Snap.do [Solved]

Hello! My friend accidentally downloaded a plugin and we're having a hard time getting rid of it. We tried running Malwarebytes and it didn't pick it up. It wont uninstall from the control panel, and it was still there after a system restore. Your help would be greatly appreciated.

Thanks in advance!


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:17:43 PM, on 7/30/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\17.0.0.136\InstStub.exe
c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Users\Owner\AppData\Local\Smartbar\Application\SnapDo.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=SnapdoVB…Date=23/07/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=SnapdoVB…Date=23/07/2013
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://feed.snapdo.com/?publisher=SnapdoVB…Date=23/07/2013
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=SnapdoVB…Date=23/07/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=SnapdoVB…Date=23/07/2013
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - mscoree.dll (file missing)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\IPSBHO.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll
O3 - Toolbar: Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Browser Infrastructure Helper] C:\Users\Owner\AppData\Local\Smartbar\Application\SnapDo.exe startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (file missing)
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL (file missing)
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.3.0\ViProtocol.dll (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM, Inc. - C:\SPLASH.SYS\config\DVMExportService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater15.3.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 14730 bytes

Hello there,

Please download DDS by sUBs from one of the following links and save it to your desktop.

• • DDS.com
  • DDS.pif
• Disable any script blocking protection (How to Disable your Security Programs)
• Double click DDS icon to run the tool (may take up to 3 minutes to run)
• When done, DDS.txt will open.
• After a few moments, attach.txt will open in a second window.
• Save both reports to your desktop.

—————————————————

• Post the contents of the DDS.txt report in your next reply
• Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.

===================================================

Please download aswMBR.exe and save it to your desktop.

• Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
• Allow it to update where necessary
• Click Scan
  
  
• Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
• You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

===================================================

Download TDSSKiller.exe and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Cure. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.log.txt

===================================================

On your next reply please post :
DDS log
aswMBR log
TDSSKiller log

Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Hello! Thanks for taking the time to help. Here's what you requested. DDS (Ver_2012-11-20.01) - NTFS_AMD64 Internet Explorer: 9.0.8112.16496 Run by [removed] at 12:36:48 on 2013-07-31 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3836.2224 [GMT -4:00] . AV: AVG Anti-Virus 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AV: Norton Internet Security *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855} AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: AVG Anti-Virus 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8} SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508} FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E} . ============== Running Processes =============== . C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\STacSV64.exe C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\Hpservice.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\SPLASH.SYS\config\DVMExportService.exe C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe c:\Program Files\Microsoft Security Client\NisSrv.exe C:\Windows\system32\atieclxx.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\17.0.0.136\InstStub.exe C:\Windows\Explorer.EXE C:\Program Files\Apoint2K\Apoint.exe C:\Program Files\IDT\WDM\sttray64.exe C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe C:\Users\Owner\AppData\Local\Smartbar\Application\SnapDo.exe C:\Program Files\Apoint2K\ApMsgFwd.exe C:\Program Files\Apoint2K\Apntex.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe C:\Program Files (x86)\Java\jre6\bin\jusched.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\taskeng.exe c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe C:\Windows\system32\sppsvc.exe C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe C:\Windows\System32\cscript.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://feed.snapdo.com/?publisher=SnapdoVBYB&dpid=SnapdoVBYB&co=US&userid=21eb815a-79ca-4362-89e5-69b699b4a000&searchtype=hp&installDate=23/07/2013 uSearch Bar = hxxp://feed.snapdo.com/?publisher=SnapdoVBYB&dpid=SnapdoVBYB&co=US&userid=21eb815a-79ca-4362-89e5-69b699b4a000&searchtype=ds&q={searchTerms}&installDate=23/07/2013 uSearch Page = hxxp://feed.snapdo.com/?publisher=SnapdoVBYB&dpid=SnapdoVBYB&co=US&userid=21eb815a-79ca-4362-89e5-69b699b4a000&searchtype=ds&q={searchTerms}&installDate=23/07/2013 uSearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoVBYB&dpid=SnapdoVBYB&co=US&userid=21eb815a-79ca-4362-89e5-69b699b4a000&searchtype=ds&q={searchTerms}&installDate=23/07/2013 mWinlogon: Userinit = userinit.exe, BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Snap.DoEngine: {31ad400d-1b06-4e33-a59a-90c2c140cba0} - BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - BHO: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\CoIEPlg.dll BHO: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\IPSBHO.dll BHO: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll TB: : {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - TB: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\CoIEPlg.dll TB: Snap.Do: {ae07101b-46d4-4a98-af68-0333ea26e113} - EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden uRun: [Browser Infrastructure Helper] C:\Users\Owner\AppData\Local\Smartbar\Application\SnapDo.exe startup mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam" mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe" mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY mRun: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe" mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime dRunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 mPolicies-Explorer: NoActiveDesktop = dword:1 mPolicies-Explorer: NoActiveDesktopChanges = dword:1 mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab TCP: NameServer = 209.18.47.61 209.18.47.62 TCP: Interfaces\{5DB5E617-2694-4DBA-81EA-0CCEE6828EB1} : DHCPNameServer = [removed] [removed] TCP: Interfaces\{D656838C-974C-4A02-A5EA-2FA8BD87B045} : DHCPNameServer = [removed] [removed] [removed] Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - SSODL: WebCheck - mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe" mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level –multi-install –chrome x64-BHO: Snap.DoEngine: {31ad400d-1b06-4e33-a59a-90c2c140cba0} - x64-BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll x64-TB: Snap.Do: {ae07101b-46d4-4a98-af68-0333ea26e113} - x64-Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe x64-Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background x64-Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab x64-DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab x64-Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - x64-SSODL: WebCheck - . ============= SERVICES / DRIVERS =============== . R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2012-10-15 63328] R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2012-9-21 225120] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2012-11-15 111968] R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2012-9-14 40800] R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-1-20 230320] R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2012-10-22 154464] R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2012-10-2 185696] R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2012-9-21 200032] R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2013-7-10 45856] R1 DVMIO;DVMIO;C:\SPLASH.SYS\config\dvmio.sys [2009-9-27 21624] R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe [2013-1-17 89600] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-8-5 203264] R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] R2 DvmMDES;DeviceVM Meta Data Export Service;C:\SPLASH.SYS\config\DVMExportService.exe [2009-7-8 323584] R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2009-7-8 30520] R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-7-23 418376] R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe [2013-1-17 126392] R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2013-1-20 130008] R2 vToolbarUpdater15.3.0;vToolbarUpdater15.3.0;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [2013-7-10 1598128] R3 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-11-9 228408] R3 enecir;ENE CIR Receiver;C:\Windows\System32\drivers\enecir.sys [2009-5-20 70656] R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-7-23 25928] R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-1-27 379360] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2013-1-17 215040] R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2013-1-17 34872] S2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-15 5814904] S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-7-23 701512] S3 JMCR;JMCR;C:\Windows\System32\drivers\jmcr.sys [2009-7-28 140128] S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368] S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864] S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312] S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864] S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-7-22 59392] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-7-22 1255736] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120] . =============== Created Last 30 ================ . 2013-07-30 18:31:17 68608 —-a-w- C:\Windows\System32\taskhost.exe 2013-07-30 18:31:14 30720 —-a-w- C:\Windows\System32\cryptdlg.dll 2013-07-30 18:31:13 24576 —-a-w- C:\Windows\SysWow64\cryptdlg.dll 2013-07-30 18:31:03 1367040 —-a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll 2013-07-30 18:31:02 936448 —-a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll 2013-07-30 18:30:47 903168 —-a-w- C:\Windows\SysWow64\certutil.exe 2013-07-30 18:30:47 1192448 —-a-w- C:\Windows\System32\certutil.exe 2013-07-30 18:30:46 184320 —-a-w- C:\Windows\System32\cryptsvc.dll 2013-07-30 18:30:46 1464320 —-a-w- C:\Windows\System32\crypt32.dll 2013-07-30 18:30:46 140288 —-a-w- C:\Windows\SysWow64\cryptsvc.dll 2013-07-30 18:30:46 139776 —-a-w- C:\Windows\System32\cryptnet.dll 2013-07-30 18:30:46 1160192 —-a-w- C:\Windows\SysWow64\crypt32.dll 2013-07-30 18:30:46 103936 —-a-w- C:\Windows\SysWow64\cryptnet.dll 2013-07-30 18:30:45 52224 —-a-w- C:\Windows\System32\certenc.dll 2013-07-30 18:30:45 43008 —-a-w- C:\Windows\SysWow64\certenc.dll 2013-07-30 18:30:19 1545728 —-a-w- C:\Windows\System32\DWrite.dll 2013-07-30 18:30:18 1077760 —-a-w- C:\Windows\SysWow64\DWrite.dll 2013-07-30 18:21:13 9460976 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{683EB9B6-61CC-4BD1-A42E-0E5C9889F138}\mpengine.dll 2013-07-30 18:10:25 ——– d—–w- C:\Program Files (x86)\MSXML 4.0 2013-07-24 02:59:38 ——– d—–w- C:\Windows\System32\SPReview 2013-07-24 02:59:11 ——– d—–w- C:\Windows\System32\EventProviders 2013-07-24 02:33:24 388096 —-a-r- C:\Users\Owner\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2013-07-24 02:33:24 ——– d—–w- C:\Program Files (x86)\Trend Micro 2013-07-24 00:55:26 ——– d—–w- C:\Users\Owner\AppData\Roaming\Malwarebytes 2013-07-24 00:55:10 ——– d—–w- C:\ProgramData\Malwarebytes 2013-07-24 00:55:07 25928 —-a-w- C:\Windows\System32\drivers\mbam.sys 2013-07-24 00:55:07 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-07-24 00:54:45 ——– d—–w- C:\Users\Owner\AppData\Local\Programs 2013-07-24 00:08:24 941720 ——w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0D53ADB4-4432-40C4-96AF-54538CE8AAE2}\gapaengine.dll 2013-07-24 00:07:56 9460976 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-07-24 00:02:03 ——– d—–w- C:\Program Files (x86)\Microsoft Security Client 2013-07-24 00:01:54 ——– d—–w- C:\Program Files\Microsoft Security Client 2013-07-23 23:50:40 ——– d—–w- C:\Users\Owner\AppData\Local\AVG Secure Search 2013-07-23 23:35:27 ——– d—–w- C:\Program Files (x86)\VisualBee 2013-07-23 23:33:09 ——– d—–w- C:\922cc84fe089fcc045b577 2013-07-23 23:31:34 ——– d—–w- C:\Users\Owner\AppData\Local\VisualBeeExe 2013-07-23 23:31:03 ——– d—–w- C:\Users\Owner\AppData\Local\Smartbar 2013-07-23 23:29:12 ——– d—–w- C:\ProgramData\VisualBee 2013-07-23 23:28:52 ——– d—–w- C:\Users\Owner\AppData\Local\emaze 2013-07-23 01:42:38 71048 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2013-07-23 01:42:38 692104 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2013-07-23 00:56:31 ——– d—–w- C:\Users\Owner\AppData\Local\Applications 2013-07-23 00:56:02 48976 —-a-w- C:\Windows\System32\netfxperf.dll 2013-07-23 00:56:02 1942856 —-a-w- C:\Windows\System32\dfshim.dll 2013-07-23 00:54:59 658944 —-a-w- C:\Windows\System32\dxgi.dll 2013-07-23 00:53:59 983040 —-a-w- C:\Program Files (x86)\Windows Media Player\WMPDMC.exe 2013-07-23 00:52:59 72192 —-a-w- C:\Windows\System32\napdsnap.dll 2013-07-23 00:51:21 189952 —-a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll 2013-07-23 00:51:20 606208 —-a-w- C:\Windows\SysWow64\wbem\fastprox.dll 2013-07-23 00:51:20 363008 —-a-w- C:\Windows\SysWow64\wbemcomn.dll 2013-07-23 00:43:45 529408 —-a-w- C:\Windows\System32\wbemcomn.dll 2013-07-23 00:43:45 244736 —-a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll 2013-07-23 00:43:37 244736 —-a-w- C:\Windows\System32\sqmapi.dll 2013-07-22 23:52:09 ——– d—–w- C:\Windows\SysWow64\Wat 2013-07-22 23:52:09 ——– d—–w- C:\Windows\System32\Wat 2013-07-22 22:16:03 9728 —-a-w- C:\Windows\System32\Wdfres.dll 2013-07-22 22:16:03 785512 —-a-w- C:\Windows\System32\drivers\Wdf01000.sys 2013-07-22 22:16:03 54376 —-a-w- C:\Windows\System32\drivers\WdfLdr.sys 2013-07-22 22:16:03 2560 —-a-w- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui 2013-07-22 21:27:54 70656 —-a-w- C:\Windows\SysWow64\fontsub.dll 2013-07-22 21:27:54 46080 —-a-w- C:\Windows\System32\atmlib.dll 2013-07-22 21:27:54 367616 —-a-w- C:\Windows\System32\atmfd.dll 2013-07-22 21:27:54 34304 —-a-w- C:\Windows\SysWow64\atmlib.dll 2013-07-22 21:27:54 295424 —-a-w- C:\Windows\SysWow64\atmfd.dll 2013-07-22 21:27:54 100864 —-a-w- C:\Windows\System32\fontsub.dll 2013-07-22 21:26:13 87040 —-a-w- C:\Windows\System32\drivers\WUDFPf.sys 2013-07-22 21:26:13 84992 —-a-w- C:\Windows\System32\WUDFSvc.dll 2013-07-22 21:26:13 198656 —-a-w- C:\Windows\System32\drivers\WUDFRd.sys 2013-07-22 21:26:13 194048 —-a-w- C:\Windows\System32\WUDFPlatform.dll 2013-07-22 21:26:12 744448 —-a-w- C:\Windows\System32\WUDFx.dll 2013-07-22 21:26:12 45056 —-a-w- C:\Windows\System32\WUDFCoinstaller.dll 2013-07-22 21:26:12 229888 —-a-w- C:\Windows\System32\WUDFHost.exe 2013-07-22 21:19:06 81408 —-a-w- C:\Windows\System32\imagehlp.dll 2013-07-22 21:19:06 5120 —-a-w- C:\Windows\SysWow64\wmi.dll 2013-07-22 21:19:06 5120 —-a-w- C:\Windows\System32\wmi.dll 2013-07-22 21:19:06 23408 —-a-w- C:\Windows\System32\drivers\fs_rec.sys 2013-07-22 21:19:06 159232 —-a-w- C:\Windows\SysWow64\imagehlp.dll 2013-07-12 20:05:43 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin7.dll 2013-07-12 20:05:43 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin6.dll 2013-07-12 20:05:43 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin5.dll 2013-07-12 20:05:43 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin4.dll 2013-07-12 20:05:43 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin3.dll 2013-07-12 20:05:43 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin2.dll 2013-07-12 20:05:43 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin.dll 2013-07-11 01:43:42 902656 —-a-w- C:\Windows\System32\d2d1.dll 2013-07-11 01:43:42 739840 —-a-w- C:\Windows\SysWow64\d2d1.dll 2013-07-11 01:43:41 1139200 —-a-w- C:\Windows\System32\FntCache.dll 2013-07-10 22:36:45 2871808 —-a-w- C:\Windows\explorer.exe 2013-07-10 22:35:52 288768 —-a-w- C:\Windows\System32\drivers\mrxsmb10.sys 2013-07-10 22:35:52 158208 —-a-w- C:\Windows\System32\drivers\mrxsmb.sys 2013-07-10 22:35:52 128000 —-a-w- C:\Windows\System32\drivers\mrxsmb20.sys 2013-07-10 22:35:50 395776 —-a-w- C:\Windows\System32\webio.dll 2013-07-10 22:35:50 314880 —-a-w- C:\Windows\SysWow64\webio.dll 2013-07-10 22:35:14 1656680 —-a-w- C:\Windows\System32\drivers\ntfs.sys 2013-07-10 22:35:12 515584 —-a-w- C:\Windows\System32\timedate.cpl 2013-07-10 22:35:12 478720 —-a-w- C:\Windows\SysWow64\timedate.cpl 2013-07-10 22:35:10 476160 —-a-w- C:\Windows\System32\XpsGdiConverter.dll 2013-07-10 22:35:10 288256 —-a-w- C:\Windows\SysWow64\XpsGdiConverter.dll 2013-07-10 22:33:54 2002432 —-a-w- C:\Windows\System32\msxml6.dll 2013-07-10 22:32:36 478208 —-a-w- C:\Windows\System32\dpnet.dll 2013-07-10 22:31:57 467456 —-a-w- C:\Windows\System32\drivers\srv.sys 2013-07-10 22:30:51 210944 —-a-w- C:\Windows\System32\drivers\rdpwd.sys 2013-07-10 22:30:12 498688 —-a-w- C:\Windows\System32\drivers\afd.sys 2013-07-10 22:30:09 75120 —-a-w- C:\Windows\System32\drivers\partmgr.sys 2013-07-10 22:30:07 715776 —-a-w- C:\Windows\System32\kerberos.dll 2013-07-10 22:30:06 542208 —-a-w- C:\Windows\SysWow64\kerberos.dll 2013-07-10 22:28:17 95744 —-a-w- C:\Windows\System32\synceng.dll 2013-07-10 22:28:17 78336 —-a-w- C:\Windows\SysWow64\synceng.dll 2013-07-10 22:28:16 642944 —-a-w- C:\Windows\System32\winload.efi 2013-07-10 22:28:16 605552 —-a-w- C:\Windows\System32\winload.exe 2013-07-10 22:28:16 566208 —-a-w- C:\Windows\System32\winresume.efi 2013-07-10 22:28:16 518672 —-a-w- C:\Windows\System32\winresume.exe 2013-07-10 22:28:15 20352 —-a-w- C:\Windows\System32\kdusb.dll 2013-07-10 22:28:15 19328 —-a-w- C:\Windows\System32\kd1394.dll 2013-07-10 22:28:15 17792 —-a-w- C:\Windows\System32\kdcom.dll 2013-07-10 22:28:14 63488 —-a-w- C:\Windows\System32\setbcdlocale.dll 2013-07-10 22:27:14 64512 —-a-w- C:\Windows\SysWow64\devobj.dll 2013-07-10 22:27:14 44544 —-a-w- C:\Windows\SysWow64\devrtl.dll 2013-07-10 22:27:14 404480 —-a-w- C:\Windows\System32\umpnpmgr.dll 2013-07-10 22:27:14 252928 —-a-w- C:\Windows\SysWow64\drvinst.exe 2013-07-10 22:27:14 207872 —-a-w- C:\Windows\System32\cfgmgr32.dll 2013-07-10 22:27:14 145920 —-a-w- C:\Windows\SysWow64\cfgmgr32.dll 2013-07-10 22:25:57 466944 —-a-w- C:\Program Files\Common Files\System\ado\msadomd.dll 2013-07-10 22:23:48 77312 —-a-w- C:\Windows\System32\packager.dll 2013-07-10 22:23:48 67072 —-a-w- C:\Windows\SysWow64\packager.dll 2013-07-10 22:08:06 ——– d—–w- C:\Users\Owner\AppData\Roaming\hpqlog 2013-07-10 22:01:33 826880 —-a-w- C:\Windows\SysWow64\rdpcore.dll 2013-07-10 22:01:33 1031680 —-a-w- C:\Windows\System32\rdpcore.dll 2013-07-10 22:01:32 23552 —-a-w- C:\Windows\System32\drivers\tdtcp.sys 2013-07-10 21:58:26 2622464 —-a-w- C:\Windows\System32\wucltux.dll 2013-07-10 21:58:16 99840 —-a-w- C:\Windows\System32\wudriver.dll 2013-07-10 21:58:05 36864 —-a-w- C:\Windows\System32\wuapp.exe 2013-07-10 21:58:05 186752 —-a-w- C:\Windows\System32\wuwebv.dll 2013-07-10 21:30:03 ——– d—–w- C:\Users\Owner\AppData\Local\Apple Computer 2013-07-10 21:29:53 33240 —-a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys 2013-07-10 21:29:01 ——– d—–w- C:\Program Files\iPod 2013-07-10 21:29:00 ——– d—–w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-07-10 21:29:00 ——– d—–w- C:\Program Files\iTunes 2013-07-10 21:29:00 ——– d—–w- C:\Program Files (x86)\iTunes 2013-07-10 21:28:30 ——– d—–w- C:\Users\Owner\AppData\Local\Apple 2013-07-10 21:27:55 ——– d—–w- C:\Program Files\Bonjour 2013-07-10 21:27:55 ——– d—–w- C:\Program Files (x86)\Bonjour 2013-07-10 21:10:55 ——– d—–w- C:\Users\Owner\AppData\Local\Google 2013-07-10 21:10:20 ——– d—–w- C:\Users\Owner\AppData\Local\Deployment 2013-07-10 21:10:20 ——– d—–w- C:\Users\Owner\AppData\Local\Apps 2013-07-10 21:09:38 ——– d—–w- C:\Users\Owner\AppData\Roaming\AVG2013 2013-07-10 21:09:06 ——– d—–w- C:\Users\Owner\AppData\Local\AVG SafeGuard toolbar 2013-07-10 21:08:55 ——– d—–w- C:\Users\Owner\AppData\Roaming\TuneUp Software 2013-07-10 21:08:45 45856 —-a-w- C:\Windows\System32\drivers\avgtpx64.sys 2013-07-10 21:08:41 ——– d—–w- C:\ProgramData\AVG SafeGuard toolbar 2013-07-10 21:08:38 ——– d—–w- C:\Program Files (x86)\Common Files\AVG Secure Search 2013-07-10 21:08:34 ——– d—–w- C:\Program Files (x86)\AVG SafeGuard toolbar 2013-07-10 21:07:51 ——– d–h–w- C:\$AVG 2013-07-10 21:07:51 ——– d—–w- C:\ProgramData\AVG2013 2013-07-10 21:07:20 ——– d—–w- C:\Program Files (x86)\AVG 2013-07-10 21:04:59 ——– d–h–w- C:\ProgramData\Common Files 2013-07-10 21:04:59 ——– d—–w- C:\Users\Owner\AppData\Local\MFAData 2013-07-10 21:04:59 ——– d—–w- C:\Users\Owner\AppData\Local\Avg2013 2013-07-10 21:04:59 ——– d—–w- C:\ProgramData\MFAData 2013-07-10 21:01:42 ——– d—–w- C:\Users\Owner\AppData\Roaming\HpUpdate 2013-07-02 19:42:55 ——– d—–w- C:\Users\Owner\AppData\Local\ATI 2013-07-02 19:42:18 ——– d—–w- C:\Users\Owner\AppData\Local\Hewlett-Packard 2013-07-02 19:41:14 ——– d—–w- C:\Users\Owner\AppData\Local\VirtualStore 2013-07-02 01:20:31 9552976 —-a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8BD8DD45-EF66-4ADF-8E4B-7BA07D53AF6A}\mpengine.dll 2013-07-02 01:20:30 278800 ——w- C:\Windows\System32\MpSigStub.exe . ==================== Find3M ==================== . 2013-07-29 17:58:20 175616 —-a-w- C:\Windows\System32\msclmd.dll 2013-07-29 17:58:20 152576 —-a-w- C:\Windows\SysWow64\msclmd.dll . ============= FINISH: 12:38:13.11 =============== 12:45:41.0333 2236 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 12:45:41.0758 2236 ============================================================ 12:45:41.0758 2236 Current date / time: 2013/07/31 12:45:41.0758 12:45:41.0758 2236 SystemInfo: 12:45:41.0758 2236 12:45:41.0758 2236 OS Version: 6.1.7601 ServicePack: 1.0 12:45:41.0758 2236 Product type: Workstation 12:45:41.0758 2236 ComputerName: OWNER-PC 12:45:41.0758 2236 UserName: Owner 12:45:41.0758 2236 Windows directory: C:\Windows 12:45:41.0758 2236 System windows directory: C:\Windows 12:45:41.0758 2236 Running under WOW64 12:45:41.0758 2236 Processor architecture: Intel x64 12:45:41.0758 2236 Number of processors: 2 12:45:41.0758 2236 Page size: 0x1000 12:45:41.0758 2236 Boot type: Normal boot 12:45:41.0758 2236 ============================================================ 12:45:43.0610 2236 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 12:45:43.0615 2236 ============================================================ 12:45:43.0615 2236 \Device\Harddisk0\DR0: 12:45:43.0615 2236 MBR partitions: 12:45:43.0615 2236 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800 12:45:43.0615 2236 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x2354C800 12:45:43.0615 2236 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x235B0800, BlocksNum 0x1E4A000 12:45:43.0615 2236 \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x253FA800, BlocksNum 0x33AB0 12:45:43.0615 2236 ============================================================ 12:45:43.0617 2236 C: <-> \Device\Harddisk0\DR0\Partition2 12:45:43.0653 2236 D: <-> \Device\Harddisk0\DR0\Partition3 12:45:43.0667 2236 E: <-> \Device\Harddisk0\DR0\Partition4 12:45:43.0667 2236 ============================================================ 12:45:43.0668 2236 Initialize success 12:45:43.0668 2236 ============================================================ 12:45:46.0638 1764 ============================================================ 12:45:46.0638 1764 Scan started 12:45:46.0638 1764 Mode: Manual; 12:45:46.0638 1764 ============================================================ 12:45:47.0202 1764 ================ Scan system memory ======================== 12:45:47.0202 1764 System memory - ok 12:45:47.0203 1764 ================ Scan services ============================= 12:45:47.0634 1764 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 12:45:47.0639 1764 1394ohci - ok 12:45:47.0706 1764 [ 1CFFE9C06E66A57DAE1452E449A58240 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys 12:45:47.0708 1764 Accelerometer - ok 12:45:47.0746 1764 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 12:45:47.0751 1764 ACPI - ok 12:45:47.0775 1764 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 12:45:47.0776 1764 AcpiPmi - ok 12:45:48.0053 1764 [ 476BB014F3F68C0C15EDDD5B444DA8FF ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 12:45:48.0060 1764 AdobeFlashPlayerUpdateSvc - ok 12:45:48.0121 1764 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 12:45:48.0132 1764 adp94xx - ok 12:45:48.0158 1764 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 12:45:48.0163 1764 adpahci - ok 12:45:48.0172 1764 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 12:45:48.0175 1764 adpu320 - ok 12:45:48.0214 1764 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 12:45:48.0216 1764 AeLookupSvc - ok 12:45:48.0356 1764 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe 12:45:48.0437 1764 AESTFilters - ok 12:45:48.0493 1764 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 12:45:48.0500 1764 AFD - ok 12:45:48.0571 1764 [ 98022774D9930ECBB292E70DB7601DF6 ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys 12:45:48.0590 1764 AgereSoftModem - ok 12:45:48.0640 1764 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 12:45:48.0641 1764 agp440 - ok 12:45:48.0677 1764 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 12:45:48.0679 1764 ALG - ok 12:45:48.0710 1764 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 12:45:48.0712 1764 aliide - ok 12:45:48.0753 1764 [ BCC32BF5EBB5DFD4380FA053D3651949 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 12:45:48.0756 1764 AMD External Events Utility - ok 12:45:48.0762 1764 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 12:45:48.0763 1764 amdide - ok 12:45:48.0811 1764 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 12:45:48.0814 1764 AmdK8 - ok 12:45:48.0835 1764 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 12:45:48.0837 1764 AmdPPM - ok 12:45:48.0880 1764 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 12:45:48.0882 1764 amdsata - ok 12:45:48.0889 1764 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 12:45:48.0892 1764 amdsbs - ok 12:45:48.0898 1764 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 12:45:48.0899 1764 amdxata - ok 12:45:48.0944 1764 [ 05F1A0A81A98CF27E3F028213FB6C36A ] ApfiltrService C:\Windows\system32\DRIVERS\Apfiltr.sys 12:45:48.0948 1764 ApfiltrService - ok 12:45:48.0995 1764 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 12:45:48.0996 1764 AppID - ok 12:45:49.0027 1764 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 12:45:49.0029 1764 AppIDSvc - ok 12:45:49.0080 1764 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 12:45:49.0082 1764 Appinfo - ok 12:45:49.0205 1764 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 12:45:49.0208 1764 Apple Mobile Device - ok 12:45:49.0262 1764 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 12:45:49.0266 1764 arc - ok 12:45:49.0278 1764 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 12:45:49.0282 1764 arcsas - ok 12:45:49.0305 1764 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 12:45:49.0307 1764 AsyncMac - ok 12:45:49.0340 1764 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 12:45:49.0341 1764 atapi - ok 12:45:49.0416 1764 [ 38562A6A9CB10844759EAF2B01A7FCD3 ] athr C:\Windows\system32\DRIVERS\athrx.sys 12:45:49.0434 1764 athr - ok 12:45:49.0482 1764 [ 3B9014FB7CE9E20FD726321C7DB7D8B0 ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys 12:45:49.0484 1764 AtiHdmiService - ok 12:45:49.0876 1764 [ A29087680A1C3B049E3C05438E8FF2B8 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys 12:45:49.0935 1764 atikmdag - ok 12:45:49.0987 1764 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys 12:45:49.0988 1764 AtiPcie - ok 12:45:50.0053 1764 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 12:45:50.0067 1764 AudioEndpointBuilder - ok 12:45:50.0088 1764 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 12:45:50.0092 1764 AudioSrv - ok 12:45:50.0325 1764 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe 12:45:50.0383 1764 AVGIDSAgent - ok 12:45:50.0434 1764 [ 388056EBD5FE6718FE669078DBE37897 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys 12:45:50.0437 1764 AVGIDSDriver - ok 12:45:50.0449 1764 [ 550E981747D6A6C55078C77346FFC2C6 ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys 12:45:50.0450 1764 AVGIDSHA - ok 12:45:50.0487 1764 [ 5989592A91A17587799792A81E1541D4 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys 12:45:50.0489 1764 Avgldx64 - ok 12:45:50.0526 1764 [ 3FC43AA02545FCDDC22817829114DEC8 ] Avgloga C:\Windows\system32\DRIVERS\avgloga.sys 12:45:50.0529 1764 Avgloga - ok 12:45:50.0548 1764 [ 841C40C193889730848849AC220D9242 ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys 12:45:50.0550 1764 Avgmfx64 - ok 12:45:50.0569 1764 [ FE4F444DBE4BBBDFD8FECF49398DEFC7 ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys 12:45:50.0572 1764 Avgrkx64 - ok 12:45:50.0587 1764 [ 6E634525613D48A1D1657FB21F21F3B2 ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys 12:45:50.0592 1764 Avgtdia - ok 12:45:50.0633 1764 [ A2DC9FEB5466F8EAD9C06527EF464A05 ] avgtp C:\Windows\system32\drivers\avgtpx64.sys 12:45:50.0634 1764 avgtp - ok 12:45:50.0681 1764 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe 12:45:50.0684 1764 avgwd - ok 12:45:50.0747 1764 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 12:45:50.0749 1764 AxInstSV - ok 12:45:50.0813 1764 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 12:45:50.0824 1764 b06bdrv - ok 12:45:50.0855 1764 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 12:45:50.0859 1764 b57nd60a - ok 12:45:50.0994 1764 [ 9E84A931DBEE0292E38ED672F6293A99 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys 12:45:51.0019 1764 BCM43XX - ok 12:45:51.0064 1764 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 12:45:51.0066 1764 BDESVC - ok 12:45:51.0083 1764 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 12:45:51.0084 1764 Beep - ok 12:45:51.0146 1764 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 12:45:51.0161 1764 BFE - ok 12:45:51.0213 1764 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 12:45:51.0223 1764 BITS - ok 12:45:51.0255 1764 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 12:45:51.0257 1764 blbdrive - ok 12:45:51.0325 1764 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 12:45:51.0336 1764 Bonjour Service - ok 12:45:51.0386 1764 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 12:45:51.0388 1764 bowser - ok 12:45:51.0426 1764 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 12:45:51.0427 1764 BrFiltLo - ok 12:45:51.0433 1764 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 12:45:51.0435 1764 BrFiltUp - ok 12:45:51.0464 1764 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 12:45:51.0466 1764 Browser - ok 12:45:51.0476 1764 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 12:45:51.0481 1764 Brserid - ok 12:45:51.0488 1764 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 12:45:51.0490 1764 BrSerWdm - ok 12:45:51.0496 1764 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 12:45:51.0498 1764 BrUsbMdm - ok 12:45:51.0515 1764 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 12:45:51.0516 1764 BrUsbSer - ok 12:45:51.0575 1764 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys 12:45:51.0576 1764 BthEnum - ok 12:45:51.0584 1764 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 12:45:51.0587 1764 BTHMODEM - ok 12:45:51.0620 1764 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 12:45:51.0623 1764 BthPan - ok 12:45:51.0681 1764 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys 12:45:51.0690 1764 BTHPORT - ok 12:45:51.0736 1764 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 12:45:51.0739 1764 bthserv - ok 12:45:51.0748 1764 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys 12:45:51.0749 1764 BTHUSB - ok 12:45:51.0785 1764 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 12:45:51.0786 1764 cdfs - ok 12:45:51.0814 1764 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys 12:45:51.0818 1764 cdrom - ok 12:45:51.0865 1764 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 12:45:51.0867 1764 CertPropSvc - ok 12:45:51.0901 1764 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 12:45:51.0904 1764 circlass - ok 12:45:51.0933 1764 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 12:45:51.0941 1764 CLFS - ok 12:45:52.0059 1764 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 12:45:52.0062 1764 clr_optimization_v2.0.50727_32 - ok 12:45:52.0143 1764 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 12:45:52.0147 1764 clr_optimization_v2.0.50727_64 - ok 12:45:52.0301 1764 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 12:45:52.0305 1764 clr_optimization_v4.0.30319_32 - ok 12:45:52.0442 1764 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 12:45:52.0446 1764 clr_optimization_v4.0.30319_64 - ok 12:45:52.0497 1764 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 12:45:52.0499 1764 CmBatt - ok 12:45:52.0537 1764 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 12:45:52.0540 1764 cmdide - ok 12:45:52.0577 1764 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys 12:45:52.0588 1764 CNG - ok 12:45:52.0735 1764 [ F9A79C5B27037821112C50A9C8FB367A ] Com4QLBEx C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe 12:45:52.0740 1764 Com4QLBEx - ok 12:45:52.0789 1764 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 12:45:52.0792 1764 Compbatt - ok 12:45:52.0849 1764 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 12:45:52.0850 1764 CompositeBus - ok 12:45:52.0871 1764 COMSysApp - ok 12:45:52.0882 1764 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 12:45:52.0884 1764 crcdisk - ok 12:45:52.0929 1764 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll 12:45:52.0932 1764 CryptSvc - ok 12:45:52.0977 1764 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 12:45:52.0991 1764 DcomLaunch - ok 12:45:53.0023 1764 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 12:45:53.0027 1764 defragsvc - ok 12:45:53.0054 1764 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 12:45:53.0056 1764 DfsC - ok 12:45:53.0077 1764 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 12:45:53.0081 1764 Dhcp - ok 12:45:53.0111 1764 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 12:45:53.0111 1764 discache - ok 12:45:53.0134 1764 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 12:45:53.0138 1764 Disk - ok 12:45:53.0175 1764 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 12:45:53.0215 1764 Dnscache - ok 12:45:53.0264 1764 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 12:45:53.0267 1764 dot3svc - ok 12:45:53.0296 1764 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 12:45:53.0301 1764 DPS - ok 12:45:53.0319 1764 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 12:45:53.0321 1764 drmkaud - ok 12:45:53.0423 1764 [ F9F437B39CC0FCACCE8AC7CE422F537F ] DVMIO C:\SPLASH.SYS\config\dvmio.sys 12:45:53.0424 1764 DVMIO - ok 12:45:53.0463 1764 [ 577582D57D90FB64276ACFEE958DBFD3 ] DvmMDES C:\SPLASH.SYS\config\DVMExportService.exe 12:45:53.0593 1764 DvmMDES - ok 12:45:53.0655 1764 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 12:45:53.0665 1764 DXGKrnl - ok 12:45:53.0707 1764 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 12:45:53.0709 1764 EapHost - ok 12:45:53.0782 1764 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 12:45:53.0815 1764 ebdrv - ok 12:45:53.0846 1764 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 12:45:53.0878 1764 EFS - ok 12:45:53.0997 1764 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 12:45:54.0011 1764 ehRecvr - ok 12:45:54.0040 1764 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 12:45:54.0041 1764 ehSched - ok 12:45:54.0085 1764 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 12:45:54.0097 1764 elxstor - ok 12:45:54.0146 1764 [ A9EC08727C64D985678F5B64C03823F0 ] enecir C:\Windows\system32\DRIVERS\enecir.sys 12:45:54.0147 1764 enecir - ok 12:45:54.0187 1764 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 12:45:54.0187 1764 ErrDev - ok 12:45:54.0264 1764 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 12:45:54.0274 1764 EventSystem - ok 12:45:54.0311 1764 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 12:45:54.0314 1764 exfat - ok 12:45:54.0320 1764 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 12:45:54.0323 1764 fastfat - ok 12:45:54.0372 1764 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 12:45:54.0379 1764 Fax - ok 12:45:54.0384 1764 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 12:45:54.0386 1764 fdc - ok 12:45:54.0398 1764 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 12:45:54.0399 1764 fdPHost - ok 12:45:54.0404 1764 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 12:45:54.0405 1764 FDResPub - ok 12:45:54.0411 1764 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 12:45:54.0413 1764 FileInfo - ok 12:45:54.0418 1764 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 12:45:54.0419 1764 Filetrace - ok 12:45:54.0424 1764 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 12:45:54.0425 1764 flpydisk - ok 12:45:54.0445 1764 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 12:45:54.0449 1764 FltMgr - ok 12:45:54.0495 1764 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 12:45:54.0508 1764 FontCache - ok 12:45:54.0573 1764 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 12:45:54.0576 1764 FontCache3.0.0.0 - ok 12:45:54.0614 1764 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 12:45:54.0617 1764 FsDepends - ok 12:45:54.0646 1764 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 12:45:54.0648 1764 Fs_Rec - ok 12:45:54.0703 1764 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 12:45:54.0707 1764 fvevol - ok 12:45:54.0715 1764 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 12:45:54.0717 1764 gagp30kx - ok 12:45:54.0785 1764 [ C1BBCE4B30B45410178EE674C818D10C ] GameConsoleService C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe 12:45:54.0791 1764 GameConsoleService - ok 12:45:54.0849 1764 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 12:45:54.0851 1764 GEARAspiWDM - ok 12:45:54.0909 1764 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 12:45:54.0957 1764 gpsvc - ok 12:45:54.0984 1764 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 12:45:54.0986 1764 gupdate - ok 12:45:54.0990 1764 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 12:45:54.0991 1764 gupdatem - ok 12:45:55.0023 1764 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 12:45:55.0025 1764 hcw85cir - ok 12:45:55.0083 1764 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 12:45:55.0091 1764 HdAudAddService - ok 12:45:55.0131 1764 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 12:45:55.0135 1764 HDAudBus - ok 12:45:55.0157 1764 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 12:45:55.0159 1764 HidBatt - ok 12:45:55.0166 1764 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 12:45:55.0169 1764 HidBth - ok 12:45:55.0191 1764 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 12:45:55.0192 1764 HidIr - ok 12:45:55.0224 1764 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 12:45:55.0226 1764 hidserv - ok 12:45:55.0247 1764 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys 12:45:55.0248 1764 HidUsb - ok 12:45:55.0284 1764 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 12:45:55.0286 1764 hkmsvc - ok 12:45:55.0317 1764 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 12:45:55.0321 1764 HomeGroupListener - ok 12:45:55.0355 1764 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 12:45:55.0359 1764 HomeGroupProvider - ok 12:45:55.0420 1764 [ 00B239202F7756695C8CCDF8BAFA7D3D ] HP Health Check Service C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe 12:45:55.0422 1764 HP Health Check Service - ok 12:45:55.0470 1764 [ 05712FDDBD45A5864EB326FAABC6A4E3 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys 12:45:55.0472 1764 hpdskflt - ok 12:45:55.0527 1764 [ 9AF482D058BE59CC28BCE52E7C4B747C ] HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys 12:45:55.0529 1764 HpqKbFiltr - ok 12:45:55.0609 1764 [ FDF273A845F1FFCCEADF363AAF47582F ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe 12:45:55.0615 1764 hpqwmiex - ok 12:45:55.0663 1764 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 12:45:55.0667 1764 HpSAMD - ok 12:45:55.0730 1764 [ AA036CC5F5221D9B915F4D4DCE74BA9A ] hpsrv C:\Windows\system32\Hpservice.exe 12:45:55.0734 1764 hpsrv - ok 12:45:55.0801 1764 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 12:45:55.0817 1764 HTTP - ok 12:45:55.0849 1764 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 12:45:55.0850 1764 hwpolicy - ok 12:45:55.0886 1764 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 12:45:55.0888 1764 i8042prt - ok 12:45:55.0950 1764 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 12:45:55.0957 1764 iaStorV - ok 12:45:56.0009 1764 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 12:45:56.0028 1764 idsvc - ok 12:45:56.0400 1764 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 12:45:56.0536 1764 igfx - ok 12:45:56.0543 1764 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 12:45:56.0545 1764 iirsp - ok 12:45:56.0588 1764 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 12:45:56.0597 1764 IKEEXT - ok 12:45:56.0620 1764 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 12:45:56.0621 1764 intelide - ok 12:45:56.0652 1764 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 12:45:56.0653 1764 intelppm - ok 12:45:56.0676 1764 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 12:45:56.0678 1764 IPBusEnum - ok 12:45:56.0715 1764 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 12:45:56.0717 1764 IpFilterDriver - ok 12:45:56.0747 1764 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 12:45:56.0756 1764 iphlpsvc - ok 12:45:56.0790 1764 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 12:45:56.0792 1764 IPMIDRV - ok 12:45:56.0817 1764 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 12:45:56.0819 1764 IPNAT - ok 12:45:56.0885 1764 [ 0FF335D687C85097725A53458160E81E ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 12:45:56.0896 1764 iPod Service - ok 12:45:56.0935 1764 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 12:45:56.0936 1764 IRENUM - ok 12:45:56.0964 1764 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 12:45:56.0965 1764 isapnp - ok 12:45:56.0990 1764 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 12:45:56.0994 1764 iScsiPrt - ok 12:45:57.0037 1764 [ 02BD12C2EE52F0849A5D6F9A2FA67B4E ] JMCR C:\Windows\system32\DRIVERS\jmcr.sys 12:45:57.0039 1764 JMCR - ok 12:45:57.0074 1764 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys 12:45:57.0075 1764 kbdclass - ok 12:45:57.0089 1764 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys 12:45:57.0091 1764 kbdhid - ok 12:45:57.0105 1764 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 12:45:57.0108 1764 KeyIso - ok 12:45:57.0149 1764 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 12:45:57.0152 1764 KSecDD - ok 12:45:57.0173 1764 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 12:45:57.0177 1764 KSecPkg - ok 12:45:57.0203 1764 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 12:45:57.0204 1764 ksthunk - ok 12:45:57.0242 1764 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 12:45:57.0248 1764 KtmRm - ok 12:45:57.0291 1764 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 12:45:57.0299 1764 LanmanServer - ok 12:45:57.0338 1764 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 12:45:57.0342 1764 LanmanWorkstation - ok 12:45:57.0427 1764 [ 2238B91AC1A12CC6CC4C4FED41258B2A ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe 12:45:57.0521 1764 LightScribeService - ok 12:45:57.0595 1764 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 12:45:57.0598 1764 lltdio - ok 12:45:57.0642 1764 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 12:45:57.0651 1764 lltdsvc - ok 12:45:57.0661 1764 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 12:45:57.0665 1764 lmhosts - ok 12:45:57.0691 1764 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 12:45:57.0693 1764 LSI_FC - ok 12:45:57.0699 1764 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 12:45:57.0701 1764 LSI_SAS - ok 12:45:57.0717 1764 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 12:45:57.0719 1764 LSI_SAS2 - ok 12:45:57.0725 1764 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 12:45:57.0727 1764 LSI_SCSI - ok 12:45:57.0734 1764 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 12:45:57.0736 1764 luafv - ok 12:45:57.0780 1764 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 12:45:57.0781 1764 MBAMProtector - ok 12:45:57.0833 1764 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe 12:45:57.0842 1764 MBAMScheduler - ok 12:45:57.0879 1764 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 12:45:57.0889 1764 MBAMService - ok 12:45:57.0924 1764 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 12:45:57.0957 1764 Mcx2Svc - ok 12:45:57.0987 1764 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 12:45:57.0989 1764 megasas - ok 12:45:57.0996 1764 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 12:45:58.0000 1764 MegaSR - ok 12:45:58.0045 1764 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 12:45:58.0050 1764 MMCSS - ok 12:45:58.0061 1764 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 12:45:58.0064 1764 Modem - ok 12:45:58.0083 1764 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 12:45:58.0085 1764 monitor - ok 12:45:58.0135 1764 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys 12:45:58.0138 1764 mouclass - ok 12:45:58.0149 1764 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 12:45:58.0153 1764 mouhid - ok 12:45:58.0185 1764 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 12:45:58.0187 1764 mountmgr - ok 12:45:58.0254 1764 [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys 12:45:58.0259 1764 MpFilter - ok 12:45:58.0286 1764 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 12:45:58.0289 1764 mpio - ok 12:45:58.0325 1764 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 12:45:58.0327 1764 mpsdrv - ok 12:45:58.0378 1764 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 12:45:58.0452 1764 MpsSvc - ok 12:45:58.0493 1764 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 12:45:58.0496 1764 MRxDAV - ok 12:45:58.0532 1764 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 12:45:58.0536 1764 mrxsmb - ok 12:45:58.0551 1764 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 12:45:58.0555 1764 mrxsmb10 - ok 12:45:58.0586 1764 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 12:45:58.0588 1764 mrxsmb20 - ok 12:45:58.0619 1764 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 12:45:58.0620 1764 msahci - ok 12:45:58.0665 1764 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 12:45:58.0668 1764 msdsm - ok 12:45:58.0698 1764 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 12:45:58.0705 1764 MSDTC - ok 12:45:58.0768 1764 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 12:45:58.0770 1764 Msfs - ok 12:45:58.0801 1764 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 12:45:58.0804 1764 mshidkmdf - ok 12:45:58.0826 1764 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 12:45:58.0828 1764 msisadrv - ok 12:45:58.0858 1764 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 12:45:58.0862 1764 MSiSCSI - ok 12:45:58.0867 1764 msiserver - ok 12:45:58.0907 1764 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 12:45:58.0909 1764 MSKSSRV - ok 12:45:59.0020 1764 [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe 12:45:59.0021 1764 MsMpSvc - ok 12:45:59.0032 1764 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 12:45:59.0035 1764 MSPCLOCK - ok 12:45:59.0068 1764 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 12:45:59.0069 1764 MSPQM - ok 12:45:59.0105 1764 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 12:45:59.0110 1764 MsRPC - ok 12:45:59.0146 1764 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 12:45:59.0146 1764 mssmbios - ok 12:45:59.0169 1764 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 12:45:59.0172 1764 MSTEE - ok 12:45:59.0181 1764 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 12:45:59.0182 1764 MTConfig - ok 12:45:59.0207 1764 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 12:45:59.0209 1764 Mup - ok 12:45:59.0233 1764 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 12:45:59.0241 1764 napagent - ok 12:45:59.0275 1764 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 12:45:59.0280 1764 NativeWifiP - ok 12:45:59.0416 1764 [ 251BDFBC76ACC5590C8975DEE780147E ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20090829.019\ENG64.SYS 12:45:59.0420 1764 NAVENG - ok 12:45:59.0427 1764 NAVEX15 - ok 12:45:59.0494 1764 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys 12:45:59.0506 1764 NDIS - ok 12:45:59.0539 1764 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 12:45:59.0541 1764 NdisCap - ok 12:45:59.0560 1764 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 12:45:59.0561 1764 NdisTapi - ok 12:45:59.0615 1764 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 12:45:59.0617 1764 Ndisuio - ok 12:45:59.0674 1764 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 12:45:59.0677 1764 NdisWan - ok 12:45:59.0702 1764 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 12:45:59.0704 1764 NDProxy - ok 12:45:59.0716 1764 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 12:45:59.0718 1764 NetBIOS - ok 12:45:59.0754 1764 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 12:45:59.0757 1764 NetBT - ok 12:45:59.0771 1764 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 12:45:59.0773 1764 Netlogon - ok 12:45:59.0828 1764 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 12:45:59.0834 1764 Netman - ok 12:45:59.0847 1764 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 12:45:59.0855 1764 netprofm - ok 12:45:59.0876 1764 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 12:45:59.0878 1764 NetTcpPortSharing - ok 12:46:00.0028 1764 [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys 12:46:00.0086 1764 netw5v64 - ok 12:46:00.0092 1764 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 12:46:00.0094 1764 nfrd960 - ok 12:46:00.0186 1764 [ 2F86BE1818C2D7AC90478E3323EE7FCB ] NIS C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe 12:46:00.0191 1764 NIS - ok 12:46:00.0250 1764 [ 162100E0BC8377710F9D170631921C03 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys 12:46:00.0254 1764 NisDrv - ok 12:46:00.0302 1764 [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe 12:46:00.0310 1764 NisSrv - ok 12:46:00.0375 1764 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll 12:46:00.0384 1764 NlaSvc - ok 12:46:00.0420 1764 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 12:46:00.0423 1764 Npfs - ok 12:46:00.0455 1764 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 12:46:00.0460 1764 nsi - ok 12:46:00.0469 1764 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 12:46:00.0471 1764 nsiproxy - ok 12:46:00.0532 1764 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 12:46:00.0551 1764 Ntfs - ok 12:46:00.0564 1764 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 12:46:00.0565 1764 Null - ok 12:46:00.0639 1764 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 12:46:00.0645 1764 nvraid - ok 12:46:00.0680 1764 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 12:46:00.0685 1764 nvstor - ok 12:46:00.0717 1764 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 12:46:00.0720 1764 nv_agp - ok 12:46:00.0815 1764 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 12:46:00.0917 1764 odserv - ok 12:46:00.0941 1764 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 12:46:00.0942 1764 ohci1394 - ok 12:46:00.0992 1764 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 12:46:00.0997 1764 ose - ok 12:46:01.0042 1764 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 12:46:01.0052 1764 p2pimsvc - ok 12:46:01.0078 1764 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 12:46:01.0084 1764 p2psvc - ok 12:46:01.0114 1764 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 12:46:01.0116 1764 Parport - ok 12:46:01.0141 1764 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 12:46:01.0143 1764 partmgr - ok 12:46:01.0152 1764 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 12:46:01.0156 1764 PcaSvc - ok 12:46:01.0195 1764 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 12:46:01.0199 1764 pci - ok 12:46:01.0219 1764 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 12:46:01.0221 1764 pciide - ok 12:46:01.0240 1764 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 12:46:01.0245 1764 pcmcia - ok 12:46:01.0252 1764 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 12:46:01.0254 1764 pcw - ok 12:46:01.0268 1764 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 12:46:01.0277 1764 PEAUTH - ok 12:46:01.0497 1764 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 12:46:01.0501 1764 PerfHost - ok 12:46:01.0608 1764 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 12:46:01.0638 1764 pla - ok 12:46:01.0696 1764 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 12:46:01.0708 1764 PlugPlay - ok 12:46:01.0727 1764 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 12:46:01.0729 1764 PNRPAutoReg - ok 12:46:01.0737 1764 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 12:46:01.0741 1764 PNRPsvc - ok 12:46:01.0762 1764 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 12:46:01.0808 1764 PolicyAgent - ok 12:46:01.0849 1764 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 12:46:01.0856 1764 Power - ok 12:46:01.0909 1764 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 12:46:01.0913 1764 PptpMiniport - ok 12:46:01.0950 1764 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 12:46:01.0952 1764 Processor - ok 12:46:02.0000 1764 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 12:46:02.0008 1764 ProfSvc - ok 12:46:02.0030 1764 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 12:46:02.0031 1764 ProtectedStorage - ok 12:46:02.0061 1764 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 12:46:02.0064 1764 Psched - ok 12:46:02.0109 1764 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 12:46:02.0129 1764 ql2300 - ok 12:46:02.0137 1764 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 12:46:02.0140 1764 ql40xx - ok 12:46:02.0172 1764 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 12:46:02.0176 1764 QWAVE - ok 12:46:02.0181 1764 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 12:46:02.0183 1764 QWAVEdrv - ok 12:46:02.0187 1764 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 12:46:02.0189 1764 RasAcd - ok 12:46:02.0241 1764 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 12:46:02.0244 1764 RasAgileVpn - ok 12:46:02.0263 1764 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 12:46:02.0268 1764 RasAuto - ok 12:46:02.0298 1764 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 12:46:02.0300 1764 Rasl2tp - ok 12:46:02.0335 1764 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 12:46:02.0339 1764 RasMan - ok 12:46:02.0345 1764 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 12:46:02.0347 1764 RasPppoe - ok 12:46:02.0353 1764 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 12:46:02.0355 1764 RasSstp - ok 12:46:02.0372 1764 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 12:46:02.0375 1764 rdbss - ok 12:46:02.0397 1764 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 12:46:02.0399 1764 rdpbus - ok 12:46:02.0403 1764 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 12:46:02.0404 1764 RDPCDD - ok 12:46:02.0424 1764 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 12:46:02.0424 1764 RDPENCDD - ok 12:46:02.0433 1764 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 12:46:02.0433 1764 RDPREFMP - ok 12:46:02.0467 1764 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 12:46:02.0469 1764 RDPWD - ok 12:46:02.0526 1764 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 12:46:02.0532 1764 rdyboost - ok 12:46:02.0584 1764 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 12:46:02.0589 1764 RemoteAccess - ok 12:46:02.0630 1764 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 12:46:02.0637 1764 RemoteRegistry - ok 12:46:02.0693 1764 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 12:46:02.0699 1764 RFCOMM - ok 12:46:02.0805 1764 [ 498EB62A160674E793FA40FD65390625 ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 12:46:02.0809 1764 RichVideo - ok 12:46:02.0841 1764 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 12:46:02.0843 1764 RpcEptMapper - ok 12:46:02.0870 1764 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 12:46:02.0872 1764 RpcLocator - ok 12:46:02.0906 1764 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 12:46:02.0911 1764 RpcSs - ok 12:46:02.0955 1764 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 12:46:02.0958 1764 rspndr - ok 12:46:03.0013 1764 [ B49DC435AE3695BAC5623DD94B05732D ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 12:46:03.0019 1764 RTL8167 - ok 12:46:03.0046 1764 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 12:46:03.0049 1764 SamSs - ok 12:46:03.0080 1764 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 12:46:03.0083 1764 sbp2port - ok 12:46:03.0124 1764 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 12:46:03.0129 1764 SCardSvr - ok 12:46:03.0156 1764 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 12:46:03.0157 1764 scfilter - ok 12:46:03.0213 1764 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 12:46:03.0235 1764 Schedule - ok 12:46:03.0273 1764 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 12:46:03.0274 1764 SCPolicySvc - ok 12:46:03.0319 1764 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys 12:46:03.0320 1764 sdbus - ok 12:46:03.0352 1764 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 12:46:03.0355 1764 SDRSVC - ok 12:46:03.0386 1764 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 12:46:03.0388 1764 secdrv - ok 12:46:03.0415 1764 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 12:46:03.0417 1764 seclogon - ok 12:46:03.0454 1764 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 12:46:03.0456 1764 SENS - ok 12:46:03.0492 1764 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 12:46:03.0494 1764 SensrSvc - ok 12:46:03.0499 1764 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 12:46:03.0500 1764 Serenum - ok 12:46:03.0506 1764 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 12:46:03.0508 1764 Serial - ok 12:46:03.0525 1764 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 12:46:03.0526 1764 sermouse - ok 12:46:03.0570 1764 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 12:46:03.0573 1764 SessionEnv - ok 12:46:03.0603 1764 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 12:46:03.0603 1764 sffdisk - ok 12:46:03.0628 1764 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 12:46:03.0629 1764 sffp_mmc - ok 12:46:03.0634 1764 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 12:46:03.0634 1764 sffp_sd - ok 12:46:03.0640 1764 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 12:46:03.0641 1764 sfloppy - ok 12:46:03.0688 1764 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 12:46:03.0699 1764 SharedAccess - ok 12:46:03.0890 1764 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 12:46:03.0945 1764 ShellHWDetection - ok 12:46:04.0025 1764 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 12:46:04.0028 1764 SiSRaid2 - ok 12:46:04.0053 1764 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 12:46:04.0056 1764 SiSRaid4 - ok 12:46:04.0074 1764 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 12:46:04.0076 1764 Smb - ok 12:46:04.0116 1764 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 12:46:04.0117 1764 SNMPTRAP - ok 12:46:04.0167 1764 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 12:46:04.0206 1764 spldr - ok 12:46:04.0282 1764 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 12:46:04.0297 1764 Spooler - ok 12:46:04.0428 1764 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 12:46:04.0460 1764 sppsvc - ok 12:46:04.0486 1764 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 12:46:04.0488 1764 sppuinotify - ok 12:46:04.0565 1764 [ 56979A80F6F9DF788A8BFCC1603DA40D ] SRTSP C:\Windows\system32\drivers\NISx64\1100000.088\SRTSP64.SYS 12:46:04.0576 1764 SRTSP - ok 12:46:04.0587 1764 [ 3C3D82BB245AD1CB00ED48CB2F4AB385 ] SRTSPX C:\Windows\system32\drivers\NISx64\1100000.088\SRTSPX64.SYS 12:46:04.0589 1764 SRTSPX - ok 12:46:04.0629 1764 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 12:46:04.0635 1764 srv - ok 12:46:04.0652 1764 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 12:46:04.0657 1764 srv2 - ok 12:46:04.0699 1764 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS 12:46:04.0703 1764 SrvHsfHDA - ok 12:46:04.0732 1764 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS 12:46:04.0749 1764 SrvHsfV92 - ok 12:46:04.0771 1764 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 12:46:04.0780 1764 SrvHsfWinac - ok 12:46:04.0809 1764 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 12:46:04.0811 1764 srvnet - ok 12:46:04.0858 1764 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 12:46:04.0866 1764 SSDPSRV - ok 12:46:04.0877 1764 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 12:46:04.0881 1764 SstpSvc - ok 12:46:05.0081 1764 [ CAA31EA6BA02FC2013793B07DDE8510C ] STacSV C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\STacSV64.exe 12:46:05.0120 1764 STacSV - ok 12:46:05.0144 1764 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 12:46:05.0146 1764 stexstor - ok 12:46:05.0230 1764 [ 0A98661F2261446EED7A0EB79B286D5C ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 12:46:05.0242 1764 STHDA - ok 12:46:05.0318 1764 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 12:46:05.0327 1764 stisvc - ok 12:46:05.0362 1764 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 12:46:05.0363 1764 swenum - ok 12:46:05.0403 1764 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 12:46:05.0412 1764 swprv - ok 12:46:05.0540 1764 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 12:46:05.0565 1764 SysMain - ok 12:46:05.0600 1764 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 12:46:05.0734 1764 TabletInputService - ok 12:46:05.0778 1764 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 12:46:05.0786 1764 TapiSrv - ok 12:46:05.0824 1764 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 12:46:05.0826 1764 TBS - ok 12:46:05.0911 1764 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 12:46:05.0941 1764 Tcpip - ok 12:46:05.0988 1764 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 12:46:05.0999 1764 TCPIP6 - ok 12:46:06.0035 1764 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 12:46:06.0036 1764 tcpipreg - ok 12:46:06.0145 1764 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 12:46:06.0148 1764 TDPIPE - ok 12:46:06.0211 1764 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 12:46:06.0212 1764 TDTCP - ok 12:46:06.0299 1764 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 12:46:06.0302 1764 tdx - ok 12:46:06.0347 1764 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 12:46:06.0350 1764 TermDD - ok 12:46:06.0391 1764 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 12:46:06.0408 1764 TermService - ok 12:46:06.0437 1764 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 12:46:06.0440 1764 Themes - ok 12:46:06.0478 1764 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 12:46:06.0480 1764 THREADORDER - ok 12:46:06.0508 1764 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 12:46:06.0512 1764 TrkWks - ok 12:46:06.0591 1764 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 12:46:06.0596 1764 TrustedInstaller - ok 12:46:06.0652 1764 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 12:46:06.0654 1764 tssecsrv - ok 12:46:06.0697 1764 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 12:46:06.0699 1764 TsUsbFlt - ok 12:46:06.0764 1764 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 12:46:06.0767 1764 tunnel - ok 12:46:06.0810 1764 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 12:46:06.0813 1764 uagp35 - ok 12:46:06.0853 1764 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 12:46:06.0858 1764 udfs - ok 12:46:06.0913 1764 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 12:46:06.0916 1764 UI0Detect - ok 12:46:06.0950 1764 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 12:46:06.0952 1764 uliagpkx - ok 12:46:07.0003 1764 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys 12:46:07.0004 1764 umbus - ok 12:46:07.0009 1764 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 12:46:07.0011 1764 UmPass - ok 12:46:07.0032 1764 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 12:46:07.0037 1764 upnphost - ok 12:46:07.0087 1764 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 12:46:07.0089 1764 USBAAPL64 - ok 12:46:07.0117 1764 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 12:46:07.0119 1764 usbccgp - ok 12:46:07.0161 1764 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 12:46:07.0163 1764 usbcir - ok 12:46:07.0192 1764 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 12:46:07.0193 1764 usbehci - ok 12:46:07.0242 1764 [ 6648C6D7323A2CE0C4776C36CEFBCB14 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys 12:46:07.0243 1764 usbfilter - ok 12:46:07.0251 1764 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 12:46:07.0255 1764 usbhub - ok 12:46:07.0260 1764 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 12:46:07.0261 1764 usbohci - ok 12:46:07.0318 1764 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 12:46:07.0320 1764 usbprint - ok 12:46:07.0351 1764 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\drivers\USBSTOR.SYS 12:46:07.0352 1764 USBSTOR - ok 12:46:07.0357 1764 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 12:46:07.0358 1764 usbuhci - ok 12:46:07.0395 1764 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 12:46:07.0397 1764 usbvideo - ok 12:46:07.0428 1764 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 12:46:07.0430 1764 UxSms - ok 12:46:07.0446 1764 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 12:46:07.0448 1764 VaultSvc - ok 12:46:07.0496 1764 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 12:46:07.0498 1764 vdrvroot - ok 12:46:07.0542 1764 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 12:46:07.0549 1764 vds - ok 12:46:07.0580 1764 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 12:46:07.0581 1764 vga - ok 12:46:07.0586 1764 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 12:46:07.0587 1764 VgaSave - ok 12:46:07.0630 1764 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 12:46:07.0634 1764 vhdmp - ok 12:46:07.0661 1764 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 12:46:07.0663 1764 viaide - ok 12:46:07.0686 1764 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 12:46:07.0688 1764 volmgr - ok 12:46:07.0732 1764 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 12:46:07.0736 1764 volmgrx - ok 12:46:07.0755 1764 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 12:46:07.0759 1764 volsnap - ok 12:46:07.0785 1764 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 12:46:07.0787 1764 vsmraid - ok 12:46:07.0842 1764 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 12:46:07.0861 1764 VSS - ok 12:46:07.0938 1764 [ 654D358F8DC18167F31A01166B4CA9D6 ] vToolbarUpdater15.3.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe 12:46:07.0955 1764 vToolbarUpdater15.3.0 - ok 12:46:07.0978 1764 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 12:46:07.0980 1764 vwifibus - ok 12:46:08.0012 1764 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 12:46:08.0013 1764 vwififlt - ok 12:46:08.0041 1764 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 12:46:08.0047 1764 W32Time - ok 12:46:08.0054 1764 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 12:46:08.0056 1764 WacomPen - ok 12:46:08.0101 1764 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 12:46:08.0102 1764 WANARP - ok 12:46:08.0106 1764 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 12:46:08.0108 1764 Wanarpv6 - ok 12:46:08.0198 1764 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 12:46:08.0225 1764 WatAdminSvc - ok 12:46:08.0268 1764 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 12:46:08.0284 1764 wbengine - ok 12:46:08.0327 1764 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 12:46:08.0331 1764 WbioSrvc - ok 12:46:08.0363 1764 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 12:46:08.0368 1764 wcncsvc - ok 12:46:08.0383 1764 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 12:46:08.0386 1764 WcsPlugInService - ok 12:46:08.0415 1764 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys 12:46:08.0416 1764 Wd - ok 12:46:08.0457 1764 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 12:46:08.0466 1764 Wdf01000 - ok 12:46:08.0487 1764 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 12:46:08.0490 1764 WdiServiceHost - ok 12:46:08.0494 1764 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 12:46:08.0497 1764 WdiSystemHost - ok 12:46:08.0529 1764 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 12:46:08.0533 1764 WebClient - ok 12:46:08.0569 1764 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 12:46:08.0576 1764 Wecsvc - ok 12:46:08.0596 1764 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 12:46:08.0601 1764 wercplsupport - ok 12:46:08.0627 1764 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 12:46:08.0632 1764 WerSvc - ok 12:46:08.0680 1764 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 12:46:08.0681 1764 WfpLwf - ok 12:46:08.0688 1764 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 12:46:08.0691 1764 WIMMount - ok 12:46:08.0708 1764 WinDefend - ok 12:46:08.0718 1764 WinHttpAutoProxySvc - ok 12:46:08.0849 1764 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 12:46:08.0855 1764 Winmgmt - ok 12:46:09.0010 1764 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 12:46:09.0044 1764 WinRM - ok 12:46:09.0123 1764 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\drivers\WinUSB.SYS 12:46:09.0125 1764 WinUsb - ok 12:46:09.0220 1764 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 12:46:09.0235 1764 Wlansvc - ok 12:46:09.0304 1764 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 12:46:09.0305 1764 WmiAcpi - ok 12:46:09.0399 1764 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 12:46:09.0423 1764 wmiApSrv - ok 12:46:09.0461 1764 WMPNetworkSvc - ok 12:46:09.0498 1764 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 12:46:09.0504 1764 WPCSvc - ok 12:46:09.0541 1764 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 12:46:09.0545 1764 WPDBusEnum - ok 12:46:09.0582 1764 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 12:46:09.0583 1764 ws2ifsl - ok 12:46:09.0620 1764 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 12:46:09.0627 1764 wscsvc - ok 12:46:09.0636 1764 WSearch - ok 12:46:09.0783 1764 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 12:46:09.0822 1764 wuauserv - ok 12:46:09.0855 1764 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 12:46:09.0858 1764 WudfPf - ok 12:46:09.0922 1764 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 12:46:09.0929 1764 WUDFRd - ok 12:46:09.0973 1764 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 12:46:09.0977 1764 wudfsvc - ok 12:46:10.0017 1764 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 12:46:10.0027 1764 WwanSvc - ok 12:46:10.0059 1764 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys 12:46:10.0066 1764 yukonw7 - ok 12:46:10.0089 1764 ================ Scan global =============================== 12:46:10.0119 1764 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 12:46:10.0153 1764 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 12:46:10.0194 1764 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 12:46:10.0224 1764 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 12:46:10.0276 1764 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 12:46:10.0284 1764 [Global] - ok 12:46:10.0285 1764 ================ Scan MBR ================================== 12:46:10.0303 1764 [ 4FF0E8CD52E5C34F1FA526150EAD8FA0 ] \Device\Harddisk0\DR0 12:46:10.0669 1764 \Device\Harddisk0\DR0 - ok 12:46:10.0670 1764 ================ Scan VBR ================================== 12:46:10.0674 1764 [ B0CB1D579D510E4F044AE56872B43AFC ] \Device\Harddisk0\DR0\Partition1 12:46:10.0677 1764 \Device\Harddisk0\DR0\Partition1 - ok 12:46:10.0700 1764 [ DD8D234740581E219BA2343276D25021 ] \Device\Harddisk0\DR0\Partition2 12:46:10.0702 1764 \Device\Harddisk0\DR0\Partition2 - ok 12:46:10.0739 1764 [ 9C4212613C687273A10CC31D89F2A4E6 ] \Device\Harddisk0\DR0\Partition3 12:46:10.0742 1764 \Device\Harddisk0\DR0\Partition3 - ok 12:46:10.0760 1764 [ 30FE208CFFB6104D3D7B1C200A8E1E0E ] \Device\Harddisk0\DR0\Partition4 12:46:10.0762 1764 \Device\Harddisk0\DR0\Partition4 - ok 12:46:10.0762 1764 ============================================================ 12:46:10.0762 1764 Scan finished 12:46:10.0762 1764 ============================================================ 12:46:10.0780 5944 Detected object count: 0 12:46:10.0780 5944 Actual detected object count: 0 aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software Run date: 2013-07-31 13:17:58 —————————– 13:17:58.023 OS Version: Windows x64 6.1.7601 Service Pack 1 13:17:58.023 Number of processors: 2 586 0x602 13:17:58.024 ComputerName: OWNER-PC UserName: Owner 13:17:59.633 Initialize success 13:18:14.020 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 13:18:14.025 Disk 0 Vendor: TOSHIBA_MK3261GSYN MH000C Size: 305245MB BusType: 11 13:18:14.169 Disk 0 MBR read successfully 13:18:14.175 Disk 0 MBR scan 13:18:14.180 Disk 0 unknown MBR code 13:18:14.192 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 199 MB offset 2048 13:18:14.207 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 289433 MB offset 409600 13:18:14.238 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 15508 MB offset 593168384 13:18:14.259 Disk 0 Partition 4 00 0C FAT32 LBA MSDOS5.0 103 MB offset 624928768 13:18:14.304 Disk 0 scanning C:\Windows\system32\drivers 13:18:21.281 Service scanning 13:18:41.956 Modules scanning 13:18:41.975 Disk 0 trace - called modules: 13:18:42.018 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys ACPI.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys 13:18:42.364 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800436f790] 13:18:42.378 3 CLASSPNP.SYS[fffff880010d843f] -> nt!IofCallDriver -> [0xfffffa800436e790] 13:18:42.391 5 hpdskflt.sys[fffff88001c0b289] -> nt!IofCallDriver -> [0xfffffa80042fa520] 13:18:42.405 7 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80042de060] 13:18:42.413 Scan finished successfully 13:18:50.220 Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\MBR.dat" 13:18:50.314 The log file has been saved successfully to "C:\Users\Owner\Desktop\aswMBR.txt"

-AdwCleaner-

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Delete.
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

===================================================

Please download Junkware Removal Tool to your desktop.

• Shutdown your antivirus to avoid any conflicts.
• Right-mouse click JRT.exe and select Run as administrator
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message

===================================================

On your next reply please post :
AdwCleaner log
JRT log


Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

# AdwCleaner v2.306 - Logfile created 07/31/2013 at 14:10:32 # Updated 19/07/2013 by Xplode # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits) # User : Owner - OWNER-PC # Boot Mode : Normal # Running from : C:\Users\Owner\Desktop\adwcleaner.exe # Option [Delete] ***** [Services] ***** Stopped & Deleted : DvmMDES ***** [Files / Folders] ***** Deleted on reboot : C:\Program Files (x86)\Common Files\AVG Secure Search File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk File Deleted : C:\Users\Public\Desktop\eBay.lnk Folder Deleted : C:\Program Files (x86)\visualbee Folder Deleted : C:\ProgramData\visualbee Folder Deleted : C:\Users\Owner\AppData\Local\AVG Secure Search Folder Deleted : C:\Users\Owner\AppData\Local\Smartbar Folder Deleted : C:\Users\Owner\AppData\Local\Temp\boost_interprocess Folder Deleted : C:\Users\Owner\AppData\Local\Temp\Smartbar Folder Deleted : C:\Users\Owner\AppData\Local\visualbeeexe Folder Deleted : C:\Users\Owner\AppData\LocalLow\Smartbar ***** [Registry] ***** Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Deleted : HKCU\Software\SmartBar Key Deleted : HKCU\Software\SmartbarBackup Key Deleted : HKCU\Software\SmartbarLog Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.BHO Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol Key Deleted : HKLM\SOFTWARE\Classes\S Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 Key Deleted : HKLM\Software\DeviceVM Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7CD74AFF-3433-4E34-92E2-D98DFDB30754} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt] Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16496 [OK] Registry is clean. -\\ Google Chrome v28.0.1500.72 File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] File is clean. ************************* AdwCleaner[S1].txt - [8757 octets] - [31/07/2013 14:10:32] ########## EOF - C:\AdwCleaner[S1].txt - [8817 octets] ########## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.2.9 (07.30.2013:1) OS: Windows 7 Home Premium x64 Ran by [removed] on Wed 07/31/2013 at 14:18:24.67 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-2404263842-1386704228-830147666-1000\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Bar Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\searchURL\\Default Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\visualbee Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\visualbee ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Wed 07/31/2013 at 14:24:09.76 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ComboFix 13-07-31.02 - Owner 08/01/2013 13:39:39.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3836.2297 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: AVG Anti-Virus 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5} AV: Norton Internet Security *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855} FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E} SP: AVG Anti-Virus 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508} SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Public\videos\HP MediaSmart Demo.exe . . ((((((((((((((((((((((((( Files Created from 2013-07-01 to 2013-08-01 ))))))))))))))))))))))))))))))) . . 2013-08-01 17:52 . 2013-08-01 17:52 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-07-31 18:24 . 2013-07-15 07:34 9460976 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{08CCA4A3-3505-457D-9F91-B2064C214DEF}\mpengine.dll 2013-07-31 18:18 . 2013-07-31 18:18 ——– d—–w- c:\windows\ERUNT 2013-07-31 18:11 . 2013-07-31 18:11 121 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{6C5FFD2C-49C7-ED35-CFD0-F7E35CA7E68D}-DeleteOnReboot.bat 2013-07-31 18:10 . 2013-07-31 18:11 121 —-a-w- c:\windows\DeleteOnReboot.bat 2013-07-30 18:31 . 2012-11-23 03:13 68608 —-a-w- c:\windows\system32\taskhost.exe 2013-07-30 18:31 . 2013-05-10 05:49 30720 —-a-w- c:\windows\system32\cryptdlg.dll 2013-07-30 18:31 . 2013-05-10 03:20 24576 —-a-w- c:\windows\SysWow64\cryptdlg.dll 2013-07-30 18:31 . 2013-04-10 05:46 1367040 —-a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2013-07-30 18:31 . 2013-04-10 05:03 936448 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll 2013-07-30 18:30 . 2013-05-13 03:43 1192448 —-a-w- c:\windows\system32\certutil.exe 2013-07-30 18:30 . 2013-05-13 03:08 903168 —-a-w- c:\windows\SysWow64\certutil.exe 2013-07-30 18:30 . 2013-05-13 05:51 184320 —-a-w- c:\windows\system32\cryptsvc.dll 2013-07-30 18:30 . 2013-05-13 05:51 1464320 —-a-w- c:\windows\system32\crypt32.dll 2013-07-30 18:30 . 2013-05-13 05:51 139776 —-a-w- c:\windows\system32\cryptnet.dll 2013-07-30 18:30 . 2013-05-13 04:45 140288 —-a-w- c:\windows\SysWow64\cryptsvc.dll 2013-07-30 18:30 . 2013-05-13 04:45 1160192 —-a-w- c:\windows\SysWow64\crypt32.dll 2013-07-30 18:30 . 2013-05-13 04:45 103936 —-a-w- c:\windows\SysWow64\cryptnet.dll 2013-07-30 18:30 . 2013-05-13 05:50 52224 —-a-w- c:\windows\system32\certenc.dll 2013-07-30 18:30 . 2013-05-13 03:08 43008 —-a-w- c:\windows\SysWow64\certenc.dll 2013-07-30 18:30 . 2013-04-10 05:45 1545728 —-a-w- c:\windows\system32\DWrite.dll 2013-07-30 18:30 . 2013-04-10 05:02 1077760 —-a-w- c:\windows\SysWow64\DWrite.dll 2013-07-30 18:21 . 2013-07-15 07:34 9460976 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-07-30 18:10 . 2013-07-30 18:10 ——– d—–w- c:\program files (x86)\MSXML 4.0 2013-07-24 02:59 . 2013-07-24 02:59 ——– d—–w- c:\windows\system32\SPReview 2013-07-24 02:59 . 2013-07-24 02:59 ——– d—–w- c:\windows\system32\EventProviders 2013-07-24 02:56 . 2013-07-24 02:56 ——– d—–w- c:\users\Default\AppData\Local\Microsoft Help 2013-07-24 02:51 . 2013-07-24 02:51 ——– d—–w- c:\program files\Microsoft Silverlight 2013-07-24 02:51 . 2013-07-24 02:51 ——– d—–w- c:\program files (x86)\Microsoft Silverlight 2013-07-24 02:33 . 2013-07-24 02:33 ——– d—–w- c:\program files (x86)\Trend Micro 2013-07-24 00:55 . 2013-07-24 00:55 ——– d—–w- c:\programdata\Malwarebytes 2013-07-24 00:55 . 2013-07-24 00:55 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-07-24 00:55 . 2013-04-04 18:50 25928 —-a-w- c:\windows\system32\drivers\mbam.sys 2013-07-24 00:08 . 2013-07-16 09:02 941720 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{0D53ADB4-4432-40C4-96AF-54538CE8AAE2}\gapaengine.dll 2013-07-24 00:02 . 2013-07-24 00:02 ——– d—–w- c:\program files (x86)\Microsoft Security Client 2013-07-24 00:01 . 2013-07-24 00:02 ——– d—–w- c:\program files\Microsoft Security Client 2013-07-23 23:33 . 2013-07-23 23:47 ——– d—–w- C:\922cc84fe089fcc045b577 2013-07-23 01:42 . 2013-07-23 01:42 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-07-23 01:42 . 2013-07-23 01:42 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-07-23 01:42 . 2013-07-23 01:42 ——– d—–w- c:\windows\system32\Macromed 2013-07-23 00:56 . 2010-11-05 01:57 48976 —-a-w- c:\windows\system32\netfxperf.dll 2013-07-23 00:56 . 2010-11-05 01:57 1942856 —-a-w- c:\windows\system32\dfshim.dll 2013-07-23 00:54 . 2010-11-20 13:27 297984 —-a-w- c:\windows\system32\ws2_32.dll 2013-07-23 00:53 . 2010-11-20 13:27 812032 —-a-w- c:\windows\system32\wpccpl.dll 2013-07-23 00:52 . 2010-11-20 13:27 23040 —-a-w- c:\windows\system32\rdprefdrvapi.dll 2013-07-23 00:51 . 2010-11-20 12:21 189952 —-a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll 2013-07-23 00:51 . 2010-11-20 12:21 363008 —-a-w- c:\windows\SysWow64\wbemcomn.dll 2013-07-23 00:51 . 2010-11-20 12:19 606208 —-a-w- c:\windows\SysWow64\wbem\fastprox.dll 2013-07-23 00:43 . 2010-11-20 13:27 529408 —-a-w- c:\windows\system32\wbemcomn.dll 2013-07-23 00:43 . 2010-11-20 13:27 244736 —-a-w- c:\program files\Windows Portable Devices\sqmapi.dll 2013-07-23 00:43 . 2010-11-20 13:27 244736 —-a-w- c:\windows\system32\sqmapi.dll 2013-07-22 23:52 . 2013-07-22 23:52 ——– d—–w- c:\windows\SysWow64\Wat 2013-07-22 23:52 . 2013-07-22 23:52 ——– d—–w- c:\windows\system32\Wat 2013-07-22 22:16 . 2012-07-26 04:55 785512 —-a-w- c:\windows\system32\drivers\Wdf01000.sys 2013-07-22 22:16 . 2012-07-26 04:55 54376 —-a-w- c:\windows\system32\drivers\WdfLdr.sys 2013-07-22 22:16 . 2012-07-26 04:47 2560 —-a-w- c:\windows\system32\drivers\en-US\wdf01000.sys.mui 2013-07-22 22:16 . 2012-07-26 02:36 9728 —-a-w- c:\windows\system32\Wdfres.dll 2013-07-22 21:27 . 2012-12-16 17:11 46080 —-a-w- c:\windows\system32\atmlib.dll 2013-07-22 21:27 . 2012-12-16 14:45 367616 —-a-w- c:\windows\system32\atmfd.dll 2013-07-22 21:27 . 2012-12-16 14:13 295424 —-a-w- c:\windows\SysWow64\atmfd.dll 2013-07-22 21:27 . 2012-12-16 14:13 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2013-07-22 21:27 . 2010-09-30 10:41 100864 —-a-w- c:\windows\system32\fontsub.dll 2013-07-22 21:27 . 2010-09-30 06:47 70656 —-a-w- c:\windows\SysWow64\fontsub.dll 2013-07-22 21:26 . 2012-07-26 03:08 84992 —-a-w- c:\windows\system32\WUDFSvc.dll 2013-07-22 21:26 . 2012-07-26 03:08 194048 —-a-w- c:\windows\system32\WUDFPlatform.dll 2013-07-22 21:26 . 2012-07-26 02:26 87040 —-a-w- c:\windows\system32\drivers\WUDFPf.sys 2013-07-22 21:26 . 2012-07-26 02:26 198656 —-a-w- c:\windows\system32\drivers\WUDFRd.sys 2013-07-22 21:26 . 2012-07-26 03:08 229888 —-a-w- c:\windows\system32\WUDFHost.exe 2013-07-22 21:26 . 2012-07-26 03:08 744448 —-a-w- c:\windows\system32\WUDFx.dll 2013-07-22 21:26 . 2012-07-26 03:08 45056 —-a-w- c:\windows\system32\WUDFCoinstaller.dll 2013-07-22 21:19 . 2012-03-01 06:46 23408 —-a-w- c:\windows\system32\drivers\fs_rec.sys 2013-07-22 21:19 . 2012-03-01 06:33 81408 —-a-w- c:\windows\system32\imagehlp.dll 2013-07-22 21:19 . 2012-03-01 06:28 5120 —-a-w- c:\windows\system32\wmi.dll 2013-07-22 21:19 . 2012-03-01 05:33 159232 —-a-w- c:\windows\SysWow64\imagehlp.dll 2013-07-22 21:19 . 2012-03-01 05:29 5120 —-a-w- c:\windows\SysWow64\wmi.dll 2013-07-12 20:05 . 2013-07-12 20:05 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll 2013-07-12 20:05 . 2013-07-12 20:05 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll 2013-07-12 20:05 . 2013-07-12 20:05 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll 2013-07-12 20:05 . 2013-07-12 20:05 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll 2013-07-12 20:05 . 2013-07-12 20:05 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll 2013-07-12 20:05 . 2013-07-12 20:05 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll 2013-07-12 20:05 . 2013-07-12 20:05 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll 2013-07-12 20:05 . 2013-07-12 20:05 ——– d—–w- c:\program files (x86)\QuickTime 2013-07-11 01:43 . 2011-02-19 12:04 902656 —-a-w- c:\windows\system32\d2d1.dll 2013-07-11 01:43 . 2011-02-19 06:30 739840 —-a-w- c:\windows\SysWow64\d2d1.dll 2013-07-11 01:43 . 2011-02-19 12:05 1139200 —-a-w- c:\windows\system32\FntCache.dll 2013-07-10 22:36 . 2011-02-25 06:19 2871808 —-a-w- c:\windows\explorer.exe 2013-07-10 22:35 . 2011-07-09 02:46 288768 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys 2013-07-10 22:35 . 2011-04-27 02:40 158208 —-a-w- c:\windows\system32\drivers\mrxsmb.sys 2013-07-10 22:35 . 2011-04-27 02:39 128000 —-a-w- c:\windows\system32\drivers\mrxsmb20.sys 2013-07-10 22:35 . 2011-11-17 06:35 395776 —-a-w- c:\windows\system32\webio.dll 2013-07-10 22:35 . 2011-11-17 05:35 314880 —-a-w- c:\windows\SysWow64\webio.dll 2013-07-10 22:35 . 2013-04-12 14:45 1656680 —-a-w- c:\windows\system32\drivers\ntfs.sys 2013-07-10 22:35 . 2011-12-30 06:26 515584 —-a-w- c:\windows\system32\timedate.cpl 2013-07-10 22:35 . 2011-12-30 05:27 478720 —-a-w- c:\windows\SysWow64\timedate.cpl 2013-07-10 22:35 . 2011-02-24 06:15 476160 —-a-w- c:\windows\system32\XpsGdiConverter.dll 2013-07-10 22:35 . 2011-02-24 05:38 288256 —-a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2013-07-10 22:33 . 2012-11-01 05:43 2002432 —-a-w- c:\windows\system32\msxml6.dll 2013-07-10 22:32 . 2012-11-02 05:59 478208 —-a-w- c:\windows\system32\dpnet.dll 2013-07-10 22:31 . 2011-04-29 03:06 467456 —-a-w- c:\windows\system32\drivers\srv.sys 2013-07-10 22:30 . 2012-04-28 03:55 210944 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2013-07-10 22:30 . 2011-12-28 03:59 498688 —-a-w- c:\windows\system32\drivers\afd.sys 2013-07-10 22:30 . 2012-03-17 07:58 75120 —-a-w- c:\windows\system32\drivers\partmgr.sys 2013-07-10 22:30 . 2012-08-11 00:56 715776 —-a-w- c:\windows\system32\kerberos.dll 2013-07-10 22:30 . 2012-08-10 23:56 542208 —-a-w- c:\windows\SysWow64\kerberos.dll 2013-07-10 22:28 . 2012-09-25 22:47 78336 —-a-w- c:\windows\SysWow64\synceng.dll 2013-07-10 22:28 . 2012-09-25 22:46 95744 —-a-w- c:\windows\system32\synceng.dll 2013-07-10 22:28 . 2011-02-05 17:10 642944 —-a-w- c:\windows\system32\winload.efi 2013-07-10 22:28 . 2011-02-05 17:06 605552 —-a-w- c:\windows\system32\winload.exe 2013-07-10 22:28 . 2011-02-05 17:06 566208 —-a-w- c:\windows\system32\winresume.efi 2013-07-10 22:28 . 2011-02-05 17:06 518672 —-a-w- c:\windows\system32\winresume.exe 2013-07-10 22:28 . 2011-02-05 17:10 20352 —-a-w- c:\windows\system32\kdusb.dll 2013-07-10 22:28 . 2011-02-05 17:10 19328 —-a-w- c:\windows\system32\kd1394.dll 2013-07-10 22:28 . 2011-02-05 17:10 17792 —-a-w- c:\windows\system32\kdcom.dll 2013-07-10 22:28 . 2010-11-20 13:27 63488 —-a-w- c:\windows\system32\setbcdlocale.dll 2013-07-10 22:27 . 2011-05-24 11:42 404480 —-a-w- c:\windows\system32\umpnpmgr.dll 2013-07-10 22:27 . 2011-05-24 10:40 64512 —-a-w- c:\windows\SysWow64\devobj.dll 2013-07-10 22:27 . 2011-05-24 10:40 44544 —-a-w- c:\windows\SysWow64\devrtl.dll 2013-07-10 22:27 . 2011-05-24 10:39 145920 —-a-w- c:\windows\SysWow64\cfgmgr32.dll 2013-07-10 22:27 . 2011-05-24 10:37 252928 —-a-w- c:\windows\SysWow64\drvinst.exe 2013-07-10 22:27 . 2010-11-20 13:25 207872 —-a-w- c:\windows\system32\cfgmgr32.dll 2013-07-10 22:25 . 2012-06-06 06:05 466944 —-a-w- c:\program files\Common Files\System\ado\msadomd.dll 2013-07-10 22:23 . 2011-11-19 14:58 77312 —-a-w- c:\windows\system32\packager.dll 2013-07-10 22:23 . 2011-11-19 14:01 67072 —-a-w- c:\windows\SysWow64\packager.dll 2013-07-10 22:01 . 2012-02-17 06:38 1031680 —-a-w- c:\windows\system32\rdpcore.dll . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-07-29 17:58 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll 2013-07-29 17:58 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll 2013-06-17 09:10 . 2013-07-02 01:20 9552976 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8BD8DD45-EF66-4ADF-8E4B-7BA07D53AF6A}\mpengine.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-05 98304] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-08-20 322104] "NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-29 600936] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696] "SunJavaUpdateSched"="c:\program files (x86)\Java\jre6\bin\jusched.exe" [2009-11-09 149280] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-12-11 3147384] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x] R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x] R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x] S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x] S1 DVMIO;DVMIO;c:\splash.sys\config\dvmio.sys;c:\splash.sys\config\dvmio.sys [x] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe;c:\windows\SYSNATIVE\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x] S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe [x] S2 vToolbarUpdater15.3.0;vToolbarUpdater15.3.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [x] S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [x] S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys;c:\windows\SYSNATIVE\DRIVERS\enecir.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2009-08-20 21:24 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-07-13 01:21 1173456 —-a-w- c:\program files (x86)\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe . Contents of the 'Scheduled Tasks' folder . 2013-08-01 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-23 01:42] . 2013-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-10 21:11] . 2013-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-10 21:11] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-05-15 318464] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-08-26 487424] "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-09 171520] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512] . ——- Supplementary Scan ——- . uStart Page = hxxp://www.google.com uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com TCP: DhcpNameServer = [removed] [removed] . - - - - ORPHANS REMOVED - - - - . Wow6432Node-HKLM-Run- - (no file) Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS] "ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\17.0.0.136\diMaster.dll\" /prefetch:1" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-08-01 14:09:24 ComboFix-quarantined-files.txt 2013-08-01 18:09 . Pre-Run: 245,124,255,744 bytes free Post-Run: 245,487,247,360 bytes free . - - End Of File - - 8355AD6AF9D275E337C0A62086807877 4FF0E8CD52E5C34F1FA526150EAD8FA0