0666 2656 uagp35 - ok 13:19:31.0693 2656 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 13:19:31.0695 2656 udfs - ok 13:19:31.0718 2656 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 13:19:31.0720 2656 UI0Detect - ok 13:19:31.0766 2656 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 13:19:31.0767 2656 uliagpkx - ok 13:19:31.0792 2656 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys 13:19:31.0793 2656 umbus - ok 13:19:31.0811 2656 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 13:19:31.0811 2656 UmPass - ok 13:19:31.0831 2656 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 13:19:31.0835 2656 upnphost - ok 13:19:31.0858 2656 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 13:19:31.0859 2656 USBAAPL64 - ok 13:19:31.0881 2656 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 13:19:31.0882 2656 usbaudio - ok 13:19:31.0904 2656 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 13:19:31.0905 2656 usbccgp - ok 13:19:31.0931 2656 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 13:19:31.0933 2656 usbcir - ok 13:19:31.0956 2656 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 13:19:31.0957 2656 usbehci - ok 13:19:31.0980 2656 [ 44D9C773FEBFF10593B50DDFC2D6BC27 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys 13:19:31.0981 2656 usbfilter - ok 13:19:31.0998 2656 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 13:19:32.0001 2656 usbhub - ok 13:19:32.0006 2656 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 13:19:32.0007 2656 usbohci - ok 13:19:32.0025 2656 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 13:19:32.0026 2656 usbprint - ok 13:19:32.0048 2656 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 13:19:32.0048 2656 usbscan - ok 13:19:32.0078 2656 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 13:19:32.0079 2656 USBSTOR - ok 13:19:32.0093 2656 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 13:19:32.0094 2656 usbuhci - ok 13:19:32.0115 2656 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys 13:19:32.0117 2656 usbvideo - ok 13:19:32.0140 2656 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 13:19:32.0143 2656 UxSms - ok 13:19:32.0156 2656 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 13:19:32.0158 2656 VaultSvc - ok 13:19:32.0173 2656 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 13:19:32.0173 2656 vdrvroot - ok 13:19:32.0206 2656 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 13:19:32.0211 2656 vds - ok 13:19:32.0231 2656 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 13:19:32.0232 2656 vga - ok 13:19:32.0244 2656 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 13:19:32.0244 2656 VgaSave - ok 13:19:32.0263 2656 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 13:19:32.0265 2656 vhdmp - ok 13:19:32.0295 2656 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 13:19:32.0296 2656 viaide - ok 13:19:32.0321 2656 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 13:19:32.0322 2656 volmgr - ok 13:19:32.0350 2656 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 13:19:32.0353 2656 volmgrx - ok 13:19:32.0369 2656 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 13:19:32.0371 2656 volsnap - ok 13:19:32.0400 2656 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 13:19:32.0401 2656 vsmraid - ok 13:19:32.0452 2656 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 13:19:32.0462 2656 VSS - ok 13:19:32.0475 2656 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 13:19:32.0476 2656 vwifibus - ok 13:19:32.0486 2656 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 13:19:32.0487 2656 vwififlt - ok 13:19:32.0499 2656 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 13:19:32.0500 2656 vwifimp - ok 13:19:32.0526 2656 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 13:19:32.0530 2656 W32Time - ok 13:19:32.0557 2656 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 13:19:32.0558 2656 WacomPen - ok 13:19:32.0574 2656 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 13:19:32.0575 2656 WANARP - ok 13:19:32.0580 2656 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 13:19:32.0581 2656 Wanarpv6 - ok 13:19:32.0637 2656 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 13:19:32.0645 2656 WatAdminSvc - ok 13:19:32.0702 2656 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 13:19:32.0712 2656 wbengine - ok 13:19:32.0752 2656 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 13:19:32.0755 2656 WbioSrvc - ok 13:19:32.0790 2656 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 13:19:32.0793 2656 wcncsvc - ok 13:19:32.0809 2656 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 13:19:32.0811 2656 WcsPlugInService - ok 13:19:32.0829 2656 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys 13:19:32.0830 2656 Wd - ok 13:19:32.0858 2656 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 13:19:32.0862 2656 Wdf01000 - ok 13:19:32.0876 2656 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 13:19:32.0878 2656 WdiServiceHost - ok 13:19:32.0883 2656 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 13:19:32.0885 2656 WdiSystemHost - ok 13:19:32.0896 2656 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 13:19:32.0899 2656 WebClient - ok 13:19:32.0914 2656 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 13:19:32.0917 2656 Wecsvc - ok 13:19:32.0928 2656 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 13:19:32.0930 2656 wercplsupport - ok 13:19:32.0944 2656 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 13:19:32.0946 2656 WerSvc - ok 13:19:32.0955 2656 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 13:19:32.0955 2656 WfpLwf - ok 13:19:32.0967 2656 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 13:19:32.0968 2656 WIMMount - ok 13:19:32.0989 2656 WinDefend - ok 13:19:32.0996 2656 WinHttpAutoProxySvc - ok 13:19:33.0039 2656 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 13:19:33.0041 2656 Winmgmt - ok 13:19:33.0104 2656 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 13:19:33.0117 2656 WinRM - ok 13:19:33.0148 2656 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 13:19:33.0149 2656 WinUsb - ok 13:19:33.0169 2656 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 13:19:33.0176 2656 Wlansvc - ok 13:19:33.0287 2656 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 13:19:33.0299 2656 wlidsvc - ok 13:19:33.0326 2656 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 13:19:33.0326 2656 WmiAcpi - ok 13:19:33.0342 2656 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 13:19:33.0344 2656 wmiApSrv - ok 13:19:33.0365 2656 WMPNetworkSvc - ok 13:19:33.0377 2656 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 13:19:33.0379 2656 WPCSvc - ok 13:19:33.0414 2656 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 13:19:33.0416 2656 WPDBusEnum - ok 13:19:33.0436 2656 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 13:19:33.0437 2656 ws2ifsl - ok 13:19:33.0447 2656 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 13:19:33.0449 2656 wscsvc - ok 13:19:33.0453 2656 WSearch - ok 13:19:33.0510 2656 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 13:19:33.0525 2656 wuauserv - ok 13:19:33.0536 2656 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 13:19:33.0537 2656 WudfPf - ok 13:19:33.0561 2656 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 13:19:33.0563 2656 WUDFRd - ok 13:19:33.0585 2656 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 13:19:33.0588 2656 wudfsvc - ok 13:19:33.0606 2656 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 13:19:33.0609 2656 WwanSvc - ok 13:19:33.0633 2656 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys 13:19:33.0635 2656 yukonw7 - ok 13:19:33.0647 2656 ================ Scan global =============================== 13:19:33.0662 2656 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 13:19:33.0690 2656 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 13:19:33.0698 2656 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 13:19:33.0723 2656 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 13:19:33.0736 2656 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 13:19:33.0739 2656 [Global] - ok 13:19:33.0740 2656 ================ Scan MBR ================================== 13:19:33.0753 2656 [ 4ECCC12ED442CA63B0D0C40C1D2AB4A8 ] \Device\Harddisk0\DR0 13:19:33.0995 2656 \Device\Harddisk0\DR0 - ok 13:19:33.0996 2656 ================ Scan VBR ================================== 13:19:33.0998 2656 [ BF922BB3C781D59F73A55A3D6B536806 ] \Device\Harddisk0\DR0\Partition1 13:19:34.0000 2656 \Device\Harddisk0\DR0\Partition1 - ok 13:19:34.0009 2656 [ 79ECBF39404B50918B661BAAB9142AD9 ] \Device\Harddisk0\DR0\Partition2 13:19:34.0012 2656 \Device\Harddisk0\DR0\Partition2 - ok 13:19:34.0042 2656 [ 87998DDA67582EDBDD048DE70ACF6ABB ] \Device\Harddisk0\DR0\Partition3 13:19:34.0044 2656 \Device\Harddisk0\DR0\Partition3 - ok 13:19:34.0061 2656 [ 9E1BB25FEFD7521A109F17F2E152E554 ] \Device\Harddisk0\DR0\Partition4 13:19:34.0063 2656 \Device\Harddisk0\DR0\Partition4 - ok 13:19:34.0063 2656 ============================================================ 13:19:34.0063 2656 Scan finished 13:19:34.0063 2656 ============================================================ 13:19:34.0073 3060 Detected object count: 1 13:19:34.0073 3060 Actual detected object count: 1 13:20:29.0287 3060 Akamai ( HiddenFile.Multi.Generic ) - skipped by user 13:20:29.0287 3060 Akamai ( HiddenFile.Multi.Generic ) - User select action: Skip Thanks again for getting back to me.
Post #4
Since you already have a new PC, let's go ahead and be fairly aggressive in cleaning up this machine and see if we can't get it working well for you.

TDSSKiller found a program (from Akamai) that can be legitimately installed, but is most often installed without the users knowledge (and I suspect it probably was on your machine because that seems to be what happens in the majority of cases). A number of users have complained of problems from this program. While there is some debate, most people consider this to be an unwanted program, so as we clean up the machine, I'm going to suggest if our tools don't automatically remove it, that we manually do so.

There are a few other items we can clean up just as a matter of keeping things clear, but nothing else jumping out as malware directly. Keep in mind though that no set of scans look everywhere on a machine. We start with a set of diagnostic scans to get a feel for what we are dealing with and we work from there. This just gives us a starting point.

As you already know, you had malware installed on the machine previously. Since we already know that, and even though it may have been successfully removed by Malwarebytes, I'd like to go ahead and run a tool that will look deeper and in more places. It will also go ahead and clean up anything it may find.

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. 1. Do not mouse-click anywhere on the screen while it is running. That may cause it to stall. In fact, I suggest you do not do anything else on the computer while Combofix is running as it can cause it to stall. It may appear at times that it isn't doing anything but it is. Just let it run. It may also reboot the machine as a part of what it is doing and that is not unusual. (If your computer requires a login then you WILL need to fill in the login/password for it to continue. If your computer does not have a login then it will continue on it's own..) Then, just sit tight until it finishes. Sometimes it takes 10 minutes, sometimes it takes an hour. Just be patient until the log pops up. If it takes more than an hour and doesn't appear to be doing anything, you can stop it and come back and let me know.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

If you have a problem launching programs after running Combofix, please do not panic! Simply reboot the computer and all should be fine.
Post #5
Sorry about the delay, I was away for a day :) I wasn't sure what you meant by include the log in the reply, so I'll just paste it, aswell as link it as an attachment. ComboFix 13-05-01.03 - Marshall 03/05/2013 18:19:30.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4092.2435 [GMT 1:00] Running from: c:\users\[removed]\Downloads\ComboFix.exe AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Public\videos\HP MediaSmart Demo.exe c:\windows\jestertb.dll c:\windows\SysWow64\DEBUG.log c:\windows\SysWow64\logs c:\windows\SysWow64\logs\Game - R3d Logs\2012-03-14_21-28-48_r3dlog.txt c:\windows\SysWow64\muzapp.exe c:\windows\SysWow64\System32\MASetupCleaner.exe c:\windows\SysWow64\System32\muzapp.exe . . ((((((((((((((((((((((((( Files Created from 2013-04-03 to 2013-05-03 ))))))))))))))))))))))))))))))) . . 2013-05-03 17:26 . 2013-05-03 17:26 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-05-03 17:17 . 2013-04-17 05:31 9317456 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A5AC13A6-7A7F-4C15-AF4E-2FF865DEC715}\mpengine.dll 2013-04-27 00:03 . 2012-12-16 17:11 46080 —-a-w- c:\windows\system32\atmlib.dll 2013-04-27 00:03 . 2012-12-16 14:45 367616 —-a-w- c:\windows\system32\atmfd.dll 2013-04-27 00:03 . 2012-12-16 14:13 295424 —-a-w- c:\windows\SysWow64\atmfd.dll 2013-04-27 00:03 . 2012-12-16 14:13 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2013-04-26 23:57 . 2013-04-26 23:57 ——– d—–w- c:\program files (x86)\Skype 2013-04-26 23:15 . 2013-04-26 23:15 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-04-26 23:15 . 2013-04-04 13:50 25928 —-a-w- c:\windows\system32\drivers\mbam.sys 2013-04-26 23:11 . 2013-04-26 23:11 ——– d—–w- c:\users\Marshall\AppData\Local\Programs 2013-04-26 22:01 . 2013-04-26 22:01 ——– d—–w- c:\users\Marshall\AppData\Roaming\AVG2013 2013-04-26 21:59 . 2013-04-26 21:59 ——– d—–w- c:\users\Marshall\AppData\Roaming\TuneUp Software 2013-04-26 21:58 . 2013-04-26 22:00 ——– d—–w- c:\programdata\AVG2013 2013-04-26 21:40 . 2013-04-26 22:05 ——– d—–w- c:\users\Marshall\AppData\Local\Avg2013 2013-04-26 21:40 . 2013-04-26 21:40 ——– d—–w- c:\users\Marshall\AppData\Local\MFAData 2013-04-26 21:14 . 2012-11-09 05:45 750592 —-a-w- c:\windows\system32\win32spl.dll 2013-04-26 21:14 . 2012-11-09 04:43 492032 —-a-w- c:\windows\SysWow64\win32spl.dll 2013-04-26 21:13 . 2013-02-15 06:06 3717632 —-a-w- c:\windows\system32\mstscax.dll 2013-04-26 21:13 . 2013-02-15 04:37 3217408 —-a-w- c:\windows\SysWow64\mstscax.dll 2013-04-26 21:13 . 2013-02-15 06:08 44032 —-a-w- c:\windows\system32\tsgqec.dll 2013-04-26 21:13 . 2013-02-15 06:02 158720 —-a-w- c:\windows\system32\aaclient.dll 2013-04-26 21:13 . 2013-02-15 04:34 131584 —-a-w- c:\windows\SysWow64\aaclient.dll 2013-04-26 21:13 . 2013-02-15 03:25 36864 —-a-w- c:\windows\SysWow64\tsgqec.dll 2013-04-26 21:13 . 2013-04-26 21:13 ——– d—–w- c:\program files (x86)\GUMB0D8.tmp 2013-04-26 21:13 . 2012-11-09 05:45 2048 —-a-w- c:\windows\system32\tzres.dll 2013-04-26 21:13 . 2012-11-09 04:42 2048 —-a-w- c:\windows\SysWow64\tzres.dll 2013-04-26 21:12 . 2013-03-01 03:36 3153408 —-a-w- c:\windows\system32\win32k.sys 2013-04-26 21:12 . 2013-04-12 14:45 1656680 —-a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-26 21:12 . 2013-02-12 04:12 19968 —-a-w- c:\windows\system32\drivers\usb8023.sys 2013-04-26 21:12 . 2012-11-01 05:43 2002432 —-a-w- c:\windows\system32\msxml6.dll 2013-04-26 21:12 . 2012-11-01 05:43 1882624 —-a-w- c:\windows\system32\msxml3.dll 2013-04-26 21:12 . 2012-11-01 04:47 1389568 —-a-w- c:\windows\SysWow64\msxml6.dll 2013-04-26 21:12 . 2012-11-01 04:47 1236992 —-a-w- c:\windows\SysWow64\msxml3.dll 2013-04-26 21:11 . 2012-11-02 05:59 478208 —-a-w- c:\windows\system32\dpnet.dll 2013-04-26 21:11 . 2012-11-02 05:11 376832 —-a-w- c:\windows\SysWow64\dpnet.dll 2013-04-26 21:09 . 2013-01-03 06:00 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-04-26 21:09 . 2013-01-03 06:00 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-04-26 21:09 . 2012-08-11 00:56 715776 —-a-w- c:\windows\system32\kerberos.dll 2013-04-26 21:09 . 2012-08-10 23:56 542208 —-a-w- c:\windows\SysWow64\kerberos.dll 2013-04-26 21:09 . 2012-09-25 22:47 78336 —-a-w- c:\windows\SysWow64\synceng.dll 2013-04-26 21:09 . 2012-09-25 22:46 95744 —-a-w- c:\windows\system32\synceng.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-05-02 01:06 . 2010-05-18 16:23 278800 ——w- c:\windows\system32\MpSigStub.exe 2013-04-26 22:01 . 2012-04-10 12:23 691592 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-04-26 22:01 . 2011-05-16 07:27 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-04-01 18:58 . 2010-06-06 14:10 72702784 —-a-w- c:\windows\system32\MRT.exe 2013-02-26 22:40 . 2013-02-26 22:40 246072 —-a-w- c:\windows\system32\drivers\avgidsdrivera.sys 2013-02-14 02:52 . 2013-02-14 02:52 239416 —-a-w- c:\windows\system32\drivers\avgtdia.sys 2013-02-08 03:37 . 2013-02-08 03:37 116536 —-a-w- c:\windows\system32\drivers\avgmfx64.sys 2013-02-08 03:37 . 2013-02-08 03:37 311096 —-a-w- c:\windows\system32\drivers\avgloga.sys 2013-02-08 03:37 . 2013-02-08 03:37 71480 —-a-w- c:\windows\system32\drivers\avgidsha.sys 2013-02-08 03:37 . 2013-02-08 03:37 206136 —-a-w- c:\windows\system32\drivers\avgldx64.sys 2013-02-08 03:37 . 2013-02-08 03:37 45880 —-a-w- c:\windows\system32\drivers\avgrkx64.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"="c:\users\Marshall\AppData\Local\Akamai\netsession_win.exe" [2013-01-26 4480768] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-06 641664] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2010-02-25 323640] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-03-13 4394032] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "HideFastUserSwitching"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2013-02-27 4937264] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 35104] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2011-08-25 95544] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x] R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-23 22408] R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-23 16008] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368] R3 RzSynapse;Razer Driver;c:\windows\system32\DRIVERS\RzSynapse.sys [2011-03-31 126464] R3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys [2012-01-12 74240] R3 SaiK0CCB;SaiK0CCB;c:\windows\system32\DRIVERS\SaiK0CCB.sys [2011-03-23 176136] R3 SaiU0CCB;SaiU0CCB;c:\windows\system32\DRIVERS\SaiU0CCB.sys [2011-03-23 41352] R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-06-02 157672] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-06-02 16872] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-06-02 177640] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2011-08-25 203320] R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2011-01-04 16392] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-22 1255736] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-06-10 389120] R4 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe [2010-11-30 89600] R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-05 203264] R4 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-04-05 361984] R4 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896] R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] R4 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x] R4 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560] R4 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264] R4 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-05-13 30520] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-02-26 246072] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2013-02-14 239416] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136] S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-02-19 282624] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136] S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2009-06-29 70656] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 25928] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-23 215040] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-03-09 36408] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . Contents of the 'Scheduled Tasks' folder . 2013-05-03 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 22:01] . 2013-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cd91cf6f027c46.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-24 14:48] . 2013-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-24 14:48] . 2013-04-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3140097222-1890083310-4048185991-1001Core1cd94ecbb976290.job - c:\users\Marshall\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-22 09:51] . 2013-05-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3140097222-1890083310-4048185991-1001UA.job - c:\users\Marshall\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-22 09:51] . 2012-08-09 c:\windows\Tasks\{D0FEBF7C-3B55-4F83-9B43-46B2A70D0A39}.job - c:\users\marshall\appdata\local\google\chrome\application\chrome.exe [2010-05-22 08:57] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-11-30 487424] "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872] . ——- Supplementary Scan ——- . uStart Page = hxxp://google.com/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = IE: E&xport; to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000 IE: Free YouTube Download - c:\users\Marshall\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm IE: Send image to &Bluetooth; Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth; Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: teagames.com\www TCP: DhcpNameServer = 192.168.1.254 . - - - - ORPHANS REMOVED - - - - . Wow6432Node-HKCU-Run-LightScribe Control Panel - c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe Wow6432Node-HKCU-Run-KiesHelper - c:\program files (x86)\Samsung\Kies\KiesHelper.exe Wow6432Node-HKLM-Run-Easybits Recovery - c:\program files (x86)\EasyBits For Kids\ezRecover.exe HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-ASIO4ALL - g:\fl studios\ASIO4ALL v2\uninstall.exe AddRemove-ESN Sonar-0.70.0 - c:\program files (x86)\Battlelog Web Plugins\Sonar\esnsonar_uninstall.exe AddRemove-PunkBusterSvc - g:\battlefield 3\Battlefield 3\pbsvc.exe AddRemove-{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC} - c:\program files (x86)\Hi-Rez Studios\HiRezGamesDiagAndSupport.exe AddRemove-{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226} - c:\program files (x86)\InstallShield Installation Information\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}\setup.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai] "ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] @Denied: (2) (LocalSystem) "{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc, 1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7 "{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}"=hex:51,66,7a,6c,4c,1d,38,12,7c,f0,b1, 38,5c,21,3d,0e,d9,78,0d,25,e1,c9,8c,d4 "{6EBF7485-159F-4BFF-A14F-B9E3AAC4465B}"=hex:51,66,7a,6c,4c,1d,38,12,eb,77,ac, 6a,ad,5b,91,0e,de,59,fa,a3,af,9a,02,4f "{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23, 94,30,02,d1,0f,f1,da,12,24,73,56,27,d2 "{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce, 9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d "{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93, aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83 "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db, df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd "{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16, fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17 "{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9, b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] @Denied: (2) (LocalSystem) "Timestamp"=hex:9e,91,1d,ec,3b,85,cc,01 . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,72,ec,55,50,f7,9d,4f,93,b1,8c,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,72,ec,55,50,f7,9d,4f,93,b1,8c,\ . [HKEY_USERS\S-1-5-21-3140097222-1890083310-4048185991-1001\Software\SecuROM\License information*] "datasecu"=hex:17,80,83,1d,a3,e3,b1,a3,d9,a8,01,dd,1c,9d,50,74,58,35,92,eb,60, 1f,74,45,ad,87,26,fa,92,29,a3,67,b3,aa,5b,c9,5f,de,d6,5e,36,16,77,4c,b5,ca,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-05-03 18:29:26 ComboFix-quarantined-files.txt 2013-05-03 17:29 . Pre-Run: 401,731,485,696 bytes free Post-Run: 401,227,595,776 bytes free . - - End Of File - - A68C91F63FA17C0F0F887E9B7AB9DEC8 My PC is running fine. It's running hot, but that is the fan I think :)
Post #6
You did just fine including the log - it was just the way I needed it :) Sometimes the fan is an issue that makes a machine run hot. This can be a simple fix where you just need to clean the machine with some canned air, or it can be a result of the hardware running to hard which can be caused by malware, or an impending hardware failure. A machine running hot can be harder to diagnose than one might think. But let's hope for now it's just the fan and may be in need of a little dust cleanup. (I'll cross my fingers that's all it is.)

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

File::
C:\Users\Marshall\AppData\Local\Akamai\netsession_win.exe
C:\Users\Marshall\AppData\Local\Akamai\netsession_win.exe
c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll

DDS::
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
uRun: [Akamai NetSession Interface] "C:\Users\Marshall\AppData\Local\Akamai\netsession_win.exe"
IE: Free YouTube Download - C:\Users\Marshall\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File

ClearJavaCache::


Save this as "CFScript.txt", and as Type: All Files (*.*) in the same location as ComboFix.exe


[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe. ComboFix may request an update; please allow it.

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.



If things are still running well at this point, let's go ahead with an online scan. (If for any reason things are not running well, stop and let me know.)

Since no one tool looks everywhere, we like to get a second scan to be sure we haven't missed anything.



This scan make take awhile depending on how many items are on the computer. You may want to run it at a time you won't be needing the machine. It should be run from IE and I'd recommend not doing anything else while it's running.


Go here to run an online scannner from ESET.
  • Note: For browsers other than Internet Explorer, you will need to download and install esetsmartinstaller_enu.exe. Click on it and save the file to a convenient location. Double click on it to install and a new window will open.
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
  • Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
  • Click Scan
  • Wait for the scan to finish
  • Use notepad to open the logfile located at C:\Program Files\Eset\Eset Online Scanner\log.txt
  • Copy and paste that log as a reply to this topic and also let me know how things are now.

If it doesn't find anything there will be no log to post.
Post #7
Hi there :) And good to know. So same again, it said to post the combofix.txt log file, so I will copy / paste the log, and also include it as an attachment, just in case :) ComboFix 13-05-06.01 - Marshall 06/05/2013 13:30:28.2.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4092.2501 [GMT 1:00] Running from: c:\users\[removed]\Downloads\ComboFix.exe Command switches used :: c:\users\Marshall\Desktop\CFscript.txt AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . FILE :: "c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll" "c:\users\Marshall\AppData\Local\Akamai\netsession_win.exe" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll c:\program files (x86)\Windows Live\Companion\companioncore.dll c:\users\Marshall\AppData\Local\Akamai\netsession_win.exe . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . ——-\Service_Akamai . . ((((((((((((((((((((((((( Files Created from 2013-04-06 to 2013-05-06 ))))))))))))))))))))))))))))))) . . 2013-05-06 12:40 . 2013-05-06 12:40 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-05-03 17:17 . 2013-04-17 05:31 9317456 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A5AC13A6-7A7F-4C15-AF4E-2FF865DEC715}\mpengine.dll 2013-04-27 00:03 . 2012-12-16 17:11 46080 —-a-w- c:\windows\system32\atmlib.dll 2013-04-27 00:03 . 2012-12-16 14:45 367616 —-a-w- c:\windows\system32\atmfd.dll 2013-04-27 00:03 . 2012-12-16 14:13 295424 —-a-w- c:\windows\SysWow64\atmfd.dll 2013-04-27 00:03 . 2012-12-16 14:13 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2013-04-26 23:57 . 2013-04-26 23:57 ——– d—–w- c:\program files (x86)\Skype 2013-04-26 23:15 . 2013-04-26 23:15 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-04-26 23:15 . 2013-04-04 13:50 25928 —-a-w- c:\windows\system32\drivers\mbam.sys 2013-04-26 23:11 . 2013-04-26 23:11 ——– d—–w- c:\users\Marshall\AppData\Local\Programs 2013-04-26 22:01 . 2013-04-26 22:01 ——– d—–w- c:\users\Marshall\AppData\Roaming\AVG2013 2013-04-26 21:59 . 2013-04-26 21:59 ——– d—–w- c:\users\Marshall\AppData\Roaming\TuneUp Software 2013-04-26 21:58 . 2013-04-26 22:00 ——– d—–w- c:\programdata\AVG2013 2013-04-26 21:40 . 2013-04-26 22:05 ——– d—–w- c:\users\Marshall\AppData\Local\Avg2013 2013-04-26 21:40 . 2013-04-26 21:40 ——– d—–w- c:\users\Marshall\AppData\Local\MFAData 2013-04-26 21:14 . 2012-11-09 05:45 750592 —-a-w- c:\windows\system32\win32spl.dll 2013-04-26 21:14 . 2012-11-09 04:43 492032 —-a-w- c:\windows\SysWow64\win32spl.dll 2013-04-26 21:13 . 2013-02-15 06:06 3717632 —-a-w- c:\windows\system32\mstscax.dll 2013-04-26 21:13 . 2013-02-15 04:37 3217408 —-a-w- c:\windows\SysWow64\mstscax.dll 2013-04-26 21:13 . 2013-02-15 06:08 44032 —-a-w- c:\windows\system32\tsgqec.dll 2013-04-26 21:13 . 2013-02-15 06:02 158720 —-a-w- c:\windows\system32\aaclient.dll 2013-04-26 21:13 . 2013-02-15 04:34 131584 —-a-w- c:\windows\SysWow64\aaclient.dll 2013-04-26 21:13 . 2013-02-15 03:25 36864 —-a-w- c:\windows\SysWow64\tsgqec.dll 2013-04-26 21:13 . 2013-04-26 21:13 ——– d—–w- c:\program files (x86)\GUMB0D8.tmp 2013-04-26 21:13 . 2012-11-09 05:45 2048 —-a-w- c:\windows\system32\tzres.dll 2013-04-26 21:13 . 2012-11-09 04:42 2048 —-a-w- c:\windows\SysWow64\tzres.dll 2013-04-26 21:12 . 2013-03-01 03:36 3153408 —-a-w- c:\windows\system32\win32k.sys 2013-04-26 21:12 . 2013-04-12 14:45 1656680 —-a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-26 21:12 . 2013-02-12 04:12 19968 —-a-w- c:\windows\system32\drivers\usb8023.sys 2013-04-26 21:12 . 2012-11-01 05:43 2002432 —-a-w- c:\windows\system32\msxml6.dll 2013-04-26 21:12 . 2012-11-01 05:43 1882624 —-a-w- c:\windows\system32\msxml3.dll 2013-04-26 21:12 . 2012-11-01 04:47 1389568 —-a-w- c:\windows\SysWow64\msxml6.dll 2013-04-26 21:12 . 2012-11-01 04:47 1236992 —-a-w- c:\windows\SysWow64\msxml3.dll 2013-04-26 21:11 . 2012-11-02 05:59 478208 —-a-w- c:\windows\system32\dpnet.dll 2013-04-26 21:11 . 2012-11-02 05:11 376832 —-a-w- c:\windows\SysWow64\dpnet.dll 2013-04-26 21:09 . 2013-01-03 06:00 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-04-26 21:09 . 2013-01-03 06:00 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-04-26 21:09 . 2012-08-11 00:56 715776 —-a-w- c:\windows\system32\kerberos.dll 2013-04-26 21:09 . 2012-08-10 23:56 542208 —-a-w- c:\windows\SysWow64\kerberos.dll 2013-04-26 21:09 . 2012-09-25 22:47 78336 —-a-w- c:\windows\SysWow64\synceng.dll 2013-04-26 21:09 . 2012-09-25 22:46 95744 —-a-w- c:\windows\system32\synceng.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-05-02 01:06 . 2010-05-18 16:23 278800 ——w- c:\windows\system32\MpSigStub.exe 2013-04-26 22:01 . 2012-04-10 12:23 691592 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-04-26 22:01 . 2011-05-16 07:27 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-04-01 18:58 . 2010-06-06 14:10 72702784 —-a-w- c:\windows\system32\MRT.exe 2013-02-26 22:40 . 2013-02-26 22:40 246072 —-a-w- c:\windows\system32\drivers\avgidsdrivera.sys 2013-02-14 02:52 . 2013-02-14 02:52 239416 —-a-w- c:\windows\system32\drivers\avgtdia.sys 2013-02-08 03:37 . 2013-02-08 03:37 116536 —-a-w- c:\windows\system32\drivers\avgmfx64.sys 2013-02-08 03:37 . 2013-02-08 03:37 311096 —-a-w- c:\windows\system32\drivers\avgloga.sys 2013-02-08 03:37 . 2013-02-08 03:37 71480 —-a-w- c:\windows\system32\drivers\avgidsha.sys 2013-02-08 03:37 . 2013-02-08 03:37 206136 —-a-w- c:\windows\system32\drivers\avgldx64.sys 2013-02-08 03:37 . 2013-02-08 03:37 45880 —-a-w- c:\windows\system32\drivers\avgrkx64.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-06 641664] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2010-02-25 323640] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-03-13 4394032] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "HideFastUserSwitching"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2013-02-27 4937264] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 35104] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2011-08-25 95544] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x] R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-23 22408] R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-23 16008] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368] R3 RzSynapse;Razer Driver;c:\windows\system32\DRIVERS\RzSynapse.sys [2011-03-31 126464] R3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys [2012-01-12 74240] R3 SaiK0CCB;SaiK0CCB;c:\windows\system32\DRIVERS\SaiK0CCB.sys [2011-03-23 176136] R3 SaiU0CCB;SaiU0CCB;c:\windows\system32\DRIVERS\SaiU0CCB.sys [2011-03-23 41352] R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-06-02 157672] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-06-02 16872] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-06-02 177640] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2011-08-25 203320] R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2011-01-04 16392] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-22 1255736] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-06-10 389120] R4 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe [2010-11-30 89600] R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-05 203264] R4 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-04-05 361984] R4 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896] R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] R4 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x] R4 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560] R4 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264] R4 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-05-13 30520] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-02-26 246072] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2013-02-14 239416] S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-02-19 282624] S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136] S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2009-06-29 70656] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 25928] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-23 215040] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-03-09 36408] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . Contents of the 'Scheduled Tasks' folder . 2013-05-06 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 22:01] . 2013-05-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cd91cf6f027c46.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-24 14:48] . 2013-05-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-24 14:48] . 2013-04-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3140097222-1890083310-4048185991-1001Core1cd94ecbb976290.job - c:\users\Marshall\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-22 09:51] . 2013-05-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3140097222-1890083310-4048185991-1001UA.job - c:\users\Marshall\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-22 09:51] . 2012-08-09 c:\windows\Tasks\{D0FEBF7C-3B55-4F83-9B43-46B2A70D0A39}.job - c:\users\marshall\appdata\local\google\chrome\application\chrome.exe [2010-05-22 08:57] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-11-30 487424] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872] . ——- Supplementary Scan ——- . uStart Page = hxxp://google.com/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = IE: E&xport; to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000 IE: Send image to &Bluetooth; Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth; Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: teagames.com\www TCP: DhcpNameServer = 192.168.1.254 . - - - - ORPHANS REMOVED - - - - . AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-ASIO4ALL - g:\fl studios\ASIO4ALL v2\uninstall.exe AddRemove-ESN Sonar-0.70.0 - c:\program files (x86)\Battlelog Web Plugins\Sonar\esnsonar_uninstall.exe AddRemove-PunkBusterSvc - g:\battlefield 3\Battlefield 3\pbsvc.exe AddRemove-{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC} - c:\program files (x86)\Hi-Rez Studios\HiRezGamesDiagAndSupport.exe AddRemove-{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226} - c:\program files (x86)\InstallShield Installation Information\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}\setup.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] @Denied: (2) (LocalSystem) "{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc, 1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7 "{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}"=hex:51,66,7a,6c,4c,1d,38,12,7c,f0,b1, 38,5c,21,3d,0e,d9,78,0d,25,e1,c9,8c,d4 "{6EBF7485-159F-4BFF-A14F-B9E3AAC4465B}"=hex:51,66,7a,6c,4c,1d,38,12,eb,77,ac, 6a,ad,5b,91,0e,de,59,fa,a3,af,9a,02,4f "{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23, 94,30,02,d1,0f,f1,da,12,24,73,56,27,d2 "{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce, 9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d "{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93, aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83 "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db, df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd "{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16, fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17 "{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9, b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] @Denied: (2) (LocalSystem) "Timestamp"=hex:9e,91,1d,ec,3b,85,cc,01 . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,72,ec,55,50,f7,9d,4f,93,b1,8c,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,72,ec,55,50,f7,9d,4f,93,b1,8c,\ . [HKEY_USERS\S-1-5-21-3140097222-1890083310-4048185991-1001\Software\SecuROM\License information*] "datasecu"=hex:17,80,83,1d,a3,e3,b1,a3,d9,a8,01,dd,1c,9d,50,74,58,35,92,eb,60, 1f,74,45,ad,87,26,fa,92,29,a3,67,b3,aa,5b,c9,5f,de,d6,5e,36,16,77,4c,b5,ca,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe . ************************************************************************** . Completion time: 2013-05-06 13:58:06 - machine was rebooted ComboFix-quarantined-files.txt 2013-05-06 12:58 ComboFix2.txt 2013-05-03 17:29 . Pre-Run: 400,731,889,664 bytes free Post-Run: 400,409,583,616 bytes free . - - End Of File - - D5F36775ADFEE3831C62931C4A5D8553 I saw some files in that log, mentioning World of Warcraft. Before I even came to this site, I tried to delete it off my system, but there are quite a few files that I kept finding after trying to delete it via the control panel 'delete programs' menu. Possible problem maybe, just a thought. After the 2 hours or so it took to do the ESET scan, it found two threats involving internet explorers 'Babylon' search engine I think. I have never used Babylon purposely ever, it sometimes used to appear as the default search engine whenever I needed to use internet explorer for something. Here is the copy / paste of the log file from the ESET scan. ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=9a9bcfd088eaab469005356faa10c36a # engine=13765 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2013-05-06 01:36:16 # local_time=2013-05-06 02:36:16 (+0000, GMT Daylight Time) # country="United Kingdom" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1043 16777213 100 87 4510 54981360 0 0 # compatibility_mode=5893 16776574 100 94 245908 120312426 0 0 # scanned=106354 # found=0 # cleaned=0 # scan_time=1715 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=9a9bcfd088eaab469005356faa10c36a # engine=13765 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2013-05-06 03:19:08 # local_time=2013-05-06 04:19:08 (+0000, GMT Daylight Time) # country="United Kingdom" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1043 16777213 100 87 10682 54987532 0 0 # compatibility_mode=5893 16776574 100 94 252080 120318598 0 0 # scanned=262388 # found=2 # cleaned=0 # scan_time=6080 sh=D128CBAF3DEF02BD11A92A43C36D540E47BF06E0 ft=1 fh=6abf192eb2d8af09 vn="a variant of Win32/Toolbar.Babylon.E application" ac=I fn="C:\Users\Marshall\AppData\Local\Babylon\Setup\IECookieLow.dll" sh=C88D76106C34D093167BD69B433CFF15F24CFE68 ft=1 fh=c9f8a6e51b4e4ea2 vn="a variant of Win32/Toolbar.Babylon.E application" ac=I fn="C:\Users\Marshall\AppData\Local\Babylon\Setup\Setup.exe" I'll play a game of League of Legends, because at the moment, the computer is fairly low temperature, because it tends to bump the temperature up when I run it. Oh, and a side note, EVERY time I boot my laptop up, at the start it comes up with a message about the temperature of my laptop? I have to press 'Enter' to get passed this message too. I can't remember what it says, so if you need that information, I'll write it down and then type it out :) It's not a problem.
Post #9
Let's start by getting rid of those two files ESET found:

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

File::
C:\Users\Marshall\AppData\Local\Babylon\Setup\IECookieLow.dll
C:\Users\Marshall\AppData\Local\Babylon\Setup\Setup.exe

Folder::

Registry::

DDS::

Driver::

Firefox::

ClearJavaCache::


Save this as "CFScript.txt", and as Type: All Files (*.*) in the same location as ComboFix.exe


[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe. ComboFix may request an update; please allow it.

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.


I saw some files in that log, mentioning World of Warcraft. Before I even came to this site, I tried to delete it off my system, but there are quite a few files that I kept finding after trying to delete it via the control panel 'delete programs' menu. Possible problem maybe, just a thought.

If you are referring to the files that say "SysWow64" or "SysWow" those are system files and not related to World of Warcraft. However, if you did indadvertantly delete some of these separate from deleting program files related to a game, it could explain why the machine isn't running at it's peak performance.

After running the above fix, let's go ahead and do the following (this doesn't fix everything related to performance - not by a long shot - but it might just fix something that could have potentially gotten tweaked by mistake or by malware at some point.)


Windows Repair (All In One) from Tweaking.com.

Windows Repair is an all-in-one repair tool to help fix a large majority of known Windows problems including registry errors and file permissions as well as issues with Internet Explorer, Windows Update, Windows Firewall and more. Malware and installed programs can modify your default settings. With Tweaking.com - Windows Repair you can restore Windows original settings.


Please follow the instructions found here for running this tool and then post back and let me know how the machine seems to be behaving now.
Post #10
Here is the combofix log: ComboFix 13-05-09.01 - Marshall 09/05/2013 18:33:55.3.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4092.2517 [GMT 1:00] Running from: c:\users\[removed]\Downloads\ComboFix.exe Command switches used :: c:\users\Marshall\Desktop\CFScript.txt AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\users\Marshall\AppData\Local\Babylon\Setup\IECookieLow.dll" "c:\users\Marshall\AppData\Local\Babylon\Setup\Setup.exe" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Marshall\AppData\Local\Babylon\Setup\IECookieLow.dll c:\users\Marshall\AppData\Local\Babylon\Setup\Setup.exe . . ((((((((((((((((((((((((( Files Created from 2013-04-09 to 2013-05-09 ))))))))))))))))))))))))))))))) . . 2013-05-09 17:40 . 2013-05-09 17:40 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-05-09 17:29 . 2013-05-09 17:29 ——– d—–w- c:\users\Default\AppData\Roaming\TuneUp Software 2013-05-06 13:05 . 2013-05-06 13:05 ——– d—–w- c:\program files (x86)\ESET 2013-05-03 17:17 . 2013-04-17 05:31 9317456 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A5AC13A6-7A7F-4C15-AF4E-2FF865DEC715}\mpengine.dll 2013-04-27 00:03 . 2012-12-16 17:11 46080 —-a-w- c:\windows\system32\atmlib.dll 2013-04-27 00:03 . 2012-12-16 14:45 367616 —-a-w- c:\windows\system32\atmfd.dll 2013-04-27 00:03 . 2012-12-16 14:13 295424 —-a-w- c:\windows\SysWow64\atmfd.dll 2013-04-27 00:03 . 2012-12-16 14:13 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2013-04-26 23:57 . 2013-04-26 23:57 ——– d—–w- c:\program files (x86)\Skype 2013-04-26 23:15 . 2013-04-26 23:15 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-04-26 23:15 . 2013-04-04 13:50 25928 —-a-w- c:\windows\system32\drivers\mbam.sys 2013-04-26 23:11 . 2013-04-26 23:11 ——– d—–w- c:\users\Marshall\AppData\Local\Programs 2013-04-26 22:01 . 2013-04-26 22:01 ——– d—–w- c:\users\Marshall\AppData\Roaming\AVG2013 2013-04-26 21:59 . 2013-04-26 21:59 ——– d—–w- c:\users\Marshall\AppData\Roaming\TuneUp Software 2013-04-26 21:58 . 2013-04-26 22:00 ——– d—–w- c:\programdata\AVG2013 2013-04-26 21:40 . 2013-04-26 22:05 ——– d—–w- c:\users\Marshall\AppData\Local\Avg2013 2013-04-26 21:40 . 2013-04-26 21:40 ——– d—–w- c:\users\Marshall\AppData\Local\MFAData 2013-04-26 21:14 . 2012-11-09 05:45 750592 —-a-w- c:\windows\system32\win32spl.dll 2013-04-26 21:14 . 2012-11-09 04:43 492032 —-a-w- c:\windows\SysWow64\win32spl.dll 2013-04-26 21:13 . 2013-02-15 06:06 3717632 —-a-w- c:\windows\system32\mstscax.dll 2013-04-26 21:13 . 2013-02-15 04:37 3217408 —-a-w- c:\windows\SysWow64\mstscax.dll 2013-04-26 21:13 . 2013-02-15 06:08 44032 —-a-w- c:\windows\system32\tsgqec.dll 2013-04-26 21:13 . 2013-02-15 06:02 158720 —-a-w- c:\windows\system32\aaclient.dll 2013-04-26 21:13 . 2013-02-15 04:34 131584 —-a-w- c:\windows\SysWow64\aaclient.dll 2013-04-26 21:13 . 2013-02-15 03:25 36864 —-a-w- c:\windows\SysWow64\tsgqec.dll 2013-04-26 21:13 . 2013-04-26 21:13 ——– d—–w- c:\program files (x86)\GUMB0D8.tmp 2013-04-26 21:13 . 2012-11-09 05:45 2048 —-a-w- c:\windows\system32\tzres.dll 2013-04-26 21:13 . 2012-11-09 04:42 2048 —-a-w- c:\windows\SysWow64\tzres.dll 2013-04-26 21:12 . 2013-03-01 03:36 3153408 —-a-w- c:\windows\system32\win32k.sys 2013-04-26 21:12 . 2013-04-12 14:45 1656680 —-a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-26 21:12 . 2013-02-12 04:12 19968 —-a-w- c:\windows\system32\drivers\usb8023.sys 2013-04-26 21:12 . 2012-11-01 05:43 2002432 —-a-w- c:\windows\system32\msxml6.dll 2013-04-26 21:12 . 2012-11-01 05:43 1882624 —-a-w- c:\windows\system32\msxml3.dll 2013-04-26 21:12 . 2012-11-01 04:47 1389568 —-a-w- c:\windows\SysWow64\msxml6.dll 2013-04-26 21:12 . 2012-11-01 04:47 1236992 —-a-w- c:\windows\SysWow64\msxml3.dll 2013-04-26 21:11 . 2012-11-02 05:59 478208 —-a-w- c:\windows\system32\dpnet.dll 2013-04-26 21:11 . 2012-11-02 05:11 376832 —-a-w- c:\windows\SysWow64\dpnet.dll 2013-04-26 21:09 . 2013-01-03 06:00 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-04-26 21:09 . 2013-01-03 06:00 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-04-26 21:09 . 2012-08-11 00:56 715776 —-a-w- c:\windows\system32\kerberos.dll 2013-04-26 21:09 . 2012-08-10 23:56 542208 —-a-w- c:\windows\SysWow64\kerberos.dll 2013-04-26 21:09 . 2012-09-25 22:47 78336 —-a-w- c:\windows\SysWow64\synceng.dll 2013-04-26 21:09 . 2012-09-25 22:46 95744 —-a-w- c:\windows\system32\synceng.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-05-02 01:06 . 2010-05-18 16:23 278800 ——w- c:\windows\system32\MpSigStub.exe 2013-04-26 22:01 . 2012-04-10 12:23 691592 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-04-26 22:01 . 2011-05-16 07:27 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-04-01 18:58 . 2010-06-06 14:10 72702784 —-a-w- c:\windows\system32\MRT.exe 2013-03-29 01:53 . 2013-03-29 01:53 246072 —-a-w- c:\windows\system32\drivers\avgidsdrivera.sys 2013-03-21 02:08 . 2013-03-21 02:08 240952 —-a-w- c:\windows\system32\drivers\avgtdia.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-06 641664] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2010-02-25 323640] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-04-28 4408368] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "HideFastUserSwitching"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2013-04-25 4936752] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 35104] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2011-08-25 95544] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x] R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-23 22408] R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-23 16008] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368] R3 RzSynapse;Razer Driver;c:\windows\system32\DRIVERS\RzSynapse.sys [2011-03-31 126464] R3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys [2012-01-12 74240] R3 SaiK0CCB;SaiK0CCB;c:\windows\system32\DRIVERS\SaiK0CCB.sys [2011-03-23 176136] R3 SaiU0CCB;SaiU0CCB;c:\windows\system32\DRIVERS\SaiU0CCB.sys [2011-03-23 41352] R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-06-02 157672] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-06-02 16872] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-06-02 177640] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2011-08-25 203320] R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2011-01-04 16392] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-22 1255736] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-06-10 389120] R4 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe [2010-11-30 89600] R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-05 203264] R4 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-04-05 361984] R4 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896] R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] R4 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x] R4 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560] R4 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264] R4 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-05-13 30520] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952] S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136] S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2009-06-29 70656] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 25928] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-23 215040] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-03-09 36408] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . Contents of the 'Scheduled Tasks' folder . 2013-05-06 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 22:01] . 2013-05-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cd91cf6f027c46.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-24 14:48] . 2013-05-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-24 14:48] . 2013-04-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3140097222-1890083310-4048185991-1001Core1cd94ecbb976290.job - c:\users\Marshall\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-22 09:51] . 2013-05-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3140097222-1890083310-4048185991-1001UA.job - c:\users\Marshall\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-22 09:51] . 2012-08-09 c:\windows\Tasks\{D0FEBF7C-3B55-4F83-9B43-46B2A70D0A39}.job - c:\users\marshall\appdata\local\google\chrome\application\chrome.exe [2010-05-22 08:57] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-11-30 487424] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872] . ——- Supplementary Scan ——- . uStart Page = hxxp://google.com/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000 IE: Send image to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: teagames.com\www TCP: DhcpNameServer = 192.168.1.254 . - - - - ORPHANS REMOVED - - - - . AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-ASIO4ALL - g:\fl studios\ASIO4ALL v2\uninstall.exe AddRemove-ESN Sonar-0.70.0 - c:\program files (x86)\Battlelog Web Plugins\Sonar\esnsonar_uninstall.exe AddRemove-PunkBusterSvc - g:\battlefield 3\Battlefield 3\pbsvc.exe AddRemove-{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC} - c:\program files (x86)\Hi-Rez Studios\HiRezGamesDiagAndSupport.exe AddRemove-{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226} - c:\program files (x86)\InstallShield Installation Information\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}\setup.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] @Denied: (2) (LocalSystem) "{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc, 1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7 "{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}"=hex:51,66,7a,6c,4c,1d,38,12,7c,f0,b1, 38,5c,21,3d,0e,d9,78,0d,25,e1,c9,8c,d4 "{6EBF7485-159F-4BFF-A14F-B9E3AAC4465B}"=hex:51,66,7a,6c,4c,1d,38,12,eb,77,ac, 6a,ad,5b,91,0e,de,59,fa,a3,af,9a,02,4f "{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23, 94,30,02,d1,0f,f1,da,12,24,73,56,27,d2 "{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce, 9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d "{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93, aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83 "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db, df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd "{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16, fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17 "{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9, b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] @Denied: (2) (LocalSystem) "Timestamp"=hex:9e,91,1d,ec,3b,85,cc,01 . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,72,ec,55,50,f7,9d,4f,93,b1,8c,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,72,ec,55,50,f7,9d,4f,93,b1,8c,\ . [HKEY_USERS\S-1-5-21-3140097222-1890083310-4048185991-1001\Software\SecuROM\License information*] "datasecu"=hex:17,80,83,1d,a3,e3,b1,a3,d9,a8,01,dd,1c,9d,50,74,58,35,92,eb,60, 1f,74,45,ad,87,26,fa,92,29,a3,67,b3,aa,5b,c9,5f,de,d6,5e,36,16,77,4c,b5,ca,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-05-09 18:42:10 ComboFix-quarantined-files.txt 2013-05-09 17:42 ComboFix2.txt 2013-05-06 12:58 ComboFix3.txt 2013-05-03 17:29 . Pre-Run: 401,166,721,024 bytes free Post-Run: 401,104,994,304 bytes free . - - End Of File - - 2B852CD53E683D620049ACC58797B8F9 And after the windows fix thing, my laptop seems in the same state it was, running quite fast, just getting a bit too hot
Post #11
I'd like to try and address the running hot issue if we can, as it's not good for your machine. I'm not a hardware tech, but I'll do what I can to help, and if necessary I can refer you to one of our other forums for assistance. First, can you tell me what the error is that you get when you boot the computer. I'll need the exact wording please. Also, can you tell me if you encounter the same issue when you are in Safe Mode? Or does this only happen when you are in normal mode? And most importantly of all, do you have any cats or dogs in your household - even if you clean with canned air, sometimes fans can be really clogged up with pet hair (as I recently found out when I sold an old laptop I paid a whole lot of money for to someone for $10 because it was severely overheating and I couldn't figure out why. When they completely disassembled it, they found the fans were completely clogged with hair and my canned air wasn't even beginning to clear it out. I'm not one to take computers apart, so I never would have known.) As I mentioned, there can be several different reasons for a machine running hot - some are easier to diagnose, fix, rule out than others. But maybe if we can narrow it down, we can at least get somewhere near the root of the issue. It could be as simple as a software conflict, in which case we may be able to pinpoint it with a little perseverance. Or it may be something we can't quite figure out. But I'm game to give it a bit of a go if you are :)
Post #12
Okay, so I checked the message again, and it comes up before being able to choose safe mode etc, but it doesn't matter it turns out, it is to do with the battery. And as I have said before, I play computer games…. A LOT, and I keep the charger plugged in, and I run the laptop on high performance, so after 3 years, it makes sense that the battery is pretty much useless, as it has been continually cycle charging :) So that is not a problem. And I do not have any pets, we didn't even have carpet until 6 months before I stopped using the laptop, and I always ran the laptop on a flat tray, sort of like a pillow, with a tray on top, so it could always breathe. I am willing to keep this going till we find the problem and stuff, and I completely love the work you guys do to help other people, so please, don't feel pressured to keep this going, I can live with it overheating, even if it could possibly conflict with the performance :)
Post #13
Well, if it's been happening for a long time, then it isn't likely to be a hardware failure about to happen. And if it happens in safe mode too, then it's not likely a software conflict. Outside of spraying some canned air in the vents to clean it if you haven't done that recently (which would be done when the machine when it's off and cold) I really don't know what I could recommend.

It could have to do with running the machine in high performance mode (which I know you need for your gaming) but there probably isn't much you can do about that.

If you need more assistance with it in the future I'd recommend our Hardware Forum (since you are running in high performance mode) and possibly our Windows Forum for some additional assistance if it starts to get worse or starts to crash the machine while you are playing.

To finish up what we were working on:



The following will implement some cleanup procedures as well as reset System Restore points:
  • Click the Windows Key + R to open the Run box.
  • Now type Combofix /uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  • [external image: Posted Image]

If there are any remaining tools or logs on your desktop you can right-click and delete them.

========


Great job! Your logs appear to be malware free and you do not appear to be experiencing any malware related problems.
Please follow these simple steps in order to keep your computer malware free and secure:

Use and Update your AntiVirus Software
It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall
I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this. Simply using a Firewall in its default configuration can lower your risk greatly.

Use only one antivirus and one firewall on your machine
Having more than one anti-virus program and one firewall on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.

If you need more information on free anti-virus or firewall options please let me know and I will give you some recommendations.

Make your Internet Explorer more secure
This can be done by following these simple instructions:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
5. Change the Download signed ActiveX controls to Prompt
6. Change the Download unsigned ActiveX controls to Disable
7. Change the Initialize and script ActiveX controls not marked as safe to Disable
8. Change the Installation of desktop items to Prompt
9. Change the Launching programs and files in an IFRAME to Prompt
10. Change the Navigate sub-frames across different domains to Prompt
11. When all these settings have been made, click on the OK button.
12. If it prompts you as to whether or not you want to save the settings, press the Yes button.
13. Next press the Apply button and then the OK to exit the Internet Properties page.

Keep your Java, Adobe Reader and Adobe Flash Up to Date
Older versions of these programs can contain security vulnerabilities. It is very important to keep them updated.

Update and Run Malwarebytes Anti-Malware
Scan your computer with this program on a regular basis just as you would an antivirus software making sure you update definitions each time you scan.

To simplify making sure you have the latest version of many of your security programs and applications, you may want to consider:
Secunia's Personal Software Inspector (PSI). It is a free utility that scans your computer for installed applications and checks to see if they have the latest security patches and updates. If it finds any applications with possible security issues, links and/or instructions are provided for the necessariy updates.

Filehippo's Update Checker. It is free utilitiy that scan your computer for installed software, checks the versions and then sends this information to see if there are any newer releases. Available software updates are displayed and you can decide which ones to download and install. Among many other types of programs, they includes a number of the Anti-Spyware, Firewall/Security and Anti-Virus programs that have been recommended (though not all of them). Note: Definition files should be updated from within the programs themselves. The Update Checker look for newer versions of the software program, not definition files.

I would suggest you read:
Tony Klein's excellent article: How I got Infected in the First Place
PC Safety and Security–What Do I Need?
How to Prevent Malware

Good luck & Happy surfing!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI