Help removing win32.downloader.gen [Solved]

Hi, Spybot antivirus identifies that my computer is infected with win32.downloader.gen. I tried several software (Malwarebytes, Super Anti Spyware and McAfee), but could not remove this. I would be grateful if you could help.

Here are the scan results using OTL:


OTL.Txt:


OTL logfile created on: 6/21/2013 3:29:04 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Nimalika\Documents\Software
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.13 Gb Available Physical Memory | 56.58% Memory free
3.98 Gb Paging File | 2.88 Gb Available in Paging File | 72.31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 40.00 Gb Total Space | 6.70 Gb Free Space | 16.75% Space Free | Partition Type: NTFS
Drive D: | 32.88 Gb Total Space | 2.10 Gb Free Space | 6.39% Space Free | Partition Type: NTFS
Drive E: | 80.00 Gb Total Space | 48.43 Gb Free Space | 60.54% Space Free | Partition Type: NTFS
Drive F: | 80.00 Gb Total Space | 9.45 Gb Free Space | 11.81% Space Free | Partition Type: NTFS

Computer Name: PIPA | User Name: Nimalika | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Nimalika\My Documents\Software\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\mfevtps.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (McAfee, Inc.)
PRC - c:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
PRC - C:\Program Files\McAfee\Common Framework\naPrdMgr.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\Common Framework\UdaterUI.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\Common Framework\FrameworkService.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\Common Framework\McTray.exe (McAfee, Inc.)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe (McAfee, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files\Conexant\Adsl\DSLSTAT.EXE (Conexant Systems, Inc.)
PRC - C:\Program Files\Conexant\Adsl\DSLAGENT.EXE ()


========== Modules (No Company Name) ==========

MOD - C:\Users\Nimalika\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll ()
MOD - C:\Program Files\Conexant\Adsl\DSLAGENT.EXE ()
MOD - C:\Program Files\Conexant\Adsl\DBGMODE.DLL ()


========== Services (SafeList) ==========

SRV - (SBSDWSCService) – C:\Program Files\Spybot File not found
SRV - (mfevtp) – C:\Windows\System32\mfevtps.exe (McAfee, Inc.)
SRV - (McShield) – C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV - (MozillaMaintenance) – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (McAfee SiteAdvisor Service) – c:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
SRV - (AdobeARMservice) – C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) – C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe (McAfee, Inc.)
SRV - (RealNetworks Downloader Resolver Service) – C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
SRV - (McAfeeFramework) – C:\Program Files\McAfee\Common Framework\FrameworkService.exe (McAfee, Inc.)
SRV - (McTaskManager) – C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe (McAfee, Inc.)
SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (StorSvc) – C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) – C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (mfeavfk01) – File not found
DRV - (clwvd) – system32\DRIVERS\clwvd.sys File not found
DRV - (mfewfpk) – C:\Windows\System32\drivers\mfewfpk.sys (McAfee, Inc.)
DRV - (mferkdet) – C:\Windows\System32\drivers\mferkdet.sys (McAfee, Inc.)
DRV - (mfehidk) – C:\Windows\System32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfeavfk) – C:\Windows\System32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfebopk) – C:\Windows\System32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mfeapfk) – C:\Windows\System32\drivers\mfeapfk.sys (McAfee, Inc.)
DRV - (vmbus) – C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) – C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) – C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) – C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) – C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) – C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (yukonw7) – C:\Windows\System32\drivers\yk62x86.sys ()
DRV - (Serial) – C:\Windows\System32\drivers\serial.sys (Brother Industries Ltd.)
DRV - (netw5v32) – C:\Windows\System32\drivers\netw5v32.sys (Intel Corporation)
DRV - (HBtnKey) – C:\Windows\System32\drivers\CPQBttn.sys (Hewlett-Packard Development Company, L.P.)
DRV - (hwdatacard) – C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (wanusb) – C:\Windows\System32\drivers\gwausb.sys (Conexant Systems Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: {930f1200-f5f1-4870-bac6-e233ec8e7023} - C:\Program Files\Softonic_English\tbSoft.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1142338

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?rd=1&ucc=GB&dcc=GB&opt=0
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 30 F1 0B 91 DA 56 CE 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\..\URLSearchHook: {930f1200-f5f1-4870-bac6-e233ec8e7023} - C:\Program Files\Softonic_English\tbSoft.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE10SR
IE - HKCU\..\SearchScopes\{0BC17B08-15D2-4168-86C3-51B696811B4C}: "URL" = http://www.google.com/search?q={searchTerm…tf8&oe=utf8
IE - HKCU\..\SearchScopes\{59499C56-7484-47A9-AB98-BCBAB6349B3B}: "URL" = http://us.yhs4.search.yahoo.com/yhs/search…p={SearchTerms}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcerms}…amp;FORM=IE10SR
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1142338
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Secure Search"
FF - prefs.js..browser.search.order.1: "Secure Search"
FF - prefs.js..browser.search.selectedEngine: "Secure Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: %7B841468a1-d7f4-4bd3-84e6-bb0f13a06c64%7D:1.300.436
FF - prefs.js..extensions.enabledAddons: %7B4ED1F68A-5463-4931-9384-8FFF5ED91D92%7D:3.6.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.3
FF - prefs.js..keyword.URL: "http://us.yhs4.search.yahoo.com/yhs/search?hspart=mcafee&hsimp=yhs-01&type=mcafee&p="


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files\McAfee\SiteAdvisor [2013/06/12 03:35:09 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/01/01 22:13:05 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files\Common Files\McAfee\SystemCore [2013/06/21 10:27:46 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/01/01 22:13:05 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/06/20 12:14:20 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/05/27 17:30:58 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011/08/28 09:22:12 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/06/20 12:14:20 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/05/27 17:30:58 | 000,000,000 | —D | M]

[2010/11/10 21:44:57 | 000,000,000 | —D | M] (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Extensions
[2010/11/10 21:44:57 | 000,000,000 | —D | M] (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2013/03/28 00:16:06 | 000,000,000 | —D | M] (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\extensions
[2013/03/28 00:16:06 | 000,555,752 | —- | M] () (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\extensions\{841468a1-d7f4-4bd3-84e6-bb0f13a06c64}.xpi
[2011/02/13 01:23:53 | 000,002,122 | —- | M] () – C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\searchplugins\cambridge-advanced-learners-dictionary.xml
[2013/05/27 17:31:24 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\browser\extensions
[2013/05/27 17:31:24 | 000,000,000 | —D | M] (Default) – C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/06/12 03:35:09 | 000,000,000 | —D | M] (McAfee SiteAdvisor) – C:\PROGRAM FILES\MCAFEE\SITEADVISOR
[2013/01/01 22:11:09 | 000,124,056 | —- | M] (RealPlayer) – C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2013/04/24 09:29:03 | 000,002,118 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\McSiteAdvisor.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\27.0.1453.110\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\27.0.1453.110\pdf.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Java™ Platform SE 7 U5 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - Extension: YouTube = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: SiteAdvisor = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_0\
CHR - Extension: RealDownloader = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0\
CHR - Extension: Gmail = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2010/10/11 20:30:34 | 000,415,969 | R— | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14356 more lines…
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20130620121611.dll (McAfee, Inc.)
O2 - BHO: (Softonic English Toolbar) - {930f1200-f5f1-4870-bac6-e233ec8e7023} - C:\Program Files\Softonic_English\tbSoft.dll (Conduit Ltd.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (QUICKfind BHO Object) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Program Files\IDM\QUICKfind\PlugIns\IEHelp.dll (IDM)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Softonic English Toolbar) - {930f1200-f5f1-4870-bac6-e233ec8e7023} - C:\Program Files\Softonic_English\tbSoft.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Softonic English Toolbar) - {930F1200-F5F1-4870-BAC6-E233EC8E7023} - C:\Program Files\Softonic_English\tbSoft.dll (Conduit Ltd.)
O4 - HKLM..\Run: [DSLAGENTEXE] C:\Program Files\Conexant\Adsl\DSLAGENT.EXE ()
O4 - HKLM..\Run: [DSLSTATEXE] C:\Program Files\Conexant\Adsl\dslstat.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [McAfeeUpdaterUI] C:\Program Files\McAfee\Common Framework\udaterui.exe (McAfee, Inc.)
O4 - HKLM..\Run: [ShStatEXE] C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE (McAfee, Inc.)
O4 - HKLM..\Run: [TkBellExe] c:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKLM..\RunOnce: [1] C:\Users\Nimalika\Downloads\mbam-chameleon-1.62.1.1000\mbam-chameleon.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.17.2)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.21.27.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A30CB7EA-3C36-4911-8612-276D1005DD9B}: DhcpNameServer = 172.21.27.62
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.dll) - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{1a8b7465-c659-11df-bf5f-18a9058a3994}\Shell - "" = AutoRun
O33 - MountPoints2\{1a8b7465-c659-11df-bf5f-18a9058a3994}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{1a8b746c-c659-11df-bf5f-18a9058a3994}\Shell - "" = AutoRun
O33 - MountPoints2\{1a8b746c-c659-11df-bf5f-18a9058a3994}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{63ea3a70-c9f1-11df-9b52-18a9058a3994}\Shell - "" = AutoRun
O33 - MountPoints2\{63ea3a70-c9f1-11df-9b52-18a9058a3994}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{63ea3a72-c9f1-11df-9b52-18a9058a3994}\Shell - "" = AutoRun
O33 - MountPoints2\{63ea3a72-c9f1-11df-9b52-18a9058a3994}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/06/21 15:23:53 | 000,000,000 | —D | C] – C:\Users\Nimalika\Documents\Software
[2013/06/20 22:24:26 | 000,000,000 | —D | C] – C:\ProgramData\HitmanPro
[2013/06/20 20:46:38 | 000,000,000 | —D | C] – C:\TDSSKiller_Quarantine
[2013/06/20 12:33:13 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Roaming\McAfee
[2013/06/20 12:16:13 | 000,075,656 | —- | C] (McAfee, Inc.) – C:\Windows\System32\MfeOtlkAddin.dll
[2013/06/20 12:16:11 | 000,009,648 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeclnk.sys
[2013/06/20 12:16:10 | 000,087,816 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mferkdet.sys
[2013/06/20 12:16:09 | 000,121,544 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeapfk.sys
[2013/06/20 12:16:09 | 000,059,616 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfebopk.sys
[2013/06/20 12:16:08 | 000,215,024 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeavfk.sys
[2013/06/20 12:15:52 | 000,477,584 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfehidk.sys
[2013/06/20 12:14:48 | 000,180,720 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfewfpk.sys
[2013/06/20 12:14:47 | 000,159,640 | —- | C] (McAfee, Inc.) – C:\Windows\System32\mfevtps.exe
[2013/06/20 12:14:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/06/20 12:03:55 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Local\Programs
[2013/06/16 22:15:10 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Local\Opera
[2013/06/16 22:15:09 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Roaming\Opera
[2013/06/16 22:14:37 | 000,000,000 | —D | C] – C:\Program Files\Opera
[2013/06/12 21:37:35 | 000,000,000 | —D | C] – C:\Users\Nimalika\Desktop\bike
[2013/06/12 03:12:17 | 002,706,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2013/06/12 03:12:15 | 000,391,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2013/06/12 03:03:31 | 002,877,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2013/06/12 03:03:30 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2013/06/12 03:03:29 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2013/06/12 03:03:26 | 000,493,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2013/06/12 03:03:25 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2013/06/12 03:03:25 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2013/06/12 03:03:25 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2013/06/12 03:03:24 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2013/06/12 03:02:49 | 001,505,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d11.dll
[2013/06/12 03:02:14 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cryptdlg.dll
[2013/06/12 03:01:11 | 000,903,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certutil.exe
[2013/06/12 03:01:08 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certenc.dll
[2013/06/12 02:59:25 | 003,968,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2013/06/12 02:59:25 | 003,913,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2013/05/30 11:14:54 | 000,000,000 | —D | C] – C:\Users\Nimalika\Documents\Docear4Word
[2013/05/30 11:14:40 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Local\assembly
[2013/05/29 13:21:23 | 000,000,000 | —D | C] – C:\Users\Nimalika\Documents\Add-in Express
[2013/05/29 13:21:16 | 000,000,000 | —D | C] – C:\Program Files\Docear4Word
[2013/05/29 13:21:13 | 000,000,000 | —D | C] – C:\ProgramData\Docear4Word
[2013/05/27 17:30:43 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox

========== Files - Modified Within 30 Days ==========

[2013/06/21 14:41:00 | 000,000,920 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000UA.job
[2013/06/21 10:34:42 | 000,013,472 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/21 10:34:42 | 000,013,472 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/21 10:26:55 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/06/21 10:26:49 | 1603,772,416 | -HS- | M] () – C:\hiberfil.sys
[2013/06/20 20:41:01 | 000,000,868 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000Core.job
[2013/06/20 12:13:56 | 000,180,720 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfewfpk.sys
[2013/06/20 12:13:55 | 000,159,640 | —- | M] (McAfee, Inc.) – C:\Windows\System32\mfevtps.exe
[2013/06/20 12:13:54 | 000,087,816 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mferkdet.sys
[2013/06/20 12:13:54 | 000,075,656 | —- | M] (McAfee, Inc.) – C:\Windows\System32\MfeOtlkAddin.dll
[2013/06/20 12:13:54 | 000,023,112 | —- | M] (McAfee, Inc.) – C:\Windows\System32\MFEOtlk.dll
[2013/06/20 12:13:53 | 000,477,584 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfehidk.sys
[2013/06/20 12:13:52 | 000,215,024 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeavfk.sys
[2013/06/20 12:13:52 | 000,059,616 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfebopk.sys
[2013/06/20 12:13:52 | 000,009,648 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeclnk.sys
[2013/06/20 12:13:51 | 000,121,544 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeapfk.sys
[2013/06/20 12:04:41 | 000,001,071 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/20 01:46:36 | 000,002,345 | —- | M] () – C:\Users\Nimalika\Desktop\Google Chrome.lnk
[2013/06/19 21:13:32 | 000,000,600 | —- | M] () – C:\Users\Nimalika\AppData\Roaming\winscp.rnd
[2013/06/19 11:42:50 | 000,027,262 | —- | M] () – C:\Users\Nimalika\Desktop\Poson Program 2013 23rd June v1.pdf
[2013/06/18 17:36:38 | 000,212,199 | —- | M] () – C:\Users\Nimalika\Desktop\Tiffany Thorne YOGA MAY 2013.pdf
[2013/06/17 23:30:06 | 000,000,600 | —- | M] () – C:\Users\Nimalika\AppData\Local\PUTTY.RND
[2013/06/17 23:30:03 | 000,002,036 | -H– | M] () – C:\Users\Nimalika\Documents\Default.rdp
[2013/06/16 22:14:57 | 000,001,779 | —- | M] () – C:\Users\Public\Desktop\Opera.lnk
[2013/06/08 12:40:02 | 000,391,168 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2013/06/08 12:13:19 | 002,706,432 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2013/06/08 10:48:15 | 000,071,598 | —- | M] () – C:\Users\Nimalika\Desktop\calendar2013.png
[2013/06/05 13:37:09 | 000,624,412 | —- | M] () – C:\Windows\System32\perfh009.dat
[2013/06/05 13:37:09 | 000,106,756 | —- | M] () – C:\Windows\System32\perfc009.dat
[2013/05/31 17:31:03 | 000,010,562 | —- | M] () – C:\Users\Nimalika\AppData\Local\recently-used.xbel
[2013/05/31 12:17:00 | 000,011,367 | —- | M] () – C:\Users\Nimalika\gsview32.ini
[2013/05/29 14:59:18 | 000,001,994 | —- | M] () – C:\Users\Nimalika\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/05/27 16:42:21 | 000,202,797 | —- | M] () – C:\Users\Nimalika\Desktop\college map.pdf
[2013/05/23 20:50:09 | 000,415,014 | —- | M] () – C:\Users\Nimalika\Desktop\photo.JPG

========== Files Created - No Company Name ==========

[2013/06/20 12:04:41 | 000,001,071 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/18 17:36:38 | 000,212,199 | —- | C] () – C:\Users\Nimalika\Desktop\Tiffany Thorne YOGA MAY 2013.pdf
[2013/06/16 22:14:57 | 000,001,791 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2013/06/16 22:14:57 | 000,001,779 | —- | C] () – C:\Users\Public\Desktop\Opera.lnk
[2013/06/08 10:48:15 | 000,071,598 | —- | C] () – C:\Users\Nimalika\Desktop\calendar2013.png
[2013/06/01 16:34:22 | 000,027,262 | —- | C] () – C:\Users\Nimalika\Desktop\Poson Program 2013 23rd June v1.pdf
[2013/05/31 17:31:03 | 000,010,562 | —- | C] () – C:\Users\Nimalika\AppData\Local\recently-used.xbel
[2013/05/27 16:42:21 | 000,202,797 | —- | C] () – C:\Users\Nimalika\Desktop\college map.pdf
[2013/05/23 20:48:20 | 000,415,014 | —- | C] () – C:\Users\Nimalika\Desktop\photo.JPG
[2012/05/19 19:36:16 | 000,011,367 | —- | C] () – C:\Users\Nimalika\gsview32.ini
[2011/09/01 22:14:09 | 000,003,584 | —- | C] () – C:\Users\Nimalika\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/22 21:38:16 | 000,096,256 | —- | C] () – C:\Windows\olprosys.dll
[2011/08/06 13:20:58 | 000,000,028 | —- | C] () – C:\Windows\pdf995.ini
[2010/11/25 21:16:15 | 000,000,600 | —- | C] () – C:\Users\Nimalika\AppData\Roaming\winscp.rnd
[2010/11/19 01:15:08 | 000,000,035 | —- | C] () – C:\Users\Nimalika\.gtk-bookmarks
[2010/11/10 22:24:13 | 000,000,600 | —- | C] () – C:\Users\Nimalika\AppData\Local\PUTTY.RND
[2010/09/27 05:37:38 | 000,007,625 | —- | C] () – C:\Users\Nimalika\AppData\Local\Resmon.ResmonCfg

========== ZeroAccess Check ==========

[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2013/02/27 05:55:05 | 012,872,704 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 13:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2009/07/14 02:16:17 | 000,342,528 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2011/04/17 15:04:01 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\bibus
[2013/05/18 12:19:59 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\Docear
[2013/06/13 09:50:48 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\Dropbox
[2013/01/24 15:12:11 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\gtk-2.0
[2013/03/14 21:31:02 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\inkscape
[2011/03/12 16:18:31 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\JabRef 2.6
[2011/11/08 00:24:04 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\Mobipocket
[2010/09/29 20:44:35 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\oald8
[2013/06/16 22:15:09 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\Opera
[2010/12/02 23:05:56 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\pdf995
[2013/03/18 00:15:58 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\SnapTeam
[2010/11/10 21:44:56 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\Thunderbird
[2011/02/13 02:51:41 | 000,000,000 | —D | M] – C:\Users\Nimalika\AppData\Roaming\WaveMetrics

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >
[2009/07/14 03:07:10 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\PolicyDefinitions\en-US\Explorer.adml
[2009/07/14 03:07:10 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\x86_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_22d6d5b5cba907ce\Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/10 22:34:46 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\PolicyDefinitions\Explorer.admx
[2009/06/10 22:34:46 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\x86_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_1590ffd752297581\Explorer.admx

< MD5 for: EXPLORER.EXE >
[2011/02/26 06:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 02:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 06:51:13 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011/02/26 06:33:07 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 13:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009/08/03 06:49:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 06:35:50 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 07:00:51 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2009/07/14 03:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\en-US\explorer.exe.mui
[2009/07/14 03:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\x86_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_05c8dd40d4f56065\explorer.exe.mui

< MD5 for: EXPLORER.EXE-7A3328DA.PF >
[2013/06/21 14:50:31 | 000,121,708 | —- | M] () MD5=E29008C340270664FD2901DC91AD3BBF – C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf

< MD5 for: EXPLORER.ZIP >
[2006/03/07 06:48:08 | 000,020,394 | —- | M] () MD5=B469409C2B2A33C542190B720E11BD79 – C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip

< MD5 for: IEXPLORE.EXE >
[2012/10/27 06:02:44 | 000,672,832 | —- | M] (Microsoft Corporation) MD5=06A8334D76DCF0DFFA738A512BDCD5F7 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17153_none_b3654e508604ee94\iexplore.exe
[2013/05/17 03:32:12 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=07DFD28E57879554D054464EE4A5662D – C:\Program Files\Internet Explorer\iexplore.exe
[2013/05/17 03:32:12 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=07DFD28E57879554D054464EE4A5662D – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16614_none_ba6545dc65e543de\iexplore.exe
[2012/02/28 06:42:27 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=09F6A10AB424E2DE445153065FA076BF – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16968_none_b35fa5ce860858cf\iexplore.exe
[2010/09/08 05:36:39 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=14803EA3E5DD7CB37CB446C74CFDA38F – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20795_none_b3c5cc459f4108f2\iexplore.exe
[2013/06/20 20:43:17 | 002,237,968 | —- | M] (Kaspersky Lab ZAO) MD5=178A34E5554DCE485E1262DDF027960C – C:\Users\Nimalika\Downloads\iexplore.exe
[2013/02/28 17:18:24 | 000,672,912 | —- | M] (Microsoft Corporation) MD5=19025A34D3EAD0FA9634B504194D214D – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17256_none_b3685114860237c0\iexplore.exe
[2012/04/20 06:08:37 | 000,672,856 | —- | M] (Microsoft Corporation) MD5=27019747D97AB5CEFB97677DBB5CF577 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17006_none_b39e5ce485d9b1bd\iexplore.exe
[2013/04/05 03:06:47 | 000,770,560 | —- | M] (Microsoft Corporation) MD5=2859EBC065D2E1CCC94161CE28BAC085 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16521_none_ba715a6a65dbf461\iexplore.exe
[2009/07/14 02:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_b346f9b4861b55c2\iexplore.exe
[2013/04/05 06:55:38 | 000,770,624 | —- | M] (Microsoft Corporation) MD5=2DC6BD1047553611DAEF97C751131A5D – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20681_none_a39ee59e7f860811\iexplore.exe
[2011/12/16 09:03:08 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=38668C6CADABC9487C683FADD3D165D0 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16930_none_b378134285f73a44\iexplore.exe
[2013/05/17 02:57:28 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=3902E280F6117A468D5573343A7AA1F6 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20719_none_a38c5d6c7f953fa9\iexplore.exe
[2011/08/20 05:35:15 | 000,673,024 | —- | M] (Microsoft Corporation) MD5=41FE5E37EFE0B587A688BA0E4FA41288 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16869_none_b360a432860774ff\iexplore.exe
[2012/12/20 14:27:39 | 000,672,832 | —- | M] (Microsoft Corporation) MD5=45C1FCF818565D44531007526CDEF7EF – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21406_none_b427ff619ef748fc\iexplore.exe
[2012/04/20 05:53:37 | 000,672,856 | —- | M] (Microsoft Corporation) MD5=4866404D6657D6E50619CCAF56B17D27 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21198_none_b3c8aaf79f3e7fae\iexplore.exe
[2012/08/24 18:15:32 | 000,672,872 | —- | M] (Microsoft Corporation) MD5=4ADB84297505A1627DEEA18529BF4B16 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17115_none_b3928e9485e2b17e\iexplore.exe
[2012/06/27 07:05:29 | 000,672,856 | —- | M] (Microsoft Corporation) MD5=555D62228092C7F87B9930F85F833297 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17051_none_b3634bd68606bebf\iexplore.exe
[2010/11/04 06:54:54 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=58CF468D3FF4CF830339FE5E45356355 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16700_none_b3987f3a85deec23\iexplore.exe
[2010/09/08 05:31:24 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=61EDBCE47ADF3E52AB0B9F49EE4AEBB8 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16671_none_b34dce2a8616cbea\iexplore.exe
[2011/04/22 20:29:16 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=64EFAF916C4009F1B84153D0BB491FB0 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16800_none_b398812085dee94a\iexplore.exe
[2010/11/04 06:54:59 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=6B2258FF6D2332073FE9E90122FA4168 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20831_none_b402ac8b9f13f917\iexplore.exe
[2011/06/21 06:25:30 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=6BB506124872ACDFAC5BD912CA1334CE – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20992_none_b3c2cf339f43b73b\iexplore.exe
[2012/02/28 06:44:39 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=8AFD61FB2D96C8229B7D8604F62FA692 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21158_none_b3f3eaa79f1e0fea\iexplore.exe
[2011/11/05 05:38:00 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=8ED7C19AEFA3673AADB0D6864B03FBCE – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16912_none_b38fb3ae85e53510\iexplore.exe
[2010/12/18 06:32:25 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=9321CF0D023528C71E3645F8433C86C8 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20861_none_b3e23cc79f2c4cea\iexplore.exe
[2012/06/27 07:11:42 | 000,672,832 | —- | M] (Microsoft Corporation) MD5=9B80D4B1CAD7C4160D9B2D65D468E336 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21245_none_b3fbbb9b9f18a51b\iexplore.exe
[2013/02/25 00:52:40 | 000,770,624 | —- | M] (Microsoft Corporation) MD5=A11C5E3E288256C540B7ED8BE3A04B01 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20644_none_a39aa01e7f89ef98\iexplore.exe
[2011/06/21 06:37:00 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=A3AB0A260049BE22AB52E302D9220A92 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16839_none_b38113f685ef212c\iexplore.exe
[2011/11/05 05:39:45 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=A8A14CD0CB499B80412F75D53996AE29 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21085_none_b3d0781f9f391a91\iexplore.exe
[2010/12/18 06:33:54 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AA08B68EF4E35EFA170CF85A44B23B70 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16722_none_b384dff685ed56b3\iexplore.exe
[2013/04/05 07:02:26 | 000,770,608 | —- | M] (Microsoft Corporation) MD5=AAD90795E84E710543C6C7C2F7048E30 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16576_none_ba75e9f465d7f339\iexplore.exe
[2011/02/24 06:45:11 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AB2BB40A5FE49AD236791AC22BD08869 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20908_none_b42a203b9ef553cc\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2012/08/15 08:48:46 | 000,218,184 | —- | M] () MD5=B6381489F9C8612AFFD4A2765ABD341C – C:\Users\Nimalika\Downloads\mbam-chameleon-1.62.1.1000\iexplore.exe
[2011/12/16 10:19:51 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=C53E41F92B19EC97D987F968403BEC49 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21108_none_b429fa439ef58435\iexplore.exe
[2010/11/20 13:22:51 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_b5780d7c8309d95c\iexplore.exe
[2011/02/24 06:32:52 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C6697A46554E36541E81182B258A19D6 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16766_none_b35da16e860a2bd3\iexplore.exe
[2012/08/24 18:10:38 | 000,672,872 | —- | M] (Microsoft Corporation) MD5=C6E8F6DB0FD7B28924D1CBC8AE03ECEE – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21313_none_b41a2cb19f021bc1\iexplore.exe
[2012/10/27 05:57:50 | 000,672,832 | —- | M] (Microsoft Corporation) MD5=CAB945F6B0700D84DE40ED1FA6DB15F2 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21355_none_b3f0ed959f20be33\iexplore.exe
[2012/12/20 14:01:03 | 000,672,832 | —- | M] (Microsoft Corporation) MD5=D1F65F76FA03619706C43CBEF9C1EEC3 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17197_none_b33e0fc88621c3b4\iexplore.exe
[2013/02/21 12:28:11 | 000,770,608 | —- | M] (Microsoft Corporation) MD5=E4F6125ED5185F8FA37CC4F449B85526 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16540_none_ba7371c665da0d6e\iexplore.exe
[2013/02/28 18:21:37 | 000,672,912 | —- | M] (Microsoft Corporation) MD5=E9194413FBF8CF085DD548F489BA44F2 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21471_none_b3d74e7b9f348de0\iexplore.exe
[2011/04/22 20:11:29 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=F94877A94996B3C12BB31AD722840457 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20949_none_b3ffe0d59f14dce7\iexplore.exe
[2011/08/20 05:32:44 | 000,673,024 | —- | M] (Microsoft Corporation) MD5=FA623BE79902A7B49FF4F21117B63C83 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21033_none_b40487279f125c2e\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2013/04/05 03:06:49 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2013/04/05 03:06:49 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\x86_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_b41defe19d893548\iexplore.exe.mui
[2009/07/14 03:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\x86_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_acf38f2bbdc896a9\iexplore.exe.mui
[2009/07/14 03:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\x86_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_af24a2f3bab71a43\iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-A792C665.PF >
[2013/06/20 20:44:46 | 000,031,388 | —- | M] () MD5=B783E8B2F635DD4A5BA2096E913D09A0 – C:\Windows\Prefetch\IEXPLORE.EXE-A792C665.pf

< MD5 for: SERVICES >
[2009/06/10 22:39:37 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\System32\drivers\etc\services
[2009/06/10 22:39:37 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_045b589158ae90da\services

< MD5 for: SERVICES.CFG >
[2013/05/10 08:57:30 | 000,558,879 | —- | M] () MD5=3679F8D3253DC110D1D8F2AE115EE00C – C:\Program Files\Adobe\Reader 10.0\Reader\Services\Services.cfg
[2011/06/06 12:55:30 | 000,584,045 | R— | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\services.cfg

< MD5 for: SERVICES.DAT >
[2011/09/24 09:05:00 | 000,010,240 | —- | M] () MD5=DEB18C6B236CE05285A2F3B7C0B847EA – C:\Users\Nimalika\AppData\Roaming\Adobe\Acrobat\10.0\Security\services.dat

< MD5 for: SERVICES.EXE >
[2009/07/14 02:14:36 | 000,259,072 | —- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 – C:\Windows\System32\services.exe
[2009/07/14 02:14:36 | 000,259,072 | —- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2009/07/14 03:03:06 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=0DA5F221169DEB5AC3A22465CD6F0281 – C:\Windows\System32\en-US\services.exe.mui
[2009/07/14 03:03:06 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=0DA5F221169DEB5AC3A22465CD6F0281 – C:\Windows\winsxs\x86_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_69d39d3a8748c332\services.exe.mui

< MD5 for: SERVICES.LNK >
[2009/07/14 05:41:45 | 000,001,288 | —- | M] () MD5=021B1B178776500E54560EDCFFE0EE21 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 05:41:45 | 000,001,288 | —- | M] () MD5=021B1B178776500E54560EDCFFE0EE21 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOCHIADS.COM.SOL >
[2012/11/09 14:57:51 | 000,000,351 | —- | M] () MD5=3A2DC4FB9A0582BD0BDB80AE51EFEF60 – C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A7XCQZ9C\mochiads.com\services.mochiads.com.sol

< MD5 for: SERVICES.MOF >
[2009/06/10 22:26:14 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\System32\wbem\services.mof
[2009/06/10 22:26:14 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.mof

< MD5 for: SERVICES.MSC >
[2009/07/14 03:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\System32\en-US\services.msc
[2009/06/10 22:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\System32\services.msc
[2009/07/14 03:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 22:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PTXML >
[2009/07/13 21:20:01 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\System32\wdi\perftrack\Services.ptxml
[2009/07/13 21:20:01 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\Services.ptxml

< MD5 for: SERVICES.SBS >
[2011/03/01 09:58:44 | 000,034,818 | —- | M] () MD5=62AFD4B2025CE6D4706B36F4C4808F9B – C:\Program Files\Spybot - Search & Destroy\Includes\Services.sbs

< MD5 for: WINLOGON.ADML >
[2009/07/14 03:05:00 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\PolicyDefinitions\en-US\WinLogon.adml
[2009/07/14 03:05:00 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\x86_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_94da67ab3e358f3a\WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/10 22:43:18 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\PolicyDefinitions\WinLogon.admx
[2009/06/10 22:43:18 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\x86_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_7ae3b2e5da95d117\WinLogon.admx

< MD5 for: WINLOGON.EXE >
[2009/10/28 07:17:59 | 000,285,696 | —- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 06:52:08 | 000,285,696 | —- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010/11/20 13:17:54 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\System32\winlogon.exe
[2010/11/20 13:17:54 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 02:14:45 | 000,285,696 | —- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2012/08/15 08:48:46 | 000,218,184 | —- | M] () MD5=B6381489F9C8612AFFD4A2765ABD341C – C:\Users\Nimalika\Downloads\mbam-chameleon-1.62.1.1000\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2010/11/20 13:12:53 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=65C2C2EE8F334EE07F66876551DE1827 – C:\Windows\System32\en-US\winlogon.exe.mui
[2010/11/20 13:12:53 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=65C2C2EE8F334EE07F66876551DE1827 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_ccfffb7662588b45\winlogon.exe.mui
[2009/07/14 03:05:28 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=DB61D28A59DEE68F77811B291D83AD1B – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cacee7ae656a07ab\winlogon.exe.mui

< MD5 for: WINLOGON.MFL >
[2009/07/14 03:09:40 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\System32\wbem\en-US\winlogon.mfl
[2009/07/14 03:09:40 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\x86_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2891397980a26140\winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/13 21:37:34 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\System32\wbem\winlogon.mof
[2009/07/13 21:37:34 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\x86_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_800f1ff3d73b72d9\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2009/06/10 22:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2010/11/20 13:40:07 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2010/09/22 07:23:05 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2009/06/10 22:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2013/06/21 10:26:49 | 1603,772,416 | -HS- | M] () – C:\hiberfil.sys
[2013/06/21 10:26:52 | 2138,365,952 | -HS- | M] () – C:\pagefile.sys
[2013/06/20 20:46:51 | 000,134,064 | —- | M] () – C:\TDSSKiller.2.8.16.0_20.06.2013_20.44.36_log.txt
[2013/06/20 20:51:01 | 000,389,096 | —- | M] () – C:\TDSSKiller.2.8.16.0_20.06.2013_20.48.36_log.txt

< %systemroot%\Fonts\*.com >
[2009/07/14 05:52:25 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 05:52:25 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 05:52:25 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 05:52:25 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 22:31:19 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/07/14 02:15:35 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/27 03:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll
[2010/11/20 13:21:36 | 000,030,208 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\winprint.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 05:41:57 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C has no label.
Volume Serial Number is 5A5E-E540
Directory of C:\
07/14/2009 05:53 AM Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\ProgramData
07/14/2009 05:53 AM Application Data [C:\ProgramData]
07/14/2009 05:53 AM Desktop [C:\Users\Public\Desktop]
07/14/2009 05:53 AM Documents [C:\Users\Public\Documents]
07/14/2009 05:53 AM Favorites [C:\Users\Public\Favorites]
07/14/2009 05:53 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009 05:53 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users
07/14/2009 05:53 AM All Users [C:\ProgramData]
07/14/2009 05:53 AM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\All Users
07/14/2009 05:53 AM Application Data [C:\ProgramData]
07/14/2009 05:53 AM Desktop [C:\Users\Public\Desktop]
07/14/2009 05:53 AM Documents [C:\Users\Public\Documents]
07/14/2009 05:53 AM Favorites [C:\Users\Public\Favorites]
07/14/2009 05:53 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009 05:53 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default
07/14/2009 05:53 AM Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009 05:53 AM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009 05:53 AM Local Settings [C:\Users\Default\AppData\Local]
07/14/2009 05:53 AM My Documents [C:\Users\Default\Documents]
07/14/2009 05:53 AM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009 05:53 AM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009 05:53 AM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009 05:53 AM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009 05:53 AM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009 05:53 AM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
07/14/2009 05:53 AM Application Data [C:\Users\Default\AppData\Local]
07/14/2009 05:53 AM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009 05:53 AM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
07/14/2009 05:53 AM My Music [C:\Users\Default\Music]
07/14/2009 05:53 AM My Pictures [C:\Users\Default\Pictures]
07/14/2009 05:53 AM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Nimalika
09/22/2010 06:31 AM Application Data [C:\Users\Nimalika\AppData\Roaming]
09/22/2010 06:31 AM Cookies [C:\Users\Nimalika\AppData\Roaming\Microsoft\Windows\Cookies]
09/22/2010 06:31 AM Local Settings [C:\Users\Nimalika\AppData\Local]
09/22/2010 06:31 AM My Documents [C:\Users\Nimalika\Documents]
09/22/2010 06:31 AM NetHood [C:\Users\Nimalika\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/22/2010 06:31 AM PrintHood [C:\Users\Nimalika\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/22/2010 06:31 AM Recent [C:\Users\Nimalika\AppData\Roaming\Microsoft\Windows\Recent]
09/22/2010 06:31 AM SendTo [C:\Users\Nimalika\AppData\Roaming\Microsoft\Windows\SendTo]
09/22/2010 06:31 AM Start Menu [C:\Users\Nimalika\AppData\Roaming\Microsoft\Windows\Start Menu]
09/22/2010 06:31 AM Templates [C:\Users\Nimalika\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Nimalika\AppData\Local
09/22/2010 06:31 AM Application Data [C:\Users\Nimalika\AppData\Local]
09/22/2010 06:31 AM History [C:\Users\Nimalika\AppData\Local\Microsoft\Windows\History]
09/22/2010 06:31 AM Temporary Internet Files [C:\Users\Nimalika\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Nimalika\Documents
09/22/2010 06:31 AM My Music [C:\Users\Nimalika\Music]
09/22/2010 06:31 AM My Pictures [C:\Users\Nimalika\Pictures]
09/22/2010 06:31 AM My Videos [C:\Users\Nimalika\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
07/14/2009 05:53 AM My Music [C:\Users\Public\Music]
07/14/2009 05:53 AM My Pictures [C:\Users\Public\Pictures]
07/14/2009 05:53 AM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
50 Dir(s) 6,859,378,688 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/09/22 16:14:00 | 000,000,221 | -HS- | M] () – C:\Users\Nimalika\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2010/11/21 12:42:02 | 000,454,656 | —- | M] (Simon Tatham) – C:\Users\Nimalika\Desktop\putty.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2013-06-19 02:45:34

< End of report >


Extras.Txt:

OTL Extras logfile created on: 6/21/2013 3:29:04 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Nimalika\Documents\Software
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.13 Gb Available Physical Memory | 56.58% Memory free
3.98 Gb Paging File | 2.88 Gb Available in Paging File | 72.31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 40.00 Gb Total Space | 6.70 Gb Free Space | 16.75% Space Free | Partition Type: NTFS
Drive D: | 32.88 Gb Total Space | 2.10 Gb Free Space | 6.39% Space Free | Partition Type: NTFS
Drive E: | 80.00 Gb Total Space | 48.43 Gb Free Space | 60.54% Space Free | Partition Type: NTFS
Drive F: | 80.00 Gb Total Space | 9.45 Gb Free Space | 11.81% Space Free | Partition Type: NTFS

Computer Name: PIPA | User Name: Nimalika | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] – C:\Program Files\Opera\Opera.exe (Opera Software)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] – "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" (VideoLAN)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" (VideoLAN)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06312AF9-C5F0-4246-8185-00C1527D8747}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{2B1BC70D-4DBF-49D9-8FFF-C64EE99AD484}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{34C50E4C-9875-431B-8D66-D0C821BB1927}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{35076DCA-1AF7-4440-A8D0-B06C2F571BC4}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{403A6880-B3CA-4E15-9841-C74A2D511E48}" = lport=445 | protocol=6 | dir=in | app=system |
"{426C7E9B-F71D-485E-97E5-09AE159350AE}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{59650935-8B6B-4D1B-8A5D-860AFC841BE0}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{6641934F-C4E7-46CA-BE58-2F92BC47C626}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{66666EAF-D732-4D33-A925-32BFC40FDBB1}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{66F20F1E-F856-4AA4-A8F1-3318981259B4}" = rport=137 | protocol=17 | dir=out | app=system |
"{6C886416-2FE0-4F3E-A924-17A954709E4B}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{787B7B16-7DCD-410D-9EA6-984AF20623CE}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8BBD9973-96E3-476C-B3EF-8B89FB0349BB}" = lport=137 | protocol=17 | dir=in | app=system |
"{984B11A7-6927-4323-84A8-9FBB98D10500}" = lport=138 | protocol=17 | dir=in | app=system |
"{A41D9D42-00DC-4076-A72E-F4749689C297}" = rport=138 | protocol=17 | dir=out | app=system |
"{B361BE36-77A2-4BDF-9794-80EEB7A220CB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B3D46269-24C9-44F4-B4CA-28A7A0A0ED16}" = lport=139 | protocol=6 | dir=in | app=system |
"{B4516527-5D0A-44F9-BB80-26CBB64CEB01}" = rport=139 | protocol=6 | dir=out | app=system |
"{CC1E7330-F525-4C52-A9D6-B6F765C6A8A1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E8E80BA5-72C3-4069-BCFE-B8E8E23B014A}" = rport=445 | protocol=6 | dir=out | app=system |
"{FCCAE32B-EF9F-4B55-859B-856F9AD41980}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06A4DC2C-8BEB-4F61-BB7B-6BBB74D1BFEF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{08C3662B-136C-4D6F-9258-99365124DB62}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{19C5D5BB-3202-463D-B0DA-DE554285409B}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{1CF62D4D-1312-41E6-9073-82EDCAC31F93}" = protocol=6 | dir=in | app=c:\users\nimalika\appdata\roaming\dropbox\bin\dropbox.exe |
"{21FB74E9-36F4-40F0-8C96-DD59B3E3F9A8}" = protocol=17 | dir=in | app=c:\program files\mcafee\common framework\frameworkservice.exe |
"{4404ED87-B208-49AC-B9F9-6AA3115A8FD6}" = protocol=6 | dir=in | app=c:\program files\mcafee\common framework\frameworkservice.exe |
"{59A6B744-525C-4CBF-B720-FB0823BD805F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{67E8636A-9638-4294-B3E1-C25FB286D737}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6D4E22FA-BE44-4B30-AFFF-9A16ADFDC4C3}" = protocol=17 | dir=in | app=c:\program files\mcafee\common framework\frameworkservice.exe |
"{7F9D610F-E902-4291-8FCF-F289BC6808F9}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{8191F599-45CD-4A20-AC22-6110AA7658DF}" = protocol=17 | dir=in | app=c:\users\nimalika\appdata\roaming\dropbox\bin\dropbox.exe |
"{92E2E2DA-328D-46DE-95D9-23C49AAF7CA5}" = protocol=6 | dir=in | app=c:\program files\mcafee\common framework\frameworkservice.exe |
"{93CFE0F0-9A8B-4F88-ADF2-0114E54419D0}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{975837D3-5240-4E91-8DEB-79255E9CF9FA}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{A9929E3F-69E3-4EE6-80CD-8D42676DF546}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{ABF9D1C1-55F6-4736-8C07-3F97B53F65F7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{AC5E5EF8-FED8-4799-B5B1-B265C71A870D}" = protocol=6 | dir=in | app=c:\program files\mcafee\common framework\frameworkservice.exe |
"{AEAB2B29-F206-4D9E-A18B-3EEA31C88115}" = protocol=17 | dir=in | app=c:\program files\mcafee\common framework\frameworkservice.exe |
"{BC7ECB33-AE97-4F0C-911D-BFEB3BAE1E4C}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{BDCA502D-4721-4025-A7EB-10A77C4661FD}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{D7A6CD25-D4DD-46BD-95C1-4AC9BD803254}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{DEDBB320-BE51-42E4-9C78-E240F9150551}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{F22A0601-D6E9-4F0E-A9D9-D52C1514ADC5}" = protocol=1 | dir=in | name=allow ping ipv4 ucs anti virus dvd |
"TCP Query User{05536955-9374-42EB-B9F6-C78A48C57E7A}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{E53DD740-41F4-4AD3-9361-6DC30A4741E6}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{294AD80A-3A69-406C-9968-58D47E53D7ED}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{60B24922-8E9D-4BA3-BF0F-1A1EA029205B}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java™ 6 Update 30
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{342126E1-173C-4585-BFBE-3EBDD20E3E9E}" = Mobipocket Reader 6.2
"{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee SiteAdvisor
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AEFF024-F0D0-4AD6-8231-FF51949E91E0}" = McAfee Agent
"{4DA13CAF-3B68-44BB-9597-7217FC0A407B}" = MADHURA Dictionary
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72F0172C-6D1D-470E-9298-A3A1A6530CFB}" = Origin8
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{A912021A-FEDD-4DA3-8DB4-245EBDA84778}" = Origin 8
"{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}" = RealDownloader
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE15D1B6-19B6-4D4D-8F43-CF5D2C3356FF}" = McAfee VirusScan Enterprise
"{D304902E-33A0-4622-A375-C805C7F13231}" = MADHURA Dictionary
"{DBC7D208-2249-4502-8545-A07B12C2BC8D}" = Docear4Word
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"bibus" = bibus [removed]
"CDCopy" = CDCopy
"Docear" = Docear
"ENTERPRISE" = Microsoft Office Enterprise 2007
"eSupport UndeletePlus_is1" = eSupport UndeletePlus 3.0.3.1206
"GPL Ghostscript 9.05" = GPL Ghostscript
"GSview 5.0" = GSview 5.0
"H9601 DSL Modem" = H9601 DSL Modem
"HDMI" = Intel® Graphics Media Accelerator Driver
"Igor Pro" = Igor Pro
"Inkscape" = Inkscape 0.48.4
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"McAfee Security Scan" = McAfee Security Scan Plus
"Mendeley Desktop" = Mendeley Desktop 1.0.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MiKTeX 2.9" = MiKTeX 2.9
"Mobile Partner" = Mobile Partner
"Mozilla Firefox 21.0 (x86 en-US)" = Mozilla Firefox 21.0 (x86 en-US)
"Mozilla Thunderbird 10.0.2 (x86 en-US)" = Mozilla Thunderbird 10.0.2 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NSIS_oald8" = Oxford Advanced Learner's Dictionary - 8th Edition
"Opera 12.15.1748" = Opera 12.15
"Pdf995" = Pdf995
"Picasa 3" = Picasa 3
"QUICKfind" = QUICKfind server v1.1
"RealPlayer 15.0" = RealPlayer
"RealPlayer 16.0" = RealPlayer
"Softonic_English Toolbar" = Softonic_English Toolbar
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TVWiz" = Intel® TV Wizard
"VLC media player" = VLC media player 2.0.5
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinRAR archiver" = WinRAR archiver
"winscp3_is1" = WinSCP 4.2.9

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 6/16/2013 7:39:50 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\program files\spybot
- search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program files\spybot
- search & destroy\DelZip179.dll" on line 8. The value "*" of attribute "language"
in element "assemblyIdentity" is invalid.

Error - 6/16/2013 7:40:01 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Windows\Installer\{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}\recordingmanager.exe".
Dependent
Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/19/2013 7:47:50 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842761
Description = Activation context generation failed for "C:\Program Files\Docear4Word\adxloader.dll.Manifest".Error
in manifest or policy file "C:\Program Files\Docear4Word\adxloader.dll.Manifest"
on line 2. The manifest file root element must be assembly.

Error - 6/19/2013 7:52:58 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\pdf995\res\drivedir\copy64.exe".
Dependent
Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/19/2013 7:54:36 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\program files\spybot
- search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program files\spybot
- search & destroy\DelZip179.dll" on line 8. The value "*" of attribute "language"
in element "assemblyIdentity" is invalid.

Error - 6/19/2013 7:54:49 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Windows\Installer\{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}\recordingmanager.exe".
Dependent
Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/20/2013 10:54:20 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842761
Description = Activation context generation failed for "C:\Program Files\Docear4Word\adxloader.dll.Manifest".Error
in manifest or policy file "C:\Program Files\Docear4Word\adxloader.dll.Manifest"
on line 2. The manifest file root element must be assembly.

Error - 6/20/2013 10:57:51 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\pdf995\res\drivedir\copy64.exe".
Dependent
Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/20/2013 10:59:07 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\program files\spybot
- search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program files\spybot
- search & destroy\DelZip179.dll" on line 8. The value "*" of attribute "language"
in element "assemblyIdentity" is invalid.

Error - 6/20/2013 10:59:18 PM | Computer Name = Pipa | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Windows\Installer\{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}\recordingmanager.exe".
Dependent
Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

[ Media Center Events ]
Error - 7/12/2012 3:16:59 PM | Computer Name = Nimalika-PC | Source = MCUpdate | ID = 0
Description = 8:16:57 PM - Failed to retrieve Directory (Error: The operation has
timed out)

[ OSession Events ]
Error - 6/3/2011 12:17:21 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 25001
seconds with 10920 seconds of active time. This session ended with a crash.

Error - 6/3/2011 12:50:49 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 500
seconds with 480 seconds of active time. This session ended with a crash.

Error - 6/3/2011 1:01:41 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 629
seconds with 540 seconds of active time. This session ended with a crash.

Error - 9/5/2011 2:09:51 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4759
seconds with 180 seconds of active time. This session ended with a crash.

Error - 7/21/2012 12:45:22 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1798
seconds with 240 seconds of active time. This session ended with a crash.

Error - 8/9/2012 3:18:16 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 15859
seconds with 60 seconds of active time. This session ended with a crash.

Error - 9/7/2012 7:08:43 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 45263
seconds with 3720 seconds of active time. This session ended with a crash.

Error - 11/30/2012 4:55:18 PM | Computer Name = Nimalika-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session
lasted 36762 seconds with 1080 seconds of active time. This session ended with
a crash.

Error - 4/25/2013 5:59:25 PM | Computer Name = Pipa | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 22501
seconds with 1260 seconds of active time. This session ended with a crash.

Error - 4/25/2013 6:00:08 PM | Computer Name = Pipa | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session
lasted 26907 seconds with 2520 seconds of active time. This session ended with
a crash.

[ System Events ]
Error - 6/17/2013 7:31:12 PM | Computer Name = Pipa | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the PlugPlay service.

Error - 6/18/2013 5:10:23 AM | Computer Name = Pipa | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the ShellHWDetection service.

Error - 6/18/2013 12:23:50 PM | Computer Name = Pipa | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the lmhosts service.

Error - 6/18/2013 3:28:12 PM | Computer Name = Pipa | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the ShellHWDetection service.

Error - 6/20/2013 12:59:37 AM | Computer Name = Pipa | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Netman service.

Error - 6/20/2013 2:56:22 AM | Computer Name = Pipa | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 6/20/2013 7:16:01 AM | Computer Name = Pipa | Source = Service Control Manager | ID = 7000
Description = The McAfee McShield service failed to start due to the following error:
%%2

Error - 6/20/2013 3:34:17 PM | Computer Name = Pipa | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Netman service.

Error - 6/20/2013 3:34:22 PM | Computer Name = Pipa | Source = DCOM | ID = 10010
Description =

Error - 6/20/2013 7:10:16 PM | Computer Name = Pipa | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Wlansvc service.


< End of report >

Hi OCD,

I ran all the scans, and following are the results:

(McAfee antivirus did not allow me to save or run "Security Check", so I had to disable the antivirus while running this).

Checkup.txt

Results of screen317's Security Check version 0.99.67
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
McAfee VirusScan Enterprise
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Spybot - Search & Destroy
SUPERAntiSpyware Free Edition
McAfee SiteAdvisor
Malwarebytes Anti-Malware version 1.75.0.1300
JavaFX 2.1.1
Java™ 6 Update 30
Java 7 Update 17
Java version out of Date!
Adobe Flash Player 11.3.300.257
Adobe Reader 10.1.7 Adobe Reader out of Date!
Mozilla Firefox (21.0)
Mozilla Thunderbird 10.0.2 Thunderbird out of Date!
Google Chrome 27.0.1453.110
Google Chrome 27.0.1453.116
````````Process Check: objlist.exe by Laurent````````
McAfee VirusScan Enterprise vstskmgr.exe
McAfee VirusScan Enterprise mfeann.exe
McAfee VirusScan Enterprise SHSTAT.EXE
Nimalika Desktop SecurityCheck.exe
Nimalika AppData Local Temp\RarSFX0\SecurityCheck\Objlist.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````



aswMBR.txt

aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software
Run date: 2013-06-25 16:24:57
—————————–
16:24:57.585 OS Version: Windows 6.1.7601 Service Pack 1
16:24:57.585 Number of processors: 2 586 0xF0D
16:24:57.585 ComputerName: PIPA UserName:
16:24:58.646 Initialize success
16:26:18.735 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-2
16:26:18.735 Disk 0 Vendor: WDC_WD2500BEVT-60ZCT1 13.01A13 Size: 238475MB BusType: 11
16:26:18.876 Disk 0 MBR read successfully
16:26:18.891 Disk 0 MBR scan
16:26:18.891 Disk 0 Windows 7 default MBR code
16:26:18.922 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 40960 MB offset 2048
16:26:18.938 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 81920 MB offset 83888128
16:26:18.969 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 81920 MB offset 251660288
16:26:18.969 Disk 0 Partition - 00 0F Extended LBA 33673 MB offset 419432448
16:26:19.016 Disk 0 Partition 4 00 07 HPFS/NTFS NTFS 33672 MB offset 419434496
16:26:19.032 Disk 0 scanning sectors +488394752
16:26:19.094 Disk 0 scanning C:\Windows\system32\drivers
16:26:49.670 Service scanning
16:27:07.173 Modules scanning
16:27:21.978 Disk 0 trace - called modules:
16:27:22.009 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS halmacpi.dll PCIIDEX.SYS msahci.sys
16:27:22.024 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x860c7778]
16:27:22.040 3 CLASSPNP.SYS[896f859e] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-2[0x85f90908]
16:27:22.056 Scan finished successfully
16:29:44.843 Disk 0 MBR has been saved successfully to "C:\Users\Nimalika\Desktop\MBR.dat"
16:29:44.905 The log file has been saved successfully to "C:\Users\Nimalika\Desktop\aswMBR.txt"


ComboFixLog.txt


ComboFix 13-06-24.01 - Nimalika 06/25/2013 16:38:47.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2039.1229 [GMT 1:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: McAfee VirusScan Enterprise *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
SP: McAfee VirusScan Enterprise Antispyware Module *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Nimalika\AppData\Local\assembly\tmp
.
.
((((((((((((((((((((((((( Files Created from 2013-05-25 to 2013-06-25 )))))))))))))))))))))))))))))))
.
.
2013-06-25 15:48 . 2013-06-25 15:48 ——– d—–w- c:\users\Default\AppData\Local\temp
2013-06-20 21:24 . 2013-06-20 21:30 ——– d—–w- c:\programdata\HitmanPro
2013-06-20 19:46 . 2013-06-20 19:46 ——– d—–w- C:\TDSSKiller_Quarantine
2013-06-20 11:33 . 2013-06-20 11:33 ——– d—–w- c:\users\Nimalika\AppData\Roaming\McAfee
2013-06-20 11:16 . 2013-06-20 11:13 75656 —-a-w- c:\windows\system32\MfeOtlkAddin.dll
2013-06-20 11:16 . 2013-06-20 11:13 9648 —-a-w- c:\windows\system32\drivers\mfeclnk.sys
2013-06-20 11:16 . 2013-06-20 11:13 87816 —-a-w- c:\windows\system32\drivers\mferkdet.sys
2013-06-20 11:16 . 2013-06-20 11:13 59616 —-a-w- c:\windows\system32\drivers\mfebopk.sys
2013-06-20 11:16 . 2013-06-20 11:13 121544 —-a-w- c:\windows\system32\drivers\mfeapfk.sys
2013-06-20 11:16 . 2013-06-20 11:13 215024 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
2013-06-20 11:15 . 2013-06-20 11:13 477584 —-a-w- c:\windows\system32\drivers\mfehidk.sys
2013-06-20 11:14 . 2013-06-20 11:13 180720 —-a-w- c:\windows\system32\drivers\mfewfpk.sys
2013-06-20 11:14 . 2013-06-20 11:13 159640 —-a-w- c:\windows\system32\mfevtps.exe
2013-06-20 11:03 . 2013-06-20 11:03 ——– d—–w- c:\users\Nimalika\AppData\Local\Programs
2013-06-19 02:45 . 2013-06-12 04:18 7068072 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B0EC264F-BA11-41EA-A5B3-9BDC04E2C9AD}\mpengine.dll
2013-06-16 21:15 . 2013-06-16 21:15 ——– d—–w- c:\users\Nimalika\AppData\Local\Opera
2013-06-16 21:14 . 2013-06-16 21:15 ——– d—–w- c:\program files\Opera
2013-06-12 02:12 . 2013-06-08 11:13 2706432 —-a-w- c:\windows\system32\mshtml.tlb
2013-06-12 02:12 . 2013-06-08 11:41 218112 —-a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-12 02:02 . 2013-04-25 23:30 1505280 —-a-w- c:\windows\system32\d3d11.dll
2013-06-12 02:02 . 2013-05-10 03:20 24576 —-a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 02:01 . 2013-04-26 04:55 492544 —-a-w- c:\windows\system32\win32spl.dll
2013-06-12 02:01 . 2013-05-13 03:08 903168 —-a-w- c:\windows\system32\certutil.exe
2013-06-12 02:01 . 2013-05-13 04:45 1160192 —-a-w- c:\windows\system32\crypt32.dll
2013-06-12 02:01 . 2013-05-13 04:45 103936 —-a-w- c:\windows\system32\cryptnet.dll
2013-06-12 02:01 . 2013-05-13 04:45 140288 —-a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 02:01 . 2013-05-13 03:08 43008 —-a-w- c:\windows\system32\certenc.dll
2013-06-12 01:59 . 2013-04-17 07:02 1230336 —-a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 01:59 . 2013-05-06 05:06 3968872 —-a-w- c:\windows\system32\ntkrnlpa.exe
2013-06-12 01:59 . 2013-05-06 05:06 3913576 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-06-12 01:59 . 2013-05-08 05:38 1293672 —-a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-30 10:14 . 2013-06-25 15:47 ——– d—–w- c:\users\Nimalika\AppData\Local\assembly
2013-05-29 12:21 . 2013-05-29 12:21 ——– d—–w- c:\program files\Docear4Word
2013-05-29 12:21 . 2013-05-29 12:21 ——– d—–w- c:\programdata\Docear4Word
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-20 11:13 . 2010-03-25 19:07 23112 —-a-w- c:\windows\system32\MFEOtlk.dll
2013-05-02 01:06 . 2010-09-22 15:29 238872 ——w- c:\windows\system32\MpSigStub.exe
2013-04-13 04:45 . 2013-05-15 18:22 474624 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 18:22 2176512 —-a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 13:45 . 2013-04-23 20:06 1211752 —-a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 05:18 . 2013-05-15 18:20 728424 —-a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 05:18 . 2013-05-15 18:20 218984 —-a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 03:14 . 2013-05-15 18:21 2347520 —-a-w- c:\windows\system32\win32k.sys
2013-04-05 02:06 . 2013-04-05 02:06 745472 —-a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-05 02:06 . 2013-04-05 02:06 185344 —-a-w- c:\windows\system32\elshyph.dll
2013-04-05 02:06 . 2013-04-05 02:06 158720 —-a-w- c:\windows\system32\msls31.dll
2013-04-05 02:06 . 2013-04-05 02:06 150528 —-a-w- c:\windows\system32\iexpress.exe
2013-04-05 02:06 . 2013-04-05 02:06 138752 —-a-w- c:\windows\system32\wextract.exe
2013-04-05 02:06 . 2013-04-05 02:06 523264 —-a-w- c:\windows\system32\vbscript.dll
2013-04-05 02:06 . 2013-04-05 02:06 137216 —-a-w- c:\windows\system32\ieUnatt.exe
2013-04-05 02:06 . 2013-04-05 02:06 38400 —-a-w- c:\windows\system32\imgutil.dll
2013-04-05 02:06 . 2013-04-05 02:06 12800 —-a-w- c:\windows\system32\mshta.exe
2013-04-05 02:06 . 2013-04-05 02:06 110592 —-a-w- c:\windows\system32\IEAdvpack.dll
2013-04-05 02:06 . 2013-04-05 02:06 73728 —-a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-05 02:06 . 2013-04-05 02:06 61952 —-a-w- c:\windows\system32\tdc.ocx
2013-04-05 02:06 . 2013-04-05 02:06 48640 —-a-w- c:\windows\system32\mshtmler.dll
2013-04-05 02:06 . 2013-04-05 02:06 361984 —-a-w- c:\windows\system32\html.iec
2013-04-05 02:06 . 2013-04-05 02:06 719360 —-a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-05 02:06 . 2013-04-05 02:06 23040 —-a-w- c:\windows\system32\licmgr10.dll
2013-04-05 02:06 . 2013-04-05 02:06 1441280 —-a-w- c:\windows\system32\inetcpl.cpl
2013-04-04 13:50 . 2010-10-11 20:09 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-04-02 14:09 . 2013-04-02 14:09 4550656 —-a-w- c:\windows\system32\GPhotos.scr
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{930f1200-f5f1-4870-bac6-e233ec8e7023}"= "c:\program files\Softonic_English\tbSoft.dll" [2008-09-15 1784856]
.
[HKEY_CLASSES_ROOT\clsid\{930f1200-f5f1-4870-bac6-e233ec8e7023}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{930f1200-f5f1-4870-bac6-e233ec8e7023}]
2008-09-15 13:47 1784856 —-a-w- c:\program files\Softonic_English\tbSoft.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{930f1200-f5f1-4870-bac6-e233ec8e7023}"= "c:\program files\Softonic_English\tbSoft.dll" [2008-09-15 1784856]
.
[HKEY_CLASSES_ROOT\clsid\{930f1200-f5f1-4870-bac6-e233ec8e7023}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{930F1200-F5F1-4870-BAC6-E233EC8E7023}"= "c:\program files\Softonic_English\tbSoft.dll" [2008-09-15 1784856]
.
[HKEY_CLASSES_ROOT\clsid\{930f1200-f5f1-4870-bac6-e233ec8e7023}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 —-a-w- c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 —-a-w- c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 —-a-w- c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-02-18 2012912]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DSLSTATEXE"="c:\program files\Conexant\Adsl\dslstat.exe" [2007-04-27 423492]
"DSLAGENTEXE"="c:\program files\Conexant\Adsl\dslagent.exe" [2007-04-27 144964]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-24 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-24 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-24 150552]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2013-01-01 295072]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\udaterui.exe" [2012-11-27 333416]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2012-08-14 215656]
.
c:\users\Nimalika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 13:21 548352 —-a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [2013-05-22 101552]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2013-06-20 87816]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2010-02-17 12872]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-22 1343400]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2013-06-20 180720]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-02-17 66632]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2013-06-20 159640]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - ASWMBR
*Deregistered* - aswMBR
*Deregistered* - mfeavfk01
.
Contents of the 'Scheduled Tasks' folder
.
2013-06-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000Core.job
- c:\users\Nimalika\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-23 12:06]
.
2013-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000UA.job
- c:\users\Nimalika\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-23 12:06]
.
.
——- Supplementary Scan ——-
.
uStart Page =
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = [removed]
FF - ProfilePath - c:\users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\
FF - prefs.js: browser.search.selectedEngine - Secure Search
FF - prefs.js: keyword.URL - hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=mcafee&hsimp=yhs-01&type=mcafee&p=
FF - ExtSQL: 2013-06-22 10:36; {D19CA586-DD6C-4a0a-96F8-14644F340D60}; c:\program files\Common Files\McAfee\SystemCore
FF - user.js: yahoo.homepage.dontask - true
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-92303130.sys
AddRemove-eSupport UndeletePlus_is1 - h:\software\eSupport UndeletePlus\unins000.exe
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-3241475473-1607638501-3602604131-1000\Software\SecuROM\License information*]
"datasecu"=hex:2d,0d,72,0a,70,84,17,cf,48,4a,d6,15,03,0b,95,ed,59,0e,5e,0d,6e,
85,80,6b,3e,ba,52,87,4d,e7,a1,fe,78,26,f8,be,69,f9,05,d6,53,d1,0f,df,d7,95,\
"rkeysecu"=hex:8a,80,10,b7,ac,3e,a7,c5,4c,41,35,92,c0,94,6e,93
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'Explorer.exe'(6648)
c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
c:\program files\McAfee\Common Framework\McTrayLegacySupportPlugin.dll
c:\program files\McAfee\Common Framework\McTrayInterfaceLib.dll
c:\program files\McAfee\Common Framework\McAfeeWin32GUISupportDLL.dll
.
Completion time: 2013-06-25 16:52:08
ComboFix-quarantined-files.txt 2013-06-25 15:52
.
Pre-Run: 6,754,291,712 bytes free
Post-Run: 7,121,141,760 bytes free
.
- - End Of File - - 6A99946E44ADBA52DE7A21A0C622E62E
A36C5E4F47E84449FF07ED3517B43A31


What symptoms are you experiencing?

Before posting this thread, I felt that my computer had become quite slow, and therefore I ran a scan using SpyBot. That was how I identified win32.downloader.gen. The computer is still a bit slow. (Not as slow as before though) . Other than that, I have no other problem.
Common Framework

Hi pipi,

You logs show you have run TDSSKiller, can you locate the log and post it in your next reply.

The log will look something similar to this : C:\TDSSKiller.Version_Date Run_Time of Scan_log

Also provide any logs located here : C:\TDSSKiller_Quarantine

=========================

You have Softonic_English Toolbar installed. Softonic_English Toolbar - a Conduit/EffectiveBrand "Free Community" toolbar - modifies the default IE SearchHook. Some Conduit toolbars are reputed to have a certain adware/trackware functionality.

I would recommend you remove this piece of software. But the final decision is up to you.

1. Uninstall via Programs and Features

Click Start > Control Panel > Programs and Features. Locate and select the following that are present on the list and click the Remove button:

• Softonic_English Toolbar

=========================

2. AdwCleaner

Download AdwCleaner to your desktop.

Right click and select "Run as Administrator".

• Run AdwCleaner and select Delete
• Once done it will ask to reboot, allow the reboot
• On reboot a log will be produced, please attach the content of the log to your next reply

=========================

3. ComboFix Script

• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
• Open notepad and copy/paste the text in the code-box below into it:

ClearJavaCache::

Save this as CFScript.txt, in the same location as ComboFix.exe

[external image: Posted Image]


Referring to the picture above, drag CFScript into ComboFix.exe

When finished, please post the C:\ComboFix.txt for further review.

=========================

In your next post please provide the following:

• AdwCleaner[S1].txt
• ComboFix.txt
• How is the computer running at the moment?

Hi OCD,

Thanks for the reply. Here are the results of the scans:

(I also uninstalled Softonic_English Toolbar)

TDSSKiller Scan Logs

I found two scan logs:

TDSSKiller.2.8.16.0_20.06.2013_20.44.36_log

20:44:36.0777 2608 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:44:37.0123 2608 ============================================================
20:44:37.0123 2608 Current date / time: 2013/06/20 20:44:37.0123
20:44:37.0123 2608 SystemInfo:
20:44:37.0123 2608
20:44:37.0123 2608 OS Version: 6.1.7601 ServicePack: 1.0
20:44:37.0123 2608 Product type: Workstation
20:44:37.0123 2608 ComputerName: PIPA
20:44:37.0123 2608 UserName: Nimalika
20:44:37.0123 2608 Windows directory: C:\Windows
20:44:37.0123 2608 System windows directory: C:\Windows
20:44:37.0123 2608 Processor architecture: Intel x86
20:44:37.0123 2608 Number of processors: 2
20:44:37.0123 2608 Page size: 0x1000
20:44:37.0123 2608 Boot type: Normal boot
20:44:37.0123 2608 ============================================================
20:44:40.0617 2608 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:44:40.0633 2608 ============================================================
20:44:40.0633 2608 \Device\Harddisk0\DR0:
20:44:40.0633 2608 MBR partitions:
20:44:40.0633 2608 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x5000000
20:44:40.0633 2608 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x5000800, BlocksNum 0xA000000
20:44:40.0633 2608 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xF000800, BlocksNum 0xA000000
20:44:40.0726 2608 \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x19001000, BlocksNum 0x41C4000
20:44:40.0726 2608 ============================================================
20:44:40.0867 2608 C: <-> \Device\Harddisk0\DR0\Partition1
20:44:40.0898 2608 D: <-> \Device\Harddisk0\DR0\Partition4
20:44:40.0976 2608 E: <-> \Device\Harddisk0\DR0\Partition2
20:44:41.0147 2608 F: <-> \Device\Harddisk0\DR0\Partition3
20:44:41.0147 2608 ============================================================
20:44:41.0147 2608 Initialize success
20:44:41.0147 2608 ============================================================
20:45:15.0568 5524 ============================================================
20:45:15.0568 5524 Scan started
20:45:15.0568 5524 Mode: Manual; TDLFS;
20:45:15.0568 5524 ============================================================
20:45:17.0190 5524 ================ Scan system memory ========================
20:45:17.0190 5524 System memory - ok
20:45:17.0190 5524 ================ Scan services =============================
20:45:17.0393 5524 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:45:17.0549 5524 1394ohci - ok
20:45:17.0658 5524 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:45:17.0674 5524 ACPI - ok
20:45:17.0768 5524 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:45:17.0877 5524 AcpiPmi - ok
20:45:18.0033 5524 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
20:45:18.0142 5524 AdobeARMservice - ok
20:45:18.0282 5524 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
20:45:18.0298 5524 adp94xx - ok
20:45:18.0376 5524 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
20:45:18.0392 5524 adpahci - ok
20:45:18.0423 5524 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
20:45:18.0423 5524 adpu320 - ok
20:45:18.0470 5524 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:45:18.0470 5524 AeLookupSvc - ok
20:45:18.0532 5524 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
20:45:18.0532 5524 AFD - ok
20:45:18.0579 5524 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
20:45:18.0579 5524 agp440 - ok
20:45:18.0626 5524 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
20:45:18.0626 5524 aic78xx - ok
20:45:18.0657 5524 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
20:45:18.0657 5524 ALG - ok
20:45:18.0672 5524 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
20:45:18.0688 5524 aliide - ok
20:45:18.0735 5524 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
20:45:18.0735 5524 amdagp - ok
20:45:18.0750 5524 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
20:45:18.0750 5524 amdide - ok
20:45:18.0782 5524 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
20:45:18.0782 5524 AmdK8 - ok
20:45:18.0797 5524 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
20:45:18.0813 5524 AmdPPM - ok
20:45:18.0860 5524 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:45:18.0860 5524 amdsata - ok
20:45:18.0906 5524 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
20:45:18.0922 5524 amdsbs - ok
20:45:18.0938 5524 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:45:18.0938 5524 amdxata - ok
20:45:18.0984 5524 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
20:45:18.0984 5524 AppID - ok
20:45:19.0031 5524 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:45:19.0031 5524 AppIDSvc - ok
20:45:19.0062 5524 [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo C:\Windows\System32\appinfo.dll
20:45:19.0062 5524 Appinfo - ok
20:45:19.0127 5524 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
20:45:19.0143 5524 AppMgmt - ok
20:45:19.0177 5524 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
20:45:19.0177 5524 arc - ok
20:45:19.0192 5524 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
20:45:19.0192 5524 arcsas - ok
20:45:19.0239 5524 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:45:19.0239 5524 AsyncMac - ok
20:45:19.0270 5524 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
20:45:19.0270 5524 atapi - ok
20:45:19.0333 5524 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:45:19.0333 5524 AudioEndpointBuilder - ok
20:45:19.0364 5524 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
20:45:19.0379 5524 Audiosrv - ok
20:45:19.0442 5524 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:45:19.0457 5524 AxInstSV - ok
20:45:19.0504 5524 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
20:45:19.0535 5524 b06bdrv - ok
20:45:19.0582 5524 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
20:45:19.0582 5524 b57nd60x - ok
20:45:19.0645 5524 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
20:45:19.0645 5524 BDESVC - ok
20:45:19.0660 5524 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
20:45:19.0660 5524 Beep - ok
20:45:19.0707 5524 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
20:45:19.0738 5524 BFE - ok
20:45:19.0785 5524 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
20:45:19.0801 5524 BITS - ok
20:45:19.0816 5524 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
20:45:19.0832 5524 blbdrive - ok
20:45:19.0879 5524 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:45:19.0879 5524 bowser - ok
20:45:19.0894 5524 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:45:19.0894 5524 BrFiltLo - ok
20:45:19.0910 5524 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:45:19.0910 5524 BrFiltUp - ok
20:45:19.0941 5524 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
20:45:19.0957 5524 Browser - ok
20:45:19.0988 5524 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:45:20.0003 5524 Brserid - ok
20:45:20.0035 5524 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:45:20.0035 5524 BrSerWdm - ok
20:45:20.0066 5524 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:45:20.0066 5524 BrUsbMdm - ok
20:45:20.0066 5524 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:45:20.0081 5524 BrUsbSer - ok
20:45:20.0113 5524 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
20:45:20.0128 5524 BthEnum - ok
20:45:20.0144 5524 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
20:45:20.0144 5524 BTHMODEM - ok
20:45:20.0159 5524 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
20:45:20.0191 5524 BthPan - ok
20:45:20.0253 5524 [ 1153DE2E4F5941E10C399CB5592F78A1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
20:45:20.0253 5524 BTHPORT - ok
20:45:20.0300 5524 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
20:45:20.0300 5524 bthserv - ok
20:45:20.0347 5524 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
20:45:20.0347 5524 BTHUSB - ok
20:45:20.0362 5524 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:45:20.0378 5524 cdfs - ok
20:45:20.0425 5524 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\drivers\cdrom.sys
20:45:20.0518 5524 cdrom - ok
20:45:20.0565 5524 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
20:45:20.0565 5524 CertPropSvc - ok
20:45:20.0596 5524 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
20:45:20.0612 5524 circlass - ok
20:45:20.0643 5524 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
20:45:20.0643 5524 CLFS - ok
20:45:20.0752 5524 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:45:20.0752 5524 clr_optimization_v2.0.50727_32 - ok
20:45:20.0815 5524 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:45:20.0846 5524 clr_optimization_v4.0.30319_32 - ok
20:45:20.0861 5524 clwvd - ok
20:45:20.0877 5524 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
20:45:20.0877 5524 CmBatt - ok
20:45:20.0893 5524 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:45:20.0908 5524 cmdide - ok
20:45:20.0939 5524 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
20:45:20.0955 5524 CNG - ok
20:45:21.0002 5524 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
20:45:21.0002 5524 Compbatt - ok
20:45:21.0049 5524 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
20:45:21.0142 5524 CompositeBus - ok
20:45:21.0158 5524 COMSysApp - ok
20:45:21.0173 5524 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
20:45:21.0173 5524 crcdisk - ok
20:45:21.0236 5524 [ 3897DFF247D9ED0006190349DE264E14 ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:45:21.0236 5524 CryptSvc - ok
20:45:21.0283 5524 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
20:45:21.0376 5524 CSC - ok
20:45:21.0407 5524 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
20:45:21.0423 5524 CscService - ok
20:45:21.0454 5524 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
20:45:21.0470 5524 DcomLaunch - ok
20:45:21.0501 5524 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
20:45:21.0517 5524 defragsvc - ok
20:45:21.0563 5524 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:45:21.0563 5524 DfsC - ok
20:45:21.0626 5524 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
20:45:21.0626 5524 Dhcp - ok
20:45:21.0657 5524 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
20:45:21.0657 5524 discache - ok
20:45:21.0704 5524 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
20:45:21.0704 5524 Disk - ok
20:45:21.0751 5524 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:45:21.0751 5524 Dnscache - ok
20:45:21.0782 5524 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
20:45:21.0782 5524 dot3svc - ok
20:45:21.0829 5524 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
20:45:21.0829 5524 DPS - ok
20:45:21.0860 5524 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:45:21.0875 5524 drmkaud - ok
20:45:21.0922 5524 [ 16498EBC04AE9DD07049A8884B205C05 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:45:22.0031 5524 DXGKrnl - ok
20:45:22.0063 5524 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
20:45:22.0078 5524 EapHost - ok
20:45:22.0172 5524 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
20:45:22.0265 5524 ebdrv - ok
20:45:22.0297 5524 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
20:45:22.0297 5524 EFS - ok
20:45:22.0375 5524 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:45:22.0468 5524 ehRecvr - ok
20:45:22.0499 5524 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
20:45:22.0515 5524 ehSched - ok
20:45:22.0562 5524 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
20:45:22.0577 5524 elxstor - ok
20:45:22.0609 5524 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:45:22.0609 5524 ErrDev - ok
20:45:22.0671 5524 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
20:45:22.0671 5524 EventSystem - ok
20:45:22.0702 5524 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
20:45:22.0718 5524 exfat - ok
20:45:22.0765 5524 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:45:22.0765 5524 fastfat - ok
20:45:22.0827 5524 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
20:45:22.0843 5524 Fax - ok
20:45:22.0858 5524 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:45:22.0858 5524 fdc - ok
20:45:22.0889 5524 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
20:45:22.0889 5524 fdPHost - ok
20:45:22.0905 5524 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
20:45:22.0905 5524 FDResPub - ok
20:45:22.0921 5524 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:45:22.0921 5524 FileInfo - ok
20:45:22.0936 5524 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:45:22.0936 5524 Filetrace - ok
20:45:22.0952 5524 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:45:22.0952 5524 flpydisk - ok
20:45:23.0045 5524 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:45:23.0045 5524 FltMgr - ok
20:45:23.0155 5524 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll
20:45:23.0201 5524 FontCache - ok
20:45:23.0373 5524 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
20:45:23.0389 5524 FontCache3.0.0.0 - ok
20:45:23.0404 5524 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:45:23.0420 5524 FsDepends - ok
20:45:23.0467 5524 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:45:23.0654 5524 Fs_Rec - ok
20:45:23.0716 5524 [ E306A24D9694C724FA2491278BF50FDB ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:45:23.0716 5524 fvevol - ok
20:45:23.0763 5524 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
20:45:23.0779 5524 gagp30kx - ok
20:45:23.0841 5524 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
20:45:23.0981 5524 gpsvc - ok
20:45:24.0059 5524 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
20:45:24.0278 5524 gusvc - ok
20:45:24.0387 5524 [ 7DAD592A4D28092D584CFB4DEEF1373D ] HBtnKey C:\Windows\system32\DRIVERS\cpqbttn.sys
20:45:24.0387 5524 HBtnKey - ok
20:45:24.0418 5524 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:45:24.0434 5524 hcw85cir - ok
20:45:24.0481 5524 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:45:24.0481 5524 HdAudAddService - ok
20:45:24.0512 5524 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
20:45:24.0527 5524 HDAudBus - ok
20:45:24.0527 5524 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
20:45:24.0543 5524 HidBatt - ok
20:45:24.0559 5524 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
20:45:24.0559 5524 HidBth - ok
20:45:24.0590 5524 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
20:45:24.0605 5524 HidIr - ok
20:45:24.0637 5524 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
20:45:24.0637 5524 hidserv - ok
20:45:24.0761 5524 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:45:24.0995 5524 HidUsb - ok
20:45:25.0027 5524 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:45:25.0027 5524 hkmsvc - ok
20:45:25.0183 5524 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:45:25.0229 5524 HomeGroupListener - ok
20:45:25.0276 5524 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:45:25.0432 5524 HomeGroupProvider - ok
20:45:25.0510 5524 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:45:25.0526 5524 HpSAMD - ok
20:45:25.0619 5524 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:45:25.0651 5524 HTTP - ok
20:45:25.0729 5524 [ 92CA47DA32009CCC00A5ADED04ABBD78 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
20:45:25.0900 5524 hwdatacard - ok
20:45:25.0947 5524 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:45:25.0947 5524 hwpolicy - ok
20:45:26.0041 5524 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
20:45:26.0041 5524 i8042prt - ok
20:45:26.0103 5524 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:45:26.0353 5524 iaStorV - ok
20:45:26.0415 5524 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:45:26.0571 5524 idsvc - ok
20:45:26.0727 5524 [ 9467514EA189475A6E7FDC5D7BDE9D3F ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
20:45:26.0930 5524 igfx - ok
20:45:26.0977 5524 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
20:45:26.0992 5524 iirsp - ok
20:45:27.0211 5524 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
20:45:27.0242 5524 IKEEXT - ok
20:45:27.0335 5524 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
20:45:27.0351 5524 intelide - ok
20:45:27.0382 5524 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:45:27.0398 5524 intelppm - ok
20:45:27.0445 5524 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:45:27.0460 5524 IPBusEnum - ok
20:45:27.0491 5524 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:45:27.0507 5524 IpFilterDriver - ok
20:45:27.0569 5524 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:45:27.0601 5524 iphlpsvc - ok
20:45:27.0647 5524 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:45:27.0788 5524 IPMIDRV - ok
20:45:27.0835 5524 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:45:27.0897 5524 IPNAT - ok
20:45:28.0006 5524 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:45:28.0006 5524 IRENUM - ok
20:45:28.0037 5524 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:45:28.0037 5524 isapnp - ok
20:45:28.0084 5524 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:45:28.0084 5524 iScsiPrt - ok
20:45:28.0131 5524 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
20:45:28.0131 5524 kbdclass - ok
20:45:28.0193 5524 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
20:45:28.0474 5524 kbdhid - ok
20:45:28.0490 5524 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
20:45:28.0505 5524 KeyIso - ok
20:45:28.0537 5524 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:45:28.0552 5524 KSecDD - ok
20:45:28.0568 5524 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:45:28.0568 5524 KSecPkg - ok
20:45:28.0630 5524 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
20:45:28.0661 5524 KtmRm - ok
20:45:28.0708 5524 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
20:45:28.0724 5524 LanmanServer - ok
20:45:28.0771 5524 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:45:28.0786 5524 LanmanWorkstation - ok
20:45:28.0849 5524 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:45:28.0864 5524 lltdio - ok
20:45:28.0911 5524 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:45:28.0911 5524 lltdsvc - ok
20:45:28.0942 5524 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
20:45:28.0942 5524 lmhosts - ok
20:45:28.0989 5524 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
20:45:29.0005 5524 LSI_FC - ok
20:45:29.0036 5524 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
20:45:29.0036 5524 LSI_SAS - ok
20:45:29.0083 5524 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:45:29.0083 5524 LSI_SAS2 - ok
20:45:29.0114 5524 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:45:29.0129 5524 LSI_SCSI - ok
20:45:29.0161 5524 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
20:45:29.0176 5524 luafv - ok
20:45:29.0207 5524 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\Windows\system32\drivers\mbamswissarmy.sys
20:45:29.0379 5524 MBAMSwissArmy - ok
20:45:29.0488 5524 [ 10C84498D8A315178CEC55BF98BD4336 ] McAfee SiteAdvisor Service c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
20:45:29.0675 5524 McAfee SiteAdvisor Service - ok
20:45:29.0769 5524 [ AACB6AD3AEDDE4E4B115FDE632E883E8 ] McAfeeFramework C:\Program Files\McAfee\Common Framework\FrameworkService.exe
20:45:29.0769 5524 McAfeeFramework - ok
20:45:29.0847 5524 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
20:45:29.0847 5524 McComponentHostService - ok
20:45:29.0941 5524 [ E0CE4BD33B108B07E92CE3E399D0E81E ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
20:45:29.0941 5524 McShield - ok
20:45:30.0003 5524 [ 2CB697CCB48C77B17BE022A32F9B87F3 ] McTaskManager C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
20:45:30.0019 5524 McTaskManager - ok
20:45:30.0050 5524 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:45:30.0050 5524 Mcx2Svc - ok
20:45:30.0081 5524 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
20:45:30.0097 5524 megasas - ok
20:45:30.0128 5524 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
20:45:30.0143 5524 MegaSR - ok
20:45:30.0221 5524 [ D82D7A9E2AC5E8699CE6BB0C390C5C79 ] mfeapfk C:\Windows\system32\drivers\mfeapfk.sys
20:45:30.0377 5524 mfeapfk - ok
20:45:30.0409 5524 [ D8252CDC2CE76F3D5AD51636457FF7B3 ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys
20:45:30.0580 5524 mfeavfk - ok
20:45:30.0611 5524 mfeavfk01 - ok
20:45:30.0658 5524 [ 011920070CACA9E9DB178A6475B51C19 ] mfebopk C:\Windows\system32\drivers\mfebopk.sys
20:45:30.0658 5524 mfebopk - ok
20:45:30.0705 5524 [ 3B32918C8CD480FB590ED799EFADA162 ] mfehidk C:\Windows\system32\drivers\mfehidk.sys
20:45:30.0736 5524 mfehidk - ok
20:45:30.0752 5524 [ FA0E1F4510CB65ED7E105C8640CC2B46 ] mferkdet C:\Windows\system32\drivers\mferkdet.sys
20:45:30.0908 5524 mferkdet - ok
20:45:30.0939 5524 [ DA1067DC5999F00CDB6AC69553EE26AE ] mfevtp C:\Windows\system32\mfevtps.exe
20:45:31.0079 5524 mfevtp - ok
20:45:31.0126 5524 [ 704DDB296BC40820B544716E0C5F2A99 ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys
20:45:31.0142 5524 mfewfpk - ok
20:45:31.0235 5524 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
20:45:31.0407 5524 Microsoft Office Groove Audit Service - ok
20:45:31.0454 5524 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
20:45:31.0454 5524 MMCSS - ok
20:45:31.0485 5524 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
20:45:31.0501 5524 Modem - ok
20:45:31.0532 5524 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:45:31.0532 5524 monitor - ok
20:45:31.0579 5524 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\drivers\mouclass.sys
20:45:31.0594 5524 mouclass - ok
20:45:31.0625 5524 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:45:31.0625 5524 mouhid - ok
20:45:31.0672 5524 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:45:31.0688 5524 mountmgr - ok
20:45:31.0750 5524 [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
20:45:31.0969 5524 MozillaMaintenance - ok
20:45:32.0000 5524 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
20:45:32.0296 5524 mpio - ok
20:45:32.0343 5524 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:45:32.0343 5524 mpsdrv - ok
20:45:32.0390 5524 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:45:32.0405 5524 MpsSvc - ok
20:45:32.0437 5524 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:45:32.0452 5524 MRxDAV - ok
20:45:32.0499 5524 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:45:32.0499 5524 mrxsmb - ok
20:45:32.0546 5524 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:45:32.0546 5524 mrxsmb10 - ok
20:45:32.0577 5524 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:45:32.0577 5524 mrxsmb20 - ok
20:45:32.0624 5524 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
20:45:32.0624 5524 msahci - ok
20:45:32.0671 5524 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:45:32.0967 5524 msdsm - ok
20:45:33.0061 5524 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
20:45:33.0107 5524 MSDTC - ok
20:45:33.0232 5524 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:45:33.0248 5524 Msfs - ok
20:45:33.0263 5524 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:45:33.0279 5524 mshidkmdf - ok
20:45:33.0310 5524 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:45:33.0326 5524 msisadrv - ok
20:45:33.0419 5524 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:45:33.0435 5524 MSiSCSI - ok
20:45:33.0451 5524 msiserver - ok
20:45:33.0482 5524 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:45:33.0482 5524 MSKSSRV - ok
20:45:33.0513 5524 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:45:33.0513 5524 MSPCLOCK - ok
20:45:33.0544 5524 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:45:33.0560 5524 MSPQM - ok
20:45:33.0575 5524 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:45:33.0591 5524 MsRPC - ok
20:45:33.0638 5524 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
20:45:33.0638 5524 mssmbios - ok
20:45:33.0653 5524 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:45:33.0669 5524 MSTEE - ok
20:45:33.0685 5524 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
20:45:33.0700 5524 MTConfig - ok
20:45:33.0716 5524 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
20:45:33.0731 5524 Mup - ok
20:45:33.0778 5524 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
20:45:33.0809 5524 napagent - ok
20:45:33.0841 5524 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:45:33.0887 5524 NativeWifiP - ok
20:45:33.0950 5524 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:45:33.0981 5524 NDIS - ok
20:45:33.0997 5524 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:45:34.0012 5524 NdisCap - ok
20:45:34.0043 5524 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:45:34.0059 5524 NdisTapi - ok
20:45:34.0090 5524 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:45:34.0090 5524 Ndisuio - ok
20:45:34.0137 5524 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:45:34.0449 5524 NdisWan - ok
20:45:34.0480 5524 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:45:34.0480 5524 NDProxy - ok
20:45:34.0511 5524 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:45:34.0511 5524 NetBIOS - ok
20:45:34.0558 5524 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:45:34.0558 5524 NetBT - ok
20:45:34.0574 5524 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
20:45:34.0574 5524 Netlogon - ok
20:45:34.0636 5524 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
20:45:34.0652 5524 Netman - ok
20:45:34.0667 5524 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
20:45:34.0683 5524 netprofm - ok
20:45:34.0730 5524 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:45:34.0886 5524 NetTcpPortSharing - ok
20:45:35.0057 5524 [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] netw5v32 C:\Windows\system32\DRIVERS\netw5v32.sys
20:45:35.0213 5524 netw5v32 - ok
20:45:35.0260 5524 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
20:45:35.0276 5524 nfrd960 - ok
20:45:35.0307 5524 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll
20:45:35.0338 5524 NlaSvc - ok
20:45:35.0354 5524 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:45:35.0354 5524 Npfs - ok
20:45:35.0401 5524 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
20:45:35.0416 5524 nsi - ok
20:45:35.0432 5524 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:45:35.0432 5524 nsiproxy - ok
20:45:35.0510 5524 [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:45:35.0557 5524 Ntfs - ok
20:45:35.0588 5524 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
20:45:35.0588 5524 Null - ok
20:45:35.0619 5524 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:45:35.0619 5524 nvraid - ok
20:45:35.0681 5524 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:45:35.0697 5524 nvstor - ok
20:45:35.0728 5524 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:45:35.0728 5524 nv_agp - ok
20:45:35.0837 5524 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
20:45:36.0040 5524 odserv - ok
20:45:36.0087 5524 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:45:36.0103 5524 ohci1394 - ok
20:45:36.0149 5524 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:45:36.0305 5524 ose - ok
20:45:36.0352 5524 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:45:36.0383 5524 p2pimsvc - ok
20:45:36.0415 5524 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
20:45:36.0430 5524 p2psvc - ok
20:45:36.0477 5524 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
20:45:36.0493 5524 Parport - ok
20:45:36.0539 5524 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:45:36.0539 5524 partmgr - ok
20:45:36.0571 5524 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
20:45:36.0586 5524 Parvdm - ok
20:45:36.0602 5524 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:45:36.0617 5524 PcaSvc - ok
20:45:36.0664 5524 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
20:45:36.0680 5524 pci - ok
20:45:36.0711 5524 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
20:45:36.0727 5524 pciide - ok
20:45:36.0758 5524 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
20:45:36.0789 5524 pcmcia - ok
20:45:36.0805 5524 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
20:45:36.0820 5524 pcw - ok
20:45:36.0851 5524 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:45:36.0898 5524 PEAUTH - ok
20:45:36.0961 5524 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
20:45:37.0007 5524 PeerDistSvc - ok
20:45:37.0117 5524 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
20:45:37.0179 5524 pla - ok
20:45:37.0241 5524 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:45:37.0257 5524 PlugPlay - ok
20:45:37.0288 5524 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:45:37.0304 5524 PNRPAutoReg - ok
20:45:37.0335 5524 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:45:37.0351 5524 PNRPsvc - ok
20:45:37.0366 5524 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:45:37.0491 5524 PolicyAgent - ok
20:45:37.0538 5524 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
20:45:37.0553 5524 Power - ok
20:45:37.0616 5524 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:45:37.0616 5524 PptpMiniport - ok
20:45:37.0647 5524 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
20:45:37.0647 5524 Processor - ok
20:45:37.0694 5524 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
20:45:37.0709 5524 ProfSvc - ok
20:45:37.0725 5524 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:45:37.0741 5524 ProtectedStorage - ok
20:45:37.0772 5524 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:45:37.0772 5524 Psched - ok
20:45:37.0850 5524 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
20:45:37.0897 5524 ql2300 - ok
20:45:37.0928 5524 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
20:45:37.0943 5524 ql40xx - ok
20:45:37.0975 5524 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
20:45:38.0006 5524 QWAVE - ok
20:45:38.0021 5524 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:45:38.0021 5524 QWAVEdrv - ok
20:45:38.0053 5524 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:45:38.0068 5524 RasAcd - ok
20:45:38.0099 5524 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:45:38.0099 5524 RasAgileVpn - ok
20:45:38.0131 5524 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
20:45:38.0146 5524 RasAuto - ok
20:45:38.0177 5524 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:45:38.0177 5524 Rasl2tp - ok
20:45:38.0224 5524 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
20:45:38.0271 5524 RasMan - ok
20:45:38.0333 5524 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:45:38.0349 5524 RasPppoe - ok
20:45:38.0411 5524 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:45:38.0427 5524 RasSstp - ok
20:45:38.0474 5524 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:45:38.0770 5524 rdbss - ok
20:45:38.0833 5524 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
20:45:38.0833 5524 rdpbus - ok
20:45:38.0879 5524 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:45:38.0879 5524 RDPCDD - ok
20:45:38.0911 5524 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
20:45:38.0926 5524 RDPDR - ok
20:45:38.0942 5524 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:45:38.0942 5524 RDPENCDD - ok
20:45:38.0973 5524 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:45:38.0989 5524 RDPREFMP - ok
20:45:39.0020 5524 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:45:39.0035 5524 RDPWD - ok
20:45:39.0098 5524 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:45:39.0098 5524 rdyboost - ok
20:45:39.0191 5524 [ A0FF419B61AE47E26ADF3BB15DB4F2FE ] RealNetworks Downloader Resolver Service C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
20:45:39.0191 5524 RealNetworks Downloader Resolver Service - ok
20:45:39.0223 5524 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
20:45:39.0238 5524 RemoteAccess - ok
20:45:39.0301 5524 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:45:39.0301 5524 RemoteRegistry - ok
20:45:39.0394 5524 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
20:45:39.0410 5524 RFCOMM - ok
20:45:39.0441 5524 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:45:39.0457 5524 RpcEptMapper - ok
20:45:39.0488 5524 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
20:45:39.0503 5524 RpcLocator - ok
20:45:39.0535 5524 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
20:45:39.0550 5524 RpcSs - ok
20:45:39.0597 5524 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:45:39.0613 5524 rspndr - ok
20:45:39.0659 5524 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
20:45:39.0659 5524 s3cap - ok
20:45:39.0691 5524 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
20:45:39.0691 5524 SamSs - ok
20:45:39.0737 5524 [ A3281AEC37E0720A2BC28034C2DF2A56 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
20:45:39.0737 5524 SASDIFSV - ok
20:45:39.0769 5524 [ 7CE61C25C159F50F9EAF6D77FC83FA35 ] SASENUM C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
20:45:39.0878 5524 SASENUM - ok
20:45:39.0925 5524 [ 67D2688756DD304AF655349BAAD82BFF ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
20:45:39.0940 5524 SASKUTIL - ok
20:45:39.0987 5524 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:45:40.0268 5524 sbp2port - ok
20:45:40.0377 5524 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
20:45:40.0408 5524 SBSDWSCService - ok
20:45:40.0439 5524 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:45:40.0455 5524 SCardSvr - ok
20:45:40.0471 5524 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:45:40.0471 5524 scfilter - ok
20:45:40.0549 5524 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
20:45:40.0564 5524 Schedule - ok
20:45:40.0595 5524 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:45:40.0611 5524 SCPolicySvc - ok
20:45:40.0642 5524 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:45:40.0658 5524 SDRSVC - ok
20:45:40.0705 5524 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:45:40.0705 5524 secdrv - ok
20:45:40.0720 5524 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
20:45:40.0736 5524 seclogon - ok
20:45:40.0751 5524 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
20:45:40.0767 5524 SENS - ok
20:45:40.0829 5524 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:45:40.0829 5524 SensrSvc - ok
20:45:40.0861 5524 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:45:40.0861 5524 Serenum - ok
20:45:40.0876 5524 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:45:40.0892 5524 Serial - ok
20:45:40.0939 5524 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
20:45:40.0939 5524 sermouse - ok
20:45:41.0001 5524 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
20:45:41.0017 5524 SessionEnv - ok
20:45:41.0048 5524 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:45:41.0063 5524 sffdisk - ok
20:45:41.0079 5524 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:45:41.0095 5524 sffp_mmc - ok
20:45:41.0110 5524 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:45:41.0126 5524 sffp_sd - ok
20:45:41.0141 5524 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
20:45:41.0157 5524 sfloppy - ok
20:45:41.0188 5524 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:45:41.0204 5524 SharedAccess - ok
20:45:41.0266 5524 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:45:41.0282 5524 ShellHWDetection - ok
20:45:41.0344 5524 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
20:45:41.0360 5524 sisagp - ok
20:45:41.0407 5524 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:45:41.0422 5524 SiSRaid2 - ok
20:45:41.0453 5524 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
20:45:41.0453 5524 SiSRaid4 - ok
20:45:41.0547 5524 [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
20:45:41.0563 5524 SkypeUpdate - ok
20:45:41.0594 5524 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:45:41.0594 5524 Smb - ok
20:45:41.0672 5524 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:45:41.0687 5524 SNMPTRAP - ok
20:45:41.0703 5524 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
20:45:41.0719 5524 spldr - ok
20:45:41.0781 5524 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
20:45:41.0797 5524 Spooler - ok
20:45:41.0937 5524 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
20:45:42.0046 5524 sppsvc - ok
20:45:42.0077 5524 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:45:42.0093 5524 sppuinotify - ok
20:45:42.0140 5524 [ A199171385BE17973FD800FA91F8F78A ] sptd C:\Windows\system32\Drivers\sptd.sys
20:45:42.0140 5524 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: A199171385BE17973FD800FA91F8F78A
20:45:42.0140 5524 sptd ( LockedFile.Multi.Generic ) - warning
20:45:42.0140 5524 sptd - detected LockedFile.Multi.Generic (1)
20:45:42.0187 5524 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
20:45:42.0187 5524 srv - ok
20:45:42.0249 5524 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:45:42.0249 5524 srv2 - ok
20:45:42.0280 5524 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:45:42.0280 5524 srvnet - ok
20:45:42.0343 5524 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:45:42.0358 5524 SSDPSRV - ok
20:45:42.0389 5524 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:45:42.0405 5524 SstpSvc - ok
20:45:42.0452 5524 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
20:45:42.0452 5524 stexstor - ok
20:45:42.0499 5524 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
20:45:42.0545 5524 StiSvc - ok
20:45:42.0577 5524 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
20:45:42.0577 5524 storflt - ok
20:45:42.0608 5524 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll
20:45:42.0623 5524 StorSvc - ok
20:45:42.0686 5524 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
20:45:42.0686 5524 storvsc - ok
20:45:42.0733 5524 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
20:45:42.0733 5524 swenum - ok
20:45:42.0779 5524 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
20:45:42.0795 5524 swprv - ok
20:45:42.0857 5524 [ F5D926807BD9BC0AF68F9376144DE425 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
20:45:42.0998 5524 SynTP - ok
20:45:43.0123 5524 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
20:45:43.0169 5524 SysMain - ok
20:45:43.0216 5524 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:45:43.0232 5524 TabletInputService - ok
20:45:43.0279 5524 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
20:45:43.0310 5524 TapiSrv - ok
20:45:43.0357 5524 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
20:45:43.0372 5524 TBS - ok
20:45:43.0700 5524 [ D32FDAC73FCD76B85389C39BC1087F2A ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:45:43.0747 5524 Tcpip - ok
20:45:43.0809 5524 [ D32FDAC73FCD76B85389C39BC1087F2A ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:45:43.0840 5524 TCPIP6 - ok
20:45:43.0887 5524 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:45:44.0183 5524 tcpipreg - ok
20:45:44.0293 5524 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:45:44.0589 5524 TDPIPE - ok
20:45:44.0620 5524 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:45:44.0620 5524 TDTCP - ok
20:45:44.0683 5524 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:45:44.0963 5524 tdx - ok
20:45:44.0995 5524 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
20:45:45.0010 5524 TermDD - ok
20:45:45.0057 5524 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
20:45:45.0088 5524 TermService - ok
20:45:45.0135 5524 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
20:45:45.0151 5524 Themes - ok
20:45:45.0166 5524 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
20:45:45.0182 5524 THREADORDER - ok
20:45:45.0197 5524 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
20:45:45.0213 5524 TrkWks - ok
20:45:45.0291 5524 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:45:45.0291 5524 TrustedInstaller - ok
20:45:45.0353 5524 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:45:45.0634 5524 tssecsrv - ok
20:45:45.0697 5524 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:45:45.0712 5524 TsUsbFlt - ok
20:45:45.0759 5524 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:45:45.0899 5524 tunnel - ok
20:45:45.0931 5524 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
20:45:45.0946 5524 uagp35 - ok
20:45:45.0993 5524 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:45:46.0149 5524 udfs - ok
20:45:46.0196 5524 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:45:46.0211 5524 UI0Detect - ok
20:45:46.0243 5524 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:45:46.0258 5524 uliagpkx - ok
20:45:46.0305 5524 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
20:45:46.0321 5524 umbus - ok
20:45:46.0352 5524 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
20:45:46.0352 5524 UmPass - ok
20:45:46.0414 5524 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
20:45:46.0430 5524 UmRdpService - ok
20:45:46.0461 5524 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
20:45:46.0492 5524 upnphost - ok
20:45:46.0539 5524 [ 1D9F2BD026E8E2D45033A4DF3F16B78C ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
20:45:46.0539 5524 usbaudio - ok
20:45:46.0601 5524 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:45:46.0742 5524 usbccgp - ok
20:45:46.0773 5524 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:45:46.0789 5524 usbcir - ok
20:45:46.0820 5524 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:45:47.0101 5524 usbehci - ok
20:45:47.0147 5524 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:45:47.0444 5524 usbhub - ok
20:45:47.0491 5524 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\drivers\usbohci.sys
20:45:47.0662 5524 usbohci - ok
20:45:47.0693 5524 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
20:45:47.0709 5524 usbprint - ok
20:45:47.0740 5524 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:45:47.0927 5524 USBSTOR - ok
20:45:47.0990 5524 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
20:45:48.0181 5524 usbuhci - ok
20:45:48.0233 5524 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
20:45:48.0389 5524 usbvideo - ok
20:45:48.0405 5524 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
20:45:48.0420 5524 UxSms - ok
20:45:48.0452 5524 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
20:45:48.0452 5524 VaultSvc - ok
20:45:48.0483 5524 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:45:48.0483 5524 vdrvroot - ok
20:45:48.0530 5524 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
20:45:48.0545 5524 vds - ok
20:45:48.0576 5524 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:45:48.0576 5524 vga - ok
20:45:48.0608 5524 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
20:45:48.0608 5524 VgaSave - ok
20:45:48.0639 5524 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:45:48.0639 5524 vhdmp - ok
20:45:48.0670 5524 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
20:45:48.0670 5524 viaagp - ok
20:45:48.0701 5524 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
20:45:48.0701 5524 ViaC7 - ok
20:45:48.0748 5524 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
20:45:48.0748 5524 viaide - ok
20:45:48.0779 5524 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
20:45:48.0779 5524 vmbus - ok
20:45:48.0795 5524 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
20:45:48.0873 5524 VMBusHID - ok
20:45:48.0904 5524 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:45:48.0904 5524 volmgr - ok
20:45:48.0935 5524 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:45:48.0935 5524 volmgrx - ok
20:45:48.0982 5524 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:45:48.0982 5524 volsnap - ok
20:45:49.0013 5524 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
20:45:49.0029 5524 vsmraid - ok
20:45:49.0076 5524 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
20:45:49.0107 5524 VSS - ok
20:45:49.0138 5524 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
20:45:49.0138 5524 vwifibus - ok
20:45:49.0185 5524 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
20:45:49.0200 5524 W32Time - ok
20:45:49.0216 5524 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
20:45:49.0216 5524 WacomPen - ok
20:45:49.0263 5524 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:45:49.0419 5524 WANARP - ok
20:45:49.0419 5524 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:45:49.0419 5524 Wanarpv6 - ok
20:45:49.0450 5524 [ 4074C9CBB02F817B508265A13546C79E ] wanusb C:\Windows\system32\DRIVERS\gwausb.sys
20:45:49.0606 5524 wanusb - ok
20:45:49.0653 5524 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
20:45:49.0856 5524 WatAdminSvc - ok
20:45:49.0902 5524 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
20:45:49.0934 5524 wbengine - ok
20:45:49.0965 5524 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:45:49.0980 5524 WbioSrvc - ok
20:45:50.0027 5524 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:45:50.0027 5524 wcncsvc - ok
20:45:50.0058 5524 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:45:50.0074 5524 WcsPlugInService - ok
20:45:50.0121 5524 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
20:45:50.0121 5524 Wd - ok
20:45:50.0183 5524 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:45:50.0214 5524 Wdf01000 - ok
20:45:50.0230 5524 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:45:50.0246 5524 WdiServiceHost - ok
20:45:50.0261 5524 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:45:50.0277 5524 WdiSystemHost - ok
20:45:50.0308 5524 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
20:45:50.0324 5524 WebClient - ok
20:45:50.0370 5524 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:45:50.0386 5524 Wecsvc - ok
20:45:50.0417 5524 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:45:50.0417 5524 wercplsupport - ok
20:45:50.0464 5524 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
20:45:50.0480 5524 WerSvc - ok
20:45:50.0511 5524 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:45:50.0526 5524 WfpLwf - ok
20:45:50.0558 5524 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:45:50.0573 5524 WIMMount - ok
20:45:50.0651 5524 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
20:45:50.0698 5524 WinDefend - ok
20:45:50.0714 5524 WinHttpAutoProxySvc - ok
20:45:50.0807 5524 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:45:50.0807 5524 Winmgmt - ok
20:45:50.0870 5524 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
20:45:51.0057 5524 WinRM - ok
20:45:51.0150 5524 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
20:45:51.0291 5524 WinUsb - ok
20:45:51.0353 5524 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
20:45:51.0384 5524 Wlansvc - ok
20:45:51.0416 5524 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:45:51.0416 5524 WmiAcpi - ok
20:45:51.0478 5524 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:45:51.0478 5524 wmiApSrv - ok
20:45:51.0587 5524 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
20:45:51.0634 5524 WMPNetworkSvc - ok
20:45:51.0681 5524 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:45:51.0681 5524 WPCSvc - ok
20:45:51.0743 5524 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:45:51.0743 5524 WPDBusEnum - ok
20:45:51.0790 5524 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:45:51.0806 5524 ws2ifsl - ok
20:45:51.0837 5524 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
20:45:51.0837 5524 wscsvc - ok
20:45:51.0852 5524 WSearch - ok
20:45:51.0977 5524 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
20:45:52.0055 5524 wuauserv - ok
20:45:52.0086 5524 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:45:52.0242 5524 WudfPf - ok
20:45:52.0274 5524 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:45:52.0274 5524 WUDFRd - ok
20:45:52.0320 5524 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:45:52.0336 5524 wudfsvc - ok
20:45:52.0398 5524 [ 3C5E51C05BE9B56EAFF4E388C3AB25E4 ] WwanSvc C:\Windows\System32\wwansvc.dll
20:45:52.0414 5524 WwanSvc - ok
20:45:52.0476 5524 [ 30B73EB97218A16CBC6DE535782A1B35 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x86.sys
20:45:52.0492 5524 yukonw7 - ok
20:45:52.0539 5524 ================ Scan global ===============================
20:45:52.0586 5524 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
20:45:52.0632 5524 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
20:45:52.0664 5524 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
20:45:52.0710 5524 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
20:45:52.0788 5524 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
20:45:52.0804 5524 [Global] - ok
20:45:52.0804 5524 ================ Scan MBR ==================================
20:45:52.0866 5524 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
20:45:53.0256 5524 \Device\Harddisk0\DR0 - ok
20:45:53.0272 5524 ================ Scan VBR ==================================
20:45:53.0272 5524 [ 1464142F75EDDAD4A157B8059117B706 ] \Device\Harddisk0\DR0\Partition1
20:45:53.0272 5524 \Device\Harddisk0\DR0\Partition1 - ok
20:45:53.0319 5524 [ 4C4AF403BC32C5DF9578163581D56788 ] \Device\Harddisk0\DR0\Partition2
20:45:53.0319 5524 \Device\Harddisk0\DR0\Partition2 - ok
20:45:53.0350 5524 [ 6D6B8D828B636D64E4218C236C924A03 ] \Device\Harddisk0\DR0\Partition3
20:45:53.0350 5524 \Device\Harddisk0\DR0\Partition3 - ok
20:45:53.0381 5524 [ 6B7D14CD7F3E760446697874B0FD5126 ] \Device\Harddisk0\DR0\Partition4
20:45:53.0381 5524 \Device\Harddisk0\DR0\Partition4 - ok
20:45:53.0381 5524 ============================================================
20:45:53.0381 5524 Scan finished
20:45:53.0381 5524 ============================================================
20:45:53.0412 5492 Detected object count: 1
20:45:53.0412 5492 Actual detected object count: 1
20:46:38.0161 5492 C:\Windows\system32\Drivers\sptd.sys - copied to quarantine
20:46:38.0629 5492 HKLM\SYSTEM\ControlSet001\services\sptd - will be deleted on reboot
20:46:38.0644 5492 HKLM\SYSTEM\ControlSet002\services\sptd - will be deleted on reboot
20:46:38.0816 5492 C:\Windows\system32\Drivers\sptd.sys - will be deleted on reboot
20:46:38.0816 5492 sptd ( LockedFile.Multi.Generic ) - User select action: Delete
20:46:51.0927 3208 Deinitialize success

TDSSKiller.2.8.16.0_20.06.2013_20.48.36_log

20:48:36.0372 3120 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:48:36.0996 3120 ============================================================
20:48:36.0996 3120 Current date / time: 2013/06/20 20:48:36.0996
20:48:36.0996 3120 SystemInfo:
20:48:36.0996 3120
20:48:36.0996 3120 OS Version: 6.1.7601 ServicePack: 1.0
20:48:36.0996 3120 Product type: Workstation
20:48:36.0996 3120 ComputerName: PIPA
20:48:36.0996 3120 UserName: Nimalika
20:48:36.0996 3120 Windows directory: C:\Windows
20:48:36.0996 3120 System windows directory: C:\Windows
20:48:36.0996 3120 Processor architecture: Intel x86
20:48:36.0996 3120 Number of processors: 2
20:48:36.0996 3120 Page size: 0x1000
20:48:36.0996 3120 Boot type: Normal boot
20:48:36.0996 3120 ============================================================
20:48:38.0696 3120 BG loaded
20:48:40.0084 3120 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:48:40.0131 3120 ============================================================
20:48:40.0131 3120 \Device\Harddisk0\DR0:
20:48:40.0131 3120 MBR partitions:
20:48:40.0131 3120 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x5000000
20:48:40.0131 3120 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x5000800, BlocksNum 0xA000000
20:48:40.0131 3120 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xF000800, BlocksNum 0xA000000
20:48:40.0287 3120 \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x19001000, BlocksNum 0x41C4000
20:48:40.0287 3120 ============================================================
20:48:40.0490 3120 C: <-> \Device\Harddisk0\DR0\Partition1
20:48:40.0942 3120 D: <-> \Device\Harddisk0\DR0\Partition4
20:48:41.0348 3120 E: <-> \Device\Harddisk0\DR0\Partition2
20:48:41.0613 3120 F: <-> \Device\Harddisk0\DR0\Partition3
20:48:41.0613 3120 ============================================================
20:48:41.0613 3120 Initialize success
20:48:41.0613 3120 ============================================================
20:50:23.0918 2136 ============================================================
20:50:23.0918 2136 Scan started
20:50:23.0918 2136 Mode: Manual; TDLFS;
20:50:23.0918 2136 ============================================================
20:50:26.0024 2136 ================ Scan system memory ========================
20:50:26.0024 2136 System memory - ok
20:50:26.0024 2136 ================ Scan services =============================
20:50:26.0258 2136 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:50:26.0274 2136 1394ohci - ok
20:50:26.0336 2136 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:50:26.0336 2136 ACPI - ok
20:50:26.0383 2136 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:50:26.0383 2136 AcpiPmi - ok
20:50:26.0508 2136 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
20:50:26.0524 2136 AdobeARMservice - ok
20:50:26.0648 2136 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
20:50:26.0680 2136 adp94xx - ok
20:50:26.0711 2136 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
20:50:26.0726 2136 adpahci - ok
20:50:26.0773 2136 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
20:50:26.0773 2136 adpu320 - ok
20:50:26.0867 2136 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:50:26.0867 2136 AeLookupSvc - ok
20:50:26.0929 2136 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
20:50:26.0960 2136 AFD - ok
20:50:27.0007 2136 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
20:50:27.0007 2136 agp440 - ok
20:50:27.0070 2136 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
20:50:27.0070 2136 aic78xx - ok
20:50:27.0116 2136 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
20:50:27.0116 2136 ALG - ok
20:50:27.0148 2136 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
20:50:27.0148 2136 aliide - ok
20:50:27.0194 2136 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
20:50:27.0194 2136 amdagp - ok
20:50:27.0226 2136 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
20:50:27.0226 2136 amdide - ok
20:50:27.0257 2136 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
20:50:27.0257 2136 AmdK8 - ok
20:50:27.0272 2136 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
20:50:27.0272 2136 AmdPPM - ok
20:50:27.0319 2136 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:50:27.0319 2136 amdsata - ok
20:50:27.0350 2136 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
20:50:27.0350 2136 amdsbs - ok
20:50:27.0382 2136 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:50:27.0382 2136 amdxata - ok
20:50:27.0428 2136 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
20:50:27.0428 2136 AppID - ok
20:50:27.0491 2136 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:50:27.0506 2136 AppIDSvc - ok
20:50:27.0538 2136 [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo C:\Windows\System32\appinfo.dll
20:50:27.0538 2136 Appinfo - ok
20:50:27.0616 2136 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
20:50:27.0631 2136 AppMgmt - ok
20:50:27.0678 2136 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
20:50:27.0678 2136 arc - ok
20:50:27.0694 2136 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
20:50:27.0709 2136 arcsas - ok
20:50:27.0756 2136 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:50:27.0772 2136 AsyncMac - ok
20:50:27.0803 2136 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
20:50:27.0803 2136 atapi - ok
20:50:27.0865 2136 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:50:27.0881 2136 AudioEndpointBuilder - ok
20:50:27.0912 2136 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
20:50:27.0912 2136 Audiosrv - ok
20:50:27.0974 2136 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:50:27.0974 2136 AxInstSV - ok
20:50:28.0037 2136 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
20:50:28.0052 2136 b06bdrv - ok
20:50:28.0099 2136 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
20:50:28.0115 2136 b57nd60x - ok
20:50:28.0162 2136 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
20:50:28.0162 2136 BDESVC - ok
20:50:28.0193 2136 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
20:50:28.0193 2136 Beep - ok
20:50:28.0286 2136 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
20:50:28.0302 2136 BFE - ok
20:50:28.0333 2136 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
20:50:28.0364 2136 BITS - ok
20:50:28.0380 2136 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
20:50:28.0380 2136 blbdrive - ok
20:50:28.0474 2136 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:50:28.0474 2136 bowser - ok
20:50:28.0505 2136 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:50:28.0520 2136 BrFiltLo - ok
20:50:28.0520 2136 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:50:28.0536 2136 BrFiltUp - ok
20:50:28.0583 2136 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
20:50:28.0583 2136 Browser - ok
20:50:28.0676 2136 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:50:28.0692 2136 Brserid - ok
20:50:28.0754 2136 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:50:28.0754 2136 BrSerWdm - ok
20:50:28.0801 2136 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:50:28.0801 2136 BrUsbMdm - ok
20:50:28.0817 2136 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:50:28.0817 2136 BrUsbSer - ok
20:50:28.0879 2136 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
20:50:28.0879 2136 BthEnum - ok
20:50:28.0910 2136 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
20:50:28.0910 2136 BTHMODEM - ok
20:50:28.0957 2136 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
20:50:28.0973 2136 BthPan - ok
20:50:29.0051 2136 [ 1153DE2E4F5941E10C399CB5592F78A1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
20:50:29.0066 2136 BTHPORT - ok
20:50:29.0129 2136 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
20:50:29.0129 2136 bthserv - ok
20:50:29.0191 2136 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
20:50:29.0207 2136 BTHUSB - ok
20:50:29.0285 2136 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:50:29.0285 2136 cdfs - ok
20:50:29.0378 2136 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\drivers\cdrom.sys
20:50:29.0394 2136 cdrom - ok
20:50:29.0456 2136 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
20:50:29.0456 2136 CertPropSvc - ok
20:50:29.0519 2136 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
20:50:29.0519 2136 circlass - ok
20:50:29.0566 2136 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
20:50:29.0581 2136 CLFS - ok
20:50:29.0706 2136 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:50:29.0706 2136 clr_optimization_v2.0.50727_32 - ok
20:50:29.0831 2136 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:50:29.0862 2136 clr_optimization_v4.0.30319_32 - ok
20:50:29.0878 2136 clwvd - ok
20:50:29.0893 2136 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
20:50:29.0909 2136 CmBatt - ok
20:50:29.0924 2136 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:50:29.0924 2136 cmdide - ok
20:50:29.0987 2136 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
20:50:30.0018 2136 CNG - ok
20:50:30.0065 2136 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
20:50:30.0065 2136 Compbatt - ok
20:50:30.0158 2136 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
20:50:30.0158 2136 CompositeBus - ok
20:50:30.0221 2136 COMSysApp - ok
20:50:30.0268 2136 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
20:50:30.0268 2136 crcdisk - ok
20:50:30.0361 2136 [ 3897DFF247D9ED0006190349DE264E14 ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:50:30.0361 2136 CryptSvc - ok
20:50:30.0424 2136 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
20:50:30.0470 2136 CSC - ok
20:50:30.0548 2136 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
20:50:30.0564 2136 CscService - ok
20:50:30.0642 2136 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
20:50:30.0658 2136 DcomLaunch - ok
20:50:30.0720 2136 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
20:50:30.0720 2136 defragsvc - ok
20:50:30.0782 2136 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:50:30.0782 2136 DfsC - ok
20:50:30.0860 2136 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
20:50:30.0892 2136 Dhcp - ok
20:50:30.0938 2136 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
20:50:30.0954 2136 discache - ok
20:50:31.0001 2136 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
20:50:31.0001 2136 Disk - ok
20:50:31.0048 2136 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:50:31.0048 2136 Dnscache - ok
20:50:31.0110 2136 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
20:50:31.0126 2136 dot3svc - ok
20:50:31.0188 2136 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
20:50:31.0188 2136 DPS - ok
20:50:31.0250 2136 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:50:31.0250 2136 drmkaud - ok
20:50:31.0313 2136 [ 16498EBC04AE9DD07049A8884B205C05 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:50:31.0328 2136 DXGKrnl - ok
20:50:31.0391 2136 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
20:50:31.0391 2136 EapHost - ok
20:50:31.0500 2136 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
20:50:31.0594 2136 ebdrv - ok
20:50:31.0640 2136 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
20:50:31.0640 2136 EFS - ok
20:50:31.0718 2136 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:50:31.0874 2136 ehRecvr - ok
20:50:31.0921 2136 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
20:50:31.0921 2136 ehSched - ok
20:50:31.0984 2136 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
20:50:32.0015 2136 elxstor - ok
20:50:32.0046 2136 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:50:32.0046 2136 ErrDev - ok
20:50:32.0124 2136 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
20:50:32.0124 2136 EventSystem - ok
20:50:32.0171 2136 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
20:50:32.0171 2136 exfat - ok
20:50:32.0218 2136 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:50:32.0218 2136 fastfat - ok
20:50:32.0296 2136 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
20:50:32.0296 2136 Fax - ok
20:50:32.0327 2136 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:50:32.0327 2136 fdc - ok
20:50:32.0358 2136 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
20:50:32.0358 2136 fdPHost - ok
20:50:32.0389 2136 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
20:50:32.0389 2136 FDResPub - ok
20:50:32.0420 2136 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:50:32.0420 2136 FileInfo - ok
20:50:32.0436 2136 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:50:32.0452 2136 Filetrace - ok
20:50:32.0452 2136 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:50:32.0467 2136 flpydisk - ok
20:50:32.0483 2136 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:50:32.0483 2136 FltMgr - ok
20:50:32.0561 2136 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll
20:50:32.0592 2136 FontCache - ok
20:50:32.0670 2136 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
20:50:32.0686 2136 FontCache3.0.0.0 - ok
20:50:32.0701 2136 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:50:32.0701 2136 FsDepends - ok
20:50:32.0748 2136 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:50:32.0748 2136 Fs_Rec - ok
20:50:32.0795 2136 [ E306A24D9694C724FA2491278BF50FDB ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:50:32.0810 2136 fvevol - ok
20:50:32.0857 2136 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
20:50:32.0857 2136 gagp30kx - ok
20:50:32.0904 2136 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
20:50:32.0935 2136 gpsvc - ok
20:50:33.0013 2136 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
20:50:33.0013 2136 gusvc - ok
20:50:33.0060 2136 [ 7DAD592A4D28092D584CFB4DEEF1373D ] HBtnKey C:\Windows\system32\DRIVERS\cpqbttn.sys
20:50:33.0060 2136 HBtnKey - ok
20:50:33.0091 2136 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:50:33.0091 2136 hcw85cir - ok
20:50:33.0138 2136 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:50:33.0154 2136 HdAudAddService - ok
20:50:33.0169 2136 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
20:50:33.0169 2136 HDAudBus - ok
20:50:33.0185 2136 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
20:50:33.0185 2136 HidBatt - ok
20:50:33.0200 2136 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
20:50:33.0200 2136 HidBth - ok
20:50:33.0247 2136 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
20:50:33.0247 2136 HidIr - ok
20:50:33.0278 2136 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
20:50:33.0278 2136 hidserv - ok
20:50:33.0325 2136 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:50:33.0341 2136 HidUsb - ok
20:50:33.0372 2136 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:50:33.0388 2136 hkmsvc - ok
20:50:33.0419 2136 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:50:33.0466 2136 HomeGroupListener - ok
20:50:33.0528 2136 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:50:33.0528 2136 HomeGroupProvider - ok
20:50:33.0575 2136 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:50:33.0575 2136 HpSAMD - ok
20:50:33.0684 2136 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:50:33.0700 2136 HTTP - ok
20:50:33.0762 2136 [ 92CA47DA32009CCC00A5ADED04ABBD78 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
20:50:33.0778 2136 hwdatacard - ok
20:50:33.0809 2136 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:50:33.0887 2136 hwpolicy - ok
20:50:33.0949 2136 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
20:50:33.0949 2136 i8042prt - ok
20:50:34.0012 2136 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:50:34.0027 2136 iaStorV - ok
20:50:34.0074 2136 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:50:34.0105 2136 idsvc - ok
20:50:34.0230 2136 [ 9467514EA189475A6E7FDC5D7BDE9D3F ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
20:50:34.0355 2136 igfx - ok
20:50:34.0386 2136 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
20:50:34.0386 2136 iirsp - ok
20:50:34.0464 2136 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
20:50:34.0480 2136 IKEEXT - ok
20:50:34.0511 2136 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
20:50:34.0511 2136 intelide - ok
20:50:34.0558 2136 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:50:34.0558 2136 intelppm - ok
20:50:34.0589 2136 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:50:34.0589 2136 IPBusEnum - ok
20:50:34.0636 2136 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:50:34.0636 2136 IpFilterDriver - ok
20:50:34.0698 2136 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:50:34.0698 2136 iphlpsvc - ok
20:50:34.0745 2136 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:50:34.0745 2136 IPMIDRV - ok
20:50:34.0760 2136 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:50:34.0760 2136 IPNAT - ok
20:50:34.0792 2136 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:50:34.0792 2136 IRENUM - ok
20:50:34.0807 2136 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:50:34.0823 2136 isapnp - ok
20:50:34.0870 2136 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:50:34.0870 2136 iScsiPrt - ok
20:50:34.0901 2136 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
20:50:34.0901 2136 kbdclass - ok
20:50:34.0948 2136 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
20:50:34.0963 2136 kbdhid - ok
20:50:34.0979 2136 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
20:50:34.0979 2136 KeyIso - ok
20:50:35.0010 2136 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:50:35.0026 2136 KSecDD - ok
20:50:35.0041 2136 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:50:35.0041 2136 KSecPkg - ok
20:50:35.0088 2136 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
20:50:35.0104 2136 KtmRm - ok
20:50:35.0119 2136 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
20:50:35.0135 2136 LanmanServer - ok
20:50:35.0182 2136 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:50:35.0182 2136 LanmanWorkstation - ok
20:50:35.0244 2136 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:50:35.0244 2136 lltdio - ok
20:50:35.0338 2136 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:50:35.0338 2136 lltdsvc - ok
20:50:35.0369 2136 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
20:50:35.0369 2136 lmhosts - ok
20:50:35.0416 2136 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
20:50:35.0462 2136 LSI_FC - ok
20:50:35.0478 2136 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
20:50:35.0478 2136 LSI_SAS - ok
20:50:35.0494 2136 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:50:35.0509 2136 LSI_SAS2 - ok
20:50:35.0540 2136 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:50:35.0540 2136 LSI_SCSI - ok
20:50:35.0587 2136 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
20:50:35.0603 2136 luafv - ok
20:50:35.0774 2136 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\Windows\system32\drivers\mbamswissarmy.sys
20:50:35.0774 2136 MBAMSwissArmy - ok
20:50:36.0071 2136 [ 10C84498D8A315178CEC55BF98BD4336 ] McAfee SiteAdvisor Service c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
20:50:36.0071 2136 McAfee SiteAdvisor Service - ok
20:50:36.0133 2136 [ AACB6AD3AEDDE4E4B115FDE632E883E8 ] McAfeeFramework C:\Program Files\McAfee\Common Framework\FrameworkService.exe
20:50:36.0149 2136 McAfeeFramework - ok
20:50:36.0227 2136 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
20:50:36.0227 2136 McComponentHostService - ok
20:50:36.0320 2136 [ E0CE4BD33B108B07E92CE3E399D0E81E ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
20:50:36.0320 2136 McShield - ok
20:50:36.0398 2136 [ 2CB697CCB48C77B17BE022A32F9B87F3 ] McTaskManager C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
20:50:36.0398 2136 McTaskManager - ok
20:50:36.0445 2136 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:50:36.0445 2136 Mcx2Svc - ok
20:50:36.0476 2136 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
20:50:36.0492 2136 megasas - ok
20:50:36.0508 2136 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
20:50:36.0508 2136 MegaSR - ok
20:50:36.0586 2136 [ D82D7A9E2AC5E8699CE6BB0C390C5C79 ] mfeapfk C:\Windows\system32\drivers\mfeapfk.sys
20:50:36.0586 2136 mfeapfk - ok
20:50:36.0648 2136 [ D8252CDC2CE76F3D5AD51636457FF7B3 ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys
20:50:36.0664 2136 mfeavfk - ok
20:50:36.0695 2136 mfeavfk01 - ok
20:50:36.0742 2136 [ 011920070CACA9E9DB178A6475B51C19 ] mfebopk C:\Windows\system32\drivers\mfebopk.sys
20:50:36.0742 2136 mfebopk - ok
20:50:36.0788 2136 [ 3B32918C8CD480FB590ED799EFADA162 ] mfehidk C:\Windows\system32\drivers\mfehidk.sys
20:50:36.0804 2136 mfehidk - ok
20:50:36.0851 2136 [ FA0E1F4510CB65ED7E105C8640CC2B46 ] mferkdet C:\Windows\system32\drivers\mferkdet.sys
20:50:36.0851 2136 mferkdet - ok
20:50:36.0866 2136 [ DA1067DC5999F00CDB6AC69553EE26AE ] mfevtp C:\Windows\system32\mfevtps.exe
20:50:36.0866 2136 mfevtp - ok
20:50:36.0929 2136 [ 704DDB296BC40820B544716E0C5F2A99 ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys
20:50:36.0944 2136 mfewfpk - ok
20:50:37.0038 2136 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
20:50:37.0132 2136 Microsoft Office Groove Audit Service - ok
20:50:37.0178 2136 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
20:50:37.0178 2136 MMCSS - ok
20:50:37.0210 2136 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
20:50:37.0225 2136 Modem - ok
20:50:37.0256 2136 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:50:37.0256 2136 monitor - ok
20:50:37.0272 2136 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\drivers\mouclass.sys
20:50:37.0272 2136 mouclass - ok
20:50:37.0303 2136 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:50:37.0303 2136 mouhid - ok
20:50:37.0350 2136 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:50:37.0350 2136 mountmgr - ok
20:50:37.0412 2136 [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
20:50:37.0428 2136 MozillaMaintenance - ok
20:50:37.0459 2136 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
20:50:37.0459 2136 mpio - ok
20:50:37.0490 2136 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:50:37.0490 2136 mpsdrv - ok
20:50:37.0537 2136 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:50:37.0553 2136 MpsSvc - ok
20:50:37.0584 2136 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:50:37.0600 2136 MRxDAV - ok
20:50:37.0678 2136 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:50:37.0678 2136 mrxsmb - ok
20:50:37.0724 2136 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:50:37.0724 2136 mrxsmb10 - ok
20:50:37.0756 2136 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:50:37.0756 2136 mrxsmb20 - ok
20:50:37.0802 2136 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
20:50:37.0802 2136 msahci - ok
20:50:37.0834 2136 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:50:37.0849 2136 msdsm - ok
20:50:37.0865 2136 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
20:50:37.0865 2136 MSDTC - ok
20:50:37.0912 2136 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:50:37.0912 2136 Msfs - ok
20:50:37.0943 2136 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:50:37.0943 2136 mshidkmdf - ok
20:50:37.0974 2136 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:50:37.0974 2136 msisadrv - ok
20:50:38.0021 2136 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:50:38.0021 2136 MSiSCSI - ok
20:50:38.0036 2136 msiserver - ok
20:50:38.0068 2136 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:50:38.0068 2136 MSKSSRV - ok
20:50:38.0114 2136 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:50:38.0114 2136 MSPCLOCK - ok
20:50:38.0130 2136 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:50:38.0146 2136 MSPQM - ok
20:50:38.0161 2136 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:50:38.0161 2136 MsRPC - ok
20:50:38.0192 2136 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
20:50:38.0192 2136 mssmbios - ok
20:50:38.0192 2136 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:50:38.0208 2136 MSTEE - ok
20:50:38.0208 2136 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
20:50:38.0208 2136 MTConfig - ok
20:50:38.0239 2136 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
20:50:38.0239 2136 Mup - ok
20:50:38.0302 2136 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
20:50:38.0302 2136 napagent - ok
20:50:38.0333 2136 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:50:38.0348 2136 NativeWifiP - ok
20:50:38.0395 2136 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:50:38.0411 2136 NDIS - ok
20:50:38.0426 2136 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:50:38.0426 2136 NdisCap - ok
20:50:38.0473 2136 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:50:38.0473 2136 NdisTapi - ok
20:50:38.0504 2136 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:50:38.0504 2136 Ndisuio - ok
20:50:38.0551 2136 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:50:38.0551 2136 NdisWan - ok
20:50:38.0582 2136 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:50:38.0598 2136 NDProxy - ok
20:50:38.0660 2136 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:50:38.0660 2136 NetBIOS - ok
20:50:38.0692 2136 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:50:38.0692 2136 NetBT - ok
20:50:38.0707 2136 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
20:50:38.0723 2136 Netlogon - ok
20:50:38.0770 2136 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
20:50:38.0770 2136 Netman - ok
20:50:38.0801 2136 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
20:50:38.0801 2136 netprofm - ok
20:50:38.0848 2136 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:50:38.0848 2136 NetTcpPortSharing - ok
20:50:38.0957 2136 [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] netw5v32 C:\Windows\system32\DRIVERS\netw5v32.sys
20:50:39.0066 2136 netw5v32 - ok
20:50:39.0097 2136 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
20:50:39.0097 2136 nfrd960 - ok
20:50:39.0144 2136 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll
20:50:39.0160 2136 NlaSvc - ok
20:50:39.0175 2136 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:50:39.0175 2136 Npfs - ok
20:50:39.0222 2136 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
20:50:39.0222 2136 nsi - ok
20:50:39.0253 2136 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:50:39.0253 2136 nsiproxy - ok
20:50:39.0316 2136 [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:50:39.0347 2136 Ntfs - ok
20:50:39.0378 2136 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
20:50:39.0378 2136 Null - ok
20:50:39.0409 2136 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:50:39.0409 2136 nvraid - ok
20:50:39.0472 2136 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:50:39.0472 2136 nvstor - ok
20:50:39.0503 2136 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:50:39.0503 2136 nv_agp - ok
20:50:39.0628 2136 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
20:50:39.0643 2136 odserv - ok
20:50:39.0690 2136 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:50:39.0690 2136 ohci1394 - ok
20:50:39.0752 2136 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:50:39.0752 2136 ose - ok
20:50:39.0799 2136 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:50:39.0799 2136 p2pimsvc - ok
20:50:39.0830 2136 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
20:50:39.0846 2136 p2psvc - ok
20:50:39.0877 2136 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
20:50:39.0877 2136 Parport - ok
20:50:39.0924 2136 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:50:39.0924 2136 partmgr - ok
20:50:39.0955 2136 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
20:50:39.0955 2136 Parvdm - ok
20:50:39.0986 2136 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:50:39.0986 2136 PcaSvc - ok
20:50:40.0018 2136 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
20:50:40.0018 2136 pci - ok
20:50:40.0064 2136 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
20:50:40.0064 2136 pciide - ok
20:50:40.0096 2136 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
20:50:40.0096 2136 pcmcia - ok
20:50:40.0127 2136 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
20:50:40.0127 2136 pcw - ok
20:50:40.0174 2136 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:50:40.0174 2136 PEAUTH - ok
20:50:40.0220 2136 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
20:50:40.0267 2136 PeerDistSvc - ok
20:50:40.0345 2136 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
20:50:40.0392 2136 pla - ok
20:50:40.0439 2136 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:50:40.0439 2136 PlugPlay - ok
20:50:40.0486 2136 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:50:40.0486 2136 PNRPAutoReg - ok
20:50:40.0517 2136 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:50:40.0517 2136 PNRPsvc - ok
20:50:40.0548 2136 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:50:40.0564 2136 PolicyAgent - ok
20:50:40.0642 2136 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
20:50:40.0642 2136 Power - ok
20:50:40.0688 2136 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:50:40.0704 2136 PptpMiniport - ok
20:50:40.0720 2136 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
20:50:40.0720 2136 Processor - ok
20:50:40.0766 2136 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
20:50:40.0766 2136 ProfSvc - ok
20:50:40.0798 2136 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:50:40.0798 2136 ProtectedStorage - ok
20:50:40.0829 2136 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:50:40.0829 2136 Psched - ok
20:50:40.0891 2136 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
20:50:40.0922 2136 ql2300 - ok
20:50:40.0954 2136 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
20:50:40.0954 2136 ql40xx - ok
20:50:41.0000 2136 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
20:50:41.0000 2136 QWAVE - ok
20:50:41.0016 2136 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:50:41.0016 2136 QWAVEdrv - ok
20:50:41.0047 2136 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:50:41.0047 2136 RasAcd - ok
20:50:41.0094 2136 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:50:41.0094 2136 RasAgileVpn - ok
20:50:41.0125 2136 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
20:50:41.0125 2136 RasAuto - ok
20:50:41.0156 2136 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:50:41.0156 2136 Rasl2tp - ok
20:50:41.0203 2136 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
20:50:41.0219 2136 RasMan - ok
20:50:41.0234 2136 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:50:41.0250 2136 RasPppoe - ok
20:50:41.0266 2136 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:50:41.0266 2136 RasSstp - ok
20:50:41.0312 2136 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:50:41.0468 2136 rdbss - ok
20:50:41.0484 2136 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
20:50:41.0484 2136 rdpbus - ok
20:50:41.0531 2136 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:50:41.0531 2136 RDPCDD - ok
20:50:41.0578 2136 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
20:50:41.0609 2136 RDPDR - ok
20:50:41.0624 2136 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:50:41.0624 2136 RDPENCDD - ok
20:50:41.0656 2136 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:50:41.0656 2136 RDPREFMP - ok
20:50:41.0702 2136 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:50:41.0718 2136 RDPWD - ok
20:50:41.0749 2136 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:50:41.0765 2136 rdyboost - ok
20:50:41.0843 2136 [ A0FF419B61AE47E26ADF3BB15DB4F2FE ] RealNetworks Downloader Resolver Service C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
20:50:41.0843 2136 RealNetworks Downloader Resolver Service - ok
20:50:41.0858 2136 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
20:50:41.0874 2136 RemoteAccess - ok
20:50:41.0905 2136 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:50:41.0905 2136 RemoteRegistry - ok
20:50:41.0952 2136 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
20:50:41.0952 2136 RFCOMM - ok
20:50:41.0999 2136 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:50:41.0999 2136 RpcEptMapper - ok
20:50:42.0030 2136 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
20:50:42.0030 2136 RpcLocator - ok
20:50:42.0061 2136 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
20:50:42.0061 2136 RpcSs - ok
20:50:42.0108 2136 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:50:42.0124 2136 rspndr - ok
20:50:42.0155 2136 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
20:50:42.0155 2136 s3cap - ok
20:50:42.0186 2136 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
20:50:42.0186 2136 SamSs - ok
20:50:42.0248 2136 [ A3281AEC37E0720A2BC28034C2DF2A56 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
20:50:42.0248 2136 SASDIFSV - ok
20:50:42.0264 2136 [ 7CE61C25C159F50F9EAF6D77FC83FA35 ] SASENUM C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
20:50:42.0264 2136 SASENUM - ok
20:50:42.0326 2136 [ 67D2688756DD304AF655349BAAD82BFF ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
20:50:42.0326 2136 SASKUTIL - ok
20:50:42.0373 2136 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:50:42.0529 2136 sbp2port - ok
20:50:42.0670 2136 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
20:50:42.0670 2136 SBSDWSCService - ok
20:50:42.0716 2136 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:50:42.0716 2136 SCardSvr - ok
20:50:42.0732 2136 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:50:42.0732 2136 scfilter - ok
20:50:42.0810 2136 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
20:50:42.0826 2136 Schedule - ok
20:50:42.0841 2136 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:50:42.0857 2136 SCPolicySvc - ok
20:50:42.0888 2136 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:50:42.0904 2136 SDRSVC - ok
20:50:42.0950 2136 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:50:42.0950 2136 secdrv - ok
20:50:42.0966 2136 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
20:50:42.0982 2136 seclogon - ok
20:50:42.0997 2136 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
20:50:42.0997 2136 SENS - ok
20:50:43.0060 2136 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:50:43.0060 2136 SensrSvc - ok
20:50:43.0075 2136 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:50:43.0075 2136 Serenum - ok
20:50:43.0091 2136 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:50:43.0106 2136 Serial - ok
20:50:43.0138 2136 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
20:50:43.0138 2136 sermouse - ok
20:50:43.0200 2136 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
20:50:43.0200 2136 SessionEnv - ok
20:50:43.0247 2136 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:50:43.0247 2136 sffdisk - ok
20:50:43.0278 2136 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:50:43.0278 2136 sffp_mmc - ok
20:50:43.0294 2136 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:50:43.0294 2136 sffp_sd - ok
20:50:43.0309 2136 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
20:50:43.0309 2136 sfloppy - ok
20:50:43.0340 2136 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:50:43.0356 2136 SharedAccess - ok
20:50:43.0387 2136 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:50:43.0403 2136 ShellHWDetection - ok
20:50:43.0450 2136 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
20:50:43.0450 2136 sisagp - ok
20:50:43.0481 2136 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:50:43.0481 2136 SiSRaid2 - ok
20:50:43.0496 2136 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
20:50:43.0496 2136 SiSRaid4 - ok
20:50:43.0574 2136 [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
20:50:43.0574 2136 SkypeUpdate - ok
20:50:43.0637 2136 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:50:43.0637 2136 Smb - ok
20:50:43.0715 2136 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:50:43.0730 2136 SNMPTRAP - ok
20:50:43.0746 2136 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
20:50:43.0746 2136 spldr - ok
20:50:43.0808 2136 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
20:50:43.0840 2136 Spooler - ok
20:50:43.0980 2136 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
20:50:44.0027 2136 sppsvc - ok
20:50:44.0074 2136 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:50:44.0089 2136 sppuinotify - ok
20:50:44.0136 2136 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
20:50:44.0136 2136 srv - ok
20:50:44.0198 2136 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:50:44.0198 2136 srv2 - ok
20:50:44.0245 2136 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:50:44.0245 2136 srvnet - ok
20:50:44.0292 2136 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:50:44.0308 2136 SSDPSRV - ok
20:50:44.0339 2136 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:50:44.0354 2136 SstpSvc - ok
20:50:44.0386 2136 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
20:50:44.0386 2136 stexstor - ok
20:50:44.0464 2136 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
20:50:44.0479 2136 StiSvc - ok
20:50:44.0526 2136 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
20:50:44.0542 2136 storflt - ok
20:50:44.0588 2136 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll
20:50:44.0588 2136 StorSvc - ok
20:50:44.0682 2136 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
20:50:44.0682 2136 storvsc - ok
20:50:44.0744 2136 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
20:50:44.0744 2136 swenum - ok
20:50:44.0791 2136 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
20:50:44.0822 2136 swprv - ok
20:50:44.0885 2136 [ F5D926807BD9BC0AF68F9376144DE425 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
20:50:44.0900 2136 SynTP - ok
20:50:44.0978 2136 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
20:50:45.0010 2136 SysMain - ok
20:50:45.0072 2136 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:50:45.0072 2136 TabletInputService - ok
20:50:45.0150 2136 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
20:50:45.0150 2136 TapiSrv - ok
20:50:45.0197 2136 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
20:50:45.0212 2136 TBS - ok
20:50:45.0306 2136 [ D32FDAC73FCD76B85389C39BC1087F2A ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:50:45.0353 2136 Tcpip - ok
20:50:45.0431 2136 [ D32FDAC73FCD76B85389C39BC1087F2A ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:50:45.0446 2136 TCPIP6 - ok
20:50:45.0509 2136 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:50:45.0509 2136 tcpipreg - ok
20:50:45.0556 2136 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:50:45.0556 2136 TDPIPE - ok
20:50:45.0634 2136 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:50:45.0634 2136 TDTCP - ok
20:50:45.0712 2136 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:50:45.0712 2136 tdx - ok
20:50:45.0743 2136 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
20:50:45.0743 2136 TermDD - ok
20:50:45.0805 2136 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
20:50:45.0836 2136 TermService - ok
20:50:45.0899 2136 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
20:50:45.0899 2136 Themes - ok
20:50:45.0930 2136 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
20:50:45.0930 2136 THREADORDER - ok
20:50:45.0977 2136 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
20:50:45.0977 2136 TrkWks - ok
20:50:46.0070 2136 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:50:46.0086 2136 TrustedInstaller - ok
20:50:46.0164 2136 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:50:46.0164 2136 tssecsrv - ok
20:50:46.0242 2136 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:50:46.0258 2136 TsUsbFlt - ok
20:50:46.0336 2136 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:50:46.0351 2136 tunnel - ok
20:50:46.0398 2136 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
20:50:46.0398 2136 uagp35 - ok
20:50:46.0460 2136 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:50:46.0476 2136 udfs - ok
20:50:46.0538 2136 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:50:46.0538 2136 UI0Detect - ok
20:50:46.0601 2136 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:50:46.0616 2136 uliagpkx - ok
20:50:46.0694 2136 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
20:50:46.0694 2136 umbus - ok
20:50:46.0741 2136 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
20:50:46.0741 2136 UmPass - ok
20:50:46.0788 2136 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
20:50:46.0804 2136 UmRdpService - ok
20:50:46.0835 2136 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
20:50:46.0850 2136 upnphost - ok
20:50:46.0913 2136 [ 1D9F2BD026E8E2D45033A4DF3F16B78C ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
20:50:46.0913 2136 usbaudio - ok
20:50:46.0960 2136 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:50:46.0960 2136 usbccgp - ok
20:50:47.0022 2136 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:50:47.0038 2136 usbcir - ok
20:50:47.0084 2136 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:50:47.0084 2136 usbehci - ok
20:50:47.0116 2136 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:50:47.0131 2136 usbhub - ok
20:50:47.0162 2136 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\drivers\usbohci.sys
20:50:47.0162 2136 usbohci - ok
20:50:47.0209 2136 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
20:50:47.0209 2136 usbprint - ok
20:50:47.0256 2136 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:50:47.0272 2136 USBSTOR - ok
20:50:47.0287 2136 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
20:50:47.0287 2136 usbuhci - ok
20:50:47.0365 2136 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
20:50:47.0365 2136 usbvideo - ok
20:50:47.0396 2136 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
20:50:47.0412 2136 UxSms - ok
20:50:47.0443 2136 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
20:50:47.0443 2136 VaultSvc - ok
20:50:47.0490 2136 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:50:47.0490 2136 vdrvroot - ok
20:50:47.0552 2136 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
20:50:47.0568 2136 vds - ok
20:50:47.0630 2136 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:50:47.0630 2136 vga - ok
20:50:47.0662 2136 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
20:50:47.0677 2136 VgaSave - ok
20:50:47.0724 2136 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:50:47.0724 2136 vhdmp - ok
20:50:47.0755 2136 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
20:50:47.0755 2136 viaagp - ok
20:50:47.0786 2136 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
20:50:47.0786 2136 ViaC7 - ok
20:50:47.0818 2136 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
20:50:47.0833 2136 viaide - ok
20:50:47.0880 2136 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
20:50:47.0880 2136 vmbus - ok
20:50:47.0911 2136 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
20:50:47.0911 2136 VMBusHID - ok
20:50:47.0942 2136 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:50:47.0942 2136 volmgr - ok
20:50:47.0958 2136 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:50:47.0974 2136 volmgrx - ok
20:50:48.0005 2136 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:50:48.0005 2136 volsnap - ok
20:50:48.0052 2136 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
20:50:48.0052 2136 vsmraid - ok
20:50:48.0114 2136 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
20:50:48.0145 2136 VSS - ok
20:50:48.0176 2136 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
20:50:48.0176 2136 vwifibus - ok
20:50:48.0239 2136 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
20:50:48.0270 2136 W32Time - ok
20:50:48.0301 2136 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
20:50:48.0301 2136 WacomPen - ok
20:50:48.0348 2136 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:50:48.0348 2136 WANARP - ok
20:50:48.0364 2136 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:50:48.0364 2136 Wanarpv6 - ok
20:50:48.0395 2136 [ 4074C9CBB02F817B508265A13546C79E ] wanusb C:\Windows\system32\DRIVERS\gwausb.sys
20:50:48.0395 2136 wanusb - ok
20:50:48.0457 2136 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
20:50:48.0504 2136 WatAdminSvc - ok
20:50:48.0566 2136 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
20:50:48.0598 2136 wbengine - ok
20:50:48.0644 2136 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:50:48.0660 2136 WbioSrvc - ok
20:50:48.0707 2136 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:50:48.0707 2136 wcncsvc - ok
20:50:48.0738 2136 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:50:48.0738 2136 WcsPlugInService - ok
20:50:48.0785 2136 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
20:50:48.0785 2136 Wd - ok
20:50:48.0832 2136 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:50:48.0847 2136 Wdf01000 - ok
20:50:48.0878 2136 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:50:48.0878 2136 WdiServiceHost - ok
20:50:48.0894 2136 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:50:48.0894 2136 WdiSystemHost - ok
20:50:48.0941 2136 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
20:50:48.0941 2136 WebClient - ok
20:50:48.0972 2136 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:50:48.0988 2136 Wecsvc - ok
20:50:49.0003 2136 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:50:49.0003 2136 wercplsupport - ok
20:50:49.0050 2136 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
20:50:49.0066 2136 WerSvc - ok
20:50:49.0097 2136 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:50:49.0097 2136 WfpLwf - ok
20:50:49.0144 2136 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:50:49.0144 2136 WIMMount - ok
20:50:49.0237 2136 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
20:50:49.0253 2136 WinDefend - ok
20:50:49.0268 2136 WinHttpAutoProxySvc - ok
20:50:49.0409 2136 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:50:49.0409 2136 Winmgmt - ok
20:50:49.0518 2136 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
20:50:49.0705 2136 WinRM - ok
20:50:49.0846 2136 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
20:50:49.0861 2136 WinUsb - ok
20:50:49.0908 2136 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
20:50:49.0955 2136 Wlansvc - ok
20:50:50.0033 2136 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:50:50.0048 2136 WmiAcpi - ok
20:50:50.0095 2136 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:50:50.0095 2136 wmiApSrv - ok
20:50:50.0220 2136 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
20:50:50.0251 2136 WMPNetworkSvc - ok
20:50:50.0298 2136 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:50:50.0298 2136 WPCSvc - ok
20:50:50.0392 2136 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:50:50.0392 2136 WPDBusEnum - ok
20:50:50.0423 2136 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:50:50.0438 2136 ws2ifsl - ok
20:50:50.0470 2136 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
20:50:50.0470 2136 wscsvc - ok
20:50:50.0485 2136 WSearch - ok
20:50:50.0563 2136 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
20:50:50.0594 2136 wuauserv - ok
20:50:50.0657 2136 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:50:50.0657 2136 WudfPf - ok
20:50:50.0688 2136 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:50:50.0688 2136 WUDFRd - ok
20:50:50.0735 2136 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:50:50.0735 2136 wudfsvc - ok
20:50:50.0782 2136 [ 3C5E51C05BE9B56EAFF4E388C3AB25E4 ] WwanSvc C:\Windows\System32\wwansvc.dll
20:50:50.0782 2136 WwanSvc - ok
20:50:50.0844 2136 [ 30B73EB97218A16CBC6DE535782A1B35 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x86.sys
20:50:50.0844 2136 yukonw7 - ok
20:50:50.0891 2136 ================ Scan global ===============================
20:50:50.0922 2136 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
20:50:50.0969 2136 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
20:50:50.0984 2136 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
20:50:51.0016 2136 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
20:50:51.0047 2136 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
20:50:51.0062 2136 [Global] - ok
20:50:51.0062 2136 ================ Scan MBR ==================================
20:50:51.0078 2136 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
20:50:51.0406 2136 \Device\Harddisk0\DR0 - ok
20:50:51.0406 2136 ================ Scan VBR ==================================
20:50:51.0406 2136 [ 1464142F75EDDAD4A157B8059117B706 ] \Device\Harddisk0\DR0\Partition1
20:50:51.0406 2136 \Device\Harddisk0\DR0\Partition1 - ok
20:50:51.0437 2136 [ 4C4AF403BC32C5DF9578163581D56788 ] \Device\Harddisk0\DR0\Partition2
20:50:51.0437 2136 \Device\Harddisk0\DR0\Partition2 - ok
20:50:51.0468 2136 [ 6D6B8D828B636D64E4218C236C924A03 ] \Device\Harddisk0\DR0\Partition3
20:50:51.0468 2136 \Device\Harddisk0\DR0\Partition3 - ok
20:50:51.0499 2136 [ 6B7D14CD7F3E760446697874B0FD5126 ] \Device\Harddisk0\DR0\Partition4
20:50:51.0499 2136 \Device\Harddisk0\DR0\Partition4 - ok
20:50:51.0499 2136 ================ Scan active images ========================
20:50:51.0515 2136 [ B7EFEF22FF426EC4158A177CB3B558D3 ] C:\Windows\System32\drivers\crashdmp.sys
20:50:51.0515 2136 C:\Windows\System32\drivers\crashdmp.sys - ok
20:50:51.0515 2136 [ 5428227D4730EBDFC842E9FB593F8C8A ] C:\Windows\System32\drivers\Dumpata.sys
20:50:51.0515 2136 C:\Windows\System32\drivers\Dumpata.sys - ok
20:50:51.0530 2136 [ 012C5F4E9349E711E11E0F19A8589F0A ] C:\Windows\System32\drivers\msahci.sys
20:50:51.0530 2136 C:\Windows\System32\drivers\msahci.sys - ok
20:50:51.0530 2136 [ 62A63EF2F3053B461CB327E4D69AAA74 ] C:\Windows\System32\drivers\dumpfve.sys
20:50:51.0530 2136 C:\Windows\System32\drivers\dumpfve.sys - ok
20:50:51.0530 2136 [ 505506526A9D467307B3C393DEDAF858 ] C:\Windows\System32\drivers\beep.sys
20:50:51.0530 2136 C:\Windows\System32\drivers\beep.sys - ok
20:50:51.0546 2136 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] C:\Windows\System32\drivers\cdrom.sys
20:50:51.0546 2136 C:\Windows\System32\drivers\cdrom.sys - ok
20:50:51.0546 2136 [ F9756A98D69098DCA8945D62858A812C ] C:\Windows\System32\drivers\null.sys
20:50:51.0546 2136 C:\Windows\System32\drivers\null.sys - ok
20:50:51.0562 2136 [ 8E38096AD5C8570A6F1570A61E251561 ] C:\Windows\System32\drivers\vga.sys
20:50:51.0562 2136 C:\Windows\System32\drivers\vga.sys - ok
20:50:51.0562 2136 [ 15C126D1B55814B9E5CAB10A9C1F4C67 ] C:\Windows\System32\drivers\videoprt.sys
20:50:51.0562 2136 C:\Windows\System32\drivers\videoprt.sys - ok
20:50:51.0577 2136 [ CB45A417C8EF7BA6BAC67EDCDDED8700 ] C:\Windows\System32\drivers\watchdog.sys
20:50:51.0577 2136 C:\Windows\System32\drivers\watchdog.sys - ok
20:50:51.0577 2136 [ 23DAE03F29D253AE74C44F99E515F9A1 ] C:\Windows\System32\drivers\RDPCDD.sys
20:50:51.0577 2136 C:\Windows\System32\drivers\RDPCDD.sys - ok
20:50:51.0593 2136 [ 5A53CA1598DD4156D44196D200C94B8A ] C:\Windows\System32\drivers\RDPENCDD.sys
20:50:51.0593 2136 C:\Windows\System32\drivers\RDPENCDD.sys - ok
20:50:51.0593 2136 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] C:\Windows\System32\drivers\RDPREFMP.sys
20:50:51.0593 2136 C:\Windows\System32\drivers\RDPREFMP.sys - ok
20:50:51.0593 2136 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] C:\Windows\System32\drivers\msfs.sys
20:50:51.0593 2136 C:\Windows\System32\drivers\msfs.sys - ok
20:50:51.0608 2136 [ 280122DDCF04B378EDD1AD54D71C1E54 ] C:\Windows\System32\drivers\netbt.sys
20:50:51.0608 2136 C:\Windows\System32\drivers\netbt.sys - ok
20:50:51.0608 2136 [ 1DB262A9F8C087E8153D89BEF3D2235F ] C:\Windows\System32\drivers\npfs.sys
20:50:51.0608 2136 C:\Windows\System32\drivers\npfs.sys - ok
20:50:51.0624 2136 [ 2F885864D5BC8A16C86BEE595969A48A ] C:\Windows\System32\drivers\tdi.sys
20:50:51.0624 2136 C:\Windows\System32\drivers\tdi.sys - ok
20:50:51.0624 2136 [ B459575348C20E8121D6039DA063C704 ] C:\Windows\System32\drivers\tdx.sys
20:50:51.0624 2136 C:\Windows\System32\drivers\tdx.sys - ok
20:50:51.0640 2136 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] C:\Windows\System32\drivers\afd.sys
20:50:51.0640 2136 C:\Windows\System32\drivers\afd.sys - ok
20:50:51.0640 2136 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] C:\Windows\System32\drivers\netbios.sys
20:50:51.0640 2136 C:\Windows\System32\drivers\netbios.sys - ok
20:50:51.0640 2136 [ 6270CCAE2A86DE6D146529FE55B3246A ] C:\Windows\System32\drivers\pacer.sys
20:50:51.0640 2136 C:\Windows\System32\drivers\pacer.sys - ok
20:50:51.0655 2136 [ 8B9A943F3B53861F2BFAF6C186168F79 ] C:\Windows\System32\drivers\wfplwf.sys
20:50:51.0655 2136 C:\Windows\System32\drivers\wfplwf.sys - ok
20:50:51.0655 2136 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] C:\Windows\System32\drivers\termdd.sys
20:50:51.0655 2136 C:\Windows\System32\drivers\termdd.sys - ok
20:50:51.0671 2136 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] C:\Windows\System32\drivers\wanarp.sys
20:50:51.0671 2136 C:\Windows\System32\drivers\wanarp.sys - ok
20:50:51.0671 2136 [ 67D2688756DD304AF655349BAAD82BFF ] C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
20:50:51.0671 2136 C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS - ok
20:50:51.0671 2136 [ A3281AEC37E0720A2BC28034C2DF2A56 ] C:\Program Files\SUPERAntiSpyware\sasdifsv.sys
20:50:51.0671 2136 C:\Program Files\SUPERAntiSpyware\sasdifsv.sys - ok
20:50:51.0686 2136 [ D528BC58A489409BA40334EBF96A311B ] C:\Windows\System32\drivers\rdbss.sys
20:50:51.0686 2136 C:\Windows\System32\drivers\rdbss.sys - ok
20:50:51.0686 2136 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] C:\Windows\System32\drivers\nsiproxy.sys
20:50:51.0686 2136 C:\Windows\System32\drivers\nsiproxy.sys - ok
20:50:51.0702 2136 [ 1A050B0274BFB3890703D490F330C0DA ] C:\Windows\System32\drivers\discache.sys
20:50:51.0702 2136 C:\Windows\System32\drivers\discache.sys - ok
20:50:51.0702 2136 [ FC6B9FF600CC585EA38B12589BD4E246 ] C:\Windows\System32\drivers\mssmbios.sys
20:50:51.0702 2136 C:\Windows\System32\drivers\mssmbios.sys - ok
20:50:51.0702 2136 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] C:\Windows\System32\drivers\csc.sys
20:50:51.0702 2136 C:\Windows\System32\drivers\csc.sys - ok
20:50:51.0718 2136 [ 2287078ED48FCFC477B05B20CF38F36F ] C:\Windows\System32\drivers\blbdrive.sys
20:50:51.0718 2136 C:\Windows\System32\drivers\blbdrive.sys - ok
20:50:51.0718 2136 [ F024449C97EC1E464AAFFDA18593DB88 ] C:\Windows\System32\drivers\dfsc.sys
20:50:51.0718 2136 C:\Windows\System32\drivers\dfsc.sys - ok
20:50:51.0733 2136 [ B2FA25D9B17A68BB93D58B0556E8C90D ] C:\Windows\System32\drivers\tunnel.sys
20:50:51.0733 2136 C:\Windows\System32\drivers\tunnel.sys - ok
20:50:51.0733 2136 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] C:\Windows\System32\drivers\intelppm.sys
20:50:51.0733 2136 C:\Windows\System32\drivers\intelppm.sys - ok
20:50:51.0733 2136 [ C30A91ADE8C9CB91E4281EC83C4500C6 ] C:\Windows\System32\ntdll.dll
20:50:51.0733 2136 C:\Windows\System32\ntdll.dll - ok
20:50:51.0749 2136 [ DE91DCC7BC55E940979097E98F743205 ] C:\Windows\System32\smss.exe
20:50:51.0749 2136 C:\Windows\System32\smss.exe - ok
20:50:51.0749 2136 [ 9467514EA189475A6E7FDC5D7BDE9D3F ] C:\Windows\System32\drivers\igdkmd32.sys
20:50:51.0749 2136 C:\Windows\System32\drivers\igdkmd32.sys - ok
20:50:51.0764 2136 [ 16498EBC04AE9DD07049A8884B205C05 ] C:\Windows\System32\drivers\dxgkrnl.sys
20:50:51.0764 2136 C:\Windows\System32\drivers\dxgkrnl.sys - ok
20:50:51.0764 2136 [ F88A52EB62019D6A62FDD9E08034DBD8 ] C:\Windows\System32\autochk.exe
20:50:51.0764 2136 C:\Windows\System32\autochk.exe - ok
20:50:51.0764 2136 [ E405328A0E38BF823E2361C413283F6D ] C:\Windows\System32\drivers\dxgmms1.sys
20:50:51.0764 2136 C:\Windows\System32\drivers\dxgmms1.sys - ok
20:50:51.0780 2136 [ 3AA940AA9AC3055FE32FF2D3D20CCD28 ] C:\Windows\System32\drivers\usbport.sys
20:50:51.0780 2136 C:\Windows\System32\drivers\usbport.sys - ok
20:50:51.0780 2136 [ 68DF884CF41CDADA664BEB01DAF67E3D ] C:\Windows\System32\drivers\usbuhci.sys
20:50:51.0780 2136 C:\Windows\System32\drivers\usbuhci.sys - ok
20:50:51.0796 2136 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] C:\Windows\System32\drivers\usbehci.sys
20:50:51.0796 2136 C:\Windows\System32\drivers\usbehci.sys - ok
20:50:51.0796 2136 [ 9036377B8A6C15DC2EEC53E489D159B5 ] C:\Windows\System32\drivers\hdaudbus.sys
20:50:51.0796 2136 C:\Windows\System32\drivers\hdaudbus.sys - ok
20:50:51.0796 2136 [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] C:\Windows\System32\drivers\netw5v32.sys
20:50:51.0796 2136 C:\Windows\System32\drivers\netw5v32.sys - ok
20:50:51.0811 2136 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] C:\Windows\System32\drivers\i8042prt.sys
20:50:51.0811 2136 C:\Windows\System32\drivers\i8042prt.sys - ok
20:50:51.0811 2136 [ 30B73EB97218A16CBC6DE535782A1B35 ] C:\Windows\System32\drivers\yk62x86.sys
20:50:51.0811 2136 C:\Windows\System32\drivers\yk62x86.sys - ok
20:50:51.0811 2136 [ ADEF52CA1AEAE82B50DF86B56413107E ] C:\Windows\System32\drivers\kbdclass.sys
20:50:51.0811 2136 C:\Windows\System32\drivers\kbdclass.sys - ok
20:50:51.0827 2136 [ 5787196F32D043572EC6565C0EF1B8E0 ] C:\Windows\System32\drivers\usbd.sys
20:50:51.0827 2136 C:\Windows\System32\drivers\usbd.sys - ok
20:50:51.0827 2136 [ F5D926807BD9BC0AF68F9376144DE425 ] C:\Windows\System32\drivers\SynTP.sys
20:50:51.0827 2136 C:\Windows\System32\drivers\SynTP.sys - ok
20:50:51.0842 2136 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] C:\Windows\System32\drivers\mouclass.sys
20:50:51.0842 2136 C:\Windows\System32\drivers\mouclass.sys - ok
20:50:51.0842 2136 [ 7DAD592A4D28092D584CFB4DEEF1373D ] C:\Windows\System32\drivers\CPQBttn.sys
20:50:51.0842 2136 C:\Windows\System32\drivers\CPQBttn.sys - ok
20:50:51.0858 2136 [ 931A1DF1520ABC6E84BA4A75E6957025 ] C:\Windows\System32\drivers\hidclass.sys
20:50:51.0858 2136 C:\Windows\System32\drivers\hidclass.sys - ok
20:50:51.0858 2136 [ 6C26122F1931D4D7810240F32DDCE890 ] C:\Windows\System32\drivers\hidparse.sys
20:50:51.0858 2136 C:\Windows\System32\drivers\hidparse.sys - ok
20:50:51.0858 2136 [ DEA805815E587DAD1DD2C502220B5616 ] C:\Windows\System32\drivers\CmBatt.sys
20:50:51.0858 2136 C:\Windows\System32\drivers\CmBatt.sys - ok
20:50:51.0874 2136 [ 0217679B8FCA58714C3BF2726D2CA84E ] C:\Windows\System32\drivers\wmiacpi.sys
20:50:51.0874 2136 C:\Windows\System32\drivers\wmiacpi.sys - ok
20:50:51.0874 2136 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] C:\Windows\System32\drivers\CompositeBus.sys
20:50:51.0874 2136 C:\Windows\System32\drivers\CompositeBus.sys - ok
20:50:51.0889 2136 [ 57EC4AEF73660166074D8F7F31C0D4FD ] C:\Windows\System32\drivers\agilevpn.sys
20:50:51.0889 2136 C:\Windows\System32\drivers\agilevpn.sys - ok
20:50:51.0889 2136 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] C:\Windows\System32\drivers\ndistapi.sys
20:50:51.0889 2136 C:\Windows\System32\drivers\ndistapi.sys - ok
20:50:51.0889 2136 [ 38FBE267E7E6983311179230FACB1017 ] C:\Windows\System32\drivers\ndiswan.sys
20:50:51.0889 2136 C:\Windows\System32\drivers\ndiswan.sys - ok
20:50:51.0905 2136 [ D9F91EAFEC2815365CBE6D167E4E332A ] C:\Windows\System32\drivers\rasl2tp.sys
20:50:51.0905 2136 C:\Windows\System32\drivers\rasl2tp.sys - ok
20:50:51.0905 2136 [ 0FE8B15916307A6AC12BFB6A63E45507 ] C:\Windows\System32\drivers\raspppoe.sys
20:50:51.0905 2136 C:\Windows\System32\drivers\raspppoe.sys - ok
20:50:51.0920 2136 [ 5DCEF0C32BE0F33277326586FA503689 ] C:\Windows\System32\drivers\ks.sys
20:50:51.0920 2136 C:\Windows\System32\drivers\ks.sys - ok
20:50:51.0920 2136 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] C:\Windows\System32\drivers\raspptp.sys
20:50:51.0920 2136 C:\Windows\System32\drivers\raspptp.sys - ok
20:50:51.0920 2136 [ 44101F495A83EA6401D886E7FD70096B ] C:\Windows\System32\drivers\rassstp.sys
20:50:51.0920 2136 C:\Windows\System32\drivers\rassstp.sys - ok
20:50:51.0936 2136 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] C:\Windows\System32\drivers\rdpbus.sys
20:50:51.0936 2136 C:\Windows\System32\drivers\rdpbus.sys - ok
20:50:51.0936 2136 [ E58C78A848ADD9610A4DB6D214AF5224 ] C:\Windows\System32\drivers\swenum.sys
20:50:51.0936 2136 C:\Windows\System32\drivers\swenum.sys - ok
20:50:51.0952 2136 [ D295BED4B898F0FD999FCFA9B32B071B ] C:\Windows\System32\drivers\umbus.sys
20:50:51.0952 2136 C:\Windows\System32\drivers\umbus.sys - ok
20:50:51.0952 2136 [ 9C278785347BCC991F8EA2999D90F58D ] C:\Windows\System32\normaliz.dll
20:50:51.0952 2136 C:\Windows\System32\normaliz.dll - ok
20:50:51.0967 2136 [ CFC97F07904067A1E5FAE195D534DA3A ] C:\Windows\System32\sechost.dll
20:50:51.0967 2136 C:\Windows\System32\sechost.dll - ok
20:50:51.0967 2136 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] C:\Windows\System32\drivers\usbhub.sys
20:50:51.0967 2136 C:\Windows\System32\drivers\usbhub.sys - ok
20:50:51.0967 2136 [ B3DC4D1658093C1E486CA9F22180BECF ] C:\Windows\System32\urlmon.dll
20:50:51.0967 2136 C:\Windows\System32\urlmon.dll - ok
20:50:51.0983 2136 [ B2DB6ABA2E292235749B80A9C3DFA867 ] C:\Windows\System32\imagehlp.dll
20:50:51.0983 2136 C:\Windows\System32\imagehlp.dll - ok
20:50:51.0983 2136 [ B7230010D97787AF3D25E4C82F2B06B9 ] C:\Windows\System32\usp10.dll
20:50:51.0983 2136 C:\Windows\System32\usp10.dll - ok
20:50:51.0998 2136 [ 565D78187494FB5F08B5A52DEB2AEA7A ] C:\Windows\System32\shell32.dll
20:50:51.0998 2136 C:\Windows\System32\shell32.dll - ok
20:50:51.0998 2136 [ 9E3CED91863E6EE98C24794D05E27A71 ] C:\Windows\System32\drivers\kbdhid.sys
20:50:51.0998 2136 C:\Windows\System32\drivers\kbdhid.sys - ok
20:50:51.0998 2136 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] C:\Windows\System32\drivers\ndproxy.sys
20:50:51.0998 2136 C:\Windows\System32\drivers\ndproxy.sys - ok
20:50:52.0014 2136 [ 27F9288AF019E6DACA281EDE51FF5928 ] C:\Windows\System32\drivers\drmk.sys
20:50:52.0014 2136 C:\Windows\System32\drivers\drmk.sys - ok
20:50:52.0014 2136 [ A5EF29D5315111C80A5C1ABAD14C8972 ] C:\Windows\System32\drivers\HdAudio.sys
20:50:52.0014 2136 C:\Windows\System32\drivers\HdAudio.sys - ok
20:50:52.0030 2136 [ D72708C9F49500C13D7D067E169B7715 ] C:\Windows\System32\drivers\portcls.sys
20:50:52.0030 2136 C:\Windows\System32\drivers\portcls.sys - ok
20:50:52.0030 2136 [ 95E2376B3323F062EB562B8586D0F14A ] C:\Windows\System32\advapi32.dll
20:50:52.0030 2136 C:\Windows\System32\advapi32.dll - ok
20:50:52.0030 2136 [ 9DC80A8AAAAAC397BDAB3C67165A824E ] C:\Windows\System32\msvcrt.dll
20:50:52.0030 2136 C:\Windows\System32\msvcrt.dll - ok
20:50:52.0045 2136 [ A8BB45F9ECAD993461E0FEF8E2A99152 ] C:\Windows\System32\Wldap32.dll
20:50:52.0045 2136 C:\Windows\System32\Wldap32.dll - ok
20:50:52.0045 2136 [ 7FF15A4F092CD4A96055BA69F903E3E9 ] C:\Windows\System32\ws2_32.dll
20:50:52.0045 2136 C:\Windows\System32\ws2_32.dll - ok
20:50:52.0061 2136 [ D1DE1EAFDE97BE41CF6585027FF3E732 ] C:\Windows\System32\comdlg32.dll
20:50:52.0061 2136 C:\Windows\System32\comdlg32.dll - ok
20:50:52.0061 2136 [ 10FB16B50AFFDA6D44588F3C445DC273 ] C:\Windows\System32\setupapi.dll
20:50:52.0061 2136 C:\Windows\System32\setupapi.dll - ok
20:50:52.0076 2136 [ AE09B85158C66E2C154C5C9B3C0027B3 ] C:\Windows\System32\kernel32.dll
20:50:52.0076 2136 C:\Windows\System32\kernel32.dll - ok
20:50:52.0076 2136 [ F383B1AD5D7FDC1ACB0D900B50572F8D ] C:\Windows\System32\iertutil.dll
20:50:52.0076 2136 C:\Windows\System32\iertutil.dll - ok
20:50:52.0076 2136 [ C9618BC9B2B0FD7C1138D8774795A79B ] C:\Windows\System32\msctf.dll
20:50:52.0076 2136 C:\Windows\System32\msctf.dll - ok
20:50:52.0092 2136 [ 070C5B9D3006602A07757179D9B56F5D ] C:\Windows\System32\difxapi.dll
20:50:52.0092 2136 C:\Windows\System32\difxapi.dll - ok
20:50:52.0092 2136 [ E87F5393F7D8CE2FACC4DFF703531392 ] C:\Windows\System32\gdi32.dll
20:50:52.0092 2136 C:\Windows\System32\gdi32.dll - ok
20:50:52.0092 2136 [ 4A8E2F20809CC161107FAA94F6CF2685 ] C:\Windows\System32\imm32.dll
20:50:52.0092 2136 C:\Windows\System32\imm32.dll - ok
20:50:52.0108 2136 [ 4F154D2C9C6DF951FD6E5AABBAE6B5EE ] C:\Windows\System32\lpk.dll
20:50:52.0108 2136 C:\Windows\System32\lpk.dll - ok
20:50:52.0108 2136 [ A543AC1F7138376D778D630A35FCBC4C ] C:\Windows\System32\psapi.dll
20:50:52.0108 2136 C:\Windows\System32\psapi.dll - ok
20:50:52.0123 2136 [ 8CC3C111D653E96F3EA1590891491D71 ] C:\Windows\System32\shlwapi.dll
20:50:52.0123 2136 C:\Windows\System32\shlwapi.dll - ok
20:50:52.0123 2136 [ 6400774E903729ADD0A62A24A334EE56 ] C:\Windows\System32\rpcrt4.dll
20:50:52.0123 2136 C:\Windows\System32\rpcrt4.dll - ok
20:50:52.0123 2136 [ D8252CDC2CE76F3D5AD51636457FF7B3 ] C:\Windows\System32\drivers\mfeavfk.sys
20:50:52.0123 2136 C:\Windows\System32\drivers\mfeavfk.sys - ok
20:50:52.0139 2136 [ 928CF7268086631F54C3D8E17238C6DD ] C:\Windows\System32\ole32.dll
20:50:52.0139 2136 C:\Windows\System32\ole32.dll - ok
20:50:52.0139 2136 [ 2473CA6595A2659D7039A4A89FECA269 ] C:\Windows\System32\wininet.dll
20:50:52.0139 2136 C:\Windows\System32\wininet.dll - ok
20:50:52.0154 2136 [ 6C765E82B57F2E66CE9C54AC238471D9 ] C:\Windows\System32\oleaut32.dll
20:50:52.0154 2136 C:\Windows\System32\oleaut32.dll - ok
20:50:52.0154 2136 [ F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 ] C:\Windows\System32\user32.dll
20:50:52.0154 2136 C:\Windows\System32\user32.dll - ok
20:50:52.0154 2136 [ FF5688D309347F2720911D8796912834 ] C:\Windows\System32\clbcatq.dll
20:50:52.0154 2136 C:\Windows\System32\clbcatq.dll - ok
20:50:52.0170 2136 [ 6377051C63D5552A311935C67E9FDFDC ] C:\Windows\System32\nsi.dll
20:50:52.0170 2136 C:\Windows\System32\nsi.dll - ok
20:50:52.0170 2136 [ 92245C959E5BC378809D2CC5E9F6E9C7 ] C:\Windows\System32\crypt32.dll
20:50:52.0170 2136 C:\Windows\System32\crypt32.dll - ok
20:50:52.0186 2136 [ AD88D390C9417C959E08F8BF6F2B8154 ] C:\Windows\System32\KernelBase.dll
20:50:52.0186 2136 C:\Windows\System32\KernelBase.dll - ok
20:50:52.0186 2136 [ 6A13B4F3B3F575F1E24B877B9359AABA ] C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
20:50:52.0186 2136 C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll - ok
20:50:52.0186 2136 [ 2E33DFD10F28F86C3FC40EE123CC3904 ] C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
20:50:52.0186 2136 C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll - ok
20:50:52.0201 2136 [ 1C60E09CA1C3A045BC4D367F67C915B7 ] C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
20:50:52.0201 2136 C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll - ok
20:50:52.0201 2136 [ 589CBC4989F750E1DA35625AB481CF43 ] C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
20:50:52.0201 2136 C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll - ok
20:50:52.0217 2136 [ 3BE0D923AA45A4DBE091C2D84F0B4FE7 ] C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
20:50:52.0217 2136 C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll - ok
20:50:52.0217 2136 [ 3FFAEA12666E565FF51BF2FCA674F543 ] C:\Windows\System32\cfgmgr32.dll
20:50:52.0217 2136 C:\Windows\System32\cfgmgr32.dll - ok
20:50:52.0217 2136 [ BDAC1AA64495D0F7E1FF810EBBF1F018 ] C:\Windows\System32\comctl32.dll
20:50:52.0232 2136 C:\Windows\System32\comctl32.dll - ok
20:50:52.0232 2136 [ CC4ED8BEA78B0DCA6F217E014C3291A7 ] C:\Windows\System32\devobj.dll
20:50:52.0232 2136 C:\Windows\System32\devobj.dll - ok
20:50:52.0232 2136 [ 17448AF0BBA9E7AB5EC955AF93F271BD ] C:\Windows\System32\wintrust.dll
20:50:52.0232 2136 C:\Windows\System32\wintrust.dll - ok
20:50:52.0248 2136 [ 6951562DC4625EEFC6EACD52AD165866 ] C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
20:50:52.0248 2136 C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll - ok
20:50:52.0248 2136 [ 938F39B50BAFE13D6F58C7790682C010 ] C:\Windows\System32\msasn1.dll
20:50:52.0248 2136 C:\Windows\System32\msasn1.dll - ok
20:50:52.0264 2136 [ 5FCD3320AAE71506B43F9E12E4E72172 ] C:\Windows\System32\drivers\dxapi.sys
20:50:52.0264 2136 C:\Windows\System32\drivers\dxapi.sys - ok
20:50:52.0264 2136 [ 52948A58E4E64427DC399A409EF1CAB5 ] C:\Windows\System32\win32k.sys
20:50:52.0264 2136 C:\Windows\System32\win32k.sys - ok
20:50:52.0264 2136 [ 23AB7E36551C6BA5370EF7F05142F0EB ] C:\Windows\System32\csrsrv.dll
20:50:52.0264 2136 C:\Windows\System32\csrsrv.dll - ok
20:50:52.0279 2136 [ 342271F6142E7C70805B8A81E1BA5F5C ] C:\Windows\System32\csrss.exe
20:50:52.0279 2136 C:\Windows\System32\csrss.exe - ok
20:50:52.0279 2136 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\System32\basesrv.dll
20:50:52.0279 2136 C:\Windows\System32\basesrv.dll - ok
20:50:52.0295 2136 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\System32\winsrv.dll
20:50:52.0295 2136 C:\Windows\System32\winsrv.dll - ok
20:50:52.0295 2136 [ BD9C55D7023C5DE374507ACC7A14E2AC ] C:\Windows\System32\drivers\usbccgp.sys
20:50:52.0295 2136 C:\Windows\System32\drivers\usbccgp.sys - ok
20:50:52.0295 2136 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] C:\Windows\System32\drivers\usbvideo.sys
20:50:52.0295 2136 C:\Windows\System32\drivers\usbvideo.sys - ok
20:50:52.0310 2136 [ 79D10964DE86B292320E9DFE02282A23 ] C:\Windows\System32\drivers\monitor.sys
20:50:52.0310 2136 C:\Windows\System32\drivers\monitor.sys - ok
20:50:52.0310 2136 [ 7C76B61A5E1EF5D1FA554CF134100F18 ] C:\Windows\System32\tsddd.dll
20:50:52.0310 2136 C:\Windows\System32\tsddd.dll - ok
20:50:52.0326 2136 [ C733D233B623B7FFCE5031E4B756EE26 ] C:\Windows\System32\profapi.dll
20:50:52.0326 2136 C:\Windows\System32\profapi.dll - ok
20:50:52.0326 2136 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\System32\sxssrv.dll
20:50:52.0326 2136 C:\Windows\System32\sxssrv.dll - ok
20:50:52.0326 2136 [ B5C5DCAD3899512020D135600129D665 ] C:\Windows\System32\wininit.exe
20:50:52.0326 2136 C:\Windows\System32\wininit.exe - ok
20:50:52.0342 2136 [ CAEF9CD6C10B1017E2C298D849CD31DB ] C:\Windows\System32\cdd.dll
20:50:52.0342 2136 C:\Windows\System32\cdd.dll - ok
20:50:52.0342 2136 [ 357B990A4249D7F7485B230C0CC8825A ] C:\Windows\System32\KBDUS.DLL
20:50:52.0342 2136 C:\Windows\System32\KBDUS.DLL - ok
20:50:52.0357 2136 [ 5997D769CDB108390DCFAEBF442BF816 ] C:\Windows\System32\RpcRtRemote.dll
20:50:52.0357 2136 C:\Windows\System32\RpcRtRemote.dll - ok
20:50:52.0357 2136 [ 919001D2BB17DF06CA3F8AC16AD039F6 ] C:\Windows\System32\sxs.dll
20:50:52.0357 2136 C:\Windows\System32\sxs.dll - ok
20:50:52.0357 2136 [ 633C2C060CF857099F6C4F8D75C952B1 ] C:\Windows\System32\WlS0WndH.dll
20:50:52.0357 2136 C:\Windows\System32\WlS0WndH.dll - ok
20:50:52.0373 2136 [ F08F6FCD09F9BE94C37ACC1B344685FF ] C:\Windows\System32\cryptbase.dll
20:50:52.0373 2136 C:\Windows\System32\cryptbase.dll - ok
20:50:52.0373 2136 [ 863F793D15B4026B1A5FDECA873D4D84 ] C:\Windows\System32\apphelp.dll
20:50:52.0373 2136 C:\Windows\System32\apphelp.dll - ok
20:50:52.0388 2136 [ 81951F51E318AECC2D68559E47485CC4 ] C:\Windows\System32\lsass.exe
20:50:52.0388 2136 C:\Windows\System32\lsass.exe - ok
20:50:52.0388 2136 [ 8AEA9A37C1A3565A204D37C5E72AB791 ] C:\Windows\System32\lsm.exe
20:50:52.0388 2136 C:\Windows\System32\lsm.exe - ok
20:50:52.0388 2136 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\System32\services.exe
20:50:52.0388 2136 C:\Windows\System32\services.exe - ok
20:50:52.0404 2136 [ 6D13E1406F50C66E2A95D97F22C47560 ] C:\Windows\System32\winlogon.exe
20:50:52.0404 2136 C:\Windows\System32\winlogon.exe - ok
20:50:52.0404 2136 [ 418E881201583A3039D81F43E39E6C78 ] C:\Windows\System32\winsta.dll
20:50:52.0404 2136 C:\Windows\System32\winsta.dll - ok
20:50:52.0420 2136 [ C95CA687D32DDAB1C91E1122E80D5E16 ] C:\Windows\System32\lsasrv.dll
20:50:52.0420 2136 C:\Windows\System32\lsasrv.dll - ok
20:50:52.0420 2136 [ 4A054C853031616D161A84BECF281F47 ] C:\Windows\System32\sspicli.dll
20:50:52.0420 2136 C:\Windows\System32\sspicli.dll - ok
20:50:52.0420 2136 [ E361AE3010EA4B3123DAB5BDAE21798F ] C:\Windows\System32\sspisrv.dll
20:50:52.0420 2136 C:\Windows\System32\sspisrv.dll - ok
20:50:52.0435 2136 [ 250AA41DE690561AF1282D598914564C ] C:\Windows\System32\scesrv.dll
20:50:52.0435 2136 C:\Windows\System32\scesrv.dll - ok
20:50:52.0435 2136 [ 3369D021265E369D57317D61FA86DD79 ] C:\Windows\System32\scext.dll
20:50:52.0435 2136 C:\Windows\System32\scext.dll - ok
20:50:52.0451 2136 [ 69678722290C78D5D7198C60B5A4E3E8 ] C:\Windows\System32\secur32.dll
20:50:52.0451 2136 C:\Windows\System32\secur32.dll - ok
20:50:52.0451 2136 [ 5CCDCD40E732D54E0F7451AC66AC1C87 ] C:\Windows\System32\srvcli.dll
20:50:52.0451 2136 C:\Windows\System32\srvcli.dll - ok
20:50:52.0451 2136 [ BA51FFE170C5B3AE8EC4F5BD2581A29E ] C:\Windows\System32\sysntfy.dll
20:50:52.0451 2136 C:\Windows\System32\sysntfy.dll - ok
20:50:52.0466 2136 [ D412B1B72C5AB020218E9A047D90CA05 ] C:\Windows\System32\wmsgapi.dll
20:50:52.0466 2136 C:\Windows\System32\wmsgapi.dll - ok
20:50:52.0466 2136 [ 1128637CAD49A8E3C8B5FA5D0A061525 ] C:\Windows\System32\cryptdll.dll
20:50:52.0466 2136 C:\Windows\System32\cryptdll.dll - ok
20:50:52.0482 2136 [ 245F4691314F42D4D1BC06442F0B2086 ] C:\Windows\System32\samsrv.dll
20:50:52.0482 2136 C:\Windows\System32\samsrv.dll - ok
20:50:52.0482 2136 [ 82C089EA2A3EEFADF3588EA71E8BDADA ] C:\Windows\System32\wevtapi.dll
20:50:52.0482 2136 C:\Windows\System32\wevtapi.dll - ok
20:50:52.0482 2136 [ FB4EB9352B7D698E6B3C2AA2ED724DAD ] C:\Windows\System32\authz.dll
20:50:52.0482 2136 C:\Windows\System32\authz.dll - ok
20:50:52.0498 2136 [ FC7650224790CAE75A5E9231961FDEC5 ] C:\Windows\System32\bcrypt.dll
20:50:52.0498 2136 C:\Windows\System32\bcrypt.dll - ok
20:50:52.0498 2136 [ 50BA656134F78AF64E4DD3C8B6FEFD7E ] C:\Windows\System32\cngaudit.dll
20:50:52.0498 2136 C:\Windows\System32\cngaudit.dll - ok
20:50:52.0513 2136 [ BF6D6ED5FADCEEE885BD0144ECF1BA27 ] C:\Windows\System32\ncrypt.dll
20:50:52.0513 2136 C:\Windows\System32\ncrypt.dll - ok
20:50:52.0513 2136 [ BDA0B954A30498B5A7EDC6204CBA07ED ] C:\Windows\System32\kerberos.dll
20:50:52.0513 2136 C:\Windows\System32\kerberos.dll - ok
20:50:52.0513 2136 [ C90878913DF3DC504790282043DB5F4C ] C:\Windows\System32\msprivs.dll
20:50:52.0513 2136 C:\Windows\System32\msprivs.dll - ok
20:50:52.0529 2136 [ 6DCFAEC6D1334AA6CDF8961DB4633CBF ] C:\Windows\System32\negoexts.dll
20:50:52.0529 2136 C:\Windows\System32\negoexts.dll - ok
20:50:52.0529 2136 [ E343CABBD8D600ABAF3F11625D33B3D0 ] C:\Windows\System32\netjoin.dll
20:50:52.0529 2136 C:\Windows\System32\netjoin.dll - ok
20:50:52.0544 2136 [ 7321F18D1F820612ED0E9F2D4B578A7E ] C:\Windows\System32\cryptsp.dll
20:50:52.0544 2136 C:\Windows\System32\cryptsp.dll - ok
20:50:52.0544 2136 [ 4C1E16B9A53102C8D6FBA587CBCB95DE ] C:\Windows\System32\msv1_0.dll
20:50:52.0544 2136 C:\Windows\System32\msv1_0.dll - ok
20:50:52.0544 2136 [ 8999B8631C7FD9F7F9EC3CAFD953BA24 ] C:\Windows\System32\mswsock.dll
20:50:52.0544 2136 C:\Windows\System32\mswsock.dll - ok
20:50:52.0560 2136 [ 73E8667A19FEEDD856DF2695E9E511D4 ] C:\Windows\System32\wship6.dll
20:50:52.0560 2136 C:\Windows\System32\wship6.dll - ok
20:50:52.0560 2136 [ B40420876B9288E0A1C8CCA8A84E5DC9 ] C:\Windows\System32\dnsapi.dll
20:50:52.0560 2136 C:\Windows\System32\dnsapi.dll - ok
20:50:52.0576 2136 [ 8EA53101FF2B15BDFF934B62A8FB326D ] C:\Windows\System32\logoncli.dll
20:50:52.0576 2136 C:\Windows\System32\logoncli.dll - ok
20:50:52.0576 2136 [ C1809B9907ADEDAF16F50C894100883B ] C:\Windows\System32\netlogon.dll
20:50:52.0576 2136 C:\Windows\System32\netlogon.dll - ok
20:50:52.0576 2136 [ 3D3CBD1847F980FB03343A63671E7886 ] C:\Windows\System32\schannel.dll
20:50:52.0576 2136 C:\Windows\System32\schannel.dll - ok
20:50:52.0591 2136 [ 0450CF487ECD8A67B56F59F9A96D024D ] C:\Windows\System32\wdigest.dll
20:50:52.0591 2136 C:\Windows\System32\wdigest.dll - ok
20:50:52.0591 2136 [ E8449FE262D7406BCB2AC2A45C53EC5F ] C:\Windows\System32\bcryptprimitives.dll
20:50:52.0591 2136 C:\Windows\System32\bcryptprimitives.dll - ok
20:50:52.0607 2136 [ 37CC990D4E2CDFAE12AC47F6B620FC13 ] C:\Windows\System32\pku2u.dll
20:50:52.0607 2136 C:\Windows\System32\pku2u.dll - ok
20:50:52.0607 2136 [ ED8EC63F7522DF4852147C84EC62C36A ] C:\Windows\System32\rsaenh.dll
20:50:52.0607 2136 C:\Windows\System32\rsaenh.dll - ok
20:50:52.0607 2136 [ D29E45078CF4020CE0AAC82EC652D1EA ] C:\Windows\System32\TSpkg.dll
20:50:52.0607 2136 C:\Windows\System32\TSpkg.dll - ok
20:50:52.0622 2136 [ 4E5FE39C1076D115EC8BFCFE14D75B80 ] C:\Windows\System32\credssp.dll
20:50:52.0622 2136 C:\Windows\System32\credssp.dll - ok
20:50:52.0622 2136 [ 91F434FF6606ED9BDC6A05D651B69553 ] C:\Windows\System32\efslsaext.dll
20:50:52.0622 2136 C:\Windows\System32\efslsaext.dll - ok
20:50:52.0622 2136 [ 8124944EC89D6A1815E4E53F5B96AAF4 ] C:\Windows\System32\scecli.dll
20:50:52.0622 2136 C:\Windows\System32\scecli.dll - ok
20:50:52.0638 2136 [ FD1D6C73E6333BE727CBCC6054247654 ] C:\Windows\System32\drivers\TsUsbFlt.sys
20:50:52.0638 2136 C:\Windows\System32\drivers\TsUsbFlt.sys - ok
20:50:52.0638 2136 [ 7222995615BF93B628DCEA4BD6CCACF7 ] C:\Windows\System32\ubpm.dll
20:50:52.0638 2136 C:\Windows\System32\ubpm.dll - ok
20:50:52.0654 2136 [ 54A47F6B5E09A77E61649109C6A08866 ] C:\Windows\System32\svchost.exe
20:50:52.0654 2136 C:\Windows\System32\svchost.exe - ok
20:50:52.0654 2136 [ FD07F21E0A19C27ED4E1EEC2B07452B3 ] C:\Windows\System32\devrtl.dll
20:50:52.0654 2136 C:\Windows\System32\devrtl.dll - ok
20:50:52.0654 2136 [ 4BDBBE5E4208022DD794F7EEEB0F7366 ] C:\Windows\System32\SPInf.dll
20:50:52.0654 2136 C:\Windows\System32\SPInf.dll - ok
20:50:52.0669 2136 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] C:\Windows\System32\umpnpmgr.dll
20:50:52.0669 2136 C:\Windows\System32\umpnpmgr.dll - ok
20:50:52.0669 2136 [ D15618A0FF8DBC2C5BF3726BACC75A0B ] C:\Windows\System32\userenv.dll
20:50:52.0669 2136 C:\Windows\System32\userenv.dll - ok
20:50:52.0669 2136 [ 1097F3035BAF46CED8B332B3564C5108 ] C:\Windows\System32\gpapi.dll
20:50:52.0669 2136 C:\Windows\System32\gpapi.dll - ok
20:50:52.0685 2136 [ 5893EBDCE371174AC89ECD7731DD6D77 ] C:\Windows\System32\pcwum.dll
20:50:52.0685 2136 C:\Windows\System32\pcwum.dll - ok
20:50:52.0685 2136 [ F87D30E72E03D579A5199CCB3831D6EA ] C:\Windows\System32\umpo.dll
20:50:52.0685 2136 C:\Windows\System32\umpo.dll - ok
20:50:52.0700 2136 [ 08DFDBD2FD4EA951DC46B1C7661ED35A ] C:\Windows\System32\powrprof.dll
20:50:52.0700 2136 C:\Windows\System32\powrprof.dll - ok
20:50:52.0700 2136 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] C:\Windows\System32\drivers\luafv.sys
20:50:52.0700 2136 C:\Windows\System32\drivers\luafv.sys - ok
20:50:52.0716 2136 [ 7660F01D3B38ACA1747E397D21D790AF ] C:\Windows\System32\rpcss.dll
20:50:52.0716 2136 C:\Windows\System32\rpcss.dll - ok
20:50:52.0716 2136 [ 78D072F35BC45D9E4E1B61895C152234 ] C:\Windows\System32\RpcEpMap.dll
20:50:52.0716 2136 C:\Windows\System32\RpcEpMap.dll - ok
20:50:52.0716 2136 [ 81F08948A0F1475894C99D4D19A158A8 ] C:\Windows\System32\wshqos.dll
20:50:52.0716 2136 C:\Windows\System32\wshqos.dll - ok
20:50:52.0732 2136 [ EE5C8E27C37B79CB54A2FCEEED2DC262 ] C:\Windows\System32\WSHTCPIP.DLL
20:50:52.0732 2136 C:\Windows\System32\WSHTCPIP.DLL - ok
20:50:52.0732 2136 [ 3F50200237961034FACE602373838980 ] C:\Windows\System32\FirewallAPI.dll
20:50:52.0732 2136 C:\Windows\System32\FirewallAPI.dll - ok
20:50:52.0747 2136 [ 702254574E7E52052DE39408457B7149 ] C:\Windows\System32\version.dll
20:50:52.0747 2136 C:\Windows\System32\version.dll - ok
20:50:52.0747 2136 [ 3EF0D8AB08385AAB5802E773511A2E6A ] C:\Windows\System32\LogonUI.exe
20:50:52.0747 2136 C:\Windows\System32\LogonUI.exe - ok
20:50:52.0747 2136 [ 241E015DD809CFB23242F890B1FC575B ] C:\Windows\System32\wevtsvc.dll
20:50:52.0747 2136 C:\Windows\System32\wevtsvc.dll - ok
20:50:52.0763 2136 [ E904178851A6A44BFA97E064EF779E9D ] C:\Windows\System32\authui.dll
20:50:52.0763 2136 C:\Windows\System32\authui.dll - ok
20:50:52.0763 2136 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] C:\Windows\System32\audiosrv.dll
20:50:52.0763 2136 C:\Windows\System32\audiosrv.dll - ok
20:50:52.0778 2136 [ E12C4928B32ACE04610259647F072635 ] C:\Windows\System32\FntCache.dll
20:50:52.0778 2136 C:\Windows\System32\FntCache.dll - ok
20:50:52.0778 2136 [ 139D3AB6AA920C34C50CBFFB9EB7D222 ] C:\Windows\System32\avrt.dll
20:50:52.0778 2136 C:\Windows\System32\avrt.dll - ok
20:50:52.0778 2136 [ 146B6F43A673379A3C670E86D89BE5EA ] C:\Windows\System32\mmcss.dll
20:50:52.0778 2136 C:\Windows\System32\mmcss.dll - ok
20:50:52.0794 2136 [ 243974EC02F7AE49E4179C54624143AB ] C:\Windows\System32\MMDevAPI.dll
20:50:52.0794 2136 C:\Windows\System32\MMDevAPI.dll - ok
20:50:52.0794 2136 [ 12C45E3CB6D65F73209549E2D02ECA7A ] C:\Windows\System32\propsys.dll
20:50:52.0794 2136 C:\Windows\System32\propsys.dll - ok
20:50:52.0810 2136 [ 28CA821606669BB9215CE010767720FA ] C:\Windows\System32\cryptui.dll
20:50:52.0810 2136 C:\Windows\System32\cryptui.dll - ok
20:50:52.0810 2136 [ F68194F74350D4A2ADE98961E33F884C ] C:\Windows\System32\audiodg.exe
20:50:52.0810 2136 C:\Windows\System32\audiodg.exe - ok
20:50:52.0810 2136 [ 8C338238C16777A802D6A9211EB2BA50 ] C:\Windows\System32\netprofm.dll
20:50:52.0810 2136 C:\Windows\System32\netprofm.dll - ok
20:50:52.0825 2136 [ 3FD15B4611D9BDA3F8013548C0ECAECA ] C:\Windows\System32\ntmarta.dll
20:50:52.0825 2136 C:\Windows\System32\ntmarta.dll - ok
20:50:52.0825 2136 [ 15F93B37F6801943360D9EB42485D5D3 ] C:\Windows\System32\cscsvc.dll
20:50:52.0825 2136 C:\Windows\System32\cscsvc.dll - ok
20:50:52.0841 2136 [ E897EAF5ED6BA41E081060C9B447A673 ] C:\Windows\System32\gpsvc.dll
20:50:52.0841 2136 C:\Windows\System32\gpsvc.dll - ok
20:50:52.0841 2136 [ 50E0DD0A5B8D8BC353578F2F73926697 ] C:\Windows\System32\nlaapi.dll
20:50:52.0841 2136 C:\Windows\System32\nlaapi.dll - ok
20:50:52.0841 2136 [ 772F44012DBE49DE894976AE2259A659 ] C:\Windows\System32\PeerDist.dll
20:50:52.0841 2136 C:\Windows\System32\PeerDist.dll - ok
20:50:52.0856 2136 [ CADEFAC453040E370A1BDFF3973BE00D ] C:\Windows\System32\profsvc.dll
20:50:52.0856 2136 C:\Windows\System32\profsvc.dll - ok
20:50:52.0856 2136 [ F10E5311E5093FA3C00FF88C54C32FCA ] C:\Windows\System32\atl.dll
20:50:52.0856 2136 C:\Windows\System32\atl.dll - ok
20:50:52.0856 2136 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] C:\Windows\System32\themeservice.dll
20:50:52.0872 2136 C:\Windows\System32\themeservice.dll - ok
20:50:52.0872 2136 [ 2F040CF0613A6D64DCBBA9EE81F5A5AE ] C:\Windows\System32\dsrole.dll
20:50:52.0872 2136 C:\Windows\System32\dsrole.dll - ok
20:50:52.0872 2136 [ 8B74CEC6980D4816B0037AE9A27E538F ] C:\Windows\System32\slc.dll
20:50:52.0872 2136 C:\Windows\System32\slc.dll - ok
20:50:52.0888 2136 [ C5A99A4C0DC9F0F5A95BA0C83D30A549 ] C:\Windows\System32\mstask.dll
20:50:52.0888 2136 C:\Windows\System32\mstask.dll - ok
20:50:52.0888 2136 [ 544EFF88AC6C85DF5A4D6F18DFE08CFC ] C:\Windows\System32\taskschd.dll
20:50:52.0888 2136 C:\Windows\System32\taskschd.dll - ok
20:50:52.0888 2136 [ F6916EFC29D9953D5D0DF06882AE8E16 ] C:\Windows\System32\es.dll
20:50:52.0888 2136 C:\Windows\System32\es.dll - ok
20:50:52.0903 2136 [ DCB7FCDCC97F87360F75D77425B81737 ] C:\Windows\System32\Sens.dll
20:50:52.0903 2136 C:\Windows\System32\Sens.dll - ok
20:50:52.0903 2136 [ AC8C80DC4F1A6E60C9A762C1799F0B39 ] C:\Windows\System32\adtschema.dll
20:50:52.0903 2136 C:\Windows\System32\adtschema.dll - ok
20:50:52.0919 2136 [ 808D8A8B2A3074002852BC856D419576 ] C:\Windows\System32\comres.dll
20:50:52.0919 2136 C:\Windows\System32\comres.dll - ok
20:50:52.0919 2136 [ 8B0B4C5927A333A05513791758350DC4 ] C:\Windows\System32\microsoft-windows-kernel-power-events.dll
20:50:52.0919 2136 C:\Windows\System32\microsoft-windows-kernel-power-events.dll - ok
20:50:52.0919 2136 [ 16935C98FF639D185086A3529B1F2067 ] C:\Windows\System32\wlansvc.dll
20:50:52.0919 2136 C:\Windows\System32\wlansvc.dll - ok
20:50:52.0934 2136 [ 7520EC808E0C35E0EE6F841294316653 ] C:\Windows\System32\drivers\fltMgr.sys
20:50:52.0934 2136 C:\Windows\System32\drivers\fltMgr.sys - ok
20:50:52.0934 2136 [ D93A937A2A9D2CBC06B3A615A197011F ] C:\Windows\System32\PSHED.DLL
20:50:52.0934 2136 C:\Windows\System32\PSHED.DLL - ok
20:50:52.0950 2136 [ 1F5497D7D3D79C7BF0AB0C8B4C5BFE6E ] C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll
20:50:52.0950 2136 C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll - ok
20:50:52.0950 2136 [ 352B3DC62A0D259A82A052238425C872 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
20:50:52.0950 2136 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll - ok
20:50:52.0966 2136 [ C30A3E5DEEEBA22E782AC54C5AF5F352 ] C:\Windows\System32\samlib.dll
20:50:52.0966 2136 C:\Windows\System32\samlib.dll - ok
20:50:52.0966 2136 [ F14A9B1778376D0B1788E402AC1F831A ] C:\Windows\System32\shacct.dll
20:50:52.0966 2136 C:\Windows\System32\shacct.dll - ok
20:50:52.0966 2136 [ 081E6E1C91AEC36758902A9F727CD23C ] C:\Windows\System32\uxsms.dll
20:50:52.0966 2136 C:\Windows\System32\uxsms.dll - ok
20:50:52.0981 2136 [ 6A6B2EE4565A178035BE2A4FF6F2C968 ] C:\Windows\System32\wtsapi32.dll
20:50:52.0981 2136 C:\Windows\System32\wtsapi32.dll - ok
20:50:52.0981 2136 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] C:\Windows\System32\drivers\lltdio.sys
20:50:52.0981 2136 C:\Windows\System32\drivers\lltdio.sys - ok
20:50:52.0981 2136 [ 63BFDF555DA2075A77D677829C3CCCD0 ] C:\Windows\System32\uxtheme.dll
20:50:52.0981 2136 C:\Windows\System32\uxtheme.dll - ok
20:50:52.0997 2136 [ 7717F84F483002815490033BF069DABD ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d27359
8668a06b\GdiPlus.dll
20:50:52.0997 2136 C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d27359
8668a06b\GdiPlus.dll - ok
20:50:52.0997 2136 [ EE06B85BC69F18826302348A2AD089E0 ] C:\Windows\System32\dui70.dll
20:50:52.0997 2136 C:\Windows\System32\dui70.dll - ok
20:50:53.0012 2136 [ 6E1F8165C365D35C8E3C045AF0CDD481 ] C:\Windows\System32\duser.dll
20:50:53.0012 2136 C:\Windows\System32\duser.dll - ok
20:50:53.0012 2136 [ 9C67F6BBDA3881CFD02095160CF91576 ] C:\Windows\System32\ksuser.dll
20:50:53.0012 2136 C:\Windows\System32\ksuser.dll - ok
20:50:53.0028 2136 [ D205C24A9D069049FE2DF2A1B38726A7 ] C:\Windows\System32\wdmaud.drv
20:50:53.0028 2136 C:\Windows\System32\wdmaud.drv - ok
20:50:53.0028 2136 [ D5AEFAD57C08349A4393D987DF7C715D ] C:\Windows\System32\winmm.dll
20:50:53.0028 2136 C:\Windows\System32\winmm.dll - ok
20:50:53.0028 2136 [ 39C5F32747B3414D1BB216FDB1DEFC58 ] C:\Windows\System32\dwmapi.dll
20:50:53.0028 2136 C:\Windows\System32\dwmapi.dll - ok
20:50:53.0044 2136 [ 63DF770DF74ACB370EF5A16727069AAF ] C:\Windows\System32\hid.dll
20:50:53.0044 2136 C:\Windows\System32\hid.dll - ok
20:50:53.0044 2136 [ 2CFA4569350B7F84F815E9EC34E85766 ] C:\Windows\System32\SndVolSSO.dll
20:50:53.0044 2136 C:\Windows\System32\SndVolSSO.dll - ok
20:50:53.0059 2136 [ EDF2A5E96BEC469DA3F64E9BDD386111 ] C:\Windows\System32\xmllite.dll
20:50:53.0059 2136 C:\Windows\System32\xmllite.dll - ok
20:50:53.0059 2136 [ C940F2F5C60B3727C5F18840735B229C ] C:\Windows\System32\AudioSes.dll
20:50:53.0059 2136 C:\Windows\System32\AudioSes.dll - ok
20:50:53.0059 2136 [ 07393A09C46083588E751B63B03C8301 ] C:\Windows\System32\msacm32.drv
20:50:53.0059 2136 C:\Windows\System32\msacm32.drv - ok
20:50:53.0075 2136 [ 5A12C364AD1D4FCC0AD0E56DBBC34462 ] C:\Windows\System32\midimap.dll
20:50:53.0075 2136 C:\Windows\System32\midimap.dll - ok
20:50:53.0075 2136 [ 85683DF1F917E4D7F6BE1A04986BF1C8 ] C:\Windows\System32\msacm32.dll
20:50:53.0075 2136 C:\Windows\System32\msacm32.dll - ok
20:50:53.0090 2136 [ BBA9D5A730D5E304117AD26923EBD8AA ] C:\Windows\System32\AudioEng.dll
20:50:53.0090 2136 C:\Windows\System32\AudioEng.dll - ok
20:50:53.0090 2136 [ 5B2E4E90C04FB9AE9F2C5E99FF59B283 ] C:\Windows\System32\WindowsCodecs.dll
20:50:53.0090 2136 C:\Windows\System32\WindowsCodecs.dll - ok
20:50:53.0090 2136 [ 96F0F8F4DEE598C8D12AD9633E0CFE2A ] C:\Windows\System32\AUDIOKSE.dll
20:50:53.0090 2136 C:\Windows\System32\AUDIOKSE.dll - ok
20:50:53.0106 2136 [ 4E30ED3E551E867ADD1C8D58F5EDD9DF ] C:\Windows\System32\WMALFXGFXDSP.dll
20:50:53.0106 2136 C:\Windows\System32\WMALFXGFXDSP.dll - ok
20:50:53.0106 2136 [ 40B82688907A7DBA4DB3B5ADDE3EAB3B ] C:\Windows\System32\mfplat.dll
20:50:53.0106 2136 C:\Windows\System32\mfplat.dll - ok
20:50:53.0106 2136 [ 326C7F76A29897A892AA7726E91C1C67 ] C:\Windows\System32\winbrand.dll
20:50:53.0106 2136 C:\Windows\System32\winbrand.dll - ok
20:50:53.0122 2136 [ 65BF13016A3C22775F3E17591AE5268A ] C:\Windows\System32\VaultCredProvider.dll
20:50:53.0122 2136 C:\Windows\System32\VaultCredProvider.dll - ok
20:50:53.0122 2136 [ E59F08ED9D2A128CE436BBFC232247F6 ] C:\Windows\System32\BioCredProv.dll
20:50:53.0122 2136 C:\Windows\System32\BioCredProv.dll - ok
20:50:53.0137 2136 [ 05BF975CA428E04B462FB90841B37C95 ] C:\Windows\System32\SmartcardCredentialProvider.dll
20:50:53.0137 2136 C:\Windows\System32\SmartcardCredentialProvider.dll - ok
20:50:53.0137 2136 [ 108C2CFA5527458C096A699929ECBD80 ] C:\Windows\System32\credui.dll
20:50:53.0137 2136 C:\Windows\System32\credui.dll - ok
20:50:53.0137 2136 [ 3FAD263CE1E2A6FFF40D00043B2275E3 ] C:\Windows\System32\winbio.dll
20:50:53.0137 2136 C:\Windows\System32\winbio.dll - ok
20:50:53.0153 2136 [ 2FCA0D2C59A855C54BAFA22AA329DF0F ] C:\Windows\System32\netapi32.dll
20:50:53.0153 2136 C:\Windows\System32\netapi32.dll - ok
20:50:53.0153 2136 [ 20B3934DB73EABA2B49B7177873CB81F ] C:\Windows\System32\netutils.dll
20:50:53.0153 2136 C:\Windows\System32\netutils.dll - ok
20:50:53.0168 2136 [ 68ECCA523ED760AAFC03C5D587569859 ] C:\Windows\System32\samcli.dll
20:50:53.0168 2136 C:\Windows\System32\samcli.dll - ok
20:50:53.0168 2136 [ 36B8D5903CEEF0AA42A1EE002BD27FF1 ] C:\Windows\System32\vaultcli.dll
20:50:53.0168 2136 C:\Windows\System32\vaultcli.dll - ok
20:50:53.0184 2136 [ E5A4A1326A02F8E7B59E6C3270CE7202 ] C:\Windows\System32\wkscli.dll
20:50:53.0184 2136 C:\Windows\System32\wkscli.dll - ok
20:50:53.0184 2136 [ 6D8CACF3B1B54943EFCF420C2D667B37 ] C:\Windows\System32\certCredProvider.dll
20:50:53.0184 2136 C:\Windows\System32\certCredProvider.dll - ok
20:50:53.0184 2136 [ FFE4BEC5C187C426A17AE76A773063A6 ] C:\Windows\System32\rasplap.dll
20:50:53.0184 2136 C:\Windows\System32\rasplap.dll - ok
20:50:53.0200 2136 [ 839F96DBAAFD3353E0B248A5E0BD2A51 ] C:\Windows\System32\rasapi32.dll
20:50:53.0200 2136 C:\Windows\System32\rasapi32.dll - ok
20:50:53.0200 2136 [ FFA7172354B9256DBB2CDD75F16F33FE ] C:\Windows\System32\rasman.dll
20:50:53.0200 2136 C:\Windows\System32\rasman.dll - ok
20:50:53.0215 2136 [ 0915C4DB6DBC3BB9E11B7ECBBE4B7159 ] C:\Windows\System32\rtutils.dll
20:50:53.0215 2136 C:\Windows\System32\rtutils.dll - ok
20:50:53.0215 2136 [ A12829E9974F57E9B5DBFEA7C93190F6 ] C:\Windows\System32\UXInit.dll
20:50:53.0215 2136 C:\Windows\System32\UXInit.dll - ok
20:50:53.0215 2136 [ 8E01332CC4B68BC6B5B7EFFE374442AA ] C:\Windows\System32\oleacc.dll
20:50:53.0215 2136 C:\Windows\System32\oleacc.dll - ok
20:50:53.0231 2136 [ FD049C25A168D3DE310D9207B7B6367B ] C:\Windows\System32\UIAutomationCore.dll
20:50:53.0231 2136 C:\Windows\System32\UIAutomationCore.dll - ok
20:50:53.0231 2136 [ 26384429FCD85D83746F63E798AB1480 ] C:\Windows\System32\drivers\nwifi.sys
20:50:53.0231 2136 C:\Windows\System32\drivers\nwifi.sys - ok
20:50:53.0246 2136 [ D8A65DAFB3EB41CBB622745676FCD072 ] C:\Windows\System32\drivers\ndisuio.sys
20:50:53.0246 2136 C:\Windows\System32\drivers\ndisuio.sys - ok
20:50:53.0246 2136 [ 032B0D36AD92B582D869879F5AF5B928 ] C:\Windows\System32\drivers\rspndr.sys
20:50:53.0246 2136 C:\Windows\System32\drivers\rspndr.sys - ok
20:50:53.0246 2136 [ A90DC9ABD65DB1A8902F361103029952 ] C:\Windows\System32\IPHLPAPI.DLL
20:50:53.0246 2136 C:\Windows\System32\IPHLPAPI.DLL - ok
20:50:53.0262 2136 [ 55CA01BA19D0006C8F2639B6C045E08B ] C:\Windows\System32\lmhsvc.dll
20:50:53.0262 2136 C:\Windows\System32\lmhsvc.dll - ok
20:50:53.0262 2136 [ BA387E955E890C8A88306D9B8D06BF17 ] C:\Windows\System32\nsisvc.dll
20:50:53.0262 2136 C:\Windows\System32\nsisvc.dll - ok
20:50:53.0278 2136 [ E9E01EB683C132F7FA27CD607B8A2B63 ] C:\Windows\System32\dhcpcore.dll
20:50:53.0278 2136 C:\Windows\System32\dhcpcore.dll - ok
20:50:53.0278 2136 [ D2A937964199F647B1C3BC435712E5D9 ] C:\Windows\System32\nrpsrv.dll
20:50:53.0278 2136 C:\Windows\System32\nrpsrv.dll - ok
20:50:53.0278 2136 [ CFF35B879D1618D42C86644C717BA947 ] C:\Windows\System32\winnsi.dll
20:50:53.0278 2136 C:\Windows\System32\winnsi.dll - ok
20:50:53.0293 2136 [ EF71BA5DF59034962B0C62314A71351A ] C:\Windows\System32\dhcpcore6.dll
20:50:53.0293 2136 C:\Windows\System32\dhcpcore6.dll - ok
20:50:53.0293 2136 [ 33EF4861F19A0736B11314AAD9AE28D0 ] C:\Windows\System32\dnsrslvr.dll
20:50:53.0293 2136 C:\Windows\System32\dnsrslvr.dll - ok
20:50:53.0309 2136 [ 03A03A453F1AAAE0C73AAAF895321C7A ] C:\Windows\System32\FWPUCLNT.DLL
20:50:53.0309 2136 C:\Windows\System32\FWPUCLNT.DLL - ok
20:50:53.0309 2136 [ AF75DBA674E55221B7A055B0A4345F16 ] C:\Windows\System32\keyiso.dll
20:50:53.0309 2136 C:\Windows\System32\keyiso.dll - ok
20:50:53.0309 2136 [ 100103C6535C66265267F5EEA5F5846E ] C:\Windows\System32\dnsext.dll
20:50:53.0309 2136 C:\Windows\System32\dnsext.dll - ok
20:50:53.0324 2136 [ 9A892B3439884C62B04718F0303A49E9 ] C:\Windows\System32\eapphost.dll
20:50:53.0324 2136 C:\Windows\System32\eapphost.dll - ok
20:50:53.0324 2136 [ 8600142FA91C1B96367D3300AD0F3F3A ] C:\Windows\System32\eapsvc.dll
20:50:53.0324 2136 C:\Windows\System32\eapsvc.dll - ok
20:50:53.0340 2136 [ 81F6C1AE23B1C493D9E996C3103915D7 ] C:\Windows\System32\dhcpcsvc6.dll
20:50:53.0340 2136 C:\Windows\System32\dhcpcsvc6.dll - ok
20:50:53.0340 2136 [ D33E95C0A2754061233B58DC41F8094C ] C:\Windows\System32\umb.dll
20:50:53.0340 2136 C:\Windows\System32\umb.dll - ok
20:50:53.0340 2136 [ 3C9035085141162416A0DD34DBF3F3C1 ] C:\Windows\System32\wlanmsm.dll
20:50:53.0340 2136 C:\Windows\System32\wlanmsm.dll - ok
20:50:53.0356 2136 [ 9A85ABCE0FDD1AF8E79E731EB0B679F3 ] C:\Windows\System32\dhcpcsvc.dll
20:50:53.0356 2136 C:\Windows\System32\dhcpcsvc.dll - ok
20:50:53.0356 2136 [ 20C06A50DFC097E134BC6FA8444CA9BC ] C:\Windows\System32\wlansec.dll
20:50:53.0356 2136 C:\Windows\System32\wlansec.dll - ok
20:50:53.0371 2136 [ 666E57B6B51824D1D235F80A3DD70A13 ] C:\Windows\System32\eappprxy.dll
20:50:53.0371 2136 C:\Windows\System32\eappprxy.dll - ok
20:50:53.0371 2136 [ F748F53FE09D21D8ECBB6421E6792024 ] C:\Windows\System32\onex.dll
20:50:53.0371 2136 C:\Windows\System32\onex.dll - ok
20:50:53.0371 2136 [ 5A5FEDDF02588B8F9FE4A95E5E7EAE97 ] C:\Windows\System32\eappcfg.dll
20:50:53.0371 2136 C:\Windows\System32\eappcfg.dll - ok
20:50:53.0387 2136 [ C1585EAA67C37A05BF6F93726FAFC069 ] C:\Windows\System32\l2gpstore.dll
20:50:53.0387 2136 C:\Windows\System32\l2gpstore.dll - ok
20:50:53.0387 2136 [ 1D6A771D1D702AE07919DB52C889A249 ] C:\Windows\System32\wlanutil.dll
20:50:53.0387 2136 C:\Windows\System32\wlanutil.dll - ok
20:50:53.0387 2136 [ 749F9795F01C35EEBE100A87D82B9681 ] C:\Windows\System32\wlgpclnt.dll
20:50:53.0402 2136 C:\Windows\System32\wlgpclnt.dll - ok
20:50:53.0402 2136 [ 9419ABF3163B6F0E3AD3DD2B381C879F ] C:\Windows\System32\WinSCard.dll
20:50:53.0402 2136 C:\Windows\System32\WinSCard.dll - ok
20:50:53.0402 2136 [ EAADD6E47ED2A7003ACE1793B98CF63F ] C:\Windows\System32\msxml6.dll
20:50:53.0402 2136 C:\Windows\System32\msxml6.dll - ok
20:50:53.0418 2136 [ 414DA952A35BF5D50192E28263B40577 ] C:\Windows\System32\shsvcs.dll
20:50:53.0418 2136 C:\Windows\System32\shsvcs.dll - ok
20:50:53.0418 2136 [ A04BB13F8A72F8B6E8B4071723E4E336 ] C:\Windows\System32\schedsvc.dll
20:50:53.0418 2136 C:\Windows\System32\schedsvc.dll - ok
20:50:53.0434 2136 [ 38B13C0DF479DBA23ECFA815159BA86E ] C:\Windows\System32\ktmw32.dll
20:50:53.0434 2136 C:\Windows\System32\ktmw32.dll - ok
20:50:53.0434 2136 [ 1FF7E4F548C7C372C804938F0D5B36AE ] C:\Windows\System32\netcfgx.dll
20:50:53.0434 2136 C:\Windows\System32\netcfgx.dll - ok
20:50:53.0434 2136 [ 1C3E8371377E988B683797A132EFFE1B ] C:\Windows\System32\taskcomp.dll
20:50:53.0434 2136 C:\Windows\System32\taskcomp.dll - ok
20:50:53.0449 2136 [ 871917B07A141BFF43D76D8844D48106 ] C:\Windows\System32\drivers\http.sys
20:50:53.0449 2136 C:\Windows\System32\drivers\http.sys - ok
20:50:53.0449 2136 [ E6D90DC604F407B3B5E0FD285E46B2A0 ] C:\Windows\System32\fveapi.dll
20:50:53.0449 2136 C:\Windows\System32\fveapi.dll - ok
20:50:53.0449 2136 [ C87F28A34B3840F4B40011D170B1A159 ] C:\Windows\System32\fvecerts.dll
20:50:53.0449 2136 C:\Windows\System32\fvecerts.dll - ok
20:50:53.0465 2136 [ 827CB0D6C3F8057EA037FF271F8E9795 ] C:\Windows\System32\imageres.dll
20:50:53.0465 2136 C:\Windows\System32\imageres.dll - ok
20:50:53.0465 2136 [ EAFC149CD3BD78C443E31BB157841197 ] C:\Windows\System32\tbs.dll
20:50:53.0465 2136 C:\Windows\System32\tbs.dll - ok
20:50:53.0480 2136 [ 9AEA093B8F9C37CF45538382CABA2475 ] C:\Windows\System32\spoolsv.exe
20:50:53.0480 2136 C:\Windows\System32\spoolsv.exe - ok
20:50:53.0480 2136 [ 1E2BAC209D184BB851E1A187D8A29136 ] C:\Windows\System32\BFE.DLL
20:50:53.0480 2136 C:\Windows\System32\BFE.DLL - ok
20:50:53.0496 2136 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] C:\Windows\System32\drivers\bowser.sys
20:50:53.0496 2136 C:\Windows\System32\drivers\bowser.sys - ok
20:50:53.0496 2136 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] C:\Windows\System32\drivers\mpsdrv.sys
20:50:53.0496 2136 C:\Windows\System32\drivers\mpsdrv.sys - ok
20:50:53.0496 2136 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] C:\Windows\System32\drivers\mrxsmb.sys
20:50:53.0496 2136 C:\Windows\System32\drivers\mrxsmb.sys - ok
20:50:53.0512 2136 [ 6D17A4791ACA19328C685D256349FEFC ] C:\Windows\System32\drivers\mrxsmb10.sys
20:50:53.0512 2136 C:\Windows\System32\drivers\mrxsmb10.sys - ok
20:50:53.0512 2136 [ 9835584E999D25004E1EE8E5F3E3B881 ] C:\Windows\System32\MPSSVC.dll
20:50:53.0512 2136 C:\Windows\System32\MPSSVC.dll - ok
20:50:53.0527 2136 [ B81F204D146000BE76651A50670A5E9E ] C:\Windows\System32\drivers\mrxsmb20.sys
20:50:53.0527 2136 C:\Windows\System32\drivers\mrxsmb20.sys - ok
20:50:53.0527 2136 [ 58405E4F68BA8E4057C6E914F326ABA2 ] C:\Windows\System32\wkssvc.dll
20:50:53.0527 2136 C:\Windows\System32\wkssvc.dll - ok
20:50:53.0527 2136 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] C:\Windows\System32\drivers\parport.sys
20:50:53.0527 2136 C:\Windows\System32\drivers\parport.sys - ok
20:50:53.0543 2136 [ 019C372B1A9DA73A22D0D35A4D40F5C9 ] C:\Windows\System32\wfapigp.dll
20:50:53.0543 2136 C:\Windows\System32\wfapigp.dll - ok
20:50:53.0543 2136 [ E2D56AE1D40E3725084054CD8E9CFBB1 ] C:\Windows\System32\wiarpc.dll
20:50:53.0543 2136 C:\Windows\System32\wiarpc.dll - ok
20:50:53.0558 2136 [ 7F8678C59F188528D60104E697C2361E ] C:\Windows\System32\mscms.dll
20:50:53.0558 2136 C:\Windows\System32\mscms.dll - ok
20:50:53.0558 2136 [ 358AB7956D3160000726574083DFC8A6 ] C:\Windows\System32\pcasvc.dll
20:50:53.0558 2136 C:\Windows\System32\pcasvc.dll - ok
20:50:53.0558 2136 [ 6A984831644ECA1A33FFEAE4126F4F37 ] C:\Windows\System32\snmptrap.exe
20:50:53.0558 2136 C:\Windows\System32\snmptrap.exe - ok
20:50:53.0574 2136 [ A2F17346CC5C502D4E29EF986BD17D34 ] C:\Windows\System32\PeerDistSh.dll
20:50:53.0574 2136 C:\Windows\System32\PeerDistSh.dll - ok
20:50:53.0574 2136 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] C:\Windows\System32\provsvc.dll
20:50:53.0574 2136 C:\Windows\System32\provsvc.dll - ok
20:50:53.0590 2136 [ D318F23BE45D5E3A107469EB64815B50 ] C:\Windows\System32\sstpsvc.dll
20:50:53.0590 2136 C:\Windows\System32\sstpsvc.dll - ok
20:50:53.0590 2136 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
20:50:53.0590 2136 C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe - ok
20:50:53.0590 2136 [ B3892E6DA8E2C8CE4B0A9D3EB9A185E5 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a74
2\msvcr90.dll
20:50:53.0590 2136 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a74
2\msvcr90.dll - ok
20:50:53.0605 2136 [ 3897DFF247D9ED0006190349DE264E14 ] C:\Windows\System32\cryptsvc.dll
20:50:53.0605 2136 C:\Windows\System32\cryptsvc.dll - ok
20:50:53.0605 2136 [ 10C84498D8A315178CEC55BF98BD4336 ] C:\PROGRA~1\McAfee\SITEAD~1\McSACore.exe
20:50:53.0605 2136 C:\PROGRA~1\McAfee\SITEAD~1\McSACore.exe - ok
20:50:53.0621 2136 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] C:\Windows\System32\dps.dll
20:50:53.0621 2136 C:\Windows\System32\dps.dll - ok
20:50:53.0621 2136 [ 00A99DA54C14969A899ED316D16E9A9E ] C:\Windows\System32\efssvc.dll
20:50:53.0621 2136 C:\Windows\System32\efssvc.dll - ok
20:50:53.0621 2136 [ 8A8B277067C22F4BF6AA9A31692FC4D3 ] C:\Windows\System32\cryptnet.dll
20:50:53.0621 2136 C:\Windows\System32\cryptnet.dll - ok
20:50:53.0636 2136 [ 13337A3FB17F2242487FD45488ED0485 ] C:\Windows\System32\vssapi.dll
20:50:53.0636 2136 C:\Windows\System32\vssapi.dll - ok
20:50:53.0636 2136 [ B940289C83121046BD6A60ACC6028593 ] C:\Windows\System32\vsstrace.dll
20:50:53.0636 2136 C:\Windows\System32\vsstrace.dll - ok
20:50:53.0652 2136 [ 3F6D9269E7B3A754B1C2F8533DC7F318 ] C:\Windows\System32\efscore.dll
20:50:53.0652 2136 C:\Windows\System32\efscore.dll - ok
20:50:53.0652 2136 [ 359C3AC547AA1D24EED35BE3AB3759DC ] C:\Windows\System32\efsutil.dll
20:50:53.0652 2136 C:\Windows\System32\efsutil.dll - ok
20:50:53.0652 2136 [ AACB6AD3AEDDE4E4B115FDE632E883E8 ] C:\Program Files\McAfee\Common Framework\FrameworkService.exe
20:50:53.0652 2136 C:\Program Files\McAfee\Common Framework\FrameworkService.exe - ok
20:50:53.0668 2136 [ F5EDBCF5A70EA60081859ECC87847A9E ] C:\Program Files\McAfee\Common Framework\nailog3.dll
20:50:53.0668 2136 C:\Program Files\McAfee\Common Framework\nailog3.dll - ok
20:50:53.0668 2136 [ 1292D8AA736156947612284B6D0BA68F ] C:\PROGRA~1\McAfee\SITEAD~1\SaSSHMod.dll
20:50:53.0668 2136 C:\PROGRA~1\McAfee\SITEAD~1\SaSSHMod.dll - ok
20:50:53.0683 2136 [ C9564CF4976E7E96B4052737AA2492B4 ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9
a\msvcr80.dll
20:50:53.0683 2136 C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9
a\msvcr80.dll - ok
20:50:53.0683 2136 [ 2A5406B93E7EE0A67B55106F54C1B619 ] C:\Program Files\McAfee\Common Framework\cryptshim.dll
20:50:53.0683 2136 C:\Program Files\McAfee\Common Framework\cryptshim.dll - ok
20:50:53.0683 2136 [ B5C3441D624453854994D9F49EB0D8DB ] C:\Program Files\McAfee\Common Framework\mfecryptc.dll
20:50:53.0683 2136 C:\Program Files\McAfee\Common Framework\mfecryptc.dll - ok
20:50:53.0699 2136 [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9
a\msvcp80.dll
20:50:53.0699 2136 C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9
a\msvcp80.dll - ok
20:50:53.0699 2136 [ FA7807949B20B645C13B27F0CACABB2F ] C:\Program Files\McAfee\Common Framework\naxml3_71.dll
20:50:53.0699 2136 C:\Program Files\McAfee\Common Framework\naxml3_71.dll - ok
20:50:53.0714 2136 [ 4F3184BA7F4FEB3F978D2E7F5E7BEE69 ] C:\Program Files\McAfee\Common Framework\naCmnLib3_71.dll
20:50:53.0714 2136 C:\Program Files\McAfee\Common Framework\naCmnLib3_71.dll - ok
20:50:53.0714 2136 [ DF13A51A5C591887D2EC6AE64CEED0FA ] C:\Windows\System32\wsock32.dll
20:50:53.0714 2136 C:\Windows\System32\wsock32.dll - ok
20:50:53.0730 2136 [ 9D5E358D7102698184FD11117DE2EBF7 ] C:\Program Files\McAfee\Common Framework\AppLib.dll
20:50:53.0730 2136 C:\Program Files\McAfee\Common Framework\AppLib.dll - ok
20:50:53.0730 2136 [ FB19FC5951A88F3C523E35C2C98D23C0 ] C:\Windows\System32\webio.dll
20:50:53.0730 2136 C:\Windows\System32\webio.dll - ok
20:50:53.0730 2136 [ CA9F7888B524D8100B977C81F44C3234 ] C:\Windows\System32\winhttp.dll
20:50:53.0730 2136 C:\Windows\System32\winhttp.dll - ok
20:50:53.0746 2136 [ F2CFBA7631996DFC7CBD4C6E351023AE ] C:\PROGRA~1\McAfee\SITEAD~1\saupkeep.dll
20:50:53.0746 2136 C:\PROGRA~1\McAfee\SITEAD~1\saupkeep.dll - ok
20:50:53.0746 2136 [ 51138BEEA3E2C21EC44D0932C71762A8 ] C:\Windows\System32\rundll32.exe
20:50:53.0746 2136 C:\Windows\System32\rundll32.exe - ok
20:50:53.0761 2136 [ 96C70BD48D49B87475F4572DEDC62EB9 ] C:\Windows\AppPatch\AcLayers.dll
20:50:53.0761 2136 C:\Windows\AppPatch\AcLayers.dll - ok
20:50:53.0761 2136 [ DC4E07C4DBAF7EB8AAD5975F9E38FCB9 ] C:\Program Files\McAfee\Common Framework\0409\AgentRes.Dll
20:50:53.0761 2136 C:\Program Files\McAfee\Common Framework\0409\AgentRes.Dll - ok
20:50:53.0761 2136 [ 2CB697CCB48C77B17BE022A32F9B87F3 ] C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
20:50:53.0761 2136 C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe - ok
20:50:53.0777 2136 [ E6D90C5853D18876AF5DA5EDE768A1A2 ] C:\Program Files\McAfee\VirusScan Enterprise\condl.dll
20:50:53.0777 2136 C:\Program Files\McAfee\VirusScan Enterprise\condl.dll - ok
20:50:53.0777 2136 [ F1278B3514EA6FA9BC39B20D26139AAC ] C:\Windows\System32\msiltcfg.dll
20:50:53.0777 2136 C:\Windows\System32\msiltcfg.dll - ok
20:50:53.0792 2136 [ AC1C9CBB2D1BAF7F526BD9DFA0D82CB5 ] C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll
20:50:53.0792 2136 C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll - ok
20:50:53.0792 2136 [ 9E4B0E7472B4CEBA9E17F440B8CB0AB8 ] C:\Windows\System32\winspool.drv
20:50:53.0792 2136 C:\Windows\System32\winspool.drv - ok
20:50:53.0792 2136 [ 0F7F45725DFEFC3F894E5C6AC9E3DEC4 ] C:\PROGRA~1\McAfee\SITEAD~1\sahook.dll
20:50:53.0792 2136 C:\PROGRA~1\McAfee\SITEAD~1\sahook.dll - ok
20:50:53.0808 2136 [ B9A8CBCFCD3EC9D2EA4740AF347BF108 ] C:\Windows\System32\mpr.dll
20:50:53.0808 2136 C:\Windows\System32\mpr.dll - ok
20:50:53.0808 2136 [ A6C29DB53ECA94FA8591C5388D604B82 ] C:\Windows\System32\msi.dll
20:50:53.0808 2136 C:\Windows\System32\msi.dll - ok
20:50:53.0824 2136 [ 5C99F92B3C4CFCDF928258C2E838D000 ] C:\Windows\System32\lz32.dll
20:50:53.0824 2136 C:\Windows\System32\lz32.dll - ok
20:50:53.0824 2136 [ BDAC1AA64495D0F7E1FF810EBBF1F018 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
20:50:53.0824 2136 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll - ok
20:50:53.0824 2136 [ B579E1C48F73E10EA38DA0DED1768FD6 ] C:\Program Files\McAfee\VirusScan Enterprise\wscav.dll
20:50:53.0824 2136 C:\Program Files\McAfee\VirusScan Enterprise\wscav.dll - ok
20:50:53.0839 2136 [ 87673DE37ECCDDADD51E4897B396ADF3 ] C:\Program Files\McAfee\VirusScan Enterprise\traceapp.dll
20:50:53.0839 2136 C:\Program Files\McAfee\VirusScan Enterprise\traceapp.dll - ok
20:50:53.0839 2136 [ 0CE9B39555FADE0210F31EA3E9A3F61D ] C:\Program Files\Common Files\McAfee\SystemCore\lockdown.dll
20:50:53.0839 2136 C:\Program Files\Common Files\McAfee\SystemCore\lockdown.dll - ok
20:50:53.0855 2136 [ 94FAA638EC68A7F4B01485B7DE15B973 ] C:\Program Files\Common Files\McAfee\SystemCore\mytilus3_worker.dll
20:50:53.0855 2136 C:\Program Files\Common Files\McAfee\SystemCore\mytilus3_worker.dll - ok
20:50:53.0855 2136 [ 9018C3E1A4FAE4303241A06FCCFF77DC ] C:\Program Files\McAfee\VirusScan Enterprise\Res0900\mcshield.dll
20:50:53.0855 2136 C:\Program Files\McAfee\VirusScan Enterprise\Res0900\mcshield.dll - ok
20:50:53.0855 2136 [ 539C49CEBB3C50957AC8A09D95ECD880 ] C:\Windows\System32\shfolder.dll
20:50:53.0855 2136 C:\Windows\System32\shfolder.dll - ok
20:50:53.0870 2136 [ A76A1465D97A172FC52341CFAFCA823C ] C:\Program Files\McAfee\Common Framework\Logging.dll
20:50:53.0870 2136 C:\Program Files\McAfee\Common Framework\Logging.dll - ok
20:50:53.0870 2136 [ 708665E7650324D4450A8132DAE1EDD4 ] C:\Program Files\McAfee\Common Framework\UserSpace.Dll
20:50:53.0870 2136 C:\Program Files\McAfee\Common Framework\UserSpace.Dll - ok
20:50:53.0886 2136 [ C10F702FC86309F2EEDAEF42E3DD9FD9 ] C:\Program Files\McAfee\Common Framework\SecureFrameworkFactory3.dll
20:50:53.0886 2136 C:\Program Files\McAfee\Common Framework\SecureFrameworkFactory3.dll - ok
20:50:53.0886 2136 [ DA1067DC5999F00CDB6AC69553EE26AE ] C:\Windows\System32\mfevtps.exe
20:50:53.0886 2136 C:\Windows\System32\mfevtps.exe - ok
20:50:53.0902 2136 [ 140D9F911182357626165EA0BEB98C4F ] C:\Windows\System32\ncsi.dll
20:50:53.0902 2136 C:\Windows\System32\ncsi.dll - ok
20:50:53.0902 2136 [ 374071043F9E4231EE43BE2BB48DD36D ] C:\Windows\System32\nlasvc.dll
20:50:53.0902 2136 C:\Windows\System32\nlasvc.dll - ok
20:50:53.0902 2136 [ 40CAEEE0EAF1B8569F7C8DF6420F2CB9 ] C:\Windows\System32\sfc.dll
20:50:53.0902 2136 C:\Windows\System32\sfc.dll - ok
20:50:53.0917 2136 [ 84799328D87B3091A3BDD251E1AD31F9 ] C:\Windows\System32\sfc_os.dll
20:50:53.0917 2136 C:\Windows\System32\sfc_os.dll - ok
20:50:53.0917 2136 [ 1771F1C755EEEB20BC051828B9312170 ] C:\Program Files\McAfee\VirusScan Enterprise\nailite.dll
20:50:53.0917 2136 C:\Program Files\McAfee\VirusScan Enterprise\nailite.dll - ok
20:50:53.0933 2136 [ 28E2231BD34A39C854BDF3923AB2FF86 ] C:\Windows\System32\ssdpapi.dll
20:50:53.0933 2136 C:\Windows\System32\ssdpapi.dll - ok
20:50:53.0933 2136 [ 639BC9780F3FBD89EAC31D5F3D236969 ] C:\Program Files\McAfee\Common Framework\Management.dll
20:50:53.0933 2136 C:\Program Files\McAfee\Common Framework\Management.dll - ok
20:50:53.0933 2136 [ 3A1D925E880E6D0AC55A46C7DF4B8E5A ] C:\Program Files\McAfee\Common Framework\mfeCmnLib71.dll
20:50:53.0933 2136 C:\Program Files\McAfee\Common Framework\mfeCmnLib71.dll - ok
20:50:53.0948 2136 [ FAF9A82C31C006DD470B5B098F791077 ] C:\Program Files\McAfee\Common Framework\mfelpc.dll
20:50:53.0948 2136 C:\Program Files\McAfee\Common Framework\mfelpc.dll - ok
20:50:53.0948 2136 [ E75E05B939A8F350E063F2E11992850C ] C:\Program Files\McAfee\Common Framework\cryptocme2.dll
20:50:53.0948 2136 C:\Program Files\McAfee\Common Framework\cryptocme2.dll - ok
20:50:53.0964 2136 [ B59226741551434E8B8A89A97FF339C4 ] C:\Program Files\McAfee\Common Framework\ccme_base.dll
20:50:53.0964 2136 C:\Program Files\McAfee\Common Framework\ccme_base.dll - ok
20:50:53.0964 2136 [ 9E0104BA49F4E6973749A02BF41344ED ] C:\Windows\System32\drivers\PEAuth.sys
20:50:53.0964 2136 C:\Windows\System32\drivers\PEAuth.sys - ok
20:50:53.0964 2136 [ A0FF419B61AE47E26ADF3BB15DB4F2FE ] C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
20:50:53.0964 2136 C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe - ok
20:50:53.0980 2136 [ 0E37FBFA79D349D672456923EC5FBBE3 ] C:\Windows\System32\msvcr100.dll
20:50:53.0980 2136 C:\Windows\System32\msvcr100.dll - ok
20:50:53.0980 2136 [ AA4350E8C2EC85CB6A3FBD77090F9DCC ] C:\Program Files\McAfee\Common Framework\naPolicyManager.dll
20:50:53.0980 2136 C:\Program Files\McAfee\Common Framework\naPolicyManager.dll - ok
20:50:53.0995 2136 [ 879B2ECE793157BB1DE65EB16A42761C ] C:\Program Files\McAfee\Common Framework\naPrdMgr.exe
20:50:53.0995 2136 C:\Program Files\McAfee\Common Framework\naPrdMgr.exe - ok
20:50:53.0995 2136 [ 7C15061CD0372487903B07B9BB03AFAD ] C:\Program Files\Skype\Updater\Updater.exe
20:50:53.0995 2136 C:\Program Files\Skype\Updater\Updater.exe - ok
20:50:53.0995 2136 [ 90A3935D05B494A5A39D37E71F09A677 ] C:\Windows\System32\drivers\secdrv.sys
20:50:53.0995 2136 C:\Windows\System32\drivers\secdrv.sys - ok
20:50:54.0011 2136 [ C573D7C3B70D2B59432CFD72EF382D7C ] C:\Program Files\McAfee\Common Framework\UpdateSubSys.Dll
20:50:54.0011 2136 C:\Program Files\McAfee\Common Framework\UpdateSubSys.Dll - ok
20:50:54.0011 2136 [ 49ACA548B2423F1C67898E6AC719A9A6 ] C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
20:50:54.0011 2136 C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll - ok
20:50:54.0026 2136 [ 8CABC4F8E367BF89F845540158553051 ] C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe
20:50:54.0026 2136 C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe - ok
20:50:54.0026 2136 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] C:\Windows\System32\drivers\srvnet.sys
20:50:54.0026 2136 C:\Windows\System32\drivers\srvnet.sys - ok
20:50:54.0026 2136 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] C:\Windows\System32\drivers\tcpipreg.sys
20:50:54.0026 2136 C:\Windows\System32\drivers\tcpipreg.sys - ok
20:50:54.0042 2136 [ 36650D618CA34C9D357DFD3D89B2C56F ] C:\Windows\System32\sysmain.dll
20:50:54.0042 2136 C:\Windows\System32\sysmain.dll - ok
20:50:54.0042 2136 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] C:\Windows\System32\trkwks.dll
20:50:54.0042 2136 C:\Windows\System32\trkwks.dll - ok
20:50:54.0058 2136 [ F62E510B6AD4C21EB9FE8668ED251826 ] C:\Windows\System32\wbem\WMIsvc.dll
20:50:54.0058 2136 C:\Windows\System32\wbem\WMIsvc.dll - ok
20:50:54.0058 2136 [ E1FB3706030FB4578A0D72C2FC3689E4 ] C:\Windows\System32\wiaservc.dll
20:50:54.0058 2136 C:\Windows\System32\wiaservc.dll - ok
20:50:54.0073 2136 [ 704314FD398C81D5F342CAA5DF7B7F21 ] C:\Windows\System32\wbemcomn.dll
20:50:54.0073 2136 C:\Windows\System32\wbemcomn.dll - ok
20:50:54.0073 2136 [ 54A99482B5C3F080C7024CA7E4A3FE42 ] C:\Program Files\McAfee\Common Framework\updater.Dll
20:50:54.0073 2136 C:\Program Files\McAfee\Common Framework\updater.Dll - ok
20:50:54.0073 2136 [ B087F2B901570F6EF62F6C2E01A480F3 ] C:\Windows\System32\wiatrace.dll
20:50:54.0073 2136 C:\Windows\System32\wiatrace.dll - ok
20:50:54.0089 2136 [ 62818BA12083D5C1C4F6740FD40A5672 ] C:\Program Files\McAfee\Common Framework\ipcchannel.dll
20:50:54.0089 2136 C:\Program Files\McAfee\Common Framework\ipcchannel.dll - ok
20:50:54.0089 2136 [ DFD919CBFCD84CA49C7D34C94C15F764 ] C:\Program Files\Common Files\McAfee\SystemCore\mfeavfa.dll
20:50:54.0089 2136 C:\Program Files\Common Files\McAfee\SystemCore\mfeavfa.dll - ok
20:50:54.0104 2136 [ 2123CE247448FA3ADFCE76E357929A4F ] C:\Program Files\Common Files\McAfee\SystemCore\mfehida.dll
20:50:54.0104 2136 C:\Program Files\Common Files\McAfee\SystemCore\mfehida.dll - ok
20:50:54.0104 2136 [ AE4475AB7C8E8184371EEBDA81FBC736 ] C:\Program Files\McAfee\Common Framework\Nainet.dll
20:50:54.0104 2136 C:\Program Files\McAfee\Common Framework\Nainet.dll - ok
20:50:54.0104 2136 [ DABDDD9E5C62CD083B744D789C27AD08 ] C:\Program Files\McAfee\Common Framework\mfecurl.dll
20:50:54.0104 2136 C:\Program Files\McAfee\Common Framework\mfecurl.dll - ok
20:50:54.0120 2136 [ 4522A10A7B0C25A3D946E0D577348F05 ] C:\Program Files\McAfee\Common Framework\mfezlib.dll
20:50:54.0120 2136 C:\Program Files\McAfee\Common Framework\mfezlib.dll - ok
20:50:54.0120 2136 [ 6F8E3B7B70E1BBA871212940C1FBDF60 ] C:\Windows\System32\SensApi.dll
20:50:54.0120 2136 C:\Windows\System32\SensApi.dll - ok
20:50:54.0136 2136 [ 706E9E2FDF4D5EA7C8D462D0A6296433 ] C:\Program Files\McAfee\Common Framework\Scheduler.dll
20:50:54.0136 2136 C:\Program Files\McAfee\Common Framework\Scheduler.dll - ok
20:50:54.0136 2136 [ FD7CE88DDA29C09EA1273178D7773AD0 ] C:\Program Files\McAfee\VirusScan Enterprise\vsplugin.dll
20:50:54.0136 2136 C:\Program Files\McAfee\VirusScan Enterprise\vsplugin.dll - ok
20:50:54.0136 2136 [ E0CE4BD33B108B07E92CE3E399D0E81E ] C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
20:50:54.0136 2136 C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe - ok
20:50:54.0151 2136 [ 3205CDE2866F5CE435F0575D41F07F30 ] C:\Program Files\McAfee\Common Framework\Agent.dll
20:50:54.0151 2136 C:\Program Files\McAfee\Common Framework\Agent.dll - ok
20:50:54.0151 2136 [ EA75883435614512D8A6DC5B6FC80B41 ] C:\Program Files\Common Files\McAfee\SystemCore\mytilus3.dll
20:50:54.0151 2136 C:\Program Files\Common Files\McAfee\SystemCore\mytilus3.dll - ok
20:50:54.0167 2136 [ 7059290EF898BE1C21771925B40A8F20 ] C:\Program Files\Common Files\McAfee\SystemCore\mytilus3_server.dll
20:50:54.0167 2136 C:\Program Files\Common Files\McAfee\SystemCore\mytilus3_server.dll - ok
20:50:54.0167 2136 [ 11CD1597CC6A6F201D4D2460C8DEC78E ] C:\Program Files\McAfee\Common Framework\CMALib.dll
20:50:54.0167 2136 C:\Program Files\McAfee\Common Framework\CMALib.dll - ok
20:50:54.0182 2136 [ EA294016F3EFD9B55F459228015EDE0B ] C:\Program Files\McAfee\Common Framework\inetmgr.dll
20:50:54.0182 2136 C:\Program Files\McAfee\Common Framework\inetmgr.dll - ok
20:50:54.0182 2136 [ 881D9F2D6E04E1C323050CF1574870F7 ] C:\Windows\System32\wbem\WinMgmtR.dll
20:50:54.0182 2136 C:\Windows\System32\wbem\WinMgmtR.dll - ok
20:50:54.0182 2136 [ 701C9EB15E1E23D22F7C7184C0506673 ] C:\Windows\System32\wbem\WmiDcPrv.dll
20:50:54.0182 2136 C:\Windows\System32\wbem\WmiDcPrv.dll - ok
20:50:54.0198 2136 [ B5D46C5B7EDA7CD0BC70CB90909C2644 ] C:\Program Files\Common Files\McAfee\SystemCore\ftl.dll
20:50:54.0198 2136 C:\Program Files\Common Files\McAfee\SystemCore\ftl.dll - ok
20:50:54.0198 2136 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] C:\Windows\System32\drivers\srv2.sys
20:50:54.0198 2136 C:\Windows\System32\drivers\srv2.sys - ok
20:50:54.0198 2136 [ 29DDF2BBECECE67A8D9BA65BE5672699 ] C:\Program Files\McAfee\Common Framework\naSPIPE.dll
20:50:54.0198 2136 C:\Program Files\McAfee\Common Framework\naSPIPE.dll - ok
20:50:54.0214 2136 [ 53223B673A3FA2F9A4D1C31C8D3F6CD8 ] C:\Windows\System32\dbghelp.dll
20:50:54.0214 2136 C:\Windows\System32\dbghelp.dll - ok
20:50:54.0214 2136 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] C:\Windows\System32\drivers\srv.sys
20:50:54.0214 2136 C:\Windows\System32\drivers\srv.sys - ok
20:50:54.0229 2136 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] C:\Windows\System32\iphlpsvc.dll
20:50:54.0229 2136 C:\Windows\System32\iphlpsvc.dll - ok
20:50:54.0229 2136 [ CE292C4C10B8DB6070F262EA2733F0DC ] C:\Windows\System32\sqmapi.dll
20:50:54.0229 2136 C:\Windows\System32\sqmapi.dll - ok
20:50:54.0229 2136 [ A399514D3B28C9A3453A486BBAAFF1C7 ] C:\Windows\System32\wdscore.dll
20:50:54.0229 2136 C:\Windows\System32\wdscore.dll - ok
20:50:54.0245 2136 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] C:\Windows\System32\wscsvc.dll
20:50:54.0245 2136 C:\Windows\System32\wscsvc.dll - ok
20:50:54.0245 2136 [ 6383C60EC0133B14F5705F96369421B2 ] C:\Windows\System32\hnetcfg.dll
20:50:54.0245 2136 C:\Windows\System32\hnetcfg.dll - ok
20:50:54.0260 2136 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] C:\Windows\System32\browser.dll
20:50:54.0260 2136 C:\Windows\System32\browser.dll - ok
20:50:54.0260 2136 [ D64AF876D53ECA3668BB97B51B4E70AB ] C:\Windows\System32\srvsvc.dll
20:50:54.0260 2136 C:\Windows\System32\srvsvc.dll - ok
20:50:54.0260 2136 [ C5B0324DB461559ADD070E632A6919FA ] C:\Windows\System32\wbem\wbemprox.dll
20:50:54.0260 2136 C:\Windows\System32\wbem\wbemprox.dll - ok
20:50:54.0276 2136 [ 6651B1EDB4B0955C4B2D8A5A197117A8 ] C:\Program Files\Common Files\McAfee\SystemCore\mfevtpa.dll
20:50:54.0276 2136 C:\Program Files\Common Files\McAfee\SystemCore\mfevtpa.dll - ok
20:50:54.0276 2136 [ 794D4B48DFB6E999537C7C3947863463 ] C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
20:50:54.0276 2136 C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe - ok
20:50:54.0292 2136 [ 18AB2E5A40064ED5F7791AC5946A90F3 ] C:\Windows\System32\msimg32.dll
20:50:54.0292 2136 C:\Windows\System32\msimg32.dll - ok
20:50:54.0292 2136 [ 3FA214B377B8711D859F950FDFEFF739 ] C:\Windows\System32\conhost.exe
20:50:54.0292 2136 C:\Windows\System32\conhost.exe - ok
20:50:54.0307 2136 [ 0CE9B39555FADE0210F31EA3E9A3F61D ] C:\Program Files\McAfee\VirusScan Enterprise\lockdown.dll
20:50:54.0307 2136 C:\Program Files\McAfee\VirusScan Enterprise\lockdown.dll - ok
20:50:54.0307 2136 [ A7582391126AFB13C514BEC6533B759A ] C:\Program Files\McAfee\VirusScan Enterprise\naiann.dll
20:50:54.0307 2136 C:\Program Files\McAfee\VirusScan Enterprise\naiann.dll - ok
20:50:54.0307 2136 [ 1E8D06AAE74FED674C1156B3FEA911C2 ] C:\Windows\System32\Faultrep.dll
20:50:54.0307 2136 C:\Windows\System32\Faultrep.dll - ok
20:50:54.0323 2136 [ 590D5C506044FE02FF7643E32FF9BDAC ] C:\Windows\System32\wer.dll
20:50:54.0323 2136 C:\Windows\System32\wer.dll - ok
20:50:54.0323 2136 [ CFC7D8289D2B5F3CF8D16E2DB7F93D4A ] C:\Windows\System32\wbem\fastprox.dll
20:50:54.0323 2136 C:\Windows\System32\wbem\fastprox.dll - ok
20:50:54.0338 2136 [ E3E811471DE781900FF21C1FD84E941E ] C:\Windows\System32\ntdsapi.dll
20:50:54.0338 2136 C:\Windows\System32\ntdsapi.dll - ok
20:50:54.0338 2136 [ 6B44700917F45B19B96B46B345B6F0E7 ] C:\Program Files\Spybot - Search & Destroy\SDMain.exe
20:50:54.0338 2136 C:\Program Files\Spybot - Search & Destroy\SDMain.exe - ok
20:50:54.0338 2136 [ 244C6722289F4869068992FD7D8A8832 ] C:\Windows\System32\wbem\wbemdisp.dll
20:50:54.0338 2136 C:\Windows\System32\wbem\wbemdisp.dll - ok
20:50:54.0354 2136 [ 45D9F6CD2469CDB6A640DD4BD2B01471 ] C:\Windows\System32\nci.dll
20:50:54.0354 2136 C:\Windows\System32\nci.dll - ok
20:50:54.0354 2136 [ E4B72E71EC37A59FE574A998A0C0EB9B ] C:\Windows\System32\netmsg.dll
20:50:54.0354 2136 C:\Windows\System32\netmsg.dll - ok
20:50:54.0370 2136 [ 89E783711AF91AF09E1EF30EF3107446 ] C:\Windows\System32\sscore.dll
20:50:54.0370 2136 C:\Windows\System32\sscore.dll - ok
20:50:54.0370 2136 [ 5610B0425518D185331CB8E968D060E6 ] C:\Windows\System32\wbem\wmiutils.dll
20:50:54.0370 2136 C:\Windows\System32\wbem\wmiutils.dll - ok
20:50:54.0370 2136 [ 87F03C8FBB63C13FAABD2B4A013B653F ] C:\Program Files\Common Files\McAfee\Engine\mcscan32.dll
20:50:54.0370 2136 C:\Program Files\Common Files\McAfee\Engine\mcscan32.dll - ok
20:50:54.0385 2136 [ 9A774206ADB30E217E42990EB7B47809 ] C:\Program Files\McAfee\VirusScan Enterprise\vsevntui.dll
20:50:54.0385 2136 C:\Program Files\McAfee\VirusScan Enterprise\vsevntui.dll - ok
20:50:54.0385 2136 [ 4D6AB67175A04772042BFFE3457561D0 ] C:\Program Files\Common Files\McAfee\SystemCore\naevent.dll
20:50:54.0385 2136 C:\Program Files\Common Files\McAfee\SystemCore\naevent.dll - ok
20:50:54.0401 2136 [ AE9898D5600A232CD8AE3298692162E5 ] C:\Windows\System32\clusapi.dll
20:50:54.0401 2136 C:\Windows\System32\clusapi.dll - ok
20:50:54.0401 2136 [ 20BB06C242DC52CF7DBE64735D881B2E ] C:\Program Files\McAfee\Common Framework\Genevtinf3.dll
20:50:54.0401 2136 C:\Program Files\McAfee\Common Framework\Genevtinf3.dll - ok
20:50:54.0401 2136 [ 2AF094C822BD6094F14A8E85FB51D52A ] C:\Windows\System32\resutils.dll
20:50:54.0401 2136 C:\Windows\System32\resutils.dll - ok
20:50:54.0416 2136 [ 585EB475E7AF55C9065256E8FFB751A1 ] C:\Windows\System32\wbem\wbemcore.dll
20:50:54.0416 2136 C:\Windows\System32\wbem\wbemcore.dll - ok
20:50:54.0416 2136 [ 5AE88135C6A86FCD67BA16AFBB1C8389 ] C:\Windows\System32\wbem\esscli.dll
20:50:54.0416 2136 C:\Windows\System32\wbem\esscli.dll - ok
20:50:54.0432 2136 [ 371E3B05894549113D07CD3081ED55EF ] C:\Windows\System32\wbem\repdrvfs.dll
20:50:54.0432 2136 C:\Windows\System32\wbem\repdrvfs.dll - ok
20:50:54.0432 2136 [ 776AE0564F8B1C282E331FD95A1BDC5F ] C:\Windows\System32\wbem\wbemsvc.dll
20:50:54.0432 2136 C:\Windows\System32\wbem\wbemsvc.dll - ok
20:50:54.0432 2136 [ ED6EE83D61EBC683C2CD8E899EA6FEBE ] C:\Windows\System32\rasadhlp.dll
20:50:54.0432 2136 C:\Windows\System32\rasadhlp.dll - ok
20:50:54.0448 2136 [ A4CC7227A452C4909F9499D91B184364 ] C:\Windows\System32\ncobjapi.dll
20:50:54.0448 2136 C:\Windows\System32\ncobjapi.dll - ok
20:50:54.0448 2136 [ 3CDE2911462FEC80064A409C07710C06 ] C:\Windows\System32\wbem\WmiPrvSD.dll
20:50:54.0448 2136 C:\Windows\System32\wbem\WmiPrvSD.dll - ok
20:50:54.0463 2136 [ B350509B6C9296529BC464C60FEEAEF1 ] C:\Windows\System32\wbem\wbemess.dll
20:50:54.0463 2136 C:\Windows\System32\wbem\wbemess.dll - ok
20:50:54.0463 2136 [ F148865E4AC4F715E322EA06E6E21D84 ] C:\Windows\System32\wbem\NCProv.dll
20:50:54.0463 2136 C:\Windows\System32\wbem\NCProv.dll - ok
20:50:54.0463 2136 [ 1B0EC94520CAB89A9CE1B2DA405166AF ] C:\Windows\System32\p2pcollab.dll
20:50:54.0463 2136 C:\Windows\System32\p2pcollab.dll - ok
20:50:54.0479 2136 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] C:\Windows\System32\QAGENTRT.DLL
20:50:54.0479 2136 C:\Windows\System32\QAGENTRT.DLL - ok
20:50:54.0479 2136 [ 9FD6496B6D91C8BE2A10BD55EAE2D5F2 ] C:\Windows\System32\fveui.dll
20:50:54.0479 2136 C:\Windows\System32\fveui.dll - ok
20:50:54.0494 2136 [ 1A617835452EEE5060976C9B9F5FE635 ] C:\Windows\System32\wuapi.dll
20:50:54.0494 2136 C:\Windows\System32\wuapi.dll - ok
20:50:54.0494 2136 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] C:\Windows\System32\wdi.dll
20:50:54.0494 2136 C:\Windows\System32\wdi.dll - ok
20:50:54.0494 2136 [ AA53356D60AF47EACC85BC617A4F3F66 ] C:\Windows\System32\wpdbusenum.dll
20:50:54.0494 2136 C:\Windows\System32\wpdbusenum.dll - ok
20:50:54.0510 2136 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] C:\Windows\System32\aelupsvc.dll
20:50:54.0510 2136 C:\Windows\System32\aelupsvc.dll - ok
20:50:54.0510 2136 [ 72E953215CADE1A726C04AAFDF6B463D ] C:\Windows\System32\taskhost.exe
20:50:54.0510 2136 C:\Windows\System32\taskhost.exe - ok
20:50:54.0526 2136 [ 7A6986DD659B96398A11AF5173892715 ] C:\Windows\System32\cabinet.dll
20:50:54.0526 2136 C:\Windows\System32\cabinet.dll - ok
20:50:54.0526 2136 [ E98278865E8DABA21CFE5FE4BE34210A ] C:\Windows\System32\PortableDeviceApi.dll
20:50:54.0526 2136 C:\Windows\System32\PortableDeviceApi.dll - ok
20:50:54.0526 2136 [ 3458EDA96E30FBD0477A2800D3FB1909 ] C:\Windows\System32\wups.dll
20:50:54.0526 2136 C:\Windows\System32\wups.dll - ok
20:50:54.0541 2136 [ 7E82616BEE76BF5EAA5B30F681414E21 ] C:\Windows\System32\perftrack.dll
20:50:54.0541 2136 C:\Windows\System32\perftrack.dll - ok
20:50:54.0541 2136 [ ECF036299AA554B5E0455262857B39D0 ] C:\Windows\System32\diagperf.dll
20:50:54.0541 2136 C:\Windows\System32\diagperf.dll - ok
20:50:54.0557 2136 [ F8E882C10AF4C29E378D1E28D4817CB1 ] C:\Windows\System32\pnpts.dll
20:50:54.0557 2136 C:\Windows\System32\pnpts.dll - ok
20:50:54.0557 2136 [ 8B794AE6D5C7D42092804BC39A2EB8F6 ] C:\Windows\System32\aepic.dll
20:50:54.0557 2136 C:\Windows\System32\aepic.dll - ok
20:50:54.0557 2136 [ F0016853FA3F38F55FD868FF74C0359B ] C:\Windows\System32\wdiasqmmodule.dll
20:50:54.0557 2136 C:\Windows\System32\wdiasqmmodule.dll - ok
20:50:54.0572 2136 [ 15E298B5EC5B89C5994A59863969D9FF ] C:\Windows\System32\npmproxy.dll
20:50:54.0572 2136 C:\Windows\System32\npmproxy.dll - ok
20:50:54.0572 2136 [ D99621C0735B21DCC8BC4FEF02F379EF ] C:\Windows\System32\Apphlpdm.dll
20:50:54.0572 2136 C:\Windows\System32\Apphlpdm.dll - ok
20:50:54.0588 2136 [ C693E642ACFBDD76433AF6BE3C3EEE6F ] C:\Windows\System32\PortableDeviceConnectApi.dll
20:50:54.0588 2136 C:\Windows\System32\PortableDeviceConnectApi.dll - ok
20:50:54.0588 2136 [ C5C867CD7EFAC60D5021223E374DEEC5 ] C:\Windows\System32\dimsjob.dll
20:50:54.0588 2136 C:\Windows\System32\dimsjob.dll - ok
20:50:54.0588 2136 [ 0B7E85364CB878E2AD531DB7B601A9E5 ] C:\Windows\System32\NapiNSP.dll
20:50:54.0588 2136 C:\Windows\System32\NapiNSP.dll - ok
20:50:54.0604 2136 [ 5CF640EDDB1E40A5AB1BB743BCDEC610 ] C:\Windows\System32\pnrpnsp.dll
20:50:54.0604 2136 C:\Windows\System32\pnrpnsp.dll - ok
20:50:54.0604 2136 [ 5DF5D8CFD9B9573FA3B2C89D9061A240 ] C:\Windows\System32\winrnr.dll
20:50:54.0604 2136 C:\Windows\System32\winrnr.dll - ok
20:50:54.0619 2136 [ AC122407B29378FF9646F03404AC7C54 ] C:\Windows\System32\wshbth.dll
20:50:54.0619 2136 C:\Windows\System32\wshbth.dll - ok
20:50:54.0619 2136 [ D4191EFAB91E00FC09257AA5EBAF503B ] C:\Windows\System32\mprapi.dll
20:50:54.0619 2136 C:\Windows\System32\mprapi.dll - ok
20:50:54.0619 2136 [ F7FE730CE31B54145DEE1F1482BCCDD7 ] C:\Windows\System32\ndiscapCfg.dll
20:50:54.0619 2136 C:\Windows\System32\ndiscapCfg.dll - ok
20:50:54.0635 2136 [ 761A3A4038C1FD4F5795427907C28484 ] C:\Windows\System32\rascfg.dll
20:50:54.0635 2136 C:\Windows\System32\rascfg.dll - ok
20:50:54.0635 2136 [ 9A7B54D57594233EEB17892BAD309970 ] C:\Windows\System32\mprmsg.dll
20:50:54.0635 2136 C:\Windows\System32\mprmsg.dll - ok
20:50:54.0650 2136 [ CAFC0B884E5590B5E80D84F592388B3D ] C:\Windows\System32\tcpipcfg.dll
20:50:54.0650 2136 C:\Windows\System32\tcpipcfg.dll - ok
20:50:54.0650 2136 [ 78DE417B7921DACA072059E6BF410FC7 ] C:\Windows\System32\wshnetbs.dll
20:50:54.0650 2136 C:\Windows\System32\wshnetbs.dll - ok
20:50:54.0650 2136 [ A63DC5C2EA944E6657203E0C8EDEAF61 ] C:\Windows\System32\dllhost.exe
20:50:54.0650 2136 C:\Windows\System32\dllhost.exe - ok
20:50:54.0666 2136 [ 0B31464B7B2D616BD5F7036673588EC1 ] C:\Windows\System32\IDStore.dll
20:50:54.0666 2136 C:\Windows\System32\IDStore.dll - ok
20:50:54.0666 2136 [ AB0DDD50695906570E81F21D3481D4A9 ] C:\Windows\System32\KBDUK.DLL
20:50:54.0666 2136 C:\Windows\System32\KBDUK.DLL - ok
20:50:54.0682 2136 [ 3CA2BB895E204478C7A4C9BAF70970CE ] C:\Windows\System32\AtBroker.exe
20:50:54.0682 2136 C:\Windows\System32\AtBroker.exe - ok
20:50:54.0682 2136 [ 7FFD52D73352806969D424EF327D10A7 ] C:\Windows\System32\radardt.dll
20:50:54.0682 2136 C:\Windows\System32\radardt.dll - ok
20:50:54.0682 2136 [ 4F2659160AFCCA990305816946F69407 ] C:\Windows\System32\taskeng.exe
20:50:54.0682 2136 C:\Windows\System32\taskeng.exe - ok
20:50:54.0697 2136 [ 61AC3EFDFACFDD3F0F11DD4FD4044223 ] C:\Windows\System32\userinit.exe
20:50:54.0697 2136 C:\Windows\System32\userinit.exe - ok
20:50:54.0697 2136 [ 74AF6AA2E8B3180AADAE5FE8813CB1CD ] C:\Windows\System32\localspl.dll
20:50:54.0697 2136 C:\Windows\System32\localspl.dll - ok
20:50:54.0713 2136 [ 505BF4D1CADEB8D4F8BCD08D944DE25D ] C:\Windows\System32\dwm.exe
20:50:54.0713 2136 C:\Windows\System32\dwm.exe - ok
20:50:54.0713 2136 [ 754AFC50022C95DA7C86B7020DB78136 ] C:\Windows\System32\dwmredir.dll
20:50:54.0713 2136 C:\Windows\System32\dwmredir.dll - ok
20:50:54.0713 2136 [ 629181C26A78EB66B0B4E774E5AC2882 ] C:\Windows\System32\spoolss.dll
20:50:54.0713 2136 C:\Windows\System32\spoolss.dll - ok
20:50:54.0728 2136 [ 497E59D9F01C6F247E72222A61835119 ] C:\Windows\System32\dwmcore.dll
20:50:54.0728 2136 C:\Windows\System32\dwmcore.dll - ok
20:50:54.0728 2136 [ 3C1936A12C62254F914A01BBC6A8DC69 ] C:\Windows\System32\d3d10_1.dll
20:50:54.0728 2136 C:\Windows\System32\d3d10_1.dll - ok
20:50:54.0728 2136 [ 03CF941D031F30272D3063E5A4D686F5 ] C:\Windows\System32\PrintIsolationProxy.dll
20:50:54.0728 2136 C:\Windows\System32\PrintIsolationProxy.dll - ok
20:50:54.0744 2136 [ 659E04E74135927CA6D7BC5E75C84417 ] C:\Windows\System32\TSChannel.dll
20:50:54.0744 2136 C:\Windows\System32\TSChannel.dll - ok
20:50:54.0744 2136 [ D4212AB475A3B25EC4DF574536C3EDC5 ] C:\Windows\System32\d3d10_1core.dll
20:50:54.0744 2136 C:\Windows\System32\d3d10_1core.dll - ok
20:50:54.0760 2136 [ 9A7F1691F76E019C11481B6355125072 ] C:\Program Files\Real\RealUpgrade\realupgrade.exe
20:50:54.0760 2136 C:\Program Files\Real\RealUpgrade\realupgrade.exe - ok
20:50:54.0760 2136 [ D4F264FE23F8953D840904418220C15E ] C:\Windows\System32\dxgi.dll
20:50:54.0760 2136 C:\Windows\System32\dxgi.dll - ok
20:50:54.0760 2136 [ 126F8331BD023178C7F0EF2F5EDE16B3 ] C:\Windows\System32\FXSMON.dll
20:50:54.0760 2136 C:\Windows\System32\FXSMON.dll - ok
20:50:54.0775 2136 [ 6DE66FE7C526637E74CD066461C7C871 ] C:\Windows\System32\d3d11.dll
20:50:54.0775 2136 C:\Windows\System32\d3d11.dll - ok
20:50:54.0775 2136 [ 8B88EBBB05A0E56B7DCC708498C02B3E ] C:\Windows\explorer.exe
20:50:54.0775 2136 C:\Windows\explorer.exe - ok
20:50:54.0791 2136 [ 45EF871304D5900FAF18BF51BE833052 ] C:\Windows\System32\igd10umd32.dll
20:50:54.0791 2136 C:\Windows\System32\igd10umd32.dll - ok
20:50:54.0791 2136 [ E2A17BCC08D92F42E08AF6BA2F93ABA7 ] C:\Windows\System32\ExplorerFrame.dll
20:50:54.0791 2136 C:\Windows\System32\ExplorerFrame.dll - ok
20:50:54.0791 2136 [ AF238673651EFC0226EA74239B502A6F ] C:\Windows\System32\pdf995mon.dll
20:50:54.0791 2136 C:\Windows\System32\pdf995mon.dll - ok
20:50:54.0806 2136 [ 2100560AF3F7F2948F2676E44DFB4ECF ] C:\Windows\System32\uDWM.dll
20:50:54.0806 2136 C:\Windows\System32\uDWM.dll - ok
20:50:54.0806 2136 [ D1F4EF194A129726FBF30E2F514824AA ] C:\Users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
20:50:54.0806 2136 C:\Users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll - ok
20:50:54.0822 2136 [ C52CE534397E1D3A442FB4C88A3CBE42 ] C:\Windows\System32\msonpmon.dll
20:50:54.0822 2136 C:\Windows\System32\msonpmon.dll - ok
20:50:54.0822 2136 [ BC83108B18756547013ED443B8CDB31B ] C:\Windows\System32\msvcp100.dll
20:50:54.0822 2136 C:\Windows\System32\msvcp100.dll - ok
20:50:54.0822 2136 [ B390C1D825C7687493BEDE237C6C2F25 ] C:\Windows\System32\tcpmon.dll
20:50:54.0822 2136 C:\Windows\System32\tcpmon.dll - ok
20:50:54.0838 2136 [ 1220595CABA75AB91A6B3FA3B89483CC ] C:\Windows\System32\snmpapi.dll
20:50:54.0838 2136 C:\Windows\System32\snmpapi.dll - ok
20:50:54.0838 2136 [ 6357E2B68753A1F5CF4A68A25C4FD14A ] C:\Windows\System32\wsnmp32.dll
20:50:54.0838 2136 C:\Windows\System32\wsnmp32.dll - ok
20:50:54.0853 2136 [ 923CDD30092DB73EC4A0EBCDDD16C686 ] C:\Windows\System32\usbmon.dll
20:50:54.0853 2136 C:\Windows\System32\usbmon.dll - ok
20:50:54.0853 2136 [ A8EB761DE499242BECF153B2B34F020E ] C:\Windows\System32\WSDMon.dll
20:50:54.0853 2136 C:\Windows\System32\WSDMon.dll - ok
20:50:54.0853 2136 [ 73F6C5223F7E9B5780DD4A6C30FCF569 ] C:\Windows\System32\WSDApi.dll
20:50:54.0853 2136 C:\Windows\System32\WSDApi.dll - ok
20:50:54.0869 2136 [ 89F5770AD1E9D9CEF93D00303135EC33 ] C:\Windows\System32\ntprint.dll
20:50:54.0869 2136 C:\Windows\System32\ntprint.dll - ok
20:50:54.0869 2136 [ DB846EECA70EE9D2E2FF31147C57B0F4 ] C:\Windows\System32\webservices.dll
20:50:54.0869 2136 C:\Windows\System32\webservices.dll - ok
20:50:54.0884 2136 [ F34CFADA6C48DAA41B996D24C7D8D3CA ] C:\Windows\System32\fdPnp.dll
20:50:54.0884 2136 C:\Windows\System32\fdPnp.dll - ok
20:50:54.0884 2136 [ 89D90579E5FB1469CB0464F6512E42B7 ] C:\Windows\System32\fundisc.dll
20:50:54.0884 2136 C:\Windows\System32\fundisc.dll - ok
20:50:54.0884 2136 [ F348280907B38FDBDB3CEF55D456E149 ] C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll
20:50:54.0884 2136 C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll - ok
20:50:54.0900 2136 [ CD72C6406BA561BED6D42CB145E55307 ] C:\Windows\System32\spool\prtprocs\w32x86\winprint.dll
20:50:54.0900 2136 C:\Windows\System32\spool\prtprocs\w32x86\winprint.dll - ok
20:50:54.0900 2136 [ FC415B303B1ECF80B5F130A1F7203D02 ] C:\Windows\System32\win32spl.dll
20:50:54.0900 2136 C:\Windows\System32\win32spl.dll - ok
20:50:54.0916 2136 [ D27DDE7E0444C7F1819F958469EB7D93 ] C:\Windows\System32\inetpp.dll
20:50:54.0916 2136 C:\Windows\System32\inetpp.dll - ok
20:50:54.0916 2136 [ 465BEA35F7ED4A4A57686DEA7EA10F47 ] C:\Windows\System32\cscapi.dll
20:50:54.0916 2136 C:\Windows\System32\cscapi.dll - ok
20:50:54.0916 2136 [ 8F9D6B4AB86A39319078814ABBDD40BC ] C:\Program Files\Real\RealUpgrade\Common\hxmedpltfm.dll
20:50:54.0916 2136 C:\Program Files\Real\RealUpgrade\Common\hxmedpltfm.dll - ok
20:50:54.0931 2136 [ DB001FAEA818AE2E14A74E0ADC530FC0 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a74
2\msvcp90.dll
20:50:54.0931 2136 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a74
2\msvcp90.dll - ok
20:50:54.0931 2136 [ 7319102526BD11B45FD66335CF90CA12 ] C:\Windows\System32\HotStartUserAgent.dll
20:50:54.0931 2136 C:\Windows\System32\HotStartUserAgent.dll - ok
20:50:54.0947 2136 [ B43687C534A49700BF4B3C9898763752 ] C:\Windows\System32\MsCtfMonitor.dll
20:50:54.0947 2136 C:\Windows\System32\MsCtfMonitor.dll - ok
20:50:54.0947 2136 [ 56CEED370508F69A1BA04939BD1BADDA ] C:\Windows\System32\msutb.dll
20:50:54.0947 2136 C:\Windows\System32\msutb.dll - ok
20:50:54.0947 2136 [ 846D0E4DB261CFAF363902E41498E961 ] C:\Windows\System32\EhStorShell.dll
20:50:54.0947 2136 C:\Windows\System32\EhStorShell.dll - ok
20:50:54.0962 2136 [ F58516E2DC0D963EF70D6BFC21FD82C4 ] C:\Windows\System32\PlaySndSrv.dll
20:50:54.0962 2136 C:\Windows\System32\PlaySndSrv.dll - ok
20:50:54.0962 2136 [ 5C3F9DBA818CD93379D1A0F215270374 ] C:\Windows\System32\esent.dll
20:50:54.0962 2136 C:\Windows\System32\esent.dll - ok
20:50:54.0978 2136 [ 61B1ED5F429EFAC7E2036769870AB93E ] C:\Windows\System32\certcli.dll
20:50:54.0978 2136 C:\Windows\System32\certcli.dll - ok
20:50:54.0978 2136 [ 14486EB6AF542F2BD3239F7FC3E713F7 ] C:\Windows\System32\pautoenr.dll
20:50:54.0978 2136 C:\Windows\System32\pautoenr.dll - ok
20:50:54.0978 2136 [ 29BC473072568C072EC8B176498DE996 ] C:\Windows\System32\CertEnroll.dll
20:50:54.0978 2136 C:\Windows\System32\CertEnroll.dll - ok
20:50:54.0994 2136 [ 30DB64D316F502558DB2380F7343C9FD ] C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
20:50:54.0994 2136 C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll - ok
20:50:54.0994 2136 [ 207204AF80505AF51271FE164B56F662 ] C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll
20:50:54.0994 2136 C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll - ok
20:50:55.0009 2136 [ 30EFEBDC960A482E3E188B9960B286E2 ] C:\Program Files\Microsoft Office\Office12\GrooveNew.dll
20:50:55.0009 2136 C:\Program Files\Microsoft Office\Office12\GrooveNew.dll - ok
20:50:55.0009 2136 [ D5E459BED3DB9CF7FC6CC1455F177D2D ] C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421d
e\ATL80.dll
20:50:55.0009 2136 C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421d
e\ATL80.dll - ok
20:50:55.0009 2136 [ 57A51217581614DE07F30E34D6BB4993 ] C:\Windows\System32\cscdll.dll
20:50:55.0009 2136 C:\Windows\System32\cscdll.dll - ok
20:50:55.0025 2136 [ 3EC541C196DE18ED9A0D0AC82A694D4C ] C:\Windows\System32\cscui.dll
20:50:55.0025 2136 C:\Windows\System32\cscui.dll - ok
20:50:55.0025 2136 [ 03F3B770DFBED6131653CEDA8CA780F0 ] C:\Windows\System32\ntshrui.dll
20:50:55.0025 2136 C:\Windows\System32\ntshrui.dll - ok
20:50:55.0040 2136 [ 523CF74A52C9A1762DA8B83AEE734498 ] C:\Windows\System32\IconCodecService.dll
20:50:55.0040 2136 C:\Windows\System32\IconCodecService.dll - ok
20:50:55.0040 2136 [ EACFDF31921F51C097629F1F3C9129B4 ] C:\Windows\System32\appinfo.dll
20:50:55.0040 2136 C:\Windows\System32\appinfo.dll - ok
20:50:55.0040 2136 [ 47188B0092466FD476E23DEA70CC1D4F ] C:\Program Files\Real\RealUpgrade\Plugins\upgrade.dll
20:50:55.0040 2136 C:\Program Files\Real\RealUpgrade\Plugins\upgrade.dll - ok
20:50:55.0056 2136 [ 05920BD009621D06722A1CD339DA6481 ] C:\Windows\System32\mshtml.dll
20:50:55.0056 2136 C:\Windows\System32\mshtml.dll - ok
20:50:55.0056 2136 [ D44741F65A1D71F65814A12CF6E2400A ] C:\Windows\System32\runonce.exe
20:50:55.0056 2136 C:\Windows\System32\runonce.exe - ok
20:50:55.0072 2136 [ 4545960B2B09F04F54AF57F012DAD948 ] C:\Program Files\Common Files\McAfee\SystemCore\mfeapfa.dll
20:50:55.0072 2136 C:\Program Files\Common Files\McAfee\SystemCore\mfeapfa.dll - ok
20:50:55.0072 2136 [ B56404C9648B8CF0BABEACFC67451137 ] C:\Program Files\McAfee\VirusScan Enterprise\midutil.dll
20:50:55.0072 2136 C:\Program Files\McAfee\VirusScan Enterprise\midutil.dll - ok
20:50:55.0072 2136 [ D82D7A9E2AC5E8699CE6BB0C390C5C79 ] C:\Windows\System32\drivers\mfeapfk.sys
20:50:55.0072 2136 C:\Windows\System32\drivers\mfeapfk.sys - ok
20:50:55.0087 2136 [ DD06089C7E24C83F3482250DFD8510C7 ] C:\Program Files\Common Files\McAfee\SystemCore\scriptsn.dll
20:50:55.0087 2136 C:\Program Files\Common Files\McAfee\SystemCore\scriptsn.dll - ok
20:50:55.0087 2136 [ A8CDF3768604FF95B54669E20053D569 ] C:\Windows\System32\wscapi.dll
20:50:55.0087 2136 C:\Windows\System32\wscapi.dll - ok
20:50:55.0103 2136 [ 8258362DDB18B644A82D8B5061AD9426 ] C:\Windows\System32\wscisvif.dll
20:50:55.0103 2136 C:\Windows\System32\wscisvif.dll - ok
20:50:55.0103 2136 [ 7DF186D86CF8C571A12AAB788C777F84 ] C:\Windows\System32\wscproxystub.dll
20:50:55.0103 2136 C:\Windows\System32\wscproxystub.dll - ok
20:50:55.0118 2136 [ EE7EB150F681742CACB420E6D4522B0F ] C:\Program Files\Internet Explorer\sqmapi.dll
20:50:55.0118 2136 C:\Program Files\Internet Explorer\sqmapi.dll - ok
20:50:55.0118 2136 [ D8C2B95BC2353E1F18850D6B8F5DBA13 ] C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
20:50:55.0118 2136 C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll - ok
20:50:55.0118 2136 [ B5B063D45A9C5C7EA1992A43B3D8399C ] C:\Program Files\Common Files\McAfee\SystemCore\mfebopa.dll
20:50:55.0118 2136 C:\Program Files\Common Files\McAfee\SystemCore\mfebopa.dll - ok
20:50:55.0134 2136 [ 533AECD1B5356870AE2D905B4D3B42B7 ] C:\Program Files\Microsoft Office\Office12\GrooveMisc.dll
20:50:55.0134 2136 C:\Program Files\Microsoft Office\Office12\GrooveMisc.dll - ok
20:50:55.0134 2136 [ 011920070CACA9E9DB178A6475B51C19 ] C:\Windows\System32\drivers\mfebopk.sys
20:50:55.0134 2136 C:\Windows\System32\drivers\mfebopk.sys - ok
20:50:55.0150 2136 [ 1CDEA9188899E76D4FFD54C9D512CCDB ] C:\Windows\System32\msxml3.dll
20:50:55.0150 2136 C:\Windows\System32\msxml3.dll - ok
20:50:55.0150 2136 [ AD7B9C14083B52BC532FBA5948342B98 ] C:\Windows\System32\cmd.exe
20:50:55.0150 2136 C:\Windows\System32\cmd.exe - ok
20:50:55.0150 2136 [ FCA0837B2739C044EEC00AF0DDD73FFC ] C:\Windows\System32\ieframe.dll
20:50:55.0150 2136 C:\Windows\System32\ieframe.dll - ok
20:50:55.0165 2136 [ 007863E45F25AA47A4C30D0930BBFD85 ] C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
20:50:55.0165 2136 C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll - ok
20:50:55.0165 2136 [ 60F4AEFA103D421EA4A40E31409B4756 ] C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
20:50:55.0165 2136 C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll - ok
20:50:55.0181 2136 [ 1F05F5A16881CD928C82D53CEFCF4477 ] C:\Windows\System32\shdocvw.dll
20:50:55.0181 2136 C:\Windows\System32\shdocvw.dll - ok
20:50:55.0181 2136 [ 178A34E5554DCE485E1262DDF027960C ] C:\Users\Nimalika\AppData\Local\Temp\D3929204-A83B-4F11-BBEC-D0756D6E5674.exe
20:50:55.0181 2136 C:\Users\Nimalika\AppData\Local\Temp\D3929204-A83B-4F11-BBEC-D0756D6E5674.exe - ok
20:50:55.0181 2136 [ 7E9917D5309A90E7576653BFE39F80D8 ] C:\Windows\System32\timedate.cpl
20:50:55.0181 2136 C:\Windows\System32\timedate.cpl - ok
20:50:55.0196 2136 [ D2958325C1AE1AE37A83334C6229E3BC ] C:\Windows\System32\actxprxy.dll
20:50:55.0196 2136 C:\Windows\System32\actxprxy.dll - ok
20:50:55.0196 2136 [ 5987EA8A82C53359BCD2C29D6588583E ] C:\Windows\System32\linkinfo.dll
20:50:55.0196 2136 C:\Windows\System32\linkinfo.dll - ok
20:50:55.0212 2136 [ 3A16EA01FCFAAB40882DB5BFEE632322 ] C:\Windows\System32\msftedit.dll
20:50:55.0212 2136 C:\Windows\System32\msftedit.dll - ok
20:50:55.0212 2136 [ C225E5307D8D4982A1687F2702C37C78 ] C:\Windows\System32\msls31.dll
20:50:55.0212 2136 C:\Windows\System32\msls31.dll - ok
20:50:55.0228 2136 [ 7896EFFDEE215C172BE724A64931EF1C ] C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll
20:50:55.0228 2136 C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - ok
20:50:55.0228 2136 [ 2A39F32E0067CBF221611FE1FA8C6D8F ] C:\Windows\System32\DeviceCenter.dll
20:50:55.0228 2136 C:\Windows\System32\DeviceCenter.dll - ok
20:50:55.0228 2136 [ EAB975DB4C2805927FE5BD047D05C9AA ] C:\Windows\System32\netshell.dll
20:50:55.0228 2136 C:\Windows\System32\netshell.dll - ok
20:50:55.0243 2136 [ 175383778EB24D98C84E624021E3AA0B ] C:\Windows\System32\aeevts.dll
20:50:55.0243 2136 C:\Windows\System32\aeevts.dll - ok
20:50:55.0243 2136 [ 672D7C5080ACB003343006405DA2E621 ] C:\Windows\System32\thumbcache.dll
20:50:55.0243 2136 C:\Windows\System32\thumbcache.dll - ok
20:50:55.0259 2136 [ 3D57FFBAD3ED16B63DE3879BAB0FB56F ] C:\Windows\System32\networkexplorer.dll
20:50:55.0259 2136 C:\Windows\System32\networkexplorer.dll - ok
20:50:55.0259 2136 [ 4DA1FAD79FB55655916628293E3AF9F6 ] C:\Program Files\Conexant\Adsl\DSLSTAT.EXE
20:50:55.0259 2136 C:\Program Files\Conexant\Adsl\DSLSTAT.EXE - ok
20:50:55.0259 2136 [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\Windows\System32\drivers\82009583.sys
20:50:55.0259 2136 C:\Windows\System32\drivers\82009583.sys - ok
20:50:55.0274 2136 [ FF9B3006B09C516F0B7E810F5EEF9B9A ] C:\Program Files\Conexant\Adsl\DBGMODE.DLL
20:50:55.0274 2136 C:\Program Files\Conexant\Adsl\DBGMODE.DLL - ok
20:50:55.0274 2136 [ 1533DFB45183569FDA392A2903C59D81 ] C:\Program Files\Conexant\Adsl\DSLAGENT.EXE
20:50:55.0274 2136 C:\Program Files\Conexant\Adsl\DSLAGENT.EXE - ok
20:50:55.0274 2136 [ FCD688586654203879805259141D76FF ] C:\Windows\System32\hccutils.dll
20:50:55.0274 2136 C:\Windows\System32\hccutils.dll - ok
20:50:55.0290 2136 [ 68239842340DDFF8993DFD9127553EDA ] C:\Windows\System32\igfxtray.exe
20:50:55.0290 2136 C:\Windows\System32\igfxtray.exe - ok
20:50:55.0290 2136 [ B23815E40474C41A40C07B2B691CA240 ] C:\Program Files\Conexant\Adsl\CplEng.dll
20:50:55.0290 2136 C:\Program Files\Conexant\Adsl\CplEng.dll - ok
20:50:55.0306 2136 [ D9C51528488EA0D98D3C4D02ABD16759 ] C:\Windows\System32\igfxsrvc.exe
20:50:55.0306 2136 C:\Windows\System32\igfxsrvc.exe - ok
20:50:55.0306 2136 [ 004763BDF8E48244DBB9FDFDE3065EBC ] C:\Windows\System32\hkcmd.exe
20:50:55.0306 2136 C:\Windows\System32\hkcmd.exe - ok
20:50:55.0306 2136 [ 2DAF758E7C15886DD2424F77F488759A ] C:\Windows\System32\recovery.dll
20:50:55.0306 2136 C:\Windows\System32\recovery.dll - ok
20:50:55.0321 2136 [ 3CC04CB09FAFAD87942437FDDEE11EE3 ] C:\Windows\System32\ReAgent.dll
20:50:55.0321 2136 C:\Windows\System32\ReAgent.dll - ok
20:50:55.0321 2136 [ CD1102E5D340216138C7F56FA8D26998 ] C:\Windows\System32\igfxpers.exe
20:50:55.0321 2136 C:\Windows\System32\igfxpers.exe - ok
20:50:55.0337 2136 [ ECF6459A9C158BA07877221CF86D9E81 ] C:\Windows\System32\igfxsrvc.dll
20:50:55.0337 2136 C:\Windows\System32\igfxsrvc.dll - ok
20:50:55.0337 2136 [ AED01A07B3F9B7AC9EBEC89EBE78B0A1 ] C:\Windows\System32\igfxdev.dll
20:50:55.0337 2136 C:\Windows\System32\igfxdev.dll - ok
20:50:55.0337 2136 [ 2AC91779A31284C0F5AB36501B96264C ] C:\Windows\System32\igfxrenu.lrc
20:50:55.0337 2136 C:\Windows\System32\igfxrenu.lrc - ok
20:50:55.0352 2136 [ 0E34B7BB1FCF22BCC1E394D16F9E992B ] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
20:50:55.0352 2136 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe - ok
20:50:55.0352 2136 [ 62B3C9786081ECAAB272A118408D2817 ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
20:50:55.0352 2136 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe - ok
20:50:55.0368 2136 [ 8B48EB2799E9D18F288B7F9C63ADACD9 ] C:\Windows\System32\SynCOM.dll
20:50:55.0368 2136 C:\Windows\System32\SynCOM.dll - ok
20:50:55.0368 2136 [ 5682A3904D80A9F6EBD7D5A085A896E1 ] C:\Windows\System32\SynTPAPI.dll
20:50:55.0368 2136 C:\Windows\System32\SynTPAPI.dll - ok
20:50:55.0368 2136 [ 48BE298F7FD1BEF4D8FBACB04D8D95C4 ] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
20:50:55.0368 2136 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe - ok
20:50:55.0384 2136 [ 119C053FF0DC31C84AA39497109556A5 ] C:\Windows\System32\igfxress.dll
20:50:55.0384 2136 C:\Windows\System32\igfxress.dll - ok
20:50:55.0384 2136 [ 3F50E631CD23F54BD58CE6E9AC22CE34 ] C:\Program Files\Mendeley Desktop\MendeleyDesktop.exe
20:50:55.0384 2136 C:\Program Files\Mendeley Desktop\MendeleyDesktop.exe - ok
20:50:55.0399 2136 [ 36FDB8C775B1F7D2069B8C8D0CD09084 ] C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
20:50:55.0399 2136 C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe - ok
20:50:55.0399 2136 [ C2D2C87649E0315B4356B51498882B37 ] C:\Program Files\VideoLAN\VLC\vlc.exe
20:50:55.0399 2136 C:\Program Files\VideoLAN\VLC\vlc.exe - ok
20:50:55.0415 2136 [ 48E6868781B4E8BF4B77DBEC7694BCE8 ] C:\Program Files\Real\RealPlayer\Update\realsched.exe
20:50:55.0415 2136 C:\Program Files\Real\RealPlayer\Update\realsched.exe - ok
20:50:55.0415 2136 [ 1C7F1C3EA5894995E6C563E9AE9F029F ] C:\Windows\System32\l3codeca.acm
20:50:55.0415 2136 C:\Windows\System32\l3codeca.acm - ok
20:50:55.0415 2136 [ 1ECA7481AE0544967644420FA79A8F16 ] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
20:50:55.0415 2136 C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe - ok
20:50:55.0430 2136 [ 64E211E0FDFCE4D186DF58BB7D0503BC ] C:\Windows\System32\gameux.dll
20:50:55.0430 2136 C:\Windows\System32\gameux.dll - ok
20:50:55.0430 2136 [ 00B0ACE97EAA8A8F1CC1867E49B1FE74 ] C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
20:50:55.0430 2136 C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe - ok
20:50:55.0446 2136 [ 534A3CB0847BA114F0D8A5F2BB2EF6D0 ] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
20:50:55.0446 2136 C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe - ok
20:50:55.0446 2136 [ 484ACF6AF85A29AC52F3CF054DFDE9D3 ] C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
20:50:55.0446 2136 C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - ok
20:50:55.0462 2136 [ 12916E0642E92561C98B18A2A2D01B14 ] C:\Program Files\Common Files\Java\Java Update\jusched.exe
20:50:55.0462 2136 C:\Program Files\Common Files\Java\Java Update\jusched.exe - ok
20:50:55.0462 2136 [ 0477C2F9171599CA5BC3307FDFBA8D89 ] C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
20:50:55.0462 2136 C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe - ok
20:50:55.0462 2136 [ 67AE44033D25E897322338FD75D14ACF ] C:\Users\Nimalika\AppData\Roaming\JabRef 2.6\JabRef.exe
20:50:55.0462 2136 C:\Users\Nimalika\AppData\Roaming\JabRef 2.6\JabRef.exe - ok
20:50:55.0477 2136 [ 9BB6826905965C13BE1C84CC0FF83F42 ] C:\Users\Nimalika\Desktop\putty.exe
20:50:55.0477 2136 C:\Users\Nimalika\Desktop\putty.exe - ok
20:50:55.0477 2136 [ B539A7F68CD3377FF8242269CE072F95 ] C:\Program Files\MADHURA Dictionary\MADHURA.exe
20:50:55.0477 2136 C:\Program Files\MADHURA Dictionary\MADHURA.exe - ok
20:50:55.0493 2136 [ 5521928AA79079565B7CB8FCE6806131 ] C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\chrome.exe
20:50:55.0493 2136 C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\chrome.exe - ok
20:50:55.0493 2136 [ 01243FA89FBEC041E873DE8386138440 ] C:\Program Files\Real\RealPlayer\realplay.exe
20:50:55.0493 2136 C:\Program Files\Real\RealPlayer\realplay.exe - ok
20:50:55.0493 2136 [ 67C1B58706B47EEBA4E117AC197289E6 ] C:\Windows\System32\batmeter.dll
20:50:55.0493 2136 C:\Windows\System32\batmeter.dll - ok
20:50:55.0508 2136 [ 912649A1B3F9E6ACB3899FBDABA2ED5F ] C:\Windows\System32\stobject.dll
20:50:55.0508 2136 C:\Windows\System32\stobject.dll - ok
20:50:55.0508 2136 [ 31BA44FE30809E6F11738743325DE4C4 ] C:\Program Files\Google\Picasa3\Picasa3.exe
20:50:55.0508 2136 C:\Program Files\Google\Picasa3\Picasa3.exe - ok
20:50:55.0524 2136 [ 5E118E606E2AF56419A699210DFCF450 ] C:\Users\Nimalika\AppData\Roaming\Dropbox\bin\Dropbox.exe
20:50:55.0524 2136 C:\Users\Nimalika\AppData\Roaming\Dropbox\bin\Dropbox.exe - ok
20:50:55.0524 2136 [ 102CF6879887BBE846A00C459E6D4ABC ] C:\Windows\System32\riched20.dll
20:50:55.0524 2136 C:\Windows\System32\riched20.dll - ok
20:50:55.0524 2136 [ 086E5E6AA3069F45CF58A46DBF5378BA ] C:\Program Files\Inkscape\inkscape.exe
20:50:55.0524 2136 C:\Program Files\Inkscape\inkscape.exe - ok
20:50:55.0540 2136 [ 1F373C5DB440D92839DDDF63F5BA2E8A ] C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
20:50:55.0540 2136 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe - ok
20:50:55.0540 2136 [ B0BC447C758FF055D53FC6831FDB0344 ] C:\Windows\System32\consent.exe
20:50:55.0540 2136 C:\Windows\System32\consent.exe - ok
20:50:55.0555 2136 [ EE5B38DD8B8EBBE8868B9EF00B815585 ] C:\Program Files\Real\RealPlayer\Update\setu3270.dll
20:50:55.0555 2136 C:\Program Files\Real\RealPlayer\Update\setu3270.dll - ok
20:50:55.0555 2136 [ 7301A8574C11A22CB63C45260F69988D ] C:\Program Files\Real\RealPlayer\realjbox.exe
20:50:55.0555 2136 C:\Program Files\Real\RealPlayer\realjbox.exe - ok
20:50:55.0555 2136 [ 193EE65090683CD8234A5183D15540D4 ] C:\Program Files\GIMP-2.0\bin\gimp-2.6.exe
20:50:55.0555 2136 C:\Program Files\GIMP-2.0\bin\gimp-2.6.exe - ok
20:50:55.0571 2136 [ 3B907953A5229071F085ADBBB261A80F ] C:\Program Files\McAfee\Common Framework\UdaterUI.exe
20:50:55.0571 2136 C:\Program Files\McAfee\Common Framework\UdaterUI.exe - ok
20:50:55.0571 2136 [ F7ACE3B7E8BD67E366810F8A44926D97 ] C:\Program Files\Oxford\OALD8\oald8.exe
20:50:55.0571 2136 C:\Program Files\Oxford\OALD8\oald8.exe - ok
20:50:55.0586 2136 [ 5C24852FB8A910FA0C6AEC0DD10FA85E ] C:\Program Files\Opera\opera.dll
20:50:55.0586 2136 C:\Program Files\Opera\opera.dll - ok
20:50:55.0586 2136 [ 0F89F1A9E6037FDCA4E445FF1BF960B2 ] C:\Program Files\Mozilla Thunderbird\thunderbird.exe
20:50:55.0586 2136 C:\Program Files\Mozilla Thunderbird\thunderbird.exe - ok
20:50:55.0586 2136 [ 95110A1C5A1D228AC1DDF6AB67D00BEB ] C:\Program Files\Mozilla Firefox\firefox.exe
20:50:55.0586 2136 C:\Program Files\Mozilla Firefox\firefox.exe - ok
20:50:55.0602 2136 [ 8C3A34613A462646785B4A3AB16F8471 ] C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
20:50:55.0602 2136 C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe - ok
20:50:55.0602 2136 [ 26865893A128BAC06FB9A9F0F2E5E5F9 ] C:\Program Files\Docear\docear.exe
20:50:55.0602 2136 C:\Program Files\Docear\docear.exe - ok
20:50:55.0618 2136 [ 390679F7A217A5E73D756276C40AE887 ] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
20:50:55.0618 2136 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe - ok
20:50:55.0618 2136 [ 75460AFBC06FBF43987F3EF2A3C23A69 ] C:\Program Files\Mobile Partner\Mobile Partner.exe
20:50:55.0618 2136 C:\Program Files\Mobile Partner\Mobile Partner.exe - ok
20:50:55.0618 2136 [ 35CEFDE7FA035E342C35EE617A119BD6 ] C:\Program Files\McAfee\Common Framework\0409\UpdRes.Dll
20:50:55.0618 2136 C:\Program Files\McAfee\Common Framework\0409\UpdRes.Dll - ok
20:50:55.0633 2136 [ E393C4565884934EA634B03AA29FF1EC ] C:\Program Files\McAfee\VirusScan Enterprise\ftcfg.dll
20:50:55.0633 2136 C:\Program Files\McAfee\VirusScan Enterprise\ftcfg.dll - ok
20:50:55.0633 2136 [ F02A533F517EB38333CB12A9E8963773 ] C:\Users\Nimalika\AppData\Local\Google\Update\GoogleUpdate.exe
20:50:55.0633 2136 C:\Users\Nimalika\AppData\Local\Google\Update\GoogleUpdate.exe - ok
20:50:55.0649 2136 [ C8333F1F77A1B2E25F2202E892CAF634 ] C:\Windows\System32\prnfldr.dll
20:50:55.0649 2136 C:\Windows\System32\prnfldr.dll - ok
20:50:55.0649 2136 [ DCCA4B04AF87E52EF9EAA2190E06CBAC ] C:\Program Files\Windows Sidebar\sidebar.exe
20:50:55.0649 2136 C:\Program Files\Windows Sidebar\sidebar.exe - ok
20:50:55.0664 2136 [ ADDB05C93272A62606599B24730BD645 ] C:\Windows\System32\DXP.dll
20:50:55.0664 2136 C:\Windows\System32\DXP.dll - ok
20:50:55.0664 2136 [ 758D99511FD82B6C55E70494039E9F1A ] C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\goopdate.dll
20:50:55.0664 2136 C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\goopdate.dll - ok
20:50:55.0664 2136 [ 856CFFCD835528136367BB1A8FE1DB87 ] C:\Windows\System32\Syncreg.dll
20:50:55.0664 2136 C:\Windows\System32\Syncreg.dll - ok
20:50:55.0680 2136 [ C546236C916866371B0A0B1E71F4153F ] C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll
20:50:55.0680 2136 C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll - ok
20:50:55.0680 2136 [ 020D5F7ABD814935C1BBD55D97F11DB8 ] C:\Program Files\Real\RealPlayer\rpwa3260.dll
20:50:55.0680 2136 C:\Program Files\Real\RealPlayer\rpwa3260.dll - ok
20:50:55.0696 2136 [ 5091259BA7D650B29311FA922D8368F3 ] C:\Program Files\McAfee\Common Framework\McTray.exe
20:50:55.0696 2136 C:\Program Files\McAfee\Common Framework\McTray.exe - ok
20:50:55.0696 2136 [ F8F03D206F7D5811D630349A23E9B9B9 ] C:\Windows\ehome\ehSSO.dll
20:50:55.0696 2136 C:\Windows\ehome\ehSSO.dll - ok
20:50:55.0696 2136 [ 2E3E3FCD64BA4468B04F88E9B932050D ] C:\Program Files\McAfee\VirusScan Enterprise\graphics.dll
20:50:55.0696 2136 C:\Program Files\McAfee\VirusScan Enterprise\graphics.dll - ok
20:50:55.0711 2136 [ 070753E47E04181DD440EA2FEFE3115C ] C:\Program Files\Skype\Phone\Skype.exe
20:50:55.0711 2136 C:\Program Files\Skype\Phone\Skype.exe - ok
20:50:55.0711 2136 [ 31A7AA2DEDEFBD3927B0CADE051AAC2C ] C:\Program Files\SUPERAntiSpyware\deupx.dll
20:50:55.0711 2136 C:\Program Files\SUPERAntiSpyware\deupx.dll - ok
20:50:55.0727 2136 [ BB50B21FEE2A6F3E5FC92B330ECCF050 ] C:\Windows\System32\hhctrl.ocx
20:50:55.0727 2136 C:\Windows\System32\hhctrl.ocx - ok
20:50:55.0727 2136 [ DC5F780FCEA76D71684A8C5B752180AE ] C:\Program Files\McAfee\Common Framework\McAfeeWin32GUISupportDLL.dll
20:50:55.0727 2136 C:\Program Files\McAfee\Common Framework\McAfeeWin32GUISupportDLL.dll - ok
20:50:55.0727 2136 [ B2B3DAE040F6B5AE1DF52B0CD7631A18 ] C:\Windows\System32\AltTab.dll
20:50:55.0727 2136 C:\Windows\System32\AltTab.dll - ok
20:50:55.0742 2136 [ A33452A42BDF214E7FC40CB470515605 ] C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe
20:50:55.0742 2136 C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe - ok
20:50:55.0742 2136 [ 76B35CB0F3A4E69D6DFF27F542B9F856 ] C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\GoogleCrashHandler.exe
20:50:55.0742 2136 C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\GoogleCrashHandler.exe - ok
20:50:55.0758 2136 [ 735263DA17BF5BAF9CCD483843BF9D5A ] C:\Windows\System32\WPDShServiceObj.dll
20:50:55.0758 2136 C:\Windows\System32\WPDShServiceObj.dll - ok
20:50:55.0758 2136 [ ADB45A977BD9E45790CA496DB84BA148 ] C:\Windows\System32\PortableDeviceTypes.dll
20:50:55.0758 2136 C:\Windows\System32\PortableDeviceTypes.dll - ok
20:50:55.0758 2136 [ 9275C109243354D5C44068DD38E93BD7 ] C:\Program Files\McAfee\Common Framework\McTrayInterfaceLib.dll
20:50:55.0758 2136 C:\Program Files\McAfee\Common Framework\McTrayInterfaceLib.dll - ok
20:50:55.0774 2136 [ 4395AC0BC02009AFAAB01368BA38AF30 ] C:\Windows\System32\jsproxy.dll
20:50:55.0774 2136 C:\Windows\System32\jsproxy.dll - ok
20:50:55.0774 2136 [ 3D6F22551D422F97AACB0BB927E4C846 ] C:\Windows\System32\pnidui.dll
20:50:55.0774 2136 C:\Windows\System32\pnidui.dll - ok
20:50:55.0789 2136 [ BD626EF05967D14C772B8096292731A3 ] C:\Windows\System32\QUTIL.DLL
20:50:55.0789 2136 C:\Windows\System32\QUTIL.DLL - ok
20:50:55.0789 2136 [ BD713579A87D698E1F2158CE10E48130 ] C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
20:50:55.0789 2136 C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe - ok
20:50:55.0789 2136 [ CF4274CEEA9F7791FB7FC40A066BC2C7 ] C:\Windows\System32\cscobj.dll
20:50:55.0789 2136 C:\Windows\System32\cscobj.dll - ok
20:50:55.0805 2136 [ 8D1A7F14BFFA4B2887864EF9CFE732AA ] C:\Program Files\McAfee\Common Framework\McTrayErrorLoggingPlugin.dll
20:50:55.0805 2136 C:\Program Files\McAfee\Common Framework\McTrayErrorLoggingPlugin.dll - ok
20:50:55.0805 2136 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] C:\Windows\System32\netman.dll
20:50:55.0805 2136 C:\Windows\System32\netman.dll - ok
20:50:55.0820 2136 [ 674B0C0F6A448EB185CAAB9C51D44032 ] C:\Windows\System32\srchadmin.dll
20:50:55.0820 2136 C:\Windows\System32\srchadmin.dll - ok
20:50:55.0820 2136 [ 3943042F65CAB88041449C09519E45E7 ] C:\Program Files\WinSCP\DragExt.dll
20:50:55.0820 2136 C:\Program Files\WinSCP\DragExt.dll - ok
20:50:55.0820 2136 [ D39DA70FEA6BD713682F70635587DA9E ] C:\Windows\System32\rasdlg.dll
20:50:55.0820 2136 C:\Windows\System32\rasdlg.dll - ok
20:50:55.0836 2136 [ 236F286E103FD44BD85FDD93097FD5DD ] C:\Windows\System32\SearchIndexer.exe
20:50:55.0836 2136 C:\Windows\System32\SearchIndexer.exe - ok
20:50:55.0836 2136 [ 1D1EAA16D193C6A2D45981ED3914D22A ] C:\Windows\System32\msimtf.dll
20:50:55.0836 2136 C:\Windows\System32\msimtf.dll - ok
20:50:55.0852 2136 [ 8B285BDAB7735FDFB18E6F7122923B77 ] C:\Windows\System32\UIAnimation.dll
20:50:55.0852 2136 C:\Windows\System32\UIAnimation.dll - ok
20:50:55.0852 2136 [ D83EFB33B1E915FB2CA2E491A6CF6611 ] C:\Program Files\McAfee\Common Framework\mfevtpa.dll
20:50:55.0852 2136 C:\Program Files\McAfee\Common Framework\mfevtpa.dll - ok
20:50:55.0852 2136 [ 9A39A2A5F443A756C568C6ED5748AFE4 ] C:\Windows\System32\ActionCenter.dll
20:50:55.0852 2136 C:\Windows\System32\ActionCenter.dll - ok
20:50:55.0867 2136 [ 32D3677EBA4F1524BA081A4D7932FDF5 ] C:\Program Files\McAfee\Common Framework\McTrayLegacySupportPlugin.dll
20:50:55.0867 2136 C:\Program Files\McAfee\Common Framework\McTrayLegacySupportPlugin.dll - ok
20:50:55.0867 2136 [ 32C26797AB646074A2BB562F9D10ADB5 ] C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
20:50:55.0867 2136 C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE - ok
20:50:55.0883 2136 [ 465DBF63A5049E4DB4BC5C12FFE781CB ] C:\Windows\System32\tquery.dll
20:50:55.0883 2136 C:\Windows\System32\tquery.dll - ok
20:50:55.0883 2136 [ 1843E81FA7ACFFF4344A7DD4328D7DA0 ] C:\Program Files\Microsoft Office\Office12\1033\ONINTL.DLL
20:50:55.0883 2136 C:\Program Files\Microsoft Office\Office12\1033\ONINTL.DLL - ok
20:50:55.0898 2136 [ C2D6A4475B87651D5909E364439FDA52 ] C:\Windows\System32\FXSST.dll
20:50:55.0898 2136 C:\Windows\System32\FXSST.dll - ok
20:50:55.0898 2136 [ DD06089C7E24C83F3482250DFD8510C7 ] C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20130620121611.dll
20:50:55.0898 2136 C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20130620121611.dll - ok
20:50:55.0898 2136 [ 97FA62873FF759574B20DF39FF22CC27 ] C:\Windows\System32\jscript9.dll
20:50:55.0898 2136 C:\Windows\System32\jscript9.dll - ok
20:50:55.0914 2136 [ 091C7153A1292F19BE34FAC07FFF12EC ] C:\Windows\System32\jscript.dll
20:50:55.0914 2136 C:\Windows\System32\jscript.dll - ok
20:50:55.0914 2136 [ 96E0F0BED5D9EBABB899D8CA83C36A7E ] C:\Windows\System32\vbscript.dll
20:50:55.0914 2136 C:\Windows\System32\vbscript.dll - ok
20:50:55.0930 2136 [ 04B88428A872390D235BE52D38A9D4EF ] C:\Windows\System32\dot3api.dll
20:50:55.0930 2136 C:\Windows\System32\dot3api.dll - ok
20:50:55.0930 2136 [ 8063046AA70B97CA9985672B8848FB2E ] C:\Windows\System32\wlanhlp.dll
20:50:55.0930 2136 C:\Windows\System32\wlanhlp.dll - ok
20:50:55.0945 2136 [ 942E57152F1CD0533644AB30EF1A4728 ] C:\Windows\System32\FXSAPI.dll
20:50:55.0945 2136 C:\Windows\System32\FXSAPI.dll - ok
20:50:55.0945 2136 [ C4096CA42199428B3D63DC206C197F0E ] C:\Windows\System32\FXSRESM.dll
20:50:55.0945 2136 C:\Windows\System32\FXSRESM.dll - ok
20:50:55.0961 2136 [ 443C5C000A776DC84E41F06401F4B577 ] C:\Program Files\McAfee\VirusScan Enterprise\shstat.dll
20:50:55.0961 2136 C:\Program Files\McAfee\VirusScan Enterprise\shstat.dll - ok
20:50:55.0961 2136 [ 6EF5F3F18413C367195F06E503AB86A6 ] C:\Windows\System32\d3d9.dll
20:50:55.0961 2136 C:\Windows\System32\d3d9.dll - ok
20:50:55.0976 2136 [ B010CF886420EE29C2C276646721D255 ] C:\Windows\System32\wlanapi.dll
20:50:55.0976 2136 C:\Windows\System32\wlanapi.dll - ok
20:50:55.0976 2136 [ 77B1471A490B53B24EFE136F09F76550 ] C:\Windows\System32\d3d8thk.dll
20:50:55.0976 2136 C:\Windows\System32\d3d8thk.dll - ok
20:50:55.0976 2136 [ 0241CB16136B9A4939CA0395768AE286 ] C:\Windows\System32\mssrch.dll
20:50:55.0976 2136 C:\Windows\System32\mssrch.dll - ok
20:50:55.0992 2136 [ 87673DE37ECCDDADD51E4897B396ADF3 ] C:\Program Files\McAfee\Common Framework\traceapp.dll
20:50:55.0992 2136 C:\Program Files\McAfee\Common Framework\traceapp.dll - ok
20:50:55.0992 2136 [ 487F44B08EFEAF5AD087878357B9403D ] C:\Windows\System32\pdh.dll
20:50:55.0992 2136 C:\Windows\System32\pdh.dll - ok
20:50:56.0008 2136 [ 967EA5B213E9984CBE270205DF37755B ] C:\Windows\System32\FXSSVC.exe
20:50:56.0008 2136 C:\Windows\System32\FXSSVC.exe - ok
20:50:56.0008 2136 [ 8CD1DEE212E52B9C22E66DBA44991D32 ] C:\Windows\System32\httpapi.dll
20:50:56.0008 2136 C:\Windows\System32\httpapi.dll - ok
20:50:56.0023 2136 [ 703FFD301AB900B047337C5D40FD6F96 ] C:\Windows\System32\olepro32.dll
20:50:56.0023 2136 C:\Windows\System32\olepro32.dll - ok
20:50:56.0023 2136 [ 613BF4820361543956909043A265C6AC ] C:\Windows\System32\tapisrv.dll
20:50:56.0023 2136 C:\Windows\System32\tapisrv.dll - ok
20:50:56.0039 2136 [ 81600E2E27ED61427AAD865B9BCDDB9D ] C:\Windows\System32\msidle.dll
20:50:56.0039 2136 C:\Windows\System32\msidle.dll - ok
20:50:56.0039 2136 [ CB9E04DC05EACF5B9A36CA276D475006 ] C:\Windows\System32\rasmans.dll
20:50:56.0039 2136 C:\Windows\System32\rasmans.dll - ok
20:50:56.0039 2136 [ 1CBF15FDB0310345A68972EB5C5B948F ] C:\Windows\System32\mssprxy.dll
20:50:56.0039 2136 C:\Windows\System32\mssprxy.dll - ok
20:50:56.0054 2136 [ B2E1E4A16EDD02396F451F915FA3CBFA ] C:\Windows\System32\rastapi.dll
20:50:56.0054 2136 C:\Windows\System32\rastapi.dll - ok
20:50:56.0054 2136 [ 8BC9DB92C4B2F3BE89185BEAB2AFC1F6 ] C:\Windows\System32\mapi32.dll
20:50:56.0054 2136 C:\Windows\System32\mapi32.dll - ok
20:50:56.0070 2136 [ BA32509D9B340162327B341013DE6522 ] C:\Windows\System32\tapi32.dll
20:50:56.0070 2136 C:\Windows\System32\tapi32.dll - ok
20:50:56.0070 2136 [ 377F0C1DDBFA6A43CB7E7568BC0ECED0 ] C:\Windows\System32\unimdm.tsp
20:50:56.0070 2136 C:\Windows\System32\unimdm.tsp - ok
20:50:56.0086 2136 [ E675DE8CF57D8814218733B3DAE896D7 ] C:\Windows\System32\uniplat.dll
20:50:56.0086 2136 C:\Windows\System32\uniplat.dll - ok
20:50:56.0086 2136 [ F3FB146CDBDD26FCD0CF7941C547BEE4 ] C:\Windows\System32\kmddsp.tsp
20:50:56.0086 2136 C:\Windows\System32\kmddsp.tsp - ok
20:50:56.0101 2136 [ E2F6CC0D191361EE94FEA3957653F531 ] C:\Windows\System32\hidphone.tsp
20:50:56.0101 2136 C:\Windows\System32\hidphone.tsp - ok
20:50:56.0101 2136 [ AA11A26692E0DB2996CAEFE9EC61F61F ] C:\Windows\System32\ndptsp.tsp
20:50:56.0101 2136 C:\Windows\System32\ndptsp.tsp - ok
20:50:56.0101 2136 [ 67F9B5C7E215B48F9256757E9CC09A7B ] C:\Windows\System32\rasppp.dll
20:50:56.0101 2136 C:\Windows\System32\rasppp.dll - ok
20:50:56.0117 2136 [ B63E24E9271E99FD4540E3CA22A937DA ] C:\Windows\System32\en-US\tquery.dll.mui
20:50:56.0117 2136 C:\Windows\System32\en-US\tquery.dll.mui - ok
20:50:56.0117 2136 [ 9FF8F684BACF326082E5562F7C104A79 ] C:\Windows\System32\d2d1.dll
20:50:56.0117 2136 C:\Windows\System32\d2d1.dll - ok
20:50:56.0132 2136 [ 80B562B5B59ED850C328DD75F964F3D8 ] C:\Windows\System32\vpnike.dll
20:50:56.0132 2136 C:\Windows\System32\vpnike.dll - ok
20:50:56.0132 2136 [ 207CF171B1C6B8AE50C1FBF87363EEBC ] C:\Windows\System32\raschap.dll
20:50:56.0132 2136 C:\Windows\System32\raschap.dll - ok
20:50:56.0132 2136 [ 4277F5164DE9B7C665BB928B9145BEE0 ] C:\Windows\System32\DWrite.dll
20:50:56.0132 2136 C:\Windows\System32\DWrite.dll - ok
20:50:56.0148 2136 [ C02AA67276FEE0C15CC4D6D616BDE95E ] C:\Windows\System32\WWanAPI.dll
20:50:56.0148 2136 C:\Windows\System32\WWanAPI.dll - ok
20:50:56.0148 2136 [ F2ED6D00921CA138289E5E0CCB9ABF87 ] C:\Windows\System32\wwapi.dll
20:50:56.0148 2136 C:\Windows\System32\wwapi.dll - ok
20:50:56.0148 2136 [ 02530B0B7E048DD5AC8D52DAEACAEB2B ] C:\Windows\System32\QAGENT.DLL
20:50:56.0148 2136 C:\Windows\System32\QAGENT.DLL - ok
20:50:56.0164 2136 [ 55D6494C2311707FD0AF7DB63DA4D656 ] C:\Windows\System32\igdumdx32.dll
20:50:56.0164 2136 C:\Windows\System32\igdumdx32.dll - ok
20:50:56.0164 2136 [ B3170CCC779B682C3341873EA60CF084 ] C:\Windows\System32\d3d10warp.dll
20:50:56.0164 2136 C:\Windows\System32\d3d10warp.dll - ok
20:50:56.0179 2136 [ E3D5E244807AD655787FCD25477CC1BC ] C:\Windows\System32\bthprops.cpl
20:50:56.0179 2136 C:\Windows\System32\bthprops.cpl - ok
20:50:56.0179 2136 [ 27FC75229EEE367D4C0E643C108A90FA ] C:\Windows\System32\LocationApi.dll
20:50:56.0179 2136 C:\Windows\System32\LocationApi.dll - ok
20:50:56.0179 2136 [ D6626C93BF7F557839C028D32247F910 ] C:\Windows\System32\SensorsApi.dll
20:50:56.0179 2136 C:\Windows\System32\SensorsApi.dll - ok
20:50:56.0195 2136 [ DEFB55D4FF094673DF31FA89A8A8A2F0 ] C:\Windows\System32\dxtrans.dll
20:50:56.0195 2136 C:\Windows\System32\dxtrans.dll - ok
20:50:56.0195 2136 [ BAB9EF9A340113666F678AA2474904B6 ] C:\Windows\System32\ddrawex.dll
20:50:56.0195 2136 C:\Windows\System32\ddrawex.dll - ok
20:50:56.0210 2136 [ 198552AEFECA69D646867EC8D792DE95 ] C:\Windows\System32\ddraw.dll
20:50:56.0210 2136 C:\Windows\System32\ddraw.dll - ok
20:50:56.0210 2136 [ 55E5B32AE8D1F51A63C82919656FD275 ] C:\Windows\System32\dciman32.dll
20:50:56.0210 2136 C:\Windows\System32\dciman32.dll - ok
20:50:56.0210 2136 [ C68FBBF01E86CB6CF0B797748FBD6C1A ] C:\Windows\System32\dxtmsft.dll
20:50:56.0210 2136 C:\Windows\System32\dxtmsft.dll - ok
20:50:56.0226 2136 [ 031CCDFF85A57172F3402CB99B3E9D46 ] C:\Users\Nimalika\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
20:50:56.0226 2136 C:\Users\Nimalika\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll - ok
20:50:56.0226 2136 [ AD1EA59C74D873AC22FB839B8E3E97F7 ] C:\Program Files\Spybot - Search & Destroy\advcheck.dll
20:50:56.0226 2136 C:\Program Files\Spybot - Search & Destroy\advcheck.dll - ok
20:50:56.0242 2136 [ 8EE6BDE1D572677AA35707C52C585F75 ] C:\Windows\System32\mlang.dll
20:50:56.0242 2136 C:\Windows\System32\mlang.dll - ok
20:50:56.0242 2136 [ E1C1197D2202843F1CBAFB449851C7F5 ] C:\Program Files\Windows Sidebar\wlsrvc.dll
20:50:56.0242 2136 C:\Program Files\Windows Sidebar\wlsrvc.dll - ok
20:50:56.0242 2136 [ 2424231BBD703A677D115C29983B4293 ] C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
20:50:56.0242 2136 C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - ok
20:50:56.0257 2136 [ 7D6BC95771E8F220C0EB8CDC7663E2E2 ] C:\Users\Nimalika\AppData\Local\Temp\SSUPDATE.EXE
20:50:56.0257 2136 C:\Users\Nimalika\AppData\Local\Temp\SSUPDATE.EXE - ok
20:50:56.0257 2136 [ 9DF7A7C74D8632CB5EBD37E3A374825E ] C:\Windows\System32\webcheck.dll
20:50:56.0257 2136 C:\Windows\System32\webcheck.dll - ok
20:50:56.0273 2136 [ 2DDEA2C345DA5BC589EFD398F220DB0E ] C:\Windows\System32\SyncCenter.dll
20:50:56.0273 2136 C:\Windows\System32\SyncCenter.dll - ok
20:50:56.0273 2136 [ 2D11BC8B460957E62E4420373A0D8BDA ] C:\Windows\System32\imapi2.dll
20:50:56.0273 2136 C:\Windows\System32\imapi2.dll - ok
20:50:56.0288 2136 [ E1AC89F6C5252057E6062843E36A6701 ] C:\Windows\System32\SearchProtocolHost.exe
20:50:56.0288 2136 C:\Windows\System32\SearchProtocolHost.exe - ok
20:50:56.0288 2136 [ A5D237B8673025B052C0E6FDB6A883E8 ] C:\Windows\System32\msshooks.dll
20:50:56.0288 2136 C:\Windows\System32\msshooks.dll - ok
20:50:56.0288 2136 [ C7952D0A4C43A965A1741916BB134751 ] C:\Windows\System32\hgcpl.dll
20:50:56.0288 2136 C:\Windows\System32\hgcpl.dll - ok
20:50:56.0304 2136 [ A6CD6B3F71E13E2E45B727FB8A47EA87 ] C:\Windows\System32\SearchFilterHost.exe
20:50:56.0304 2136 C:\Windows\System32\SearchFilterHost.exe - ok
20:50:56.0304 2136 [ D83947A58613E9091B4C9CC0F1546A8D ] C:\Windows\System32\mscoree.dll
20:50:56.0304 2136 C:\Windows\System32\mscoree.dll - ok
20:50:56.0320 2136 [ F5DF6846F30E9F54EA60CCAEB3FB2055 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
20:50:56.0320 2136 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok
20:50:56.0320 2136 [ DB67C7C62038BDE813CB6486581A7611 ] C:\Windows\System32\mssph.dll
20:50:56.0320 2136 C:\Windows\System32\mssph.dll - ok
20:50:56.0320 2136 [ 5BB8C06EB5EA4BA22EE8A678F2D79B25 ] C:\Windows\System32\devenum.dll
20:50:56.0320 2136 C:\Windows\System32\devenum.dll - ok
20:50:56.0335 2136 [ 7069AAB8536F29ED7323140973A2894B ] C:\Windows\System32\msdmo.dll
20:50:56.0335 2136 C:\Windows\System32\msdmo.dll - ok
20:50:56.0335 2136 [ E24FE90E9DE8D8AE70E59F7B01675DEF ] C:\Windows\System32\avicap32.dll
20:50:56.0335 2136 C:\Windows\System32\avicap32.dll - ok
20:50:56.0335 2136 [ C335EC1182AC10B188705554E0BC1186 ] C:\Windows\System32\msvfw32.dll
20:50:56.0335 2136 C:\Windows\System32\msvfw32.dll - ok
20:50:56.0351 2136 [ 24498D084FAA7A459C91066EC241E1CE ] C:\Windows\System32\vfwwdm32.dll
20:50:56.0351 2136 C:\Windows\System32\vfwwdm32.dll - ok
20:50:56.0351 2136 [ 39C3B2EEBEE102ADDA573C346FF5F3B7 ] C:\Windows\System32\igdumd32.dll
20:50:56.0351 2136 C:\Windows\System32\igdumd32.dll - ok
20:50:56.0366 2136 [ 752F8E96BAB993517838315508FB82CB ] C:\Windows\System32\perfproc.dll
20:50:56.0366 2136 C:\Windows\System32\perfproc.dll - ok
20:50:56.0366 2136 [ B92E9318F7E4AEF633B8EC3A873565AF ] C:\Windows\System32\perfdisk.dll
20:50:56.0366 2136 C:\Windows\System32\perfdisk.dll - ok
20:50:56.0366 2136 [ 6FA41E0C86EF049A12C05CA4BBA8F9AF ] C:\Windows\System32\perfos.dll
20:50:56.0366 2136 C:\Windows\System32\perfos.dll - ok
20:50:56.0382 2136 [ 99B9343280AF6A4C0F27CF2E28E94BBF ] C:\Windows\System32\dssenh.dll
20:50:56.0382 2136 C:\Windows\System32\dssenh.dll - ok
20:50:56.0382 2136 [ 5195283D5B1644F6698375279B937AAE ] C:\Program Files\Skype\Updater\Updater.dll
20:50:56.0382 2136 C:\Program Files\Skype\Updater\Updater.dll - ok
20:50:56.0398 2136 [ 8E79090CB0987CA102E845341E052537 ] C:\Windows\System32\vdmdbg.dll
20:50:56.0398 2136 C:\Windows\System32\vdmdbg.dll - ok
20:50:56.0398 2136 [ CC5BF60E9D3F181C0B62AC91AD8634B8 ] C:\Windows\System32\qcap.dll
20:50:56.0398 2136 C:\Windows\System32\qcap.dll - ok
20:50:56.0398 2136 [ 0AE0C4955E1DE29CCDC9DA1B816FE5EE ] C:\Windows\System32\quartz.dll
20:50:56.0398 2136 C:\Windows\System32\quartz.dll - ok
20:50:56.0413 2136 [ C140F86932B5B61F54A4D836E2D34AB2 ] C:\Windows\System32\ksproxy.ax
20:50:56.0413 2136 C:\Windows\System32\ksproxy.ax - ok
20:50:56.0413 2136 [ 4DDACA8A66B95ABA02812FF3C13DE198 ] C:\Windows\System32\vidcap.ax
20:50:56.0413 2136 C:\Windows\System32\vidcap.ax - ok
20:50:56.0429 2136 [ 630A31F277349109299E590856A4B004 ] C:\Windows\System32\Kswdmcap.ax
20:50:56.0429 2136 C:\Windows\System32\Kswdmcap.ax - ok
20:50:56.0429 2136 [ DC6612A9EE015A36BA2A27BC9CC12537 ] C:\Windows\System32\mfc42.dll
20:50:56.0429 2136 C:\Windows\System32\mfc42.dll - ok
20:50:56.0429 2136 [ 7D34AF98A706230CC2DEDFE0CABF87AB ] C:\Windows\System32\odbc32.dll
20:50:56.0429 2136 C:\Windows\System32\odbc32.dll - ok
20:50:56.0444 2136 [ ABA457BFC7EC0B5E130B2F1E0F549DFF ] C:\Windows\System32\odbcint.dll
20:50:56.0444 2136 C:\Windows\System32\odbcint.dll - ok
20:50:56.0444 2136 [ F10E9620F1D0EDEC56C0C1E1790CEAB9 ] C:\Users\Nimalika\AppData\Local\Temp\SkypeSetup.exe
20:50:56.0444 2136 C:\Users\Nimalika\AppData\Local\Temp\SkypeSetup.exe - ok
20:50:56.0460 2136 [ C5A75EB48E2344ABDC162BDA79E16841 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:50:56.0460 2136 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe - ok
20:50:56.0460 2136 [ E5F7C30EDF0892667933BE879F067D67 ] C:\Windows\System32\msvcr100_clr0400.dll
20:50:56.0460 2136 C:\Windows\System32\msvcr100_clr0400.dll - ok
20:50:56.0460 2136 [ CF87A1DE791347E75B98885214CED2B8 ] C:\Windows\System32\sppsvc.exe
20:50:56.0460 2136 C:\Windows\System32\sppsvc.exe - ok
20:50:56.0476 2136 [ D16D818E9930A6E5B4F6476DD0998D1A ] C:\Windows\System32\drivers\spsys.sys
20:50:56.0476 2136 C:\Windows\System32\drivers\spsys.sys - ok
20:50:56.0476 2136 [ FC3EC24FCE372C89423E015A2AC1A31E ] C:\Windows\System32\wuaueng.dll
20:50:56.0476 2136 C:\Windows\System32\wuaueng.dll - ok
20:50:56.0491 2136 [ 387A8A473ECC5BA02CF453277C1F3274 ] C:\Windows\System32\mspatcha.dll
20:50:56.0491 2136 C:\Windows\System32\mspatcha.dll - ok
20:50:56.0491 2136 [ 3A11396EAC2414012155AB14E5C1E332 ] C:\Windows\System32\sppwinob.dll
20:50:56.0491 2136 C:\Windows\System32\sppwinob.dll - ok
20:50:56.0491 2136 [ BDC0C99E472176C8C2C853A68ADC5073 ] C:\Windows\System32\wups2.dll
20:50:56.0491 2136 C:\Windows\System32\wups2.dll - ok
20:50:56.0507 2136 [ 421D9645B72CD341ECDBB0FCE06C97DE ] C:\Windows\System32\sppobjs.dll
20:50:56.0507 2136 C:\Windows\System32\sppobjs.dll - ok
20:50:56.0507 2136 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] C:\Windows\System32\drivers\asyncmac.sys
20:50:56.0507 2136 C:\Windows\System32\drivers\asyncmac.sys - ok
20:50:56.0507 2136 ============================================================
20:50:56.0507 2136 Scan finished
20:50:56.0507 2136 ============================================================
20:50:56.0522 3384 Detected object count: 0
20:50:56.0522 3384 Actual detected object count: 0
20:51:01.0530 3076 Deinitialize success

Logs located in: C:\TDSSKiller_Quarantine

There were no log files here. There were only ".ini" files and ".dta" files.



AdwCleaner[S1].txt


# AdwCleaner v2.303 - Logfile created 06/26/2013 at 19:48:31
# Updated 08/06/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (32 bits)
# User : Nimalika - PIPA
# Boot Mode : Normal
# Running from : C:\Users\Nimalika\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Program Files\Mozilla Firefox\.autoreg
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\FCTB

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKLM\Software\PIP

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Registry is clean.

-\\ Mozilla Firefox v21.0 (en-US)

File : C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\prefs.js

C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\user.js … Deleted !

Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.2803282.KeywordHistory", "32434352%7C35%7C4t3t2[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.AutoSearchEventData", "auto%20search");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.ClearCacheDate", 26);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.DNSCatch", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.DisplayEULA", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.DnsCatchEventData", "dns%20catch");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.FirstLaunchShown", true);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.LoadLayoutDate.61465", 26);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.NewTabSearchEventData", "tab%20search");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.ShowRecommendedOptions", true);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.StateReportDate", "1372109983680");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.TopRightSearchEventData", "top%20right%20search[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.Uninstall", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.beforeInstallSaved", true);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.beforeinstall.homepage", "chrome%3A//branding/l[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.beforeinstall.search", "Google");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.comp.affiliate.2803296.disabled", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.comp.search.2803282.engine_img", "aHR0cDovL3Mzd[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.comp.search.2803282.engine_url", "aHR0cDovL3VrL[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.comp.search.2803282.text", "Search%20to%20Colle[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.customNewTab", true);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.helpUsImprove", true);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.hideOthers", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.partnerauth", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.processAddrBar", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.restoreSearch", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.revision", "89");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.", "1337764450");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.123", "61684");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_may_1336286064", "nectar_may_prom[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_may_1336725984", "nectar_may_prom[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_may_1337196138", "nectar_may_prom[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_may_1337629972", "nectar_may_prom[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_may_1338063507", "nectar_may_prom[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_may_1338496022", "nectar_may_prom[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_135106602
0", "nectar_oc[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1346577009", "nectar_sept_pr[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1347010615", "nectar_sept_pr[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1347889363", "nectar_sept_pr[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1348916041", "nectar_sept_pr[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.searchHistory", true);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.session", "FB69375A9F55B0F9126CEEA8CAA3E50029E1[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.showFirstLaunchOptions", false);
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.tb_lang", "en");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.tool_id", "61465");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_id", "72892253");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_key", "bf86d472c336853c26fbb12457e399d94b6[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_layouts", "61465");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_lnames", "Nectar%20Search%20Toolbar");
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.xml_service_url", "6bb94bbf55fe2f255901a560824a[…]
Deleted : user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.yahooSearch", false);

-\\ Google Chrome v27.0.1453.116

File : C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.15.1748.0

File : C:\Users\Nimalika\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[S1].txt - [6808 octets] - [26/06/2013 19:48:31]

########## EOF - C:\AdwCleaner[S1].txt - [6868 octets] ##########



ComboFix.txt

ComboFix 13-06-26.01 - Nimalika 06/26/2013 20:06:41.2.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2039.1327 [GMT 1:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\users\Nimalika\Desktop\CFScript.txt
AV: McAfee VirusScan Enterprise *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
SP: McAfee VirusScan Enterprise Antispyware Module *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2013-05-26 to 2013-06-26 )))))))))))))))))))))))))))))))
.
.
2013-06-26 19:15 . 2013-06-26 19:15 ——– d—–w- c:\users\Default\AppData\Local\temp
2013-06-20 21:24 . 2013-06-20 21:30 ——– d—–w- c:\programdata\HitmanPro
2013-06-20 19:46 . 2013-06-20 19:46 ——– d—–w- C:\TDSSKiller_Quarantine
2013-06-20 11:33 . 2013-06-20 11:33 ——– d—–w- c:\users\Nimalika\AppData\Roaming\McAfee
2013-06-20 11:16 . 2013-06-20 11:13 75656 —-a-w- c:\windows\system32\MfeOtlkAddin.dll
2013-06-20 11:16 . 2013-06-20 11:13 31896 —-a-w- c:\program files\Mozilla Firefox\ScriptFF.dll
2013-06-20 11:16 . 2013-06-20 11:13 9648 —-a-w- c:\windows\system32\drivers\mfeclnk.sys
2013-06-20 11:16 . 2013-06-20 11:13 87816 —-a-w- c:\windows\system32\drivers\mferkdet.sys
2013-06-20 11:16 . 2013-06-20 11:13 59616 —-a-w- c:\windows\system32\drivers\mfebopk.sys
2013-06-20 11:16 . 2013-06-20 11:13 121544 —-a-w- c:\windows\system32\drivers\mfeapfk.sys
2013-06-20 11:16 . 2013-06-20 11:13 215024 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
2013-06-20 11:15 . 2013-06-20 11:13 477584 —-a-w- c:\windows\system32\drivers\mfehidk.sys
2013-06-20 11:14 . 2013-06-20 11:13 180720 —-a-w- c:\windows\system32\drivers\mfewfpk.sys
2013-06-20 11:14 . 2013-06-20 11:13 159640 —-a-w- c:\windows\system32\mfevtps.exe
2013-06-20 11:03 . 2013-06-20 11:03 ——– d—–w- c:\users\Nimalika\AppData\Local\Programs
2013-06-19 02:45 . 2013-06-12 04:18 7068072 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B0EC264F-BA11-41EA-A5B3-9BDC04E2C9AD}\mpengine.dll
2013-06-16 21:15 . 2013-06-16 21:15 ——– d—–w- c:\users\Nimalika\AppData\Local\Opera
2013-06-16 21:14 . 2013-06-16 21:15 ——– d—–w- c:\program files\Opera
2013-06-12 02:12 . 2013-06-08 11:13 2706432 —-a-w- c:\windows\system32\mshtml.tlb
2013-06-12 02:12 . 2013-06-08 11:41 218112 —-a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-12 02:02 . 2013-04-25 23:30 1505280 —-a-w- c:\windows\system32\d3d11.dll
2013-06-12 02:02 . 2013-05-10 03:20 24576 —-a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 02:01 . 2013-04-26 04:55 492544 —-a-w- c:\windows\system32\win32spl.dll
2013-06-12 02:01 . 2013-05-13 03:08 903168 —-a-w- c:\windows\system32\certutil.exe
2013-06-12 02:01 . 2013-05-13 04:45 1160192 —-a-w- c:\windows\system32\crypt32.dll
2013-06-12 02:01 . 2013-05-13 04:45 103936 —-a-w- c:\windows\system32\cryptnet.dll
2013-06-12 02:01 . 2013-05-13 04:45 140288 —-a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 02:01 . 2013-05-13 03:08 43008 —-a-w- c:\windows\system32\certenc.dll
2013-06-12 01:59 . 2013-04-17 07:02 1230336 —-a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 01:59 . 2013-05-06 05:06 3968872 —-a-w- c:\windows\system32\ntkrnlpa.exe
2013-06-12 01:59 . 2013-05-06 05:06 3913576 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-06-12 01:59 . 2013-05-08 05:38 1293672 —-a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-30 10:14 . 2013-06-25 15:47 ——– d—–w- c:\users\Nimalika\AppData\Local\assembly
2013-05-29 12:21 . 2013-05-29 12:21 ——– d—–w- c:\program files\Docear4Word
2013-05-29 12:21 . 2013-05-29 12:21 ——– d—–w- c:\programdata\Docear4Word
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-20 11:13 . 2010-03-25 19:07 23112 —-a-w- c:\windows\system32\MFEOtlk.dll
2013-05-02 01:06 . 2010-09-22 15:29 238872 ——w- c:\windows\system32\MpSigStub.exe
2013-04-13 04:45 . 2013-05-15 18:22 474624 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 18:22 2176512 —-a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 13:45 . 2013-04-23 20:06 1211752 —-a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 05:18 . 2013-05-15 18:20 728424 —-a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 05:18 . 2013-05-15 18:20 218984 —-a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 03:14 . 2013-05-15 18:21 2347520 —-a-w- c:\windows\system32\win32k.sys
2013-04-05 02:06 . 2013-04-05 02:06 745472 —-a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-05 02:06 . 2013-04-05 02:06 185344 —-a-w- c:\windows\system32\elshyph.dll
2013-04-05 02:06 . 2013-04-05 02:06 158720 —-a-w- c:\windows\system32\msls31.dll
2013-04-05 02:06 . 2013-04-05 02:06 150528 —-a-w- c:\windows\system32\iexpress.exe
2013-04-05 02:06 . 2013-04-05 02:06 138752 —-a-w- c:\windows\system32\wextract.exe
2013-04-05 02:06 . 2013-04-05 02:06 523264 —-a-w- c:\windows\system32\vbscript.dll
2013-04-05 02:06 . 2013-04-05 02:06 137216 —-a-w- c:\windows\system32\ieUnatt.exe
2013-04-05 02:06 . 2013-04-05 02:06 38400 —-a-w- c:\windows\system32\imgutil.dll
2013-04-05 02:06 . 2013-04-05 02:06 12800 —-a-w- c:\windows\system32\mshta.exe
2013-04-05 02:06 . 2013-04-05 02:06 110592 —-a-w- c:\windows\system32\IEAdvpack.dll
2013-04-05 02:06 . 2013-04-05 02:06 73728 —-a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-05 02:06 . 2013-04-05 02:06 61952 —-a-w- c:\windows\system32\tdc.ocx
2013-04-05 02:06 . 2013-04-05 02:06 48640 —-a-w- c:\windows\system32\mshtmler.dll
2013-04-05 02:06 . 2013-04-05 02:06 361984 —-a-w- c:\windows\system32\html.iec
2013-04-05 02:06 . 2013-04-05 02:06 719360 —-a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-05 02:06 . 2013-04-05 02:06 23040 —-a-w- c:\windows\system32\licmgr10.dll
2013-04-05 02:06 . 2013-04-05 02:06 1441280 —-a-w- c:\windows\system32\inetcpl.cpl
2013-04-04 13:50 . 2010-10-11 20:09 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-04-02 14:09 . 2013-04-02 14:09 4550656 —-a-w- c:\windows\system32\GPhotos.scr
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 —-a-w- c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 —-a-w- c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 —-a-w- c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-02-18 2012912]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DSLSTATEXE"="c:\program files\Conexant\Adsl\dslstat.exe" [2007-04-27 423492]
"DSLAGENTEXE"="c:\program files\Conexant\Adsl\dslagent.exe" [2007-04-27 144964]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-24 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-24 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-24 150552]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2013-01-01 295072]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\udaterui.exe" [2012-11-27 333416]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2012-08-14 215656]
.
c:\users\Nimalika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 13:21 548352 —-a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [2013-05-22 101552]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2013-06-20 87816]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2010-02-17 12872]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-22 1343400]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2013-06-20 180720]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-02-17 66632]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2013-06-20 159640]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
.
.
— Other Services/Drivers In Memory —
.
*Deregistered* - mfeavfk01
.
Contents of the 'Scheduled Tasks' folder
.
2013-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000Core.job
- c:\users\Nimalika\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-23 12:06]
.
2013-06-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000UA.job
- c:\users\Nimalika\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-23 12:06]
.
.
——- Supplementary Scan ——-
.
uStart Page =
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 172.21.27.62
FF - ProfilePath - c:\users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\
FF - prefs.js: browser.search.selectedEngine - Secure Search
FF - prefs.js: keyword.URL - hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=mcafee&hsimp=yhs-01&type=mcafee&p=
FF - ExtSQL: 2013-06-22 10:36; {D19CA586-DD6C-4a0a-96F8-14644F340D60}; c:\program files\Common Files\McAfee\SystemCore
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-3241475473-1607638501-3602604131-1000\Software\SecuROM\License information*]
"datasecu"=hex:2d,0d,72,0a,70,84,17,cf,48,4a,d6,15,03,0b,95,ed,59,0e,5e,0d,6e,
85,80,6b,3e,ba,52,87,4d,e7,a1,fe,78,26,f8,be,69,f9,05,d6,53,d1,0f,df,d7,95,\
"rkeysecu"=hex:8a,80,10,b7,ac,3e,a7,c5,4c,41,35,92,c0,94,6e,93
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'Explorer.exe'(1156)
c:\users\Nimalika\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
c:\program files\McAfee\Common Framework\McTrayLegacySupportPlugin.dll
c:\program files\McAfee\Common Framework\McTrayInterfaceLib.dll
c:\program files\McAfee\Common Framework\McAfeeWin32GUISupportDLL.dll
.
Completion time: 2013-06-26 20:18:43
ComboFix-quarantined-files.txt 2013-06-26 19:18
ComboFix2.txt 2013-06-25 15:52
.
Pre-Run: 7,183,912,960 bytes free
Post-Run: 7,126,188,032 bytes free
.
- - End Of File - - E468C0A83FE39252B2565ABB9014B366
A36C5E4F47E84449FF07ED3517B43A31


How is the computer running at the moment?

The computer is quite slow. And I think the hard drive C is getting filled without me adding anything. The size of the "windows" folder has grown to 17.7 GB. The size of "users" folder is 8.5 GB, but when I counted individual folders, they added only up to 4.5 GB. I don't know whether this is normal.


Thanks again for your time and support !

Pipi

Hi OCD,

Here is the file.

OTL.txt file:


OTL logfile created on: 6/28/2013 9:15:04 PM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Nimalika\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.16 Gb Available Physical Memory | 58.24% Memory free
3.98 Gb Paging File | 2.96 Gb Available in Paging File | 74.21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 40.00 Gb Total Space | 6.99 Gb Free Space | 17.48% Space Free | Partition Type: NTFS
Drive D: | 32.88 Gb Total Space | 1.40 Gb Free Space | 4.24% Space Free | Partition Type: NTFS
Drive E: | 80.00 Gb Total Space | 47.70 Gb Free Space | 59.63% Space Free | Partition Type: NTFS
Drive F: | 80.00 Gb Total Space | 5.66 Gb Free Space | 7.08% Space Free | Partition Type: NTFS

Computer Name: PIPA | User Name: Nimalika | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Nimalika\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\mfevtps.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (McAfee, Inc.)
PRC - c:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
PRC - C:\Program Files\McAfee\Common Framework\naPrdMgr.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\Common Framework\UdaterUI.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\Common Framework\FrameworkService.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\Common Framework\McTray.exe (McAfee, Inc.)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe (McAfee, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files\Conexant\Adsl\DSLSTAT.EXE (Conexant Systems, Inc.)
PRC - C:\Program Files\Conexant\Adsl\DSLAGENT.EXE ()


========== Modules (No Company Name) ==========

MOD - C:\Users\Nimalika\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\Program Files\Conexant\Adsl\DSLAGENT.EXE ()
MOD - C:\Program Files\Conexant\Adsl\DBGMODE.DLL ()


========== Services (SafeList) ==========

SRV - (SBSDWSCService) – C:\Program Files\Spybot File not found
SRV - (mfevtp) – C:\Windows\System32\mfevtps.exe (McAfee, Inc.)
SRV - (McShield) – C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV - (MozillaMaintenance) – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (McAfee SiteAdvisor Service) – c:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
SRV - (AdobeARMservice) – C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) – C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe (McAfee, Inc.)
SRV - (RealNetworks Downloader Resolver Service) – C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
SRV - (McAfeeFramework) – C:\Program Files\McAfee\Common Framework\FrameworkService.exe (McAfee, Inc.)
SRV - (McTaskManager) – C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe (McAfee, Inc.)
SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (StorSvc) – C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) – C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (mfeavfk01) – File not found
DRV - (clwvd) – system32\DRIVERS\clwvd.sys File not found
DRV - (catchme) – C:\Users\Nimalika\AppData\Local\Temp\catchme.sys File not found
DRV - (mfewfpk) – C:\Windows\System32\drivers\mfewfpk.sys (McAfee, Inc.)
DRV - (mferkdet) – C:\Windows\System32\drivers\mferkdet.sys (McAfee, Inc.)
DRV - (mfehidk) – C:\Windows\System32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfeavfk) – C:\Windows\System32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfebopk) – C:\Windows\System32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mfeapfk) – C:\Windows\System32\drivers\mfeapfk.sys (McAfee, Inc.)
DRV - (vmbus) – C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) – C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) – C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) – C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) – C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) – C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (yukonw7) – C:\Windows\System32\drivers\yk62x86.sys ()
DRV - (Serial) – C:\Windows\System32\drivers\serial.sys (Brother Industries Ltd.)
DRV - (netw5v32) – C:\Windows\System32\drivers\netw5v32.sys (Intel Corporation)
DRV - (HBtnKey) – C:\Windows\System32\drivers\CPQBttn.sys (Hewlett-Packard Development Company, L.P.)
DRV - (hwdatacard) – C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (wanusb) – C:\Windows\System32\drivers\gwausb.sys (Conexant Systems Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.cam.ac.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?rd=1&ucc=GB&dcc=GB&opt=0
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 7C FA A9 3C 71 73 CE 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE10SR
IE - HKCU\..\SearchScopes\{0BC17B08-15D2-4168-86C3-51B696811B4C}: "URL" = http://www.google.com/search?q={searchTerm…tf8&oe=utf8
IE - HKCU\..\SearchScopes\{59499C56-7484-47A9-AB98-BCBAB6349B3B}: "URL" = http://us.yhs4.search.yahoo.com/yhs/search…p={SearchTerms}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Secure Search"
FF - prefs.js..browser.search.order.1: "Secure Search"
FF - prefs.js..browser.search.selectedEngine: "Secure Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: %7B841468a1-d7f4-4bd3-84e6-bb0f13a06c64%7D:1.300.436
FF - prefs.js..extensions.enabledAddons: %7B4ED1F68A-5463-4931-9384-8FFF5ED91D92%7D:3.6.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.3
FF - prefs.js..keyword.URL: "http://us.yhs4.search.yahoo.com/yhs/search?hspart=mcafee&hsimp=yhs-01&type=mcafee&p="
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files\McAfee\SiteAdvisor [2013/06/12 03:35:09 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/01/01 22:13:05 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files\Common Files\McAfee\SystemCore [2013/06/28 21:11:53 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/01/01 22:13:05 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/06/20 12:14:20 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/05/27 17:30:58 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011/08/28 09:22:12 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/06/20 12:14:20 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/05/27 17:30:58 | 000,000,000 | —D | M]

[2010/11/10 21:44:57 | 000,000,000 | —D | M] (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Extensions
[2010/11/10 21:44:57 | 000,000,000 | —D | M] (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2013/03/28 00:16:06 | 000,000,000 | —D | M] (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\extensions
[2013/03/28 00:16:06 | 000,555,752 | —- | M] () (No name found) – C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\extensions\{841468a1-d7f4-4bd3-84e6-bb0f13a06c64}.xpi
[2011/02/13 01:23:53 | 000,002,122 | —- | M] () – C:\Users\Nimalika\AppData\Roaming\Mozilla\Firefox\Profiles\y9x7n2q4.default\searchplugins\cambridge-advanced-learners-dictionary.xml
[2013/05/27 17:31:24 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\browser\extensions
[2013/05/27 17:31:24 | 000,000,000 | —D | M] (Default) – C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/06/12 03:35:09 | 000,000,000 | —D | M] (McAfee SiteAdvisor) – C:\PROGRAM FILES\MCAFEE\SITEADVISOR
[2013/01/01 22:11:09 | 000,124,056 | —- | M] (RealPlayer) – C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2013/04/24 09:29:03 | 000,002,118 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\McSiteAdvisor.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\27.0.1453.116\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Java™ Platform SE 7 U5 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Nimalika\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - Extension: YouTube = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: SiteAdvisor = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_0\
CHR - Extension: RealDownloader = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0\
CHR - Extension: Gmail = C:\Users\Nimalika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2010/10/11 20:30:34 | 000,415,969 | R— | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14356 more lines…
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20130620121611.dll (McAfee, Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (QUICKfind BHO Object) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Program Files\IDM\QUICKfind\PlugIns\IEHelp.dll (IDM)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O4 - HKLM..\Run: [DSLAGENTEXE] C:\Program Files\Conexant\Adsl\DSLAGENT.EXE ()
O4 - HKLM..\Run: [DSLSTATEXE] C:\Program Files\Conexant\Adsl\dslstat.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [McAfeeUpdaterUI] C:\Program Files\McAfee\Common Framework\udaterui.exe (McAfee, Inc.)
O4 - HKLM..\Run: [ShStatEXE] C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE (McAfee, Inc.)
O4 - HKLM..\Run: [TkBellExe] c:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.17.2)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.21.27.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A30CB7EA-3C36-4911-8612-276D1005DD9B}: DhcpNameServer = 172.21.27.62
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.dll) - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/06/28 21:06:29 | 000,000,000 | —D | C] – C:\_OTL
[2013/06/28 21:02:35 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Users\Nimalika\Desktop\OTL.exe
[2013/06/27 21:11:39 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2013/06/26 20:18:47 | 000,000,000 | —D | C] – C:\Windows\temp
[2013/06/26 20:17:26 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2013/06/25 16:36:36 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2013/06/25 16:36:36 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2013/06/25 16:36:36 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2013/06/25 16:36:19 | 000,000,000 | —D | C] – C:\Qoobox
[2013/06/25 16:35:57 | 000,000,000 | —D | C] – C:\Windows\erdnt
[2013/06/25 16:21:51 | 004,745,728 | —- | C] (AVAST Software) – C:\Users\Nimalika\Desktop\aswMBR.exe
[2013/06/21 15:23:53 | 000,000,000 | —D | C] – C:\Users\Nimalika\Documents\Software
[2013/06/20 22:24:26 | 000,000,000 | —D | C] – C:\ProgramData\HitmanPro
[2013/06/20 20:46:38 | 000,000,000 | —D | C] – C:\TDSSKiller_Quarantine
[2013/06/20 12:33:13 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Roaming\McAfee
[2013/06/20 12:16:13 | 000,075,656 | —- | C] (McAfee, Inc.) – C:\Windows\System32\MfeOtlkAddin.dll
[2013/06/20 12:16:11 | 000,009,648 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeclnk.sys
[2013/06/20 12:16:10 | 000,087,816 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mferkdet.sys
[2013/06/20 12:16:09 | 000,121,544 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeapfk.sys
[2013/06/20 12:16:09 | 000,059,616 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfebopk.sys
[2013/06/20 12:16:08 | 000,215,024 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeavfk.sys
[2013/06/20 12:15:52 | 000,477,584 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfehidk.sys
[2013/06/20 12:14:48 | 000,180,720 | —- | C] (McAfee, Inc.) – C:\Windows\System32\drivers\mfewfpk.sys
[2013/06/20 12:14:47 | 000,159,640 | —- | C] (McAfee, Inc.) – C:\Windows\System32\mfevtps.exe
[2013/06/20 12:14:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/06/20 12:03:55 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Local\Programs
[2013/06/16 22:15:10 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Local\Opera
[2013/06/16 22:15:09 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Roaming\Opera
[2013/06/16 22:14:37 | 000,000,000 | —D | C] – C:\Program Files\Opera
[2013/06/12 21:37:35 | 000,000,000 | —D | C] – C:\Users\Nimalika\Desktop\bike
[2013/06/12 03:12:17 | 002,706,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2013/06/12 03:12:15 | 000,391,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2013/06/12 03:03:31 | 002,877,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2013/06/12 03:03:30 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2013/06/12 03:03:29 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2013/06/12 03:03:26 | 000,493,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2013/06/12 03:03:25 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2013/06/12 03:03:25 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2013/06/12 03:03:25 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2013/06/12 03:03:24 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2013/06/12 03:02:49 | 001,505,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d11.dll
[2013/06/12 03:02:14 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cryptdlg.dll
[2013/06/12 03:01:11 | 000,903,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certutil.exe
[2013/06/12 03:01:08 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certenc.dll
[2013/06/12 02:59:25 | 003,968,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2013/06/12 02:59:25 | 003,913,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2013/05/30 11:14:54 | 000,000,000 | —D | C] – C:\Users\Nimalika\Documents\Docear4Word
[2013/05/30 11:14:40 | 000,000,000 | —D | C] – C:\Users\Nimalika\AppData\Local\assembly

========== Files - Modified Within 30 Days ==========

[2013/06/28 21:18:40 | 000,013,472 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/28 21:18:40 | 000,013,472 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/28 21:11:25 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/06/28 21:11:18 | 1603,772,416 | -HS- | M] () – C:\hiberfil.sys
[2013/06/28 21:06:06 | 000,000,868 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000Core.job
[2013/06/28 21:02:35 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Nimalika\Desktop\OTL.exe
[2013/06/28 20:53:45 | 000,000,920 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3241475473-1607638501-3602604131-1000UA.job
[2013/06/27 17:34:56 | 000,000,600 | —- | M] () – C:\Users\Nimalika\AppData\Roaming\winscp.rnd
[2013/06/26 22:06:20 | 000,010,571 | —- | M] () – C:\Users\Nimalika\AppData\Local\recently-used.xbel
[2013/06/26 19:43:51 | 000,648,201 | —- | M] () – C:\Users\Nimalika\Desktop\AdwCleaner.exe
[2013/06/25 16:30:27 | 000,000,562 | —- | M] () – C:\Users\Nimalika\Desktop\MBR.zip
[2013/06/25 16:29:44 | 000,000,512 | —- | M] () – C:\Users\Nimalika\Desktop\MBR.dat
[2013/06/25 16:23:22 | 004,745,728 | —- | M] (AVAST Software) – C:\Users\Nimalika\Desktop\aswMBR.exe
[2013/06/20 12:13:56 | 000,180,720 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfewfpk.sys
[2013/06/20 12:13:55 | 000,159,640 | —- | M] (McAfee, Inc.) – C:\Windows\System32\mfevtps.exe
[2013/06/20 12:13:54 | 000,087,816 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mferkdet.sys
[2013/06/20 12:13:54 | 000,075,656 | —- | M] (McAfee, Inc.) – C:\Windows\System32\MfeOtlkAddin.dll
[2013/06/20 12:13:54 | 000,023,112 | —- | M] (McAfee, Inc.) – C:\Windows\System32\MFEOtlk.dll
[2013/06/20 12:13:53 | 000,477,584 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfehidk.sys
[2013/06/20 12:13:52 | 000,215,024 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeavfk.sys
[2013/06/20 12:13:52 | 000,059,616 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfebopk.sys
[2013/06/20 12:13:52 | 000,009,648 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeclnk.sys
[2013/06/20 12:13:51 | 000,121,544 | —- | M] (McAfee, Inc.) – C:\Windows\System32\drivers\mfeapfk.sys
[2013/06/20 12:10:30 | 057,602,048 | —- | M] () – C:\Users\Nimalika\Desktop\Ent88Setup.exe
[2013/06/20 12:04:41 | 000,001,071 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/20 01:46:36 | 000,002,345 | —- | M] () – C:\Users\Nimalika\Desktop\Google Chrome.lnk
[2013/06/19 11:42:50 | 000,027,262 | —- | M] () – C:\Users\Nimalika\Desktop\Poson Program 2013 23rd June v1.pdf
[2013/06/18 17:36:38 | 000,212,199 | —- | M] () – C:\Users\Nimalika\Desktop\Tiffany Thorne YOGA MAY 2013.pdf
[2013/06/17 23:30:06 | 000,000,600 | —- | M] () – C:\Users\Nimalika\AppData\Local\PUTTY.RND
[2013/06/17 23:30:03 | 000,002,036 | -H– | M] () – C:\Users\Nimalika\Documents\Default.rdp
[2013/06/16 22:14:57 | 000,001,779 | —- | M] () – C:\Users\Public\Desktop\Opera.lnk
[2013/06/08 12:40:02 | 000,391,168 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2013/06/08 12:13:19 | 002,706,432 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2013/06/08 10:48:15 | 000,071,598 | —- | M] () – C:\Users\Nimalika\Desktop\calendar2013.png
[2013/06/05 13:37:09 | 000,624,412 | —- | M] () – C:\Windows\System32\perfh009.dat
[2013/06/05 13:37:09 | 000,106,756 | —- | M] () – C:\Windows\System32\perfc009.dat
[2013/05/31 12:17:00 | 000,011,367 | —- | M] () – C:\Users\Nimalika\gsview32.ini

========== Files Created - No Company Name ==========

[2013/06/26 22:06:20 | 000,010,571 | —- | C] () – C:\Users\Nimalika\AppData\Local\recently-used.xbel
[2013/06/26 19:43:51 | 000,648,201 | —- | C] () – C:\Users\Nimalika\Desktop\AdwCleaner.exe
[2013/06/25 16:36:36 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2013/06/25 16:36:36 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2013/06/25 16:36:36 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2013/06/25 16:36:36 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2013/06/25 16:36:36 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2013/06/25 16:30:27 | 000,000,562 | —- | C] () – C:\Users\Nimalika\Desktop\MBR.zip
[2013/06/25 16:29:44 | 000,000,512 | —- | C] () – C:\Users\Nimalika\Desktop\MBR.dat
[2013/06/20 12:10:29 | 057,602,048 | —- | C] () – C:\Users\Nimalika\Desktop\Ent88Setup.exe
[2013/06/20 12:04:41 | 000,001,071 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/18 17:36:38 | 000,212,199 | —- | C] () – C:\Users\Nimalika\Desktop\Tiffany Thorne YOGA MAY 2013.pdf
[2013/06/16 22:14:57 | 000,001,791 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2013/06/16 22:14:57 | 000,001,779 | —- | C] () – C:\Users\Public\Desktop\Opera.lnk
[2013/06/08 10:48:15 | 000,071,598 | —- | C] () – C:\Users\Nimalika\Desktop\calendar2013.png
[2013/06/01 16:34:22 | 000,027,262 | —- | C] () – C:\Users\Nimalika\Desktop\Poson Program 2013 23rd June v1.pdf
[2012/05/19 19:36:16 | 000,011,367 | —- | C] () – C:\Users\Nimalika\gsview32.ini
[2011/09/01 22:14:09 | 000,003,584 | —- | C] () – C:\Users\Nimalika\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/22 21:38:16 | 000,096,256 | —- | C] () – C:\Windows\olprosys.dll
[2011/08/06 13:20:58 | 000,000,028 | —- | C] () – C:\Windows\pdf995.ini
[2010/11/25 21:16:15 | 000,000,600 | —- | C] () – C:\Users\Nimalika\AppData\Roaming\winscp.rnd
[2010/11/19 01:15:08 | 000,000,035 | —- | C] () – C:\Users\Nimalika\.gtk-bookmarks
[2010/11/10 22:24:13 | 000,000,600 | —- | C] () – C:\Users\Nimalika\AppData\Local\PUTTY.RND
[2010/09/27 05:37:38 | 000,007,625 | —- | C] () – C:\Users\Nimalika\AppData\Local\Resmon.ResmonCfg

========== ZeroAccess Check ==========

[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2013/02/27 05:55:05 | 012,872,704 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 13:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2009/07/14 02:16:17 | 000,342,528 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >


Current Status
The computer looks ok. I didn't use it much these days though.

Thanks a lot!