Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Chitka, advertisement pop-ups & re-directs in IE [Solved]

Started by dacuso , Apr 13 2013 04:10 PM

This topic is locked

#31
gringo_pr

Posted 29 April 2013 - 12:08 PM

Trusted Helper

Malware Removal
7,268 posts

no problem and I will check on you later

#32
dacuso

Posted 29 April 2013 - 03:47 PM

Member

Topic Starter
Member
27 posts

This is the results from tdsskiller:

17:37:00.0937 2876 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:37:02.0968 2876 ============================================================
17:37:02.0968 2876 Current date / time: 2013/04/29 17:37:02.0968
17:37:02.0968 2876 SystemInfo:
17:37:02.0968 2876
17:37:03.0000 2876 OS Version: 5.1.2600 ServicePack: 3.0
17:37:03.0000 2876 Product type: Workstation
17:37:03.0000 2876 ComputerName: D-P4-2-8GH-1GB
17:37:03.0000 2876 UserName: Dave
17:37:03.0000 2876 Windows directory: C:\WINDOWS
17:37:03.0000 2876 System windows directory: C:\WINDOWS
17:37:03.0000 2876 Processor architecture: Intel x86
17:37:03.0000 2876 Number of processors: 2
17:37:03.0000 2876 Page size: 0x1000
17:37:03.0000 2876 Boot type: Normal boot
17:37:03.0000 2876 ============================================================
17:37:04.0687 2876 BG loaded
17:37:05.0468 2876 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
17:37:05.0484 2876 Drive \Device\Harddisk1\DR1 - Size: 0xDFAB20000 (55.92 Gb), SectorSize: 0x200, Cylinders: 0x1C83, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
17:37:05.0609 2876 ============================================================
17:37:05.0609 2876 \Device\Harddisk0\DR0:
17:37:05.0609 2876 MBR partitions:
17:37:05.0609 2876 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A380D41
17:37:05.0609 2876 \Device\Harddisk1\DR1:
17:37:05.0609 2876 MBR partitions:
17:37:05.0609 2876 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x6FD3884
17:37:05.0609 2876 ============================================================
17:37:05.0625 2876 C: <-> \Device\Harddisk0\DR0\Partition1
17:37:05.0625 2876 D: <-> \Device\Harddisk1\DR1\Partition1
17:37:05.0640 2876 ============================================================
17:37:05.0640 2876 Initialize success
17:37:05.0640 2876 ============================================================
17:37:33.0468 3136 ============================================================
17:37:33.0468 3136 Scan started
17:37:33.0468 3136 Mode: Manual; SigCheck; TDLFS;
17:37:33.0468 3136 ============================================================
17:37:36.0156 3136 ================ Scan system memory ========================
17:37:36.0156 3136 System memory - ok
17:37:36.0156 3136 ================ Scan services =============================
17:37:38.0640 3136 Abiosdsk - ok
17:37:38.0656 3136 abp480n5 - ok
17:37:38.0750 3136 [ EA38C961260F29295C6D03070FA9D0B5 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
17:37:38.0750 3136 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\ACPI.sys. Real md5: EA38C961260F29295C6D03070FA9D0B5, Fake md5: 8FD99680A539792A30E97944FDAECF17
17:37:38.0765 3136 ACPI ( Virus.Win32.Rloader.a ) - infected
17:37:38.0765 3136 ACPI - detected Virus.Win32.Rloader.a (0)
17:37:38.0781 3136 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
17:37:39.0250 3136 ACPIEC - ok
17:37:39.0406 3136 [ 6D182C31ACF16213407F2768F1107FE3 ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
17:37:39.0453 3136 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
17:37:39.0453 3136 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
17:37:39.0640 3136 [ 479901C99FA62D1C3261B7ACB1228DAD ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
17:37:39.0859 3136 AdobeFlashPlayerUpdateSvc - ok
17:37:39.0875 3136 adpu160m - ok
17:37:39.0968 3136 [ 11C04B17ED2ABBB4833694BCD644AC90 ] aeaudio C:\WINDOWS\system32\drivers\aeaudio.sys
17:37:40.0125 3136 aeaudio - ok
17:37:40.0187 3136 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
17:37:40.0453 3136 aec - ok
17:37:40.0578 3136 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
17:37:40.0734 3136 AFD - ok
17:37:40.0750 3136 Aha154x - ok
17:37:40.0765 3136 aic78u2 - ok
17:37:40.0812 3136 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
17:37:41.0093 3136 aic78xx - ok
17:37:41.0156 3136 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
17:37:41.0390 3136 Alerter - ok
17:37:41.0453 3136 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
17:37:41.0671 3136 ALG - ok
17:37:41.0671 3136 AliIde - ok
17:37:41.0687 3136 amsint - ok
17:37:41.0781 3136 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
17:37:42.0656 3136 AppMgmt - ok
17:37:42.0656 3136 asc - ok
17:37:42.0671 3136 asc3350p - ok
17:37:42.0687 3136 asc3550 - ok
17:37:42.0812 3136 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
17:37:42.0937 3136 aspnet_state - ok
17:37:42.0984 3136 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
17:37:43.0203 3136 AsyncMac - ok
17:37:43.0234 3136 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
17:37:43.0500 3136 atapi - ok
17:37:43.0515 3136 Atdisk - ok
17:37:43.0546 3136 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
17:37:43.0812 3136 Atmarpc - ok
17:37:43.0859 3136 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
17:37:44.0109 3136 AudioSrv - ok
17:37:44.0171 3136 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
17:37:44.0437 3136 audstub - ok
17:37:44.0484 3136 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
17:37:44.0734 3136 Beep - ok
17:37:44.0781 3136 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
17:37:45.0156 3136 BITS - ok
17:37:45.0203 3136 [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser C:\WINDOWS\System32\browser.dll
17:37:45.0343 3136 Browser - ok
17:37:45.0359 3136 Browser Defender Update Service - ok
17:37:45.0484 3136 catchme - ok
17:37:45.0515 3136 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
17:37:45.0781 3136 cbidf2k - ok
17:37:45.0796 3136 cd20xrnt - ok
17:37:45.0828 3136 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
17:37:46.0109 3136 Cdaudio - ok
17:37:46.0125 3136 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
17:37:46.0406 3136 Cdfs - ok
17:37:46.0453 3136 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
17:37:46.0687 3136 Cdrom - ok
17:37:46.0718 3136 [ 25C323075C5EA4A2555E35355A01F793 ] cfwids C:\WINDOWS\system32\drivers\cfwids.sys
17:37:46.0859 3136 cfwids - ok
17:37:46.0875 3136 Changer - ok
17:37:46.0906 3136 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
17:37:47.0156 3136 CiSvc - ok
17:37:47.0187 3136 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
17:37:47.0406 3136 ClipSrv - ok
17:37:47.0453 3136 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:37:47.0703 3136 clr_optimization_v2.0.50727_32 - ok
17:37:47.0812 3136 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:37:47.0968 3136 clr_optimization_v4.0.30319_32 - ok
17:37:47.0984 3136 CmdIde - ok
17:37:47.0984 3136 COMSysApp - ok
17:37:48.0015 3136 Cpqarray - ok
17:37:48.0078 3136 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
17:37:48.0312 3136 CryptSvc - ok
17:37:48.0328 3136 dac2w2k - ok
17:37:48.0343 3136 dac960nt - ok
17:37:48.0453 3136 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
17:37:48.0765 3136 DcomLaunch - ok
17:37:48.0875 3136 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
17:37:49.0296 3136 Dhcp - ok
17:37:49.0312 3136 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
17:37:49.0531 3136 Disk - ok
17:37:49.0546 3136 dmadmin - ok
17:37:49.0734 3136 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
17:37:50.0125 3136 dmboot - ok
17:37:50.0171 3136 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
17:37:50.0562 3136 dmio - ok
17:37:50.0593 3136 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
17:37:51.0156 3136 dmload - ok
17:37:51.0203 3136 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
17:37:51.0609 3136 dmserver - ok
17:37:51.0656 3136 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
17:37:52.0015 3136 DMusic - ok
17:37:52.0062 3136 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
17:37:52.0187 3136 Dnscache - ok
17:37:52.0234 3136 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
17:37:52.0515 3136 Dot3svc - ok
17:37:52.0531 3136 dpti2o - ok
17:37:52.0578 3136 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
17:37:52.0828 3136 drmkaud - ok
17:37:52.0875 3136 [ D57A8FC800B501AC05B10D00F66D127A ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
17:37:52.0968 3136 E100B - ok
17:37:53.0031 3136 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
17:37:53.0312 3136 EapHost - ok
17:37:53.0375 3136 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
17:37:53.0656 3136 ERSvc - ok
17:37:53.0703 3136 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
17:37:53.0765 3136 Eventlog - ok
17:37:53.0843 3136 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll
17:37:53.0953 3136 EventSystem - ok
17:37:54.0000 3136 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
17:37:54.0250 3136 Fastfat - ok
17:37:54.0328 3136 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
17:37:54.0437 3136 FastUserSwitchingCompatibility - ok
17:37:54.0468 3136 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
17:37:54.0750 3136 Fdc - ok
17:37:54.0781 3136 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
17:37:55.0062 3136 Fips - ok
17:37:55.0062 3136 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
17:37:55.0296 3136 Flpydisk - ok
17:37:55.0343 3136 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
17:37:55.0609 3136 FltMgr - ok
17:37:55.0781 3136 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
17:37:55.0859 3136 FontCache3.0.0.0 - ok
17:37:55.0875 3136 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
17:37:56.0187 3136 Fs_Rec - ok
17:37:56.0203 3136 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
17:37:56.0453 3136 Ftdisk - ok
17:37:56.0515 3136 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
17:37:56.0781 3136 Gpc - ok
17:37:56.0859 3136 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
17:37:56.0921 3136 gupdate - ok
17:37:56.0953 3136 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
17:37:57.0000 3136 gupdatem - ok
17:37:57.0046 3136 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
17:37:57.0093 3136 gusvc - ok
17:37:57.0171 3136 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
17:37:57.0437 3136 helpsvc - ok
17:37:57.0437 3136 HidServ - ok
17:37:57.0468 3136 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
17:37:58.0062 3136 hidusb - ok
17:37:58.0093 3136 [ D61E53E3FEC0C92BC8DD3969FAD63F87 ] HipShieldK C:\WINDOWS\system32\drivers\HipShieldK.sys
17:37:58.0187 3136 HipShieldK - ok
17:37:58.0218 3136 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
17:37:58.0500 3136 hkmsvc - ok
17:37:58.0515 3136 hpn - ok
17:37:58.0562 3136 [ 9F1D80908658EB7F1BF70809E0B51470 ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
17:37:58.0750 3136 HPZid412 - ok
17:37:58.0765 3136 [ F7E3E9D50F9CD3DE28085A8FDAA0A1C3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
17:37:58.0921 3136 HPZipr12 - ok
17:37:58.0953 3136 [ CF1B7951B4EC8D13F3C93B74BB2B461B ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
17:37:59.0125 3136 HPZius12 - ok
17:37:59.0187 3136 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
17:37:59.0296 3136 HTTP - ok
17:37:59.0453 3136 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
17:37:59.0687 3136 HTTPFilter - ok
17:37:59.0703 3136 i2omgmt - ok
17:37:59.0734 3136 i2omp - ok
17:37:59.0750 3136 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
17:38:00.0000 3136 i8042prt - ok
17:38:00.0125 3136 [ 9A883C3C4D91292C0D09DE7C728E781C ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
17:38:00.0437 3136 ialm - ok
17:38:00.0593 3136 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
17:38:00.0781 3136 idsvc - ok
17:38:00.0843 3136 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
17:38:01.0109 3136 Imapi - ok
17:38:01.0250 3136 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
17:38:01.0578 3136 ImapiService - ok
17:38:01.0593 3136 ini910u - ok
17:38:01.0656 3136 [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
17:38:02.0062 3136 IntelIde - ok
17:38:02.0140 3136 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
17:38:02.0390 3136 intelppm - ok
17:38:02.0421 3136 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
17:38:02.0718 3136 Ip6Fw - ok
17:38:02.0765 3136 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
17:38:03.0062 3136 IpFilterDriver - ok
17:38:03.0093 3136 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
17:38:03.0390 3136 IpInIp - ok
17:38:03.0406 3136 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
17:38:03.0687 3136 IpNat - ok
17:38:03.0718 3136 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
17:38:04.0000 3136 IPSec - ok
17:38:04.0062 3136 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
17:38:04.0328 3136 IRENUM - ok
17:38:04.0343 3136 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
17:38:04.0593 3136 isapnp - ok
17:38:04.0609 3136 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
17:38:04.0890 3136 Kbdclass - ok
17:38:04.0921 3136 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
17:38:05.0203 3136 kbdhid - ok
17:38:05.0250 3136 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
17:38:05.0546 3136 kmixer - ok
17:38:05.0578 3136 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
17:38:05.0765 3136 KSecDD - ok
17:38:05.0812 3136 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
17:38:05.0906 3136 lanmanserver - ok
17:38:06.0203 3136 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
17:38:06.0265 3136 lanmanworkstation - ok
17:38:06.0281 3136 lbrtfdc - ok
17:38:06.0328 3136 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
17:38:06.0562 3136 LmHosts - ok
17:38:06.0609 3136 [ 20856B8A44F41BB42F3F5F03C3BB2B00 ] mbamchameleon C:\WINDOWS\system32\drivers\mbamchameleon.sys
17:38:06.0734 3136 mbamchameleon - ok
17:38:06.0781 3136 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
17:38:06.0859 3136 MBAMProtector - ok
17:38:07.0109 3136 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
17:38:07.0265 3136 MBAMScheduler - ok
17:38:07.0359 3136 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
17:38:07.0531 3136 MBAMService - ok
17:38:07.0734 3136 [ ECAB006AC6136F1307E140B633CDB8C2 ] McAfee SiteAdvisor Service C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
17:38:07.0843 3136 McAfee SiteAdvisor Service - ok
17:38:08.0000 3136 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
17:38:08.0046 3136 McComponentHostService - ok
17:38:08.0062 3136 [ ECAB006AC6136F1307E140B633CDB8C2 ] McMPFSvc C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
17:38:08.0109 3136 McMPFSvc - ok
17:38:08.0140 3136 [ ECAB006AC6136F1307E140B633CDB8C2 ] mcmscsvc C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
17:38:08.0187 3136 mcmscsvc - ok
17:38:08.0203 3136 [ ECAB006AC6136F1307E140B633CDB8C2 ] McNaiAnn C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
17:38:08.0250 3136 McNaiAnn - ok
17:38:08.0343 3136 [ ECAB006AC6136F1307E140B633CDB8C2 ] McNASvc C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
17:38:08.0390 3136 McNASvc - ok
17:38:08.0468 3136 [ C7DA06C9A9AEEFBE37AAC281EA6385D5 ] McODS C:\Program Files\McAfee\VirusScan\mcods.exe
17:38:08.0640 3136 McODS - ok
17:38:08.0718 3136 [ ECAB006AC6136F1307E140B633CDB8C2 ] McProxy C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
17:38:08.0765 3136 McProxy - ok
17:38:08.0921 3136 [ 6FE0532CB16300C09D098F808EAAEE9D ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
17:38:09.0078 3136 McShield - ok
17:38:09.0421 3136 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
17:38:09.0625 3136 MDM - ok
17:38:09.0703 3136 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
17:38:10.0031 3136 Messenger - ok
17:38:10.0093 3136 [ 6708AD7D9ABDD6FDE1EB9B54FFE426B0 ] mfeapfk C:\WINDOWS\system32\drivers\mfeapfk.sys
17:38:10.0140 3136 mfeapfk - ok
17:38:10.0203 3136 [ 375DE90B68533D9D0D7766D4CCB4CA32 ] mfeavfk C:\WINDOWS\system32\drivers\mfeavfk.sys
17:38:10.0296 3136 mfeavfk - ok
17:38:10.0312 3136 mfeavfk01 - ok
17:38:10.0343 3136 [ 5ED806D4DF27AC11236BD9AD2CC10B7E ] mfebopk C:\WINDOWS\system32\drivers\mfebopk.sys
17:38:10.0421 3136 mfebopk - ok
17:38:10.0453 3136 [ 1A427BB508ACBEE09A88F08D1CA38E2F ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
17:38:10.0515 3136 mfefire - ok
17:38:10.0562 3136 [ 16BF9475BFCFAA420A8CB29E40284457 ] mfefirek C:\WINDOWS\system32\drivers\mfefirek.sys
17:38:10.0687 3136 mfefirek - ok
17:38:10.0750 3136 [ 875452ECDF4AEBE12B8C2EFD8599A36F ] mfehidk C:\WINDOWS\system32\drivers\mfehidk.sys
17:38:10.0859 3136 mfehidk - ok
17:38:10.0875 3136 [ 3004E3FE086E76D7D6DFB9A851ED6F10 ] mfendisk C:\WINDOWS\system32\DRIVERS\mfendisk.sys
17:38:10.0937 3136 mfendisk - ok
17:38:10.0953 3136 [ 3004E3FE086E76D7D6DFB9A851ED6F10 ] mfendiskmp C:\WINDOWS\system32\DRIVERS\mfendisk.sys
17:38:11.0000 3136 mfendiskmp - ok
17:38:11.0031 3136 [ D669ACBE7672819109706C3CFF6BD1DB ] mferkdet C:\WINDOWS\system32\drivers\mferkdet.sys
17:38:11.0109 3136 mferkdet - ok
17:38:11.0140 3136 [ 1328C929A2F801BB93DBDFCDC25E0E7A ] mfetdi2k C:\WINDOWS\system32\drivers\mfetdi2k.sys
17:38:11.0218 3136 mfetdi2k - ok
17:38:11.0250 3136 [ D66A1A16166897A5F7D04961F582F03B ] mfevtp C:\WINDOWS\system32\mfevtps.exe
17:38:11.0281 3136 mfevtp - ok
17:38:11.0343 3136 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
17:38:11.0640 3136 mnmdd - ok
17:38:11.0671 3136 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
17:38:11.0859 3136 mnmsrvc - ok
17:38:11.0937 3136 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
17:38:12.0156 3136 Modem - ok
17:38:12.0171 3136 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
17:38:12.0359 3136 Mouclass - ok
17:38:12.0375 3136 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
17:38:12.0578 3136 mouhid - ok
17:38:12.0609 3136 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
17:38:12.0843 3136 MountMgr - ok
17:38:13.0000 3136 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
17:38:13.0093 3136 MozillaMaintenance - ok
17:38:13.0171 3136 [ CF105EE42E3F71E648CEBB3F666E1CF0 ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys
17:38:13.0218 3136 MpFilter - ok
17:38:13.0234 3136 mraid35x - ok
17:38:13.0265 3136 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
17:38:13.0468 3136 MRxDAV - ok
17:38:13.0625 3136 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
17:38:13.0812 3136 MRxSmb - ok
17:38:13.0906 3136 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
17:38:14.0109 3136 MSDTC - ok
17:38:14.0125 3136 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
17:38:14.0312 3136 Msfs - ok
17:38:14.0328 3136 MSIServer - ok
17:38:14.0359 3136 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
17:38:14.0562 3136 MSKSSRV - ok
17:38:14.0656 3136 [ C1F19D2BACBEE9AB64D9AE69E9859AC0 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
17:38:14.0718 3136 MsMpSvc - ok
17:38:14.0750 3136 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
17:38:14.0968 3136 MSPCLOCK - ok
17:38:15.0000 3136 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
17:38:15.0296 3136 MSPQM - ok
17:38:15.0312 3136 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
17:38:15.0515 3136 mssmbios - ok
17:38:15.0546 3136 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
17:38:15.0656 3136 Mup - ok
17:38:15.0703 3136 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
17:38:15.0921 3136 napagent - ok
17:38:16.0203 3136 [ 87A00FAEDD703D8D2BDCB29CE5EEEA6B ] NBService C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
17:38:16.0343 3136 NBService ( UnsignedFile.Multi.Generic ) - warning
17:38:16.0343 3136 NBService - detected UnsignedFile.Multi.Generic (1)
17:38:16.0375 3136 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
17:38:16.0578 3136 NDIS - ok
17:38:16.0625 3136 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
17:38:17.0437 3136 NdisTapi - ok
17:38:17.0468 3136 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
17:38:17.0656 3136 Ndisuio - ok
17:38:17.0671 3136 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
17:38:17.0937 3136 NdisWan - ok
17:38:17.0968 3136 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
17:38:18.0078 3136 NDProxy - ok
17:38:18.0125 3136 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
17:38:18.0375 3136 NetBIOS - ok
17:38:18.0406 3136 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
17:38:18.0593 3136 NetBT - ok
17:38:18.0625 3136 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
17:38:18.0843 3136 NetDDE - ok
17:38:18.0859 3136 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
17:38:19.0156 3136 NetDDEdsdm - ok
17:38:19.0187 3136 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
17:38:19.0484 3136 Netlogon - ok
17:38:19.0531 3136 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
17:38:19.0890 3136 Netman - ok
17:38:19.0937 3136 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:38:20.0046 3136 NetTcpPortSharing - ok
17:38:20.0093 3136 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
17:38:20.0250 3136 Nla - ok
17:38:20.0359 3136 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
17:38:20.0671 3136 Npfs - ok
17:38:20.0843 3136 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
17:38:21.0140 3136 Ntfs - ok
17:38:21.0187 3136 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
17:38:21.0437 3136 NtLmSsp - ok
17:38:21.0484 3136 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
17:38:21.0765 3136 NtmsSvc - ok
17:38:21.0796 3136 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
17:38:22.0031 3136 Null - ok
17:38:22.0062 3136 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
17:38:22.0328 3136 NwlnkFlt - ok
17:38:22.0359 3136 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
17:38:22.0593 3136 NwlnkFwd - ok
17:38:22.0640 3136 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:38:22.0703 3136 ose - ok
17:38:22.0750 3136 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
17:38:22.0953 3136 Parport - ok
17:38:22.0984 3136 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
17:38:23.0218 3136 PartMgr - ok
17:38:23.0265 3136 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
17:38:23.0484 3136 ParVdm - ok
17:38:23.0515 3136 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
17:38:23.0687 3136 PCI - ok
17:38:23.0703 3136 PCIDump - ok
17:38:23.0734 3136 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
17:38:23.0968 3136 PCIIde - ok
17:38:24.0000 3136 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
17:38:24.0234 3136 Pcmcia - ok
17:38:24.0265 3136 [ 3A0262B85B5BB4D4CFC096EA00ED610B ] PCTBD C:\WINDOWS\system32\Drivers\PCTBD.sys
17:38:24.0343 3136 PCTBD - ok
17:38:24.0343 3136 PDCOMP - ok
17:38:24.0375 3136 PDFRAME - ok
17:38:24.0390 3136 PDRELI - ok
17:38:24.0406 3136 PDRFRAME - ok
17:38:24.0421 3136 perc2 - ok
17:38:24.0437 3136 perc2hib - ok
17:38:24.0484 3136 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
17:38:24.0546 3136 PlugPlay - ok
17:38:24.0578 3136 [ 9D84376931440F3679BEEF2A414FA493 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe
17:38:24.0609 3136 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
17:38:24.0609 3136 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
17:38:24.0625 3136 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
17:38:24.0843 3136 PolicyAgent - ok
17:38:24.0890 3136 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
17:38:25.0109 3136 PptpMiniport - ok
17:38:25.0125 3136 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
17:38:25.0343 3136 ProtectedStorage - ok
17:38:25.0375 3136 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
17:38:25.0562 3136 PSched - ok
17:38:25.0609 3136 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
17:38:26.0640 3136 Ptilink - ok
17:38:26.0671 3136 ql1080 - ok
17:38:26.0687 3136 Ql10wnt - ok
17:38:26.0703 3136 ql12160 - ok
17:38:26.0718 3136 ql1240 - ok
17:38:26.0750 3136 ql1280 - ok
17:38:26.0796 3136 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
17:38:27.0156 3136 RasAcd - ok
17:38:27.0203 3136 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
17:38:27.0468 3136 RasAuto - ok
17:38:27.0515 3136 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
17:38:27.0781 3136 Rasl2tp - ok
17:38:27.0828 3136 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
17:38:28.0125 3136 RasMan - ok
17:38:28.0140 3136 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
17:38:28.0375 3136 RasPppoe - ok
17:38:28.0406 3136 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
17:38:28.0687 3136 Raspti - ok
17:38:28.0718 3136 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
17:38:28.0968 3136 Rdbss - ok
17:38:29.0000 3136 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
17:38:29.0296 3136 RDPCDD - ok
17:38:29.0359 3136 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
17:38:29.0687 3136 rdpdr - ok
17:38:29.0750 3136 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
17:38:29.0859 3136 RDPWD - ok
17:38:29.0890 3136 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
17:38:30.0140 3136 RDSessMgr - ok
17:38:30.0171 3136 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
17:38:30.0375 3136 redbook - ok
17:38:30.0468 3136 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
17:38:30.0687 3136 RemoteAccess - ok
17:38:30.0781 3136 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
17:38:31.0046 3136 RemoteRegistry - ok
17:38:31.0093 3136 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
17:38:31.0375 3136 RpcLocator - ok
17:38:31.0718 3136 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\System32\rpcss.dll
17:38:31.0812 3136 RpcSs - ok
17:38:31.0859 3136 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
17:38:32.0109 3136 RSVP - ok
17:38:32.0156 3136 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
17:38:32.0328 3136 SamSs - ok
17:38:32.0359 3136 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
17:38:32.0656 3136 SCardSvr - ok
17:38:32.0750 3136 [ 64A5841A6C8942EBE9621ED4FED66869 ] SCDEmu C:\WINDOWS\system32\drivers\SCDEmu.sys
17:38:32.0812 3136 SCDEmu ( UnsignedFile.Multi.Generic ) - warning
17:38:32.0812 3136 SCDEmu - detected UnsignedFile.Multi.Generic (1)
17:38:32.0890 3136 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
17:38:33.0109 3136 Schedule - ok
17:38:33.0156 3136 [ 089870DAB7AA277585C475AE09EE4C63 ] scsiscan C:\WINDOWS\system32\DRIVERS\scsiscan.sys
17:38:33.0375 3136 scsiscan - ok
17:38:33.0609 3136 [ 206387AB881E93A1A6EB89966C8651F1 ] SDScannerService C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
17:38:33.0906 3136 SDScannerService - ok
17:38:34.0031 3136 [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
17:38:34.0265 3136 SDUpdateService - ok
17:38:34.0343 3136 [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
17:38:34.0390 3136 SDWSCService - ok
17:38:34.0421 3136 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
17:38:34.0609 3136 Secdrv - ok
17:38:34.0656 3136 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
17:38:34.0875 3136 seclogon - ok
17:38:34.0890 3136 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
17:38:35.0078 3136 SENS - ok
17:38:35.0187 3136 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
17:38:35.0406 3136 serenum - ok
17:38:35.0437 3136 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
17:38:35.0625 3136 Serial - ok
17:38:35.0687 3136 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
17:38:36.0140 3136 Sfloppy - ok
17:38:36.0250 3136 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
17:38:36.0546 3136 SharedAccess - ok
17:38:36.0593 3136 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
17:38:36.0671 3136 ShellHWDetection - ok
17:38:36.0671 3136 Simbad - ok
17:38:36.0859 3136 [ 5018A9DB5EB62E3EDB3110F82F556285 ] smwdm C:\WINDOWS\system32\drivers\smwdm.sys
17:38:36.0984 3136 smwdm - ok
17:38:37.0109 3136 [ 4945020BC094C322571184A6E8056B3A ] SolidWorks Licensing Service C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
17:38:37.0140 3136 SolidWorks Licensing Service ( UnsignedFile.Multi.Generic ) - warning
17:38:37.0140 3136 SolidWorks Licensing Service - detected UnsignedFile.Multi.Generic (1)
17:38:37.0156 3136 Sparrow - ok
17:38:37.0203 3136 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
17:38:37.0390 3136 splitter - ok
17:38:37.0437 3136 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
17:38:37.0531 3136 Spooler - ok
17:38:37.0562 3136 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
17:38:37.0765 3136 sr - ok
17:38:37.0796 3136 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
17:38:38.0015 3136 srservice - ok
17:38:38.0171 3136 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
17:38:38.0296 3136 Srv - ok
17:38:38.0359 3136 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
17:38:38.0546 3136 SSDPSRV - ok
17:38:38.0640 3136 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
17:38:39.0328 3136 stisvc - ok
17:38:39.0375 3136 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
17:38:39.0578 3136 swenum - ok
17:38:39.0640 3136 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
17:38:39.0859 3136 swmidi - ok
17:38:39.0875 3136 SwPrv - ok
17:38:39.0890 3136 symc810 - ok
17:38:39.0906 3136 symc8xx - ok
17:38:39.0921 3136 sym_hi - ok
17:38:39.0937 3136 sym_u3 - ok
17:38:39.0953 3136 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
17:38:40.0171 3136 sysaudio - ok
17:38:40.0203 3136 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
17:38:40.0406 3136 SysmonLog - ok
17:38:40.0453 3136 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
17:38:40.0671 3136 TapiSrv - ok
17:38:40.0718 3136 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
17:38:40.0875 3136 Tcpip - ok
17:38:40.0921 3136 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
17:38:41.0171 3136 TDPIPE - ok
17:38:41.0187 3136 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
17:38:41.0437 3136 TDTCP - ok
17:38:42.0328 3136 [ 7C8DD5576695B3362202EF09B20C425E ] TeamViewer8 C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
17:38:43.0203 3136 TeamViewer8 - ok
17:38:43.0218 3136 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
17:38:43.0578 3136 TermDD - ok
17:38:43.0703 3136 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
17:38:43.0921 3136 TermService - ok
17:38:43.0984 3136 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
17:38:44.0015 3136 Themes - ok
17:38:44.0062 3136 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
17:38:44.0281 3136 TlntSvr - ok
17:38:44.0281 3136 TosIde - ok
17:38:44.0359 3136 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
17:38:44.0625 3136 TrkWks - ok
17:38:44.0656 3136 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
17:38:44.0859 3136 Udfs - ok
17:38:44.0875 3136 ultra - ok
17:38:44.0953 3136 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
17:38:45.0218 3136 Update - ok
17:38:45.0281 3136 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
17:38:45.0484 3136 upnphost - ok
17:38:45.0500 3136 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
17:38:45.0703 3136 UPS - ok
17:38:45.0750 3136 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
17:38:45.0953 3136 usbccgp - ok
17:38:46.0000 3136 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
17:38:46.0187 3136 usbehci - ok
17:38:46.0234 3136 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
17:38:46.0468 3136 usbhub - ok
17:38:46.0500 3136 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
17:38:46.0703 3136 usbprint - ok
17:38:46.0781 3136 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
17:38:48.0000 3136 usbscan - ok
17:38:48.0046 3136 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
17:38:48.0234 3136 USBSTOR - ok
17:38:48.0281 3136 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
17:38:48.0546 3136 usbuhci - ok
17:38:48.0593 3136 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
17:38:48.0875 3136 VgaSave - ok
17:38:48.0890 3136 ViaIde - ok
17:38:48.0984 3136 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
17:38:49.0250 3136 VolSnap - ok
17:38:49.0296 3136 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
17:38:49.0531 3136 VSS - ok
17:38:49.0593 3136 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\system32\w32time.dll
17:38:49.0796 3136 W32Time - ok
17:38:49.0843 3136 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
17:38:50.0046 3136 Wanarp - ok
17:38:50.0062 3136 WDICA - ok
17:38:50.0093 3136 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
17:38:50.0296 3136 wdmaud - ok
17:38:50.0359 3136 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
17:38:50.0562 3136 WebClient - ok
17:38:50.0671 3136 [ F45DD1E1365D857DD08BC23563370D0E ] WinDefend C:\Program Files\Windows Defender\MsMpEng.exe
17:38:50.0734 3136 WinDefend - ok
17:38:50.0906 3136 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
17:38:51.0109 3136 winmgmt - ok
17:38:51.0171 3136 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
17:38:51.0312 3136 WmdmPmSN - ok
17:38:51.0421 3136 [ E76F8807070ED04E7408A86D6D3A6137 ] Wmi C:\WINDOWS\System32\advapi32.dll
17:38:51.0718 3136 Wmi - ok
17:38:51.0750 3136 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
17:38:51.0953 3136 WmiApSrv - ok
17:38:52.0156 3136 [ F74E3D9A7FA9556C3BBB14D4E5E63D3B ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
17:38:52.0359 3136 WMPNetworkSvc - ok
17:38:52.0515 3136 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
17:38:52.0687 3136 WPFFontCache_v0400 - ok
17:38:52.0734 3136 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
17:38:52.0968 3136 WS2IFSL - ok
17:38:53.0203 3136 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
17:38:53.0453 3136 wscsvc - ok
17:38:53.0500 3136 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
17:38:53.0703 3136 wuauserv - ok
17:38:53.0750 3136 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
17:38:53.0859 3136 WudfPf - ok
17:38:53.0890 3136 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
17:38:53.0953 3136 WudfRd - ok
17:38:53.0984 3136 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
17:38:54.0046 3136 WudfSvc - ok
17:38:54.0140 3136 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
17:38:54.0390 3136 WZCSVC - ok
17:38:54.0421 3136 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
17:38:54.0625 3136 xmlprov - ok
17:38:54.0640 3136 ================ Scan global ===============================
17:38:54.0765 3136 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
17:38:54.0859 3136 [ 69AE2B2E6968C316536E5B10B9702E63 ] C:\WINDOWS\system32\winsrv.dll
17:38:54.0921 3136 [ 69AE2B2E6968C316536E5B10B9702E63 ] C:\WINDOWS\system32\winsrv.dll
17:38:54.0937 3136 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
17:38:54.0953 3136 [Global] - ok
17:38:54.0953 3136 ================ Scan MBR ==================================
17:38:54.0968 3136 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
17:38:56.0875 3136 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
17:38:56.0875 3136 \Device\Harddisk0\DR0 - detected TDSS File System (1)
17:38:56.0890 3136 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
17:38:57.0296 3136 \Device\Harddisk1\DR1 - ok
17:38:57.0296 3136 ================ Scan VBR ==================================
17:38:57.0312 3136 [ 7BA6066C54BB0736A0EF94130CD48E61 ] \Device\Harddisk0\DR0\Partition1
17:38:57.0328 3136 \Device\Harddisk0\DR0\Partition1 - ok
17:38:57.0328 3136 [ 1EBFC4FBF26665FFD60C74A043FF9DD2 ] \Device\Harddisk1\DR1\Partition1
17:38:57.0343 3136 \Device\Harddisk1\DR1\Partition1 - ok
17:38:57.0343 3136 ================ Scan active images ========================
17:38:57.0343 3136 [ 8C953733D8F36EB2133F5BB58808B66B ] C:\WINDOWS\system32\drivers\intelppm.sys
17:38:57.0343 3136 C:\WINDOWS\system32\drivers\intelppm.sys - ok
17:38:57.0359 3136 [ E28726B72C46821A28830E077D39A55B ] C:\WINDOWS\system32\drivers\videoprt.sys
17:38:57.0359 3136 C:\WINDOWS\system32\drivers\videoprt.sys - ok
17:38:57.0359 3136 [ 9A883C3C4D91292C0D09DE7C728E781C ] C:\WINDOWS\system32\drivers\ialmnt5.sys
17:38:57.0359 3136 C:\WINDOWS\system32\drivers\ialmnt5.sys - ok
17:38:57.0375 3136 [ 791912E524CC2CC6F50B5F2B52D1EB71 ] C:\WINDOWS\system32\drivers\usbport.sys
17:38:57.0375 3136 C:\WINDOWS\system32\drivers\usbport.sys - ok
17:38:57.0390 3136 [ 089870DAB7AA277585C475AE09EE4C63 ] C:\WINDOWS\system32\drivers\scsiscan.sys
17:38:57.0390 3136 C:\WINDOWS\system32\drivers\scsiscan.sys - ok
17:38:57.0390 3136 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] C:\WINDOWS\system32\drivers\usbehci.sys
17:38:57.0390 3136 C:\WINDOWS\system32\drivers\usbehci.sys - ok
17:38:57.0406 3136 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] C:\WINDOWS\system32\drivers\usbuhci.sys
17:38:57.0406 3136 C:\WINDOWS\system32\drivers\usbuhci.sys - ok
17:38:57.0421 3136 [ D57A8FC800B501AC05B10D00F66D127A ] C:\WINDOWS\system32\drivers\e100b325.sys
17:38:57.0421 3136 C:\WINDOWS\system32\drivers\e100b325.sys - ok
17:38:57.0421 3136 [ 4A0B06AA8943C1E332520F7440C0AA30 ] C:\WINDOWS\system32\drivers\i8042prt.sys
17:38:57.0421 3136 C:\WINDOWS\system32\drivers\i8042prt.sys - ok
17:38:57.0437 3136 [ 463C1EC80CD17420A542B7F36A36F128 ] C:\WINDOWS\system32\drivers\kbdclass.sys
17:38:57.0437 3136 C:\WINDOWS\system32\drivers\kbdclass.sys - ok
17:38:57.0437 3136 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] C:\WINDOWS\system32\drivers\serial.sys
17:38:57.0437 3136 C:\WINDOWS\system32\drivers\serial.sys - ok
17:38:57.0453 3136 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] C:\WINDOWS\system32\drivers\serenum.sys
17:38:57.0453 3136 C:\WINDOWS\system32\drivers\serenum.sys - ok
17:38:57.0468 3136 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] C:\WINDOWS\system32\drivers\parport.sys
17:38:57.0468 3136 C:\WINDOWS\system32\drivers\parport.sys - ok
17:38:57.0468 3136 [ 083A052659F5310DD8B6A6CB05EDCF8E ] C:\WINDOWS\system32\drivers\imapi.sys
17:38:57.0468 3136 C:\WINDOWS\system32\drivers\imapi.sys - ok
17:38:57.0484 3136 [ 1F4260CC5B42272D71F79E570A27A4FE ] C:\WINDOWS\system32\drivers\cdrom.sys
17:38:57.0484 3136 C:\WINDOWS\system32\drivers\cdrom.sys - ok
17:38:57.0484 3136 [ 0753515F78DF7F271A5E61C20BCD36A1 ] C:\WINDOWS\system32\drivers\ks.sys
17:38:57.0500 3136 C:\WINDOWS\system32\drivers\ks.sys - ok
17:38:57.0500 3136 [ F828DD7E1419B6653894A8F97A0094C5 ] C:\WINDOWS\system32\drivers\redbook.sys
17:38:57.0500 3136 C:\WINDOWS\system32\drivers\redbook.sys - ok
17:38:57.0515 3136 [ 6CB08593487F5701D2D2254E693EAFCE ] C:\WINDOWS\system32\drivers\drmk.sys
17:38:57.0515 3136 C:\WINDOWS\system32\drivers\drmk.sys - ok
17:38:57.0515 3136 [ E82A496C3961EFC6828B508C310CE98F ] C:\WINDOWS\system32\drivers\portcls.sys
17:38:57.0515 3136 C:\WINDOWS\system32\drivers\portcls.sys - ok
17:38:57.0531 3136 [ 5018A9DB5EB62E3EDB3110F82F556285 ] C:\WINDOWS\system32\drivers\smwdm.sys
17:38:57.0531 3136 C:\WINDOWS\system32\drivers\smwdm.sys - ok
17:38:57.0546 3136 [ 11C04B17ED2ABBB4833694BCD644AC90 ] C:\WINDOWS\system32\drivers\aeaudio.sys
17:38:57.0546 3136 C:\WINDOWS\system32\drivers\aeaudio.sys - ok
17:38:57.0546 3136 [ D9F724AA26C010A217C97606B160ED68 ] C:\WINDOWS\system32\drivers\audstub.sys
17:38:57.0546 3136 C:\WINDOWS\system32\drivers\audstub.sys - ok
17:38:57.0562 3136 [ 3004E3FE086E76D7D6DFB9A851ED6F10 ] C:\WINDOWS\system32\drivers\mfendisk.sys
17:38:57.0562 3136 C:\WINDOWS\system32\drivers\mfendisk.sys - ok
17:38:57.0578 3136 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] C:\WINDOWS\system32\drivers\rasl2tp.sys
17:38:57.0578 3136 C:\WINDOWS\system32\drivers\rasl2tp.sys - ok
17:38:57.0578 3136 [ 0109C4F3850DFBAB279542515386AE22 ] C:\WINDOWS\system32\drivers\ndistapi.sys
17:38:57.0578 3136 C:\WINDOWS\system32\drivers\ndistapi.sys - ok
17:38:57.0593 3136 [ EDC1531A49C80614B2CFDA43CA8659AB ] C:\WINDOWS\system32\drivers\ndiswan.sys
17:38:57.0593 3136 C:\WINDOWS\system32\drivers\ndiswan.sys - ok
17:38:57.0593 3136 [ 5BC962F2654137C9909C3D4603587DEE ] C:\WINDOWS\system32\drivers\raspppoe.sys
17:38:57.0593 3136 C:\WINDOWS\system32\drivers\raspppoe.sys - ok
17:38:57.0609 3136 [ 0539D5E53587F82D1B4FD74C5BE205CF ] C:\WINDOWS\system32\drivers\tdi.sys
17:38:57.0609 3136 C:\WINDOWS\system32\drivers\tdi.sys - ok
17:38:57.0625 3136 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] C:\WINDOWS\system32\drivers\raspptp.sys
17:38:57.0625 3136 C:\WINDOWS\system32\drivers\raspptp.sys - ok
17:38:57.0625 3136 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] C:\WINDOWS\system32\drivers\msgpc.sys
17:38:57.0625 3136 C:\WINDOWS\system32\drivers\msgpc.sys - ok
17:38:57.0640 3136 [ 09298EC810B07E5D582CB3A3F9255424 ] C:\WINDOWS\system32\drivers\psched.sys
17:38:57.0640 3136 C:\WINDOWS\system32\drivers\psched.sys - ok
17:38:57.0656 3136 [ 375DE90B68533D9D0D7766D4CCB4CA32 ] C:\WINDOWS\system32\drivers\mfeavfk.sys
17:38:57.0656 3136 C:\WINDOWS\system32\drivers\mfeavfk.sys - ok
17:38:57.0656 3136 [ 16BF9475BFCFAA420A8CB29E40284457 ] C:\WINDOWS\system32\drivers\mfefirek.sys
17:38:57.0656 3136 C:\WINDOWS\system32\drivers\mfefirek.sys - ok
17:38:57.0671 3136 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] C:\WINDOWS\system32\drivers\ptilink.sys
17:38:57.0671 3136 C:\WINDOWS\system32\drivers\ptilink.sys - ok
17:38:57.0671 3136 [ FDBB1D60066FCFBB7452FD8F9829B242 ] C:\WINDOWS\system32\drivers\raspti.sys
17:38:57.0671 3136 C:\WINDOWS\system32\drivers\raspti.sys - ok
17:38:57.0687 3136 [ 35C9E97194C8CFB8430125F8DBC34D04 ] C:\WINDOWS\system32\drivers\mouclass.sys
17:38:57.0687 3136 C:\WINDOWS\system32\drivers\mouclass.sys - ok
17:38:57.0703 3136 [ 15CABD0F7C00C47C70124907916AF3F1 ] C:\WINDOWS\system32\drivers\rdpdr.sys
17:38:57.0703 3136 C:\WINDOWS\system32\drivers\rdpdr.sys - ok
17:38:57.0703 3136 [ 88155247177638048422893737429D9E ] C:\WINDOWS\system32\drivers\termdd.sys
17:38:57.0703 3136 C:\WINDOWS\system32\drivers\termdd.sys - ok
17:38:57.0718 3136 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] C:\WINDOWS\system32\drivers\swenum.sys
17:38:57.0718 3136 C:\WINDOWS\system32\drivers\swenum.sys - ok
17:38:57.0734 3136 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] C:\WINDOWS\system32\drivers\update.sys
17:38:57.0734 3136 C:\WINDOWS\system32\drivers\update.sys - ok
17:38:57.0734 3136 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] C:\WINDOWS\system32\drivers\mssmbios.sys
17:38:57.0734 3136 C:\WINDOWS\system32\drivers\mssmbios.sys - ok
17:38:57.0750 3136 [ 9282BD12DFB069D3889EB3FCC1000A9B ] C:\WINDOWS\system32\drivers\ndproxy.sys
17:38:57.0750 3136 C:\WINDOWS\system32\drivers\ndproxy.sys - ok
17:38:57.0750 3136 [ 596EB39B50D6EBD9B734DC4AE0544693 ] C:\WINDOWS\system32\drivers\usbd.sys
17:38:57.0750 3136 C:\WINDOWS\system32\drivers\usbd.sys - ok
17:38:57.0765 3136 [ 1AB3CDDE553B6E064D2E754EFE20285C ] C:\WINDOWS\system32\drivers\usbhub.sys
17:38:57.0765 3136 C:\WINDOWS\system32\drivers\usbhub.sys - ok
17:38:57.0765 3136 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] C:\WINDOWS\system32\drivers\fdc.sys
17:38:57.0765 3136 C:\WINDOWS\system32\drivers\fdc.sys - ok
17:38:57.0781 3136 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] C:\WINDOWS\system32\drivers\flpydisk.sys
17:38:57.0781 3136 C:\WINDOWS\system32\drivers\flpydisk.sys - ok
17:38:57.0796 3136 [ 8E6B8C671615D126FDC553D1E2DE5562 ] C:\WINDOWS\system32\drivers\sfloppy.sys
17:38:57.0796 3136 C:\WINDOWS\system32\drivers\sfloppy.sys - ok
17:38:57.0796 3136 [ DA1F27D85E0D1525F6621372E7B685E9 ] C:\WINDOWS\system32\drivers\beep.sys
17:38:57.0796 3136 C:\WINDOWS\system32\drivers\beep.sys - ok
17:38:57.0812 3136 [ C1B486A7658353D33A10CC15211A873B ] C:\WINDOWS\system32\drivers\cdaudio.sys
17:38:57.0812 3136 C:\WINDOWS\system32\drivers\cdaudio.sys - ok
17:38:57.0828 3136 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] C:\WINDOWS\system32\drivers\fs_rec.sys
17:38:57.0828 3136 C:\WINDOWS\system32\drivers\fs_rec.sys - ok
17:38:57.0828 3136 [ 96ECCF28FDBF1B2CC12725818A63628D ] C:\WINDOWS\system32\drivers\hidparse.sys
17:38:57.0828 3136 C:\WINDOWS\system32\drivers\hidparse.sys - ok
17:38:57.0843 3136 [ 9EF487A186DEA361AA06913A75B3FA99 ] C:\WINDOWS\system32\drivers\kbdhid.sys
17:38:57.0843 3136 C:\WINDOWS\system32\drivers\kbdhid.sys - ok
17:38:57.0859 3136 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] C:\WINDOWS\system32\drivers\null.sys
17:38:57.0859 3136 C:\WINDOWS\system32\drivers\null.sys - ok
17:38:57.0859 3136 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] C:\WINDOWS\system32\drivers\mnmdd.sys
17:38:57.0859 3136 C:\WINDOWS\system32\drivers\mnmdd.sys - ok
17:38:57.0875 3136 [ 4912D5B403614CE99C28420F75353332 ] C:\WINDOWS\system32\drivers\rdpcdd.sys
17:38:57.0875 3136 C:\WINDOWS\system32\drivers\rdpcdd.sys - ok
17:38:57.0875 3136 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] C:\WINDOWS\system32\drivers\vga.sys
17:38:57.0875 3136 C:\WINDOWS\system32\drivers\vga.sys - ok
17:38:57.0890 3136 [ C941EA2454BA8350021D774DAF0F1027 ] C:\WINDOWS\system32\drivers\msfs.sys
17:38:57.0890 3136 C:\WINDOWS\system32\drivers\msfs.sys - ok
17:38:57.0906 3136 [ 23C74D75E36E7158768DD63D92789A91 ] C:\WINDOWS\system32\drivers\ipsec.sys
17:38:57.0906 3136 C:\WINDOWS\system32\drivers\ipsec.sys - ok
17:38:57.0906 3136 [ 3182D64AE053D6FB034F44B6DEF8034A ] C:\WINDOWS\system32\drivers\npfs.sys
17:38:57.0906 3136 C:\WINDOWS\system32\drivers\npfs.sys - ok
17:38:57.0921 3136 [ FE0D99D6F31E4FAD8159F690D68DED9C ] C:\WINDOWS\system32\drivers\rasacd.sys
17:38:57.0921 3136 C:\WINDOWS\system32\drivers\rasacd.sys - ok
17:38:57.0937 3136 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] C:\WINDOWS\system32\drivers\tcpip.sys
17:38:57.0937 3136 C:\WINDOWS\system32\drivers\tcpip.sys - ok
17:38:57.0937 3136 [ CC748EA12C6EFFDE940EE98098BF96BB ] C:\WINDOWS\system32\drivers\ipnat.sys
17:38:57.0937 3136 C:\WINDOWS\system32\drivers\ipnat.sys - ok
17:38:57.0953 3136 [ 1328C929A2F801BB93DBDFCDC25E0E7A ] C:\WINDOWS\system32\drivers\mfetdi2k.sys
17:38:57.0953 3136 C:\WINDOWS\system32\drivers\mfetdi2k.sys - ok
17:38:57.0968 3136 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] C:\WINDOWS\system32\drivers\netbt.sys
17:38:57.0968 3136 C:\WINDOWS\system32\drivers\netbt.sys - ok
17:38:57.0968 3136 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] C:\WINDOWS\system32\drivers\afd.sys
17:38:57.0968 3136 C:\WINDOWS\system32\drivers\afd.sys - ok
17:38:57.0984 3136 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] C:\WINDOWS\system32\drivers\netbios.sys
17:38:57.0984 3136 C:\WINDOWS\system32\drivers\netbios.sys - ok
17:38:58.0000 3136 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] C:\WINDOWS\system32\drivers\ws2ifsl.sys
17:38:58.0000 3136 C:\WINDOWS\system32\drivers\ws2ifsl.sys - ok
17:38:58.0000 3136 [ 7AD224AD1A1437FE28D89CF22B17780A ] C:\WINDOWS\system32\drivers\rdbss.sys
17:38:58.0000 3136 C:\WINDOWS\system32\drivers\rdbss.sys - ok
17:38:58.0015 3136 [ 64A5841A6C8942EBE9621ED4FED66869 ] C:\WINDOWS\system32\drivers\scdemu.sys
17:38:58.0015 3136 C:\WINDOWS\system32\drivers\scdemu.sys - ok
17:38:58.0015 3136 [ E20B95BAEDB550F32DD489265C1DA1F6 ] C:\WINDOWS\system32\drivers\wanarp.sys
17:38:58.0015 3136 C:\WINDOWS\system32\drivers\wanarp.sys - ok
17:38:58.0031 3136 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] C:\WINDOWS\system32\drivers\mrxsmb.sys
17:38:58.0031 3136 C:\WINDOWS\system32\drivers\mrxsmb.sys - ok
17:38:58.0046 3136 [ D45926117EB9FA946A6AF572FBE1CAA3 ] C:\WINDOWS\system32\drivers\fips.sys
17:38:58.0046 3136 C:\WINDOWS\system32\drivers\fips.sys - ok
17:38:58.0046 3136 [ 5F816C1F539266D2D4C78694239DA0B5 ] C:\WINDOWS\system32\smss.exe
17:38:58.0046 3136 C:\WINDOWS\system32\smss.exe - ok
17:38:58.0062 3136 [ F8F0D25CA553E39DDE485D8FC7FCCE89 ] C:\WINDOWS\system32\ntdll.dll
17:38:58.0062 3136 C:\WINDOWS\system32\ntdll.dll - ok
17:38:58.0062 3136 [ 1AF592532532A402ED7C060F6954004F ] C:\WINDOWS\system32\drivers\hidclass.sys
17:38:58.0078 3136 C:\WINDOWS\system32\drivers\hidclass.sys - ok
17:38:58.0078 3136 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] C:\WINDOWS\system32\drivers\hidusb.sys
17:38:58.0078 3136 C:\WINDOWS\system32\drivers\hidusb.sys - ok
17:38:58.0093 3136 [ 23043C91A0F9DFB4B9E9F87B680863B4 ] C:\WINDOWS\system32\autochk.exe
17:38:58.0093 3136 C:\WINDOWS\system32\autochk.exe - ok
17:38:58.0093 3136 [ A9C25C9A8F9DA7F25C14D84C4CE845A3 ] C:\WINDOWS\system32\sdnclean.exe
17:38:58.0093 3136 C:\WINDOWS\system32\sdnclean.exe - ok
17:38:58.0109 3136 [ 9DD07AF82244867CA36681EA2D29CE79 ] C:\WINDOWS\system32\sfcfiles.dll
17:38:58.0109 3136 C:\WINDOWS\system32\sfcfiles.dll - ok
17:38:58.0125 3136 [ C885B02847F5D2FD45A24E219ED93B32 ] C:\WINDOWS\system32\drivers\cdfs.sys
17:38:58.0125 3136 C:\WINDOWS\system32\drivers\cdfs.sys - ok
17:38:58.0125 3136 [ 173F317CE0DB8E21322E71B7E60A27E8 ] C:\WINDOWS\system32\drivers\usbccgp.sys
17:38:58.0125 3136 C:\WINDOWS\system32\drivers\usbccgp.sys - ok
17:38:58.0140 3136 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] C:\WINDOWS\system32\drivers\usbscan.sys
17:38:58.0140 3136 C:\WINDOWS\system32\drivers\usbscan.sys - ok
17:38:58.0156 3136 [ A717C8721046828520C9EDF31288FC00 ] C:\WINDOWS\system32\drivers\usbprint.sys
17:38:58.0156 3136 C:\WINDOWS\system32\drivers\usbprint.sys - ok
17:38:58.0156 3136 [ CF1B7951B4EC8D13F3C93B74BB2B461B ] C:\WINDOWS\system32\drivers\HPZius12.sys
17:38:58.0156 3136 C:\WINDOWS\system32\drivers\HPZius12.sys - ok
17:38:58.0171 3136 [ B1C303E17FB9D46E87A98E4BA6769685 ] C:\WINDOWS\system32\drivers\mouhid.sys
17:38:58.0171 3136 C:\WINDOWS\system32\drivers\mouhid.sys - ok
17:38:58.0187 3136 [ 9F1D80908658EB7F1BF70809E0B51470 ] C:\WINDOWS\system32\drivers\hpzid412.sys
17:38:58.0187 3136 C:\WINDOWS\system32\drivers\hpzid412.sys - ok
17:38:58.0187 3136 [ F7E3E9D50F9CD3DE28085A8FDAA0A1C3 ] C:\WINDOWS\system32\drivers\HPZipr12.sys
17:38:58.0187 3136 C:\WINDOWS\system32\drivers\HPZipr12.sys - ok
17:38:58.0203 3136 [ 2F31B7F954BED437F2C75026C65CAF7B ] C:\WINDOWS\system32\drivers\wmilib.sys
17:38:58.0203 3136 C:\WINDOWS\system32\drivers\wmilib.sys - ok
17:38:58.0218 3136 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] C:\WINDOWS\system32\drivers\atapi.sys
17:38:58.0218 3136 C:\WINDOWS\system32\drivers\atapi.sys - ok
17:38:58.0234 3136 [ FE97D0343ACFDEBDD578FC67CC91FA87 ] C:\WINDOWS\system32\drivers\dxapi.sys
17:38:58.0234 3136 C:\WINDOWS\system32\drivers\dxapi.sys - ok
17:38:58.0234 3136 [ 9A10AACBFDC4922715375FB4065EC930 ] C:\WINDOWS\system32\watchdog.sys
17:38:58.0250 3136 C:\WINDOWS\system32\watchdog.sys - ok
17:38:58.0250 3136 [ 860AC2E4711D2DACF12D98A42105A611 ] C:\WINDOWS\system32\win32k.sys
17:38:58.0250 3136 C:\WINDOWS\system32\win32k.sys - ok
17:38:58.0265 3136 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
17:38:58.0265 3136 C:\WINDOWS\system32\basesrv.dll - ok
17:38:58.0265 3136 [ DD40363ABAD230A84C5E2178B11EFA88 ] C:\WINDOWS\system32\csrsrv.dll
17:38:58.0265 3136 C:\WINDOWS\system32\csrsrv.dll - ok
17:38:58.0281 3136 [ 44F275C64738EA2056E3D9580C23B60F ] C:\WINDOWS\system32\csrss.exe
17:38:58.0281 3136 C:\WINDOWS\system32\csrss.exe - ok
17:38:58.0296 3136 [ 69AE2B2E6968C316536E5B10B9702E63 ] C:\WINDOWS\system32\winsrv.dll
17:38:58.0296 3136 C:\WINDOWS\system32\winsrv.dll - ok
17:38:58.0296 3136 [ 8B1F3320AEBB536E021A5014409862DE ] C:\WINDOWS\system32\gdi32.dll
17:38:58.0296 3136 C:\WINDOWS\system32\gdi32.dll - ok
17:38:58.0312 3136 [ 6FE42512AB1B89F32A7407F261B1D2D0 ] C:\WINDOWS\system32\kernel32.dll
17:38:58.0312 3136 C:\WINDOWS\system32\kernel32.dll - ok
17:38:58.0312 3136 [ B26B135FF1B9F60C9388B4A7D16F600B ] C:\WINDOWS\system32\user32.dll
17:38:58.0312 3136 C:\WINDOWS\system32\user32.dll - ok
17:38:58.0328 3136 [ AC7280566A7BB85CB3291F04DDC1198E ] C:\WINDOWS\system32\drivers\dxg.sys
17:38:58.0328 3136 C:\WINDOWS\system32\drivers\dxg.sys - ok
17:38:58.0343 3136 [ A73F5D6705B1D820C19B18782E176EFD ] C:\WINDOWS\system32\drivers\dxgthk.sys
17:38:58.0343 3136 C:\WINDOWS\system32\drivers\dxgthk.sys - ok
17:38:58.0343 3136 [ E8244B7C635202E5A4326653168B595E ] C:\WINDOWS\system32\ialmdnt5.dll
17:38:58.0343 3136 C:\WINDOWS\system32\ialmdnt5.dll - ok
17:38:58.0359 3136 [ 0CC6C7600EC5AE4373779A79A610796C ] C:\WINDOWS\system32\ialmrnt5.dll
17:38:58.0359 3136 C:\WINDOWS\system32\ialmrnt5.dll - ok
17:38:58.0359 3136 [ ECB7591870F8BFB1A4C17B718AD5A4AA ] C:\WINDOWS\system32\vga.dll
17:38:58.0359 3136 C:\WINDOWS\system32\vga.dll - ok
17:38:58.0375 3136 [ 888B8611F99649A61F0306056C204523 ] C:\WINDOWS\system32\ialmdev5.dll
17:38:58.0375 3136 C:\WINDOWS\system32\ialmdev5.dll - ok
17:38:58.0390 3136 [ A3E3FA1DF677FE52F2AACA38735F8E54 ] C:\WINDOWS\system32\ialmdd5.dll
17:38:58.0390 3136 C:\WINDOWS\system32\ialmdd5.dll - ok
17:38:58.0390 3136 [ ED0EF0A136DEC83DF69F04118870003E ] C:\WINDOWS\system32\winlogon.exe
17:38:58.0390 3136 C:\WINDOWS\system32\winlogon.exe - ok
17:38:58.0406 3136 [ E76F8807070ED04E7408A86D6D3A6137 ] C:\WINDOWS\system32\advapi32.dll
17:38:58.0406 3136 C:\WINDOWS\system32\advapi32.dll - ok
17:38:58.0421 3136 [ D4502F124289A31976130CCCB014C9AA ] C:\WINDOWS\system32\rpcrt4.dll
17:38:58.0421 3136 C:\WINDOWS\system32\rpcrt4.dll - ok
17:38:58.0421 3136 [ 714705F29A917993536A6AB2DEDB0B7F ] C:\WINDOWS\system32\authz.dll
17:38:58.0421 3136 C:\WINDOWS\system32\authz.dll - ok
17:38:58.0437 3136 [ 355EDBB4D412B01F1740C17E3F50FA00 ] C:\WINDOWS\system32\msvcrt.dll
17:38:58.0437 3136 C:\WINDOWS\system32\msvcrt.dll - ok
17:38:58.0453 3136 [ 5357826C8A8DD6A07F17C48BB45BE46E ] C:\WINDOWS\system32\secur32.dll
17:38:58.0453 3136 C:\WINDOWS\system32\secur32.dll - ok
17:38:58.0453 3136 [ 6BEE5D4EFF0A0341BCC4A462D81CCFC1 ] C:\WINDOWS\system32\crypt32.dll
17:38:58.0453 3136 C:\WINDOWS\system32\crypt32.dll - ok
17:38:58.0468 3136 [ 04D898830DF96A17A20FD35D7590F87E ] C:\WINDOWS\system32\msasn1.dll
17:38:58.0468 3136 C:\WINDOWS\system32\msasn1.dll - ok
17:38:58.0468 3136 [ 013C1148C1EC025596896E093F60F608 ] C:\WINDOWS\system32\nddeapi.dll
17:38:58.0468 3136 C:\WINDOWS\system32\nddeapi.dll - ok
17:38:58.0484 3136 [ FCFA1C55971CC229D353B3A15ACCD995 ] C:\WINDOWS\system32\profmap.dll
17:38:58.0484 3136 C:\WINDOWS\system32\profmap.dll - ok
17:38:58.0500 3136 [ CAC752BF84DB4666ED3CE0948E6EA937 ] C:\WINDOWS\system32\netapi32.dll
17:38:58.0500 3136 C:\WINDOWS\system32\netapi32.dll - ok
17:38:58.0500 3136 [ 43D13C80EBEC0135A3611E0F616F179B ] C:\WINDOWS\system32\userenv.dll
17:38:58.0500 3136 C:\WINDOWS\system32\userenv.dll - ok
17:38:58.0515 3136 [ 9CFCB3CA3D83B4EAA133F0644A2C6F31 ] C:\WINDOWS\system32\psapi.dll
17:38:58.0515 3136 C:\WINDOWS\system32\psapi.dll - ok
17:38:58.0515 3136 [ AF11C591F2F4AFF4A6CF699D376F618B ] C:\WINDOWS\system32\regapi.dll
17:38:58.0515 3136 C:\WINDOWS\system32\regapi.dll - ok
17:38:58.0531 3136 [ 24192246760E0E64435522E246B1D6C2 ] C:\WINDOWS\system32\setupapi.dll
17:38:58.0531 3136 C:\WINDOWS\system32\setupapi.dll - ok
17:38:58.0546 3136 [ C7CE131408739B0B3A318BE2D0032719 ] C:\WINDOWS\system32\version.dll
17:38:58.0546 3136 C:\WINDOWS\system32\version.dll - ok
17:38:58.0546 3136 [ 430CEB794F6E6EF8AC86958C242366D6 ] C:\WINDOWS\system32\winsta.dll
17:38:58.0546 3136 C:\WINDOWS\system32\winsta.dll - ok
17:38:58.0562 3136 [ FFC01A72D1C25CCB39F61B202CE60819 ] C:\WINDOWS\system32\imagehlp.dll
17:38:58.0562 3136 C:\WINDOWS\system32\imagehlp.dll - ok
17:38:58.0578 3136 [ D458B738B4C2CE33174CFB2CE12412DB ] C:\WINDOWS\system32\wintrust.dll
17:38:58.0578 3136 C:\WINDOWS\system32\wintrust.dll - ok
17:38:58.0578 3136 [ 0DA85218E92526972A821587E6A8BF8F ] C:\WINDOWS\system32\imm32.dll
17:38:58.0578 3136 C:\WINDOWS\system32\imm32.dll - ok
17:38:58.0593 3136 [ 9789E95E1D88EEB4B922BF3EA7779C28 ] C:\WINDOWS\system32\ws2help.dll
17:38:58.0593 3136 C:\WINDOWS\system32\ws2help.dll - ok
17:38:58.0609 3136 [ 2CCC474EB85CEAA3E1FA1726580A3E5A ] C:\WINDOWS\system32\ws2_32.dll
17:38:58.0609 3136 C:\WINDOWS\system32\ws2_32.dll - ok
17:38:58.0609 3136 [ 56C5B179FE3308B655EB6208C3256FEC ] C:\WINDOWS\system32\kbdus.dll
17:38:58.0609 3136 C:\WINDOWS\system32\kbdus.dll - ok
17:38:58.0625 3136 [ D7B7A57C0E57C836F18CF12A4C62A1CA ] C:\WINDOWS\system32\msgina.dll
17:38:58.0625 3136 C:\WINDOWS\system32\msgina.dll - ok
17:38:58.0640 3136 [ 93AFB83FBC1F9443CAC722FCA63D73BF ] C:\WINDOWS\system32\comctl32.dll
17:38:58.0640 3136 C:\WINDOWS\system32\comctl32.dll - ok
17:38:58.0640 3136 [ 86987A5000DFA3EBE2275C0456BCF2FE ] C:\WINDOWS\system32\comdlg32.dll
17:38:58.0640 3136 C:\WINDOWS\system32\comdlg32.dll - ok
17:38:58.0656 3136 [ 40B0F98BAD16AD5DEF894E88C3EF8014 ] C:\WINDOWS\system32\odbc32.dll
17:38:58.0656 3136 C:\WINDOWS\system32\odbc32.dll - ok
17:38:58.0671 3136 [ 6843D54BC4A40CC8C5741AF750233D10 ] C:\WINDOWS\system32\shell32.dll
17:38:58.0671 3136 C:\WINDOWS\system32\shell32.dll - ok
17:38:58.0671 3136 [ C448A248B743F5FB935C787A5D97268B ] C:\WINDOWS\system32\shlwapi.dll
17:38:58.0671 3136 C:\WINDOWS\system32\shlwapi.dll - ok
17:38:58.0687 3136 [ 694503348B586E99D56C0E30AB5B3EF8 ] C:\WINDOWS\system32\sxs.dll
17:38:58.0687 3136 C:\WINDOWS\system32\sxs.dll - ok
17:38:58.0703 3136 [ 736B12B725AEB2B07F0241A9F680CB10 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
17:38:58.0703 3136 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll - ok
17:38:58.0703 3136 [ 6B7C6B32F8E84D56C6260D684019FEA2 ] C:\WINDOWS\system32\odbcint.dll
17:38:58.0703 3136 C:\WINDOWS\system32\odbcint.dll - ok
17:38:58.0718 3136 [ 96E1C926F22EE1BFBAE82901A35F6BF3 ] C:\WINDOWS\system32\sfc.dll
17:38:58.0718 3136 C:\WINDOWS\system32\sfc.dll - ok
17:38:58.0734 3136 [ 6B5DB6789177A4FD0DEBC248041D0739 ] C:\WINDOWS\system32\sfc_os.dll
17:38:58.0734 3136 C:\WINDOWS\system32\sfc_os.dll - ok
17:38:58.0734 3136 [ 99BC0B50F511924348BE19C7C7313BBF ] C:\WINDOWS\system32\shsvcs.dll
17:38:58.0734 3136 C:\WINDOWS\system32\shsvcs.dll - ok
17:38:58.0750 3136 [ 6BAD1BED9872E62049E487FB91AE2F3A ] C:\WINDOWS\system32\ole32.dll
17:38:58.0750 3136 C:\WINDOWS\system32\ole32.dll - ok
17:38:58.0750 3136 [ CF492D7E9AF1C628B3536D20EF6F5CC7 ] C:\WINDOWS\system32\apphelp.dll
17:38:58.0750 3136 C:\WINDOWS\system32\apphelp.dll - ok
17:38:58.0765 3136 [ BF2466B3E18E970D8A976FB95FC1CA85 ] C:\WINDOWS\system32\lsass.exe
17:38:58.0765 3136 C:\WINDOWS\system32\lsass.exe - ok
17:38:58.0765 3136 [ EC29A79F1E76DC509E24D401F29D0678 ] C:\WINDOWS\system32\ncobjapi.dll
17:38:58.0765 3136 C:\WINDOWS\system32\ncobjapi.dll - ok
17:38:58.0781 3136 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
17:38:58.0781 3136 C:\WINDOWS\system32\services.exe - ok
17:38:58.0781 3136 [ BD31DC6DBE9333C4FBD4BDF0899F2160 ] C:\WINDOWS\system32\lsasrv.dll
17:38:58.0796 3136 C:\WINDOWS\system32\lsasrv.dll - ok
17:38:58.0796 3136 [ F404830F3CD9BF8F2515E489C0CDA297 ] C:\WINDOWS\system32\msvcp60.dll
17:38:58.0796 3136 C:\WINDOWS\system32\msvcp60.dll - ok
17:38:58.0812 3136 [ B24A42A413E694AD73FDFB7FBD492C31 ] C:\WINDOWS\system32\scesrv.dll
17:38:58.0812 3136 C:\WINDOWS\system32\scesrv.dll - ok
17:38:58.0828 3136 [ DD7BD97FB8BD800963789158A5E4B41D ] C:\WINDOWS\system32\mpr.dll
17:38:58.0828 3136 C:\WINDOWS\system32\mpr.dll - ok
17:38:58.0828 3136 [ EA9EE60B408878E5F2012F9C783836DB ] C:\WINDOWS\AppPatch\acadproc.dll
17:38:58.0828 3136 C:\WINDOWS\AppPatch\acadproc.dll - ok
17:38:58.0843 3136 [ 389496118B3B03C2328024AF320132AC ] C:\WINDOWS\system32\dnsapi.dll
17:38:58.0843 3136 C:\WINDOWS\system32\dnsapi.dll - ok
17:38:58.0859 3136 [ EC4C0D9BFD9F7E33F8B395AD54E13063 ] C:\WINDOWS\system32\ntdsapi.dll
17:38:58.0859 3136 C:\WINDOWS\system32\ntdsapi.dll - ok
17:38:58.0859 3136 [ 1F03103598BD817B1078DAB1326DDE11 ] C:\WINDOWS\system32\shimeng.dll
17:38:58.0859 3136 C:\WINDOWS\system32\shimeng.dll - ok
17:38:58.0875 3136 [ 2EDFC2A8893435723AD80481803C6D5C ] C:\WINDOWS\system32\umpnpmgr.dll
17:38:58.0875 3136 C:\WINDOWS\system32\umpnpmgr.dll - ok
17:38:58.0875 3136 [ 0492CF5870F0E616B0C71695A433D162 ] C:\WINDOWS\system32\wldap32.dll
17:38:58.0890 3136 C:\WINDOWS\system32\wldap32.dll - ok
17:38:58.0890 3136 [ 8329A39D5A402A75A74301D6A62ECDA1 ] C:\WINDOWS\system32\samlib.dll
17:38:58.0890 3136 C:\WINDOWS\system32\samlib.dll - ok
17:38:58.0906 3136 [ F05B8CDB7FE0E55DCCFB1D946CE80064 ] C:\WINDOWS\system32\samsrv.dll
17:38:58.0906 3136 C:\WINDOWS\system32\samsrv.dll - ok
17:38:58.0906 3136 [ 310C15FD8358B2C4CD7A5B98A112883F ] C:\WINDOWS\AppPatch\acgenral.dll
17:38:58.0906 3136 C:\WINDOWS\AppPatch\acgenral.dll - ok
17:38:58.0921 3136 [ 17A1D675C12BBF80CAAC54A4855C41D0 ] C:\WINDOWS\system32\cryptdll.dll
17:38:58.0921 3136 C:\WINDOWS\system32\cryptdll.dll - ok
17:38:58.0937 3136 [ EFF03460E542EEA6B0ABDEC6BF19C897 ] C:\WINDOWS\system32\oleaut32.dll
17:38:58.0937 3136 C:\WINDOWS\system32\oleaut32.dll - ok
17:38:58.0937 3136 [ 4A953F13942867BA8FB41F141EC1B80C ] C:\WINDOWS\system32\winmm.dll
17:38:58.0937 3136 C:\WINDOWS\system32\winmm.dll - ok
17:38:58.0953 3136 [ 2098AB52BD5316E59AA36F3437B13BE6 ] C:\WINDOWS\system32\msacm32.dll
17:38:58.0953 3136 C:\WINDOWS\system32\msacm32.dll - ok
17:38:58.0968 3136 [ 7A2CC3719B255E6B5D74396183B7715B ] C:\WINDOWS\system32\uxtheme.dll
17:38:58.0968 3136 C:\WINDOWS\system32\uxtheme.dll - ok
17:38:58.0968 3136 [ F24B12786D60A17008319E3F2AEE7799 ] C:\WINDOWS\system32\msapsspc.dll
17:38:58.0968 3136 C:\WINDOWS\system32\msapsspc.dll - ok
17:38:58.0984 3136 [ 7A660EDC0757849DF5F8706FB6E9F740 ] C:\WINDOWS\system32\msvcrt40.dll
17:38:58.0984 3136 C:\WINDOWS\system32\msvcrt40.dll - ok
17:38:59.0000 3136 [ 3D76DD0CBC536E0F8C45D23ED230BEB2 ] C:\WINDOWS\system32\digest.dll
17:38:59.0000 3136 C:\WINDOWS\system32\digest.dll - ok
17:38:59.0000 3136 [ A4388DF80E52695AE92EE5F3F61F1619 ] C:\WINDOWS\system32\msnsspc.dll
17:38:59.0000 3136 C:\WINDOWS\system32\msnsspc.dll - ok
17:38:59.0015 3136 [ 0F64207B49390C8063C36AE7CBF9C2DB ] C:\WINDOWS\system32\schannel.dll
17:38:59.0015 3136 C:\WINDOWS\system32\schannel.dll - ok
17:38:59.0015 3136 [ A525C96C51D55111FDF3BEA9FFFFC7AE ] C:\WINDOWS\system32\kerberos.dll
17:38:59.0015 3136 C:\WINDOWS\system32\kerberos.dll - ok
17:38:59.0031 3136 [ 5733177BCF16EE78B99543C9B0AB81EA ] C:\WINDOWS\system32\msctfime.ime
17:38:59.0031 3136 C:\WINDOWS\system32\msctfime.ime - ok
17:38:59.0046 3136 [ C6BB1D1500DB4A0E224CB65E6C7E8A80 ] C:\WINDOWS\system32\msprivs.dll
17:38:59.0046 3136 C:\WINDOWS\system32\msprivs.dll - ok
17:38:59.0046 3136 [ 517561A1113B04E51D936CD018DE1C1F ] C:\WINDOWS\system32\msv1_0.dll
17:38:59.0046 3136 C:\WINDOWS\system32\msv1_0.dll - ok
17:38:59.0062 3136 [ AF07DC9B7CC455629E732340C7B15F3A ] C:\WINDOWS\system32\iphlpapi.dll
17:38:59.0062 3136 C:\WINDOWS\system32\iphlpapi.dll - ok
17:38:59.0062 3136 [ 1B7F071C51B77C272875C3A23E1E4550 ] C:\WINDOWS\system32\netlogon.dll
17:38:59.0062 3136 C:\WINDOWS\system32\netlogon.dll - ok
17:38:59.0078 3136 [ 54AF4B1D5459500EF0937F6D33B1914F ] C:\WINDOWS\system32\w32time.dll
17:38:59.0078 3136 C:\WINDOWS\system32\w32time.dll - ok
17:38:59.0093 3136 [ 54DAE3EA34802B4ED9AE1C6B1209FA56 ] C:\WINDOWS\system32\rsaenh.dll
17:38:59.0093 3136 C:\WINDOWS\system32\rsaenh.dll - ok
17:38:59.0093 3136 [ 3AAF9B35939FF9E58CCD18D41655C2FC ] C:\WINDOWS\system32\wdigest.dll
17:38:59.0093 3136 C:\WINDOWS\system32\wdigest.dll - ok
17:38:59.0109 3136 [ 02988B904C386B500CD08639C4C20EEA ] C:\WINDOWS\system32\winscard.dll
17:38:59.0109 3136 C:\WINDOWS\system32\winscard.dll - ok
17:38:59.0125 3136 [ 0E2735281FBB9A764D5584C2A5DCBA59 ] C:\WINDOWS\system32\wtsapi32.dll
17:38:59.0125 3136 C:\WINDOWS\system32\wtsapi32.dll - ok
17:38:59.0125 3136 [ A86BB5E61BF3E39B62AB4C7E7085A084 ] C:\WINDOWS\system32\scecli.dll
17:38:59.0125 3136 C:\WINDOWS\system32\scecli.dll - ok
17:38:59.0140 3136 [ 4470E3C1E0C3378E4CAB137893C12C3A ] C:\WINDOWS\system32\drivers\mbam.sys
17:38:59.0140 3136 C:\WINDOWS\system32\drivers\mbam.sys - ok
17:38:59.0140 3136 [ 27C6D03BCDB8CFEB96B716F3D8BE3E18 ] C:\WINDOWS\system32\svchost.exe
17:38:59.0156 3136 C:\WINDOWS\system32\svchost.exe - ok
17:38:59.0156 3136 [ 549290DBC280C887681D7652978DBBE0 ] C:\WINDOWS\system32\ntmarta.dll
17:38:59.0156 3136 C:\WINDOWS\system32\ntmarta.dll - ok
17:38:59.0171 3136 [ 6B27A5C03DFB94B4245739065431322C ] C:\WINDOWS\system32\rpcss.dll
17:38:59.0171 3136 C:\WINDOWS\system32\rpcss.dll - ok
17:38:59.0171 3136 [ 16403217AB6FC5C30C14C6B12098AD4B ] C:\WINDOWS\system32\xpsp2res.dll
17:38:59.0171 3136 C:\WINDOWS\system32\xpsp2res.dll - ok
17:38:59.0187 3136 [ 6D4FEB43EE538FC5428CC7F0565AA656 ] C:\WINDOWS\system32\eventlog.dll
17:38:59.0187 3136 C:\WINDOWS\system32\eventlog.dll - ok
17:38:59.0203 3136 [ 943337D786A56729263071623BBB9DE5 ] C:\WINDOWS\system32\mswsock.dll
17:38:59.0203 3136 C:\WINDOWS\system32\mswsock.dll - ok
17:38:59.0218 3136 [ 3CB32D3B8CBE79899D63280BB7A83CD9 ] C:\WINDOWS\system32\hnetcfg.dll
17:38:59.0218 3136 C:\WINDOWS\system32\hnetcfg.dll - ok
17:38:59.0218 3136 [ 4E3D06D6E68EEDB52565080F55B460D3 ] C:\WINDOWS\system32\wshtcpip.dll
17:38:59.0218 3136 C:\WINDOWS\system32\wshtcpip.dll - ok
17:38:59.0234 3136 [ 6F9BEF24C578D5D6740E080BEDD6A448 ] C:\WINDOWS\system32\rasadhlp.dll
17:38:59.0234 3136 C:\WINDOWS\system32\rasadhlp.dll - ok
17:38:59.0250 3136 [ D72B9EC3337B247A666F098F3D6B43DE ] C:\WINDOWS\system32\winrnr.dll
17:38:59.0250 3136 C:\WINDOWS\system32\winrnr.dll - ok
17:38:59.0250 3136 [ F556912E70B22D740C9C99E310E3C11F ] C:\Program Files\Microsoft Security Client\MpSvc.dll
17:38:59.0250 3136 C:\Program Files\Microsoft Security Client\MpSvc.dll - ok
17:38:59.0265 3136 [ C1F19D2BACBEE9AB64D9AE69E9859AC0 ] C:\Program Files\Microsoft Security Client\MsMpEng.exe
17:38:59.0265 3136 C:\Program Files\Microsoft Security Client\MsMpEng.exe - ok
17:38:59.0265 3136 [ 3D9381A332E4373F8811C71BA5078B31 ] C:\Program Files\Microsoft Security Client\MpClient.dll
17:38:59.0265 3136 C:\Program Files\Microsoft Security Client\MpClient.dll - ok
17:38:59.0281 3136 [ F45DD1E1365D857DD08BC23563370D0E ] C:\Program Files\Windows Defender\MsMpEng.exe
17:38:59.0281 3136 C:\Program Files\Windows Defender\MsMpEng.exe - ok
17:38:59.0296 3136 [ C9564CF4976E7E96B4052737AA2492B4 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
17:38:59.0296 3136 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll - ok
17:38:59.0296 3136 [ 64898BEA32C12BADDA4218BE88DBD595 ] C:\Program Files\Windows Defender\MpSvc.dll
17:38:59.0296 3136 C:\Program Files\Windows Defender\MpSvc.dll - ok
17:38:59.0312 3136 [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll
17:38:59.0312 3136 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll - ok
17:38:59.0328 3136 [ 6F44DD636C791B70ADE78FE974BE0A1D ] C:\Program Files\Windows Defender\MpClient.dll
17:38:59.0328 3136 C:\Program Files\Windows Defender\MpClient.dll - ok
17:38:59.0328 3136 [ 2081A5B5E4ABA206A0A8A1A97DF0FB23 ] C:\WINDOWS\system32\logonui.exe
17:38:59.0328 3136 C:\WINDOWS\system32\logonui.exe - ok
17:38:59.0343 3136 [ 5E38D7684A49CACFB752B046357E0589 ] C:\WINDOWS\system32\dhcpcsvc.dll
17:38:59.0343 3136 C:\WINDOWS\system32\dhcpcsvc.dll - ok
17:38:59.0359 3136 [ F927A4434C5028758A842943EF1A3849 ] C:\WINDOWS\system32\drivers\ndisuio.sys
17:38:59.0359 3136 C:\WINDOWS\system32\drivers\ndisuio.sys - ok
17:38:59.0359 3136 [ 515A7FAE2070C2B0242B2353443E2F11 ] C:\WINDOWS\system32\cscdll.dll
17:38:59.0359 3136 C:\WINDOWS\system32\cscdll.dll - ok
17:38:59.0375 3136 [ E2092F0A1D7ABC243F9C2362483D150D ] C:\WINDOWS\system32\dimsntfy.dll
17:38:59.0375 3136 C:\WINDOWS\system32\dimsntfy.dll - ok
17:38:59.0375 3136 [ BD83ABA61E8ACCC8D9FFB869F29418CE ] C:\WINDOWS\system32\winspool.drv
17:38:59.0375 3136 C:\WINDOWS\system32\winspool.drv - ok
17:38:59.0390 3136 [ 2CC34E8BB667EEF78899546E12649196 ] C:\WINDOWS\system32\wlnotify.dll
17:38:59.0390 3136 C:\WINDOWS\system32\wlnotify.dll - ok
17:38:59.0406 3136 [ AA87D7709021503687326432DC59590D ] C:\Program Files\Microsoft Security Client\MpRTP.dll
17:38:59.0406 3136 C:\Program Files\Microsoft Security Client\MpRTP.dll - ok
17:38:59.0406 3136 [ 5F7E24FA9EAB896051FFB87F840730D2 ] C:\WINDOWS\system32\dnsrslvr.dll
17:38:59.0406 3136 C:\WINDOWS\system32\dnsrslvr.dll - ok
17:38:59.0421 3136 [ 3D41A9326F0376FC73AF961DD23B1FB1 ] C:\WINDOWS\system32\duser.dll
17:38:59.0421 3136 C:\WINDOWS\system32\duser.dll - ok
17:38:59.0437 3136 [ 02CF580510234E519736559A7F19EA20 ] C:\WINDOWS\system32\WgaLogon.dll
17:38:59.0437 3136 C:\WINDOWS\system32\WgaLogon.dll - ok
17:38:59.0437 3136 [ 5D43C9A33F18C707BA169AFDA88BDF30 ] C:\WINDOWS\system32\fltlib.dll
17:38:59.0437 3136 C:\WINDOWS\system32\fltlib.dll - ok
17:38:59.0453 3136 [ AFFC87E2501FCE8F09D4C10BA6421CCF ] C:\WINDOWS\system32\msimg32.dll
17:38:59.0453 3136 C:\WINDOWS\system32\msimg32.dll - ok
17:38:59.0453 3136 [ 20200EE3CFE10E9F0C028D8653BE11C6 ] C:\WINDOWS\system32\oleacc.dll
17:38:59.0453 3136 C:\WINDOWS\system32\oleacc.dll - ok
17:38:59.0468 3136 [ F137A0CA70003DB20448D540651FA003 ] C:\WINDOWS\system32\clbcatq.dll
17:38:59.0468 3136 C:\WINDOWS\system32\clbcatq.dll - ok
17:38:59.0484 3136 [ 1280A158C722FA95A80FB7AEBE78FA7D ] C:\WINDOWS\system32\comres.dll
17:38:59.0484 3136 C:\WINDOWS\system32\comres.dll - ok
17:38:59.0500 3136 [ A7DB739AE99A796D91580147E919CC59 ] C:\WINDOWS\system32\lmhsvc.dll
17:38:59.0500 3136 C:\WINDOWS\system32\lmhsvc.dll - ok
17:38:59.0500 3136 [ 876CCF164E08D6B903CD14398E056DD2 ] C:\WINDOWS\system32\rtutils.dll
17:38:59.0500 3136 C:\WINDOWS\system32\rtutils.dll - ok
17:38:59.0515 3136 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] C:\WINDOWS\system32\wzcsvc.dll
17:38:59.0515 3136 C:\WINDOWS\system32\wzcsvc.dll - ok
17:38:59.0515 3136 [ E6EF7BC927D9F8F9BA1584BFC39E0C6F ] C:\WINDOWS\system32\eapolqec.dll
17:38:59.0515 3136 C:\WINDOWS\system32\eapolqec.dll - ok
17:38:59.0531 3136 [ 7B0770526801F05D58C51A3DFB87B4BD ] C:\WINDOWS\system32\wmi.dll
17:38:59.0531 3136 C:\WINDOWS\system32\wmi.dll - ok
17:38:59.0546 3136 [ 224FB925C641DA16CEB6D60F40CA4C75 ] C:\WINDOWS\system32\atl.dll
17:38:59.0546 3136 C:\WINDOWS\system32\atl.dll - ok
17:38:59.0546 3136 [ E5EDBD51476DB5001ABF5C82AE5C3DD1 ] C:\WINDOWS\system32\shgina.dll
17:38:59.0546 3136 C:\WINDOWS\system32\shgina.dll - ok
17:38:59.0562 3136 [ ACFEE2392503DD5E457363A0510B8BCB ] C:\WINDOWS\system32\msxml3.dll
17:38:59.0562 3136 C:\WINDOWS\system32\msxml3.dll - ok
17:38:59.0578 3136 [ 8AE93AACC648921BAACB8602991AC4B3 ] C:\WINDOWS\system32\qutil.dll
17:38:59.0578 3136 C:\WINDOWS\system32\qutil.dll - ok
17:38:59.0578 3136 [ 8E2CC37BA87D8F681066E0E9C8A19F73 ] C:\WINDOWS\system32\dot3api.dll
17:38:59.0578 3136 C:\WINDOWS\system32\dot3api.dll - ok
17:38:59.0593 3136 [ F5B754CDEA20BBB3A31E16A776EDE6D6 ] C:\WINDOWS\system32\esent.dll
17:38:59.0593 3136 C:\WINDOWS\system32\esent.dll - ok
17:38:59.0593 3136 [ A39BE37C9237DB5F1990D61B268EA555 ] C:\WINDOWS\system32\rastls.dll
17:38:59.0593 3136 C:\WINDOWS\system32\rastls.dll - ok
17:38:59.0609 3136 [ 6E4BE11D50F8A8DE2BAD644C9C9DE8D3 ] C:\WINDOWS\system32\cryptui.dll
17:38:59.0609 3136 C:\WINDOWS\system32\cryptui.dll - ok
17:38:59.0625 3136 [ DA5B96A293B006572209E5EAC9F3A045 ] C:\WINDOWS\system32\wininet.dll
17:38:59.0625 3136 C:\WINDOWS\system32\wininet.dll - ok
17:38:59.0625 3136 [ 10753A3ADC3E39A3B10CC3F08E98E6B4 ] C:\WINDOWS\system32\normaliz.dll
17:38:59.0625 3136 C:\WINDOWS\system32\normaliz.dll - ok
17:38:59.0640 3136 [ A9D17E2AFAB5EB5C4920D8E07505D3CA ] C:\WINDOWS\system32\urlmon.dll
17:38:59.0640 3136 C:\WINDOWS\system32\urlmon.dll - ok
17:38:59.0656 3136 [ BD485DBD15FFA3286A75906E4C4DD914 ] C:\WINDOWS\system32\iertutil.dll
17:38:59.0656 3136 C:\WINDOWS\system32\iertutil.dll - ok
17:38:59.0656 3136 [ 5FC8307E040C2E95EA4F486C8379FB64 ] C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{523219E2-7029-474B-A5F2-91CDFD8D0CC0}\mpengine.dll
17:38:59.0656 3136 C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{523219E2-7029-474B-A5F2-91CDFD8D0CC0}\mpengine.dll - ok
17:38:59.0671 3136 [ EA5B8BECA3F279C757578CD7F1E95855 ] C:\WINDOWS\system32\mprapi.dll
17:38:59.0671 3136 C:\WINDOWS\system32\mprapi.dll - ok
17:38:59.0671 3136 [ 2CDAE321B8E878A278BA2D2FA013060B ] C:\WINDOWS\system32\activeds.dll
17:38:59.0671 3136 C:\WINDOWS\system32\activeds.dll - ok
17:38:59.0687 3136 [ 0D84657DBF93DB98673DEFDF2B29E25A ] C:\WINDOWS\system32\adsldpc.dll
17:38:59.0687 3136 C:\WINDOWS\system32\adsldpc.dll - ok
17:38:59.0703 3136 [ 92C4F48B62B0B876194584C3FF09CCB6 ] C:\WINDOWS\system32\rasapi32.dll
17:38:59.0703 3136 C:\WINDOWS\system32\rasapi32.dll - ok
17:38:59.0703 3136 [ 4DEF926F6A0545AE486A03C84F2EE482 ] C:\WINDOWS\system32\rasman.dll
17:38:59.0703 3136 C:\WINDOWS\system32\rasman.dll - ok
17:38:59.0718 3136 [ 00AABF131B4823785818DB99A075A313 ] C:\WINDOWS\system32\tapi32.dll
17:38:59.0718 3136 C:\WINDOWS\system32\tapi32.dll - ok
17:38:59.0718 3136 [ C1FAEA15E41F62D7BFA7FBC395C24BA6 ] C:\WINDOWS\system32\riched20.dll
17:38:59.0734 3136 C:\WINDOWS\system32\riched20.dll - ok
17:38:59.0734 3136 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] C:\WINDOWS\system32\schedsvc.dll
17:38:59.0734 3136 C:\WINDOWS\system32\schedsvc.dll - ok
17:38:59.0750 3136 [ 56CE97FF94B7662A300D359CD6F4D601 ] C:\WINDOWS\system32\raschap.dll
17:38:59.0750 3136 C:\WINDOWS\system32\raschap.dll - ok
17:38:59.0750 3136 [ C11D10A3C164AC222BC9AAB3650A88B3 ] C:\WINDOWS\system32\atmfd.dll
17:38:59.0750 3136 C:\WINDOWS\system32\atmfd.dll - ok
17:38:59.0765 3136 [ E47E364C96467FD54FA44D59F927C3AB ] C:\WINDOWS\system32\msidle.dll
17:38:59.0765 3136 C:\WINDOWS\system32\msidle.dll - ok
17:38:59.0765 3136 [ 60784F891563FB1B767F70117FC2428F ] C:\WINDOWS\system32\spoolsv.exe
17:38:59.0765 3136 C:\WINDOWS\system32\spoolsv.exe - ok
17:38:59.0781 3136 [ DEF7A7882BEC100FE0B2CE2549188F9D ] C:\WINDOWS\system32\audiosrv.dll
17:38:59.0781 3136 C:\WINDOWS\system32\audiosrv.dll - ok
17:38:59.0796 3136 [ A8888A5327621856C0CEC4E385F69309 ] C:\WINDOWS\system32\wkssvc.dll
17:38:59.0796 3136 C:\WINDOWS\system32\wkssvc.dll - ok
17:38:59.0796 3136 [ 84C07D29912726032A583AEA2FF29B7D ] C:\Program Files\Windows Defender\MpRtPlug.dll
17:38:59.0796 3136 C:\Program Files\Windows Defender\MpRtPlug.dll - ok
17:38:59.0812 3136 [ 085ED2E391A871C7BAE87E0228B546BA ] C:\WINDOWS\system32\cscui.dll
17:38:59.0812 3136 C:\WINDOWS\system32\cscui.dll - ok
17:38:59.0828 3136 [ 50A166237A0FA771261275A405646CC0 ] C:\WINDOWS\system32\powrprof.dll
17:38:59.0828 3136 C:\WINDOWS\system32\powrprof.dll - ok
17:38:59.0828 3136 [ 680B56A8B62D1BCF4A0B2AAAD03D88E4 ] C:\WINDOWS\system32\wdmaud.drv
17:38:59.0828 3136 C:\WINDOWS\system32\wdmaud.drv - ok
17:38:59.0843 3136 [ 6C26DCF01E2A92F183B97D434017268A ] C:\WINDOWS\system32\dpcdll.dll
17:38:59.0843 3136 C:\WINDOWS\system32\dpcdll.dll - ok
17:38:59.0859 3136 [ 6768ACF64B18196494413695F0C3A00F ] C:\WINDOWS\system32\drivers\wdmaud.sys
17:38:59.0859 3136 C:\WINDOWS\system32\drivers\wdmaud.sys - ok
17:38:59.0859 3136 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] C:\WINDOWS\system32\drivers\sysaudio.sys
17:38:59.0859 3136 C:\WINDOWS\system32\drivers\sysaudio.sys - ok
17:38:59.0875 3136 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] C:\WINDOWS\system32\drivers\splitter.sys
17:38:59.0875 3136 C:\WINDOWS\system32\drivers\splitter.sys - ok
17:38:59.0890 3136 [ 8BED39E3C35D6A489438B8141717A557 ] C:\WINDOWS\system32\drivers\aec.sys
17:38:59.0890 3136 C:\WINDOWS\system32\drivers\aec.sys - ok
17:38:59.0890 3136 [ 5FC8307E040C2E95EA4F486C8379FB64 ] C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2FAEAE9A-4CC2-4C04-B47A-96A6ECCD3098}\mpengine.dll
17:38:59.0890 3136 C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2FAEAE9A-4CC2-4C04-B47A-96A6ECCD3098}\mpengine.dll - ok
17:38:59.0906 3136 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] C:\WINDOWS\system32\drivers\swmidi.sys
17:38:59.0906 3136 C:\WINDOWS\system32\drivers\swmidi.sys - ok
17:38:59.0921 3136 [ 8A208DFCF89792A484E76C40E5F50B45 ] C:\WINDOWS\system32\drivers\dmusic.sys
17:38:59.0921 3136 C:\WINDOWS\system32\drivers\dmusic.sys - ok
17:38:59.0921 3136 [ 692BCF44383D056AED41B045A323D378 ] C:\WINDOWS\system32\drivers\kmixer.sys
17:38:59.0921 3136 C:\WINDOWS\system32\drivers\kmixer.sys - ok
17:38:59.0937 3136 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] C:\WINDOWS\system32\drivers\drmkaud.sys
17:38:59.0937 3136 C:\WINDOWS\system32\drivers\drmkaud.sys - ok
17:38:59.0953 3136 [ 9A3BD5F55AADFF859539142F6328A66E ] C:\WINDOWS\system32\msacm32.drv
17:38:59.0953 3136 C:\WINDOWS\system32\msacm32.drv - ok
17:38:59.0953 3136 [ 5C12660A97822F6E61576943B49AAAD6 ] C:\WINDOWS\system32\midimap.dll
17:38:59.0953 3136 C:\WINDOWS\system32\midimap.dll - ok
17:38:59.0968 3136 [ A93AEE1928A9D7CE3E16D24EC7380F89 ] C:\WINDOWS\system32\userinit.exe
17:38:59.0968 3136 C:\WINDOWS\system32\userinit.exe - ok
17:38:59.0984 3136 [ F02A533F517EB38333CB12A9E8963773 ] C:\Program Files\Google\Update\GoogleUpdate.exe
17:38:59.0984 3136 C:\Program Files\Google\Update\GoogleUpdate.exe - ok
17:38:59.0984 3136 [ B1296D52B0D2096EC4759EEEB806D759 ] C:\WINDOWS\system32\WgaTray.exe
17:38:59.0984 3136 C:\WINDOWS\system32\WgaTray.exe - ok
17:39:00.0000 3136 [ 2E5672EEA419A4DC9DACD714632E1DC3 ] C:\Program Files\Google\Update\1.3.21.135\goopdate.dll
17:39:00.0000 3136 C:\Program Files\Google\Update\1.3.21.135\goopdate.dll - ok
17:39:00.0015 3136 [ 452DB84283EB2F043827AC95D62CE19C ] C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
17:39:00.0015 3136 C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe - ok
17:39:00.0015 3136 [ 12896823FB95BFB3DC9B46BCAEDC9923 ] C:\WINDOWS\explorer.exe
17:39:00.0015 3136 C:\WINDOWS\explorer.exe - ok
17:39:00.0031 3136 [ D3F72D50DE53F9F1F55240115AF4D42E ] C:\WINDOWS\system32\msi.dll
17:39:00.0031 3136 C:\WINDOWS\system32\msi.dll - ok
17:39:00.0031 3136 [ E392E172687BE172F8600C5F41AB03D9 ] C:\WINDOWS\system32\browseui.dll
17:39:00.0031 3136 C:\WINDOWS\system32\browseui.dll - ok
17:39:00.0046 3136 [ B6E6F3F5B63053D5DC1F4EE32992492F ] C:\WINDOWS\system32\dbghelp.dll
17:39:00.0046 3136 C:\WINDOWS\system32\dbghelp.dll - ok
17:39:00.0062 3136 [ 4C867B62F6100C107A3A8F5E7A10461D ] C:\Program Files\Spybot - Search & Destroy 2\rtl150.bpl
17:39:00.0062 3136 C:\Program Files\Spybot - Search & Destroy 2\rtl150.bpl - ok
17:39:00.0078 3136 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] C:\WINDOWS\system32\drivers\mrxdav.sys
17:39:00.0078 3136 C:\WINDOWS\system32\drivers\mrxdav.sys - ok
17:39:00.0078 3136 [ 26CB10FA893F940AB09713FF46DCDADE ] C:\WINDOWS\system32\shdocvw.dll
17:39:00.0078 3136 C:\WINDOWS\system32\shdocvw.dll - ok
17:39:00.0093 3136 [ 3307A07B81206F354F0D4BEFEE922437 ] C:\WINDOWS\system32\LegitCheckControl.DLL
17:39:00.0093 3136 C:\WINDOWS\system32\LegitCheckControl.DLL - ok
17:39:00.0093 3136 [ 205ADD80FF8099B1A8101EB490B933D1 ] C:\WINDOWS\system32\wbem\wbemprox.dll
17:39:00.0109 3136 C:\WINDOWS\system32\wbem\wbemprox.dll - ok
17:39:00.0109 3136 [ D95C71052E5EF63B55997FB31483D02F ] C:\WINDOWS\system32\wbem\wbemcomn.dll
17:39:00.0109 3136 C:\WINDOWS\system32\wbem\wbemcomn.dll - ok
17:39:00.0125 3136 [ C14AA05881A35B6D6BB8D55B117EE22D ] C:\WINDOWS\system32\shfolder.dll
17:39:00.0125 3136 C:\WINDOWS\system32\shfolder.dll - ok
17:39:00.0125 3136 [ 67156D5A9AC356DC99D7BCCB388E3316 ] C:\WINDOWS\system32\wsock32.dll
17:39:00.0125 3136 C:\WINDOWS\system32\wsock32.dll - ok
17:39:00.0140 3136 [ 77A354E28153AD2D5E120A5A8687BC06 ] C:\WINDOWS\system32\webclnt.dll
17:39:00.0140 3136 C:\WINDOWS\system32\webclnt.dll - ok
17:39:00.0156 3136 [ BECDDA0990DEBD72A30096533521AD73 ] C:\Program Files\Google\Update\1.3.21.135\GoogleCrashHandler.exe
17:39:00.0156 3136 C:\Program Files\Google\Update\1.3.21.135\GoogleCrashHandler.exe - ok
17:39:00.0156 3136 [ B4ED498E3BFEE64E952BC44FC6057DB8 ] C:\WINDOWS\system32\desk.cpl
17:39:00.0156 3136 C:\WINDOWS\system32\desk.cpl - ok
17:39:00.0171 3136 [ 4044E880593FE1AC9942190FCE414BE7 ] C:\WINDOWS\system32\mstask.dll
17:39:00.0171 3136 C:\WINDOWS\system32\mstask.dll - ok
17:39:00.0187 3136 [ C5A75EB48E2344ABDC162BDA79E16841 ] C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:39:00.0187 3136 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe - ok
17:39:00.0187 3136 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] C:\WINDOWS\system32\drivers\parvdm.sys
17:39:00.0187 3136 C:\WINDOWS\system32\drivers\parvdm.sys - ok
17:39:00.0203 3136 [ E5F7C30EDF0892667933BE879F067D67 ] C:\WINDOWS\system32\msvcr100_clr0400.dll
17:39:00.0203 3136 C:\WINDOWS\system32\msvcr100_clr0400.dll - ok
17:39:00.0218 3136 [ A314EEA2A503A8E04085201E436384A5 ] C:\WINDOWS\system32\themeui.dll
17:39:00.0218 3136 C:\WINDOWS\system32\themeui.dll - ok
17:39:00.0218 3136 [ 08A73B0E7EE6E32983B5F9E540A8E380 ] C:\WINDOWS\system32\mscoree.dll
17:39:00.0218 3136 C:\WINDOWS\system32\mscoree.dll - ok
17:39:00.0234 3136 [ 912B67BB8249925A5C972FC5839EAE09 ] C:\WINDOWS\system32\actxprxy.dll
17:39:00.0234 3136 C:\WINDOWS\system32\actxprxy.dll - ok
17:39:00.0250 3136 [ 00709952D444EAE14DBBD30D36FBAE0F ] C:\WINDOWS\system32\certcli.dll
17:39:00.0250 3136 C:\WINDOWS\system32\certcli.dll - ok
17:39:00.0250 3136 [ 3D4E199942E29207970E04315D02AD3B ] C:\WINDOWS\system32\cryptsvc.dll
17:39:00.0250 3136 C:\WINDOWS\system32\cryptsvc.dll - ok
17:39:00.0265 3136 [ 57EDEC2E5F59F0335E92F35184BC8631 ] C:\WINDOWS\system32\dmserver.dll
17:39:00.0265 3136 C:\WINDOWS\system32\dmserver.dll - ok
17:39:00.0265 3136 [ D4991D98F2DB73C60D042F1AEF79EFAE ] C:\WINDOWS\system32\es.dll
17:39:00.0281 3136 C:\WINDOWS\system32\es.dll - ok
17:39:00.0281 3136 [ D9AF104F7E21FA859EFA3C67E5522E88 ] C:\Program Files\Spybot - Search & Destroy 2\vcl150.bpl
17:39:00.0281 3136 C:\Program Files\Spybot - Search & Destroy 2\vcl150.bpl - ok
17:39:00.0296 3136 [ BC93B4A066477954555966D77FEC9ECB ] C:\WINDOWS\system32\ersvc.dll
17:39:00.0296 3136 C:\WINDOWS\system32\ersvc.dll - ok
17:39:00.0296 3136 [ F9D82B82F1B7C0B2D2606A987073F58C ] C:\PROGRA~1\WIFD1F~1\MpShHook.dll
17:39:00.0296 3136 C:\PROGRA~1\WIFD1F~1\MpShHook.dll - ok
17:39:00.0312 3136 [ 0B467F470CC9918FDCEEDCFD7DC4D697 ] C:\WINDOWS\system32\oledlg.dll
17:39:00.0312 3136 C:\WINDOWS\system32\oledlg.dll - ok
17:39:00.0328 3136 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
17:39:00.0328 3136 C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll - ok
17:39:00.0328 3136 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] C:\WINDOWS\system32\srvsvc.dll
17:39:00.0328 3136 C:\WINDOWS\system32\srvsvc.dll - ok
17:39:00.0343 3136 [ 20FD44370267CCD0A64A1B31861C21D2 ] C:\WINDOWS\system32\netmsg.dll
17:39:00.0343 3136 C:\WINDOWS\system32\netmsg.dll - ok
17:39:00.0343 3136 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] C:\WINDOWS\system32\drivers\srv.sys
17:39:00.0343 3136 C:\WINDOWS\system32\drivers\srv.sys - ok
17:39:00.0359 3136 [ 65085456FD9A74D7F1A999520C299ECB ] C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
17:39:00.0359 3136 C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe - ok
17:39:00.0375 3136 [ EF39CCCC9AD927A25334AE0B41A8A343 ] C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
17:39:00.0375 3136 C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll - ok
17:39:00.0375 3136 [ 9275F02BEA644F43A459E316A932658F ] C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll
17:39:00.0375 3136 C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll - ok
17:39:00.0390 3136 [ 9C2543A7AC524CAA63B26A16D4E3AD39 ] C:\Program Files\Spybot - Search & Destroy 2\JSDialogPack150.bpl
17:39:00.0390 3136 C:\Program Files\Spybot - Search & Destroy 2\JSDialogPack150.bpl - ok
17:39:00.0406 3136 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
17:39:00.0406 3136 C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe - ok
17:39:00.0406 3136 [ 79E3A8C328E7E569C32B0998377D9742 ] C:\WINDOWS\system32\spoolss.dll
17:39:00.0406 3136 C:\WINDOWS\system32\spoolss.dll - ok
17:39:00.0421 3136 [ 5422CB64444C33F029483552A8FACE37 ] C:\Program Files\Spybot - Search & Destroy 2\vclx150.bpl
17:39:00.0421 3136 C:\Program Files\Spybot - Search & Destroy 2\vclx150.bpl - ok
17:39:00.0421 3136 [ AEB9DD47B76075B05E27874384544F39 ] C:\Program Files\Spybot - Search & Destroy 2\vclie150.bpl
17:39:00.0437 3136 C:\Program Files\Spybot - Search & Destroy 2\vclie150.bpl - ok
17:39:00.0437 3136 [ 80D8679BF84A9383BFF33E07D5D9FC35 ] C:\Program Files\Malwarebytes' Anti-Malware\mbamcore.dll
17:39:00.0437 3136 C:\Program Files\Malwarebytes' Anti-Malware\mbamcore.dll - ok
17:39:00.0453 3136 [ FA27F4DF4015B22F04B5D18044A24322 ] C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
17:39:00.0453 3136 C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl - ok
17:39:00.0453 3136 [ 0FDABB1FD68CBC557084E16B0EA2F731 ] C:\Program Files\Spybot - Search & Destroy 2\snlBase150.bpl
17:39:00.0453 3136 C:\Program Files\Spybot - Search & Destroy 2\snlBase150.bpl - ok
17:39:00.0468 3136 [ ECAB006AC6136F1307E140B633CDB8C2 ] C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
17:39:00.0468 3136 C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe - ok
17:39:00.0484 3136 [ 105ED75F4CEE9E58152061520DAA4ABD ] C:\Program Files\Spybot - Search & Destroy 2\Jcl150.bpl
17:39:00.0484 3136 C:\Program Files\Spybot - Search & Destroy 2\Jcl150.bpl - ok
17:39:00.0484 3136 [ 0E37FBFA79D349D672456923EC5FBBE3 ] C:\WINDOWS\system32\msvcr100.dll
17:39:00.0484 3136 C:\WINDOWS\system32\msvcr100.dll - ok
17:39:00.0500 3136 [ 5677DFE438EC1F009273FC84FEED6B10 ] C:\WINDOWS\system32\localspl.dll
17:39:00.0500 3136 C:\WINDOWS\system32\localspl.dll - ok
17:39:00.0515 3136 [ B1E8AF364027029272758C8E34776144 ] C:\Program Files\Common Files\Mcafee\MSC\LogCntrl.dll
17:39:00.0515 3136 C:\Program Files\Common Files\Mcafee\MSC\LogCntrl.dll - ok
17:39:00.0515 3136 [ C95638D03AAD90F27D0F2855ADC316EC ] C:\WINDOWS\system32\AdobePDF.dll
17:39:00.0515 3136 C:\WINDOWS\system32\AdobePDF.dll - ok
17:39:00.0531 3136 [ 86E99E1222E671408ED5E8618521AEEB ] C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
17:39:00.0531 3136 C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl - ok
17:39:00.0531 3136 [ 5D3D1AB0EF4EA55B731863050482C111 ] C:\WINDOWS\system32\cnbjmon.dll
17:39:00.0531 3136 C:\WINDOWS\system32\cnbjmon.dll - ok
17:39:00.0546 3136 [ D5CDB0C226E2CA9541666B41DC642791 ] C:\WINDOWS\system32\hpzlnt05.dll
17:39:00.0546 3136 C:\WINDOWS\system32\hpzlnt05.dll - ok
17:39:00.0562 3136 [ E3EAE647947B8D0214F8E89DAB1B496E ] C:\WINDOWS\system32\hpzlnt07.dll
17:39:00.0562 3136 C:\WINDOWS\system32\hpzlnt07.dll - ok
17:39:00.0562 3136 [ 52417880AC75AC4B7F4E5C3B54CA6621 ] C:\WINDOWS\system32\hpzlnt12.dll
17:39:00.0562 3136 C:\WINDOWS\system32\hpzlnt12.dll - ok
17:39:00.0578 3136 [ 322FD75A97DBA67FC8F97A9957F857F1 ] C:\WINDOWS\system32\mdimon.dll
17:39:00.0578 3136 C:\WINDOWS\system32\mdimon.dll - ok
17:39:00.0593 3136 [ 1D702A6E768510F2623171C963AFAE36 ] C:\PROGRA~1\McAfee\SITEAD~1\SaSSHMod.dll
17:39:00.0593 3136 C:\PROGRA~1\McAfee\SITEAD~1\SaSSHMod.dll - ok
17:39:00.0609 3136 [ 11F714F85530A2BD134074DC30E99FCA ] C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
17:39:00.0609 3136 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE - ok
17:39:00.0609 3136 [ 222DE7F5EDB9DDBE628384A1A8BE59CE ] C:\WINDOWS\system32\pjlmon.dll
17:39:00.0609 3136 C:\WINDOWS\system32\pjlmon.dll - ok
17:39:00.0625 3136 [ AE0382AD9C73D343D85E1A50C80B7C20 ] C:\WINDOWS\system32\tcpmon.dll
17:39:00.0625 3136 C:\WINDOWS\system32\tcpmon.dll - ok
17:39:00.0640 3136 [ 8357809E111E09393633039769D96281 ] C:\WINDOWS\system32\tcpmib.dll
17:39:00.0640 3136 C:\WINDOWS\system32\tcpmib.dll - ok
17:39:00.0640 3136 [ D1D5DAB39DCB4BE0359943738D87409B ] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
17:39:00.0640 3136 C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe - ok
17:39:00.0656 3136 [ 6D778E0F95447E6546553EEEA709D03C ] C:\WINDOWS\system32\cmd.exe
17:39:00.0656 3136 C:\WINDOWS\system32\cmd.exe - ok
17:39:00.0671 3136 [ 1E744353BD534405187A404667DA3DC3 ] C:\WINDOWS\system32\mgmtapi.dll
17:39:00.0671 3136 C:\WINDOWS\system32\mgmtapi.dll - ok
17:39:00.0671 3136 [ 5C1F0537E61F87B435F56E00B4F20EE8 ] C:\WINDOWS\system32\snmpapi.dll
17:39:00.0671 3136 C:\WINDOWS\system32\snmpapi.dll - ok
17:39:00.0687 3136 [ 277F3E3333F1D10CA428568197FCCE70 ] C:\WINDOWS\system32\wsnmp32.dll
17:39:00.0687 3136 C:\WINDOWS\system32\wsnmp32.dll - ok
17:39:00.0687 3136 [ F26385E8BA4549B5186B774EC0E45D86 ] C:\WINDOWS\system32\usbmon.dll
17:39:00.0687 3136 C:\WINDOWS\system32\usbmon.dll - ok
17:39:00.0703 3136 [ EA8647A21BCB56C5F15712D4B7407501 ] C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
17:39:00.0703 3136 C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll - ok
17:39:00.0718 3136 [ 9244E0240A1D150581C3BAA89D8AA154 ] C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
17:39:00.0718 3136 C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl - ok
17:39:00.0718 3136 [ EEE7F12D9FF46F68FBC0DA059A359E9E ] C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
17:39:00.0718 3136 C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - ok
17:39:00.0734 3136 [ 684559A03CBC1D05BA120A18B0D8BA5D ] C:\WINDOWS\system32\winhttp.dll
17:39:00.0734 3136 C:\WINDOWS\system32\winhttp.dll - ok
17:39:00.0750 3136 [ D66A1A16166897A5F7D04961F582F03B ] C:\WINDOWS\system32\mfevtps.exe
17:39:00.0750 3136 C:\WINDOWS\system32\mfevtps.exe - ok
17:39:00.0750 3136 [ CB6B671ED6D97F2E9F2274EADB7517B2 ] C:\Program Files\Microsoft Security Client\MpCmdRun.exe
17:39:00.0750 3136 C:\Program Files\Microsoft Security Client\MpCmdRun.exe - ok
17:39:00.0765 3136 [ 22DD6D7D4BFE2B8CE705CC950C8AEA4C ] C:\WINDOWS\system32\win32spl.dll
17:39:00.0765 3136 C:\WINDOWS\system32\win32spl.dll - ok
17:39:00.0781 3136 [ 7DED7521EB8B8D56DADCD044D1B77709 ] C:\PROGRA~1\McAfee\SITEAD~1\saupkeep.dll
17:39:00.0781 3136 C:\PROGRA~1\McAfee\SITEAD~1\saupkeep.dll - ok
17:39:00.0781 3136 [ 332760FBA1655FCFD35BD6F4FD871300 ] C:\WINDOWS\system32\ipsecsvc.dll
17:39:00.0781 3136 C:\WINDOWS\system32\ipsecsvc.dll - ok
17:39:00.0796 3136 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] C:\WINDOWS\system32\netman.dll
17:39:00.0796 3136 C:\WINDOWS\system32\netman.dll - ok
17:39:00.0796 3136 [ 5B19B557B0C188210A56A6B699D90B8F ] C:\WINDOWS\system32\regsvc.dll
17:39:00.0796 3136 C:\WINDOWS\system32\regsvc.dll - ok
17:39:00.0812 3136 [ C5FF8682EADA5B3B27A865F1C3EF9270 ] C:\WINDOWS\system32\oakley.dll
17:39:00.0812 3136 C:\WINDOWS\system32\oakley.dll - ok
17:39:00.0828 3136 [ 4AA01BD5CC7DA9888AF33C5FAB5BF1DD ] C:\Program Files\Spybot - Search & Destroy 2\vclimg150.bpl
17:39:00.0828 3136 C:\Program Files\Spybot - Search & Destroy 2\vclimg150.bpl - ok
17:39:00.0828 3136 [ 248712EA6BA17B9FF0C542A3828375DD ] C:\WINDOWS\system32\winipsec.dll
17:39:00.0828 3136 C:\WINDOWS\system32\winipsec.dll - ok
17:39:00.0843 3136 [ B41D53899E37CC43DA85DA19998BEE81 ] C:\WINDOWS\system32\netrap.dll
17:39:00.0843 3136 C:\WINDOWS\system32\netrap.dll - ok
17:39:00.0859 3136 [ 22D89D84E8E081CDA529DBF8C0255A38 ] C:\WINDOWS\system32\psbase.dll
17:39:00.0859 3136 C:\WINDOWS\system32\psbase.dll - ok
17:39:00.0859 3136 [ 853D0D0C6F02D7BFDF1CF99DD7553732 ] C:\WINDOWS\system32\pstorsvc.dll
17:39:00.0859 3136 C:\WINDOWS\system32\pstorsvc.dll - ok
17:39:00.0875 3136 [ 062F837C1FBDB6A0A75F82EFC2EE8E74 ] C:\WINDOWS\system32\netshell.dll
17:39:00.0875 3136 C:\WINDOWS\system32\netshell.dll - ok
17:39:00.0890 3136 [ F9D3C78CFE15271D80790677C893CE45 ] C:\WINDOWS\system32\cabinet.dll
17:39:00.0890 3136 C:\WINDOWS\system32\cabinet.dll - ok
17:39:00.0890 3136 [ 206387AB881E93A1A6EB89966C8651F1 ] C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
17:39:00.0890 3136 C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe - ok
17:39:00.0906 3136 [ 7CC9484FBC922F7DC0B1D767A256C1E5 ] C:\PROGRA~1\McAfee\VIRUSS~1\NaiAnn.dll
17:39:00.0906 3136 C:\PROGRA~1\McAfee\VIRUSS~1\NaiAnn.dll - ok
17:39:00.0921 3136 [ BC83108B18756547013ED443B8CDB31B ] C:\WINDOWS\system32\msvcp100.dll
17:39:00.0921 3136 C:\WINDOWS\system32\msvcp100.dll - ok
17:39:00.0921 3136 [ 8F220DCB4AA4B2A12ECE5B87C701170D ] C:\Program Files\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
17:39:00.0921 3136 C:\Program Files\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl - ok
17:39:00.0937 3136 [ A2180B455AE266D66F38634DE018E7CE ] C:\WINDOWS\system32\ieframe.dll
17:39:00.0937 3136 C:\WINDOWS\system32\ieframe.dll - ok
17:39:00.0953 3136 [ 235892E493845D64D890163CFEF90E97 ] C:\WINDOWS\system32\credui.dll
17:39:00.0953 3136 C:\WINDOWS\system32\credui.dll - ok
17:39:00.0953 3136 [ 070C7A92FDD087B5CE34CD8F6438C883 ] C:\PROGRA~1\McAfee\MSC\mcmscsub.dll
17:39:00.0953 3136 C:\PROGRA~1\McAfee\MSC\mcmscsub.dll - ok
17:39:00.0968 3136 [ 4E8F3230BAC8C1CAADF01A8C728E1C5C ] C:\WINDOWS\system32\dot3dlg.dll
17:39:00.0968 3136 C:\WINDOWS\system32\dot3dlg.dll - ok
17:39:00.0984 3136 [ C85670AB64068F8080998AEBA6C5019C ] C:\WINDOWS\system32\atl100.dll
17:39:00.0984 3136 C:\WINDOWS\system32\atl100.dll - ok
17:39:00.0984 3136 [ CA04959077AFE36369D37B3504740C87 ] C:\WINDOWS\system32\onex.dll
17:39:00.0984 3136 C:\WINDOWS\system32\onex.dll - ok
17:39:01.0000 3136 [ 5DB625E7D095604010CF84DE2D8ACFA6 ] C:\WINDOWS\system32\eappcfg.dll
17:39:01.0000 3136 C:\WINDOWS\system32\eappcfg.dll - ok
17:39:01.0000 3136 [ ABC4206543450C0666D152F4B65833B8 ] C:\WINDOWS\system32\eappprxy.dll
17:39:01.0000 3136 C:\WINDOWS\system32\eappprxy.dll - ok
17:39:01.0015 3136 [ 2B6A50E02964F053D9CBCD987E12A996 ] C:\PROGRA~1\COMMON~1\Mcafee\MSC\mcutil\11_6_2~2\mcutil.dll
17:39:01.0015 3136 C:\PROGRA~1\COMMON~1\Mcafee\MSC\mcutil\11_6_2~2\mcutil.dll - ok
17:39:01.0031 3136 [ 767FF54A552732CE772C2302025FA82F ] C:\WINDOWS\system32\wzcsapi.dll
17:39:01.0031 3136 C:\WINDOWS\system32\wzcsapi.dll - ok
17:39:01.0031 3136 [ 14361FB2FD630988816A4F46AEAF0684 ] C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
17:39:01.0031 3136 C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll - ok
17:39:01.0046 3136 [ FEDE68BF80052BAD393AFD5C2E60DCB0 ] C:\WINDOWS\system32\dssenh.dll
17:39:01.0046 3136 C:\WINDOWS\system32\dssenh.dll - ok
17:39:01.0046 3136 [ EE4C651A217B01D636B5364AC77DA892 ] C:\WINDOWS\system32\inetpp.dll
17:39:01.0046 3136 C:\WINDOWS\system32\inetpp.dll - ok
17:39:01.0062 3136 [ 28E60C4EC03340EE7C5D51D79C19498B ] C:\PROGRA~1\COMMON~1\Mcafee\Core\mccoreps.dll
17:39:01.0062 3136 C:\PROGRA~1\COMMON~1\Mcafee\Core\mccoreps.dll - ok
17:39:01.0078 3136 [ B8B742537BFA1AC4F742B36BEB310BF6 ] C:\PROGRA~1\McAfee\VIRUSS~1\McVsPs.dll
17:39:01.0078 3136 C:\PROGRA~1\McAfee\VIRUSS~1\McVsPs.dll - ok
17:39:01.0078 3136 [ 149DA63ED179DE9B46D5C38A867F3199 ] C:\PROGRA~1\McAfee\VIRUSS~1\NaiAnnPs.dll
17:39:01.0078 3136 C:\PROGRA~1\McAfee\VIRUSS~1\NaiAnnPs.dll - ok
17:39:01.0093 3136 [ 2E645C11AAB7A7E5F607355F6CBDF068 ] C:\PROGRA~1\McAfee\VIRUSS~1\MVsCfg.dll
17:39:01.0093 3136 C:\PROGRA~1\McAfee\VIRUSS~1\MVsCfg.dll - ok
17:39:01.0109 3136 [ 4BE8D8FB641F43F4C4D6CF6AB5ADE968 ] C:\Program Files\Common Files\Mcafee\MSC\McRTMui.dll
17:39:01.0109 3136 C:\Program Files\Common Files\Mcafee\MSC\McRTMui.dll - ok
17:39:01.0109 3136 [ AE02E6DAC99FA4DC642C71B10FEE9971 ] C:\Program Files\Common Files\Mcafee\MSC\LangSel.dll
17:39:01.0109 3136 C:\Program Files\Common Files\Mcafee\MSC\LangSel.dll - ok
17:39:01.0125 3136 [ C3333DD48A39C17689414275E09D7CC7 ] C:\PROGRA~1\COMMON~1\Mcafee\Core\McEvtBrk.dll
17:39:01.0125 3136 C:\PROGRA~1\COMMON~1\Mcafee\Core\McEvtBrk.dll - ok
17:39:01.0125 3136 [ 9B67BE329A32D3A04985EE6394BD6F25 ] C:\Program Files\Common Files\Mcafee\SystemCore\mytilus3_worker.dll
17:39:01.0125 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mytilus3_worker.dll - ok
17:39:01.0140 3136 [ C3200506FB212A0F4FB736A80E646C40 ] C:\WINDOWS\system32\lz32.dll
17:39:01.0140 3136 C:\WINDOWS\system32\lz32.dll - ok
17:39:01.0156 3136 [ 13E8D6FF62DE4026A07B05CCDF25C364 ] C:\Program Files\Common Files\Mcafee\SystemCore\mcshield.dll
17:39:01.0156 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mcshield.dll - ok
17:39:01.0156 3136 [ 5652F6CE1D9E9D8068B9D29BC21B5409 ] C:\WINDOWS\system32\olepro32.dll
17:39:01.0156 3136 C:\WINDOWS\system32\olepro32.dll - ok
17:39:01.0171 3136 [ 9ADEA7A6E21E72DE50A152194C8510FE ] C:\Program Files\McAfee\MSC\mcoemres.dll
17:39:01.0171 3136 C:\Program Files\McAfee\MSC\mcoemres.dll - ok
17:39:01.0187 3136 [ 6A9A136C7403FA7452834FF025ECFA9D ] C:\Program Files\McAfee\MSC\oemui.dll
17:39:01.0187 3136 C:\Program Files\McAfee\MSC\oemui.dll - ok
17:39:01.0187 3136 [ 2F25B52B0CF0F6F5BE2D789181D61735 ] C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll
17:39:01.0187 3136 C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll - ok
17:39:01.0203 3136 [ E64CE31AF69F451F6AEE39B3FDD8877E ] C:\Program Files\McAfee\MSC\mcprlres.dll
17:39:01.0203 3136 C:\Program Files\McAfee\MSC\mcprlres.dll - ok
17:39:01.0218 3136 [ F7DAA055BB991C9FE7FB94E1963C8031 ] C:\PROGRA~1\McAfee\MSC\McTelemetryAPI.dll
17:39:01.0218 3136 C:\PROGRA~1\McAfee\MSC\McTelemetryAPI.dll - ok
17:39:01.0218 3136 [ 32D2C44247C8F9CAC70DE1F3AE121964 ] C:\PROGRA~1\COMMON~1\Mcafee\MSC\sqlite3.dll
17:39:01.0218 3136 C:\PROGRA~1\COMMON~1\Mcafee\MSC\sqlite3.dll - ok
17:39:01.0234 3136 [ C14350FC0D47D806699C4F907FC6785B ] C:\WINDOWS\system32\cryptnet.dll
17:39:01.0234 3136 C:\WINDOWS\system32\cryptnet.dll - ok
17:39:01.0250 3136 [ 3CBA2210FA39C6ED7895634842E930DD ] C:\WINDOWS\system32\sensapi.dll
17:39:01.0250 3136 C:\WINDOWS\system32\sensapi.dll - ok
17:39:01.0250 3136 [ 42DD9011D54C3A91F14BDBBF50791DA9 ] C:\Program Files\Microsoft Security Client\MsseWat.dll
17:39:01.0250 3136 C:\Program Files\Microsoft Security Client\MsseWat.dll - ok
17:39:01.0265 3136 [ A26E0A6A7EBB45815A3583E170C27031 ] C:\Program Files\Microsoft Security Client\LegitLib.dll
17:39:01.0265 3136 C:\Program Files\Microsoft Security Client\LegitLib.dll - ok
17:39:01.0265 3136 [ 069D0270526BED51C336198F71261A89 ] C:\WINDOWS\system32\jsproxy.dll
17:39:01.0265 3136 C:\WINDOWS\system32\jsproxy.dll - ok
17:39:01.0281 3136 [ 22D71D1DB6FC789A1CE8AC6963580259 ] C:\WINDOWS\system32\hhctrl.ocx
17:39:01.0281 3136 C:\WINDOWS\system32\hhctrl.ocx - ok
17:39:01.0281 3136 [ 77A54BDFBAD4604E6131AE68E3CF76D6 ] C:\WINDOWS\system32\srclient.dll
17:39:01.0281 3136 C:\WINDOWS\system32\srclient.dll - ok
17:39:01.0296 3136 [ 4306FA2F1099D7C606139255FDB62B19 ] C:\WINDOWS\system32\wbem\framedyn.dll
17:39:01.0296 3136 C:\WINDOWS\system32\wbem\framedyn.dll - ok
17:39:01.0312 3136 [ D21AB32F16E8DE67D45E5A383B5E52BA ] C:\Program Files\Spybot - Search & Destroy 2\ssleay32.dll
17:39:01.0312 3136 C:\Program Files\Spybot - Search & Destroy 2\ssleay32.dll - ok
17:39:01.0312 3136 [ B009D6171147BE129636A49C4178E487 ] C:\Program Files\Spybot - Search & Destroy 2\libeay32.dll
17:39:01.0312 3136 C:\Program Files\Spybot - Search & Destroy 2\libeay32.dll - ok
17:39:01.0328 3136 [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll
17:39:01.0328 3136 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll - ok
17:39:01.0328 3136 [ CB63BDB77BB86549FC3303C2F11EDC18 ] C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
17:39:01.0343 3136 C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe - ok
17:39:01.0343 3136 [ 4AC2FA4A6F0DF2511BAC13393C06EFF1 ] C:\WINDOWS\system32\mscms.dll
17:39:01.0343 3136 C:\WINDOWS\system32\mscms.dll - ok
17:39:01.0359 3136 [ 6D07DF8A3B4E89B5BAC943B64F0B70D0 ] C:\WINDOWS\system32\icm32.dll
17:39:01.0359 3136 C:\WINDOWS\system32\icm32.dll - ok
17:39:01.0359 3136 [ CBE612E2BB6A10E3563336191EDA1250 ] C:\WINDOWS\system32\seclogon.dll
17:39:01.0359 3136 C:\WINDOWS\system32\seclogon.dll - ok
17:39:01.0375 3136 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] C:\WINDOWS\system32\sens.dll
17:39:01.0375 3136 C:\WINDOWS\system32\sens.dll - ok
17:39:01.0390 3136 [ 3805DF0AC4296A34BA4BF93B346CC378 ] C:\WINDOWS\system32\srsvc.dll
17:39:01.0390 3136 C:\WINDOWS\system32\srsvc.dll - ok
17:39:01.0390 3136 [ A0E86BA4B3E56C1DC277BD7CCEC555DA ] C:\Program Files\Spybot - Search & Destroy 2\SDResources.dll
17:39:01.0390 3136 C:\Program Files\Spybot - Search & Destroy 2\SDResources.dll - ok
17:39:01.0406 3136 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] C:\WINDOWS\system32\wiaservc.dll
17:39:01.0406 3136 C:\WINDOWS\system32\wiaservc.dll - ok
17:39:01.0421 3136 [ 7C8DD5576695B3362202EF09B20C425E ] C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
17:39:01.0421 3136 C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe - ok
17:39:01.0421 3136 [ 5F0CE62E0831CF972EC6949FD3E37DA7 ] C:\WINDOWS\system32\cfgmgr32.dll
17:39:01.0421 3136 C:\WINDOWS\system32\cfgmgr32.dll - ok
17:39:01.0437 3136 [ 012DF358CEBAA23ACB26D82077820817 ] C:\WINDOWS\system32\lpk.dll
17:39:01.0437 3136 C:\WINDOWS\system32\lpk.dll - ok
17:39:01.0437 3136 [ 9E03DC5AB51CFD0190541CE2038D819D ] C:\WINDOWS\system32\usp10.dll
17:39:01.0437 3136 C:\WINDOWS\system32\usp10.dll - ok
17:39:01.0453 3136 [ E40FCF943127DDC8FD60554B722D762B ] C:\WINDOWS\system32\msctf.dll
17:39:01.0453 3136 C:\WINDOWS\system32\msctf.dll - ok
17:39:01.0468 3136 [ C123ED509DD563E0020DB4CA68D3B43B ] C:\WINDOWS\system32\wiafbdrv.dll
17:39:01.0468 3136 C:\WINDOWS\system32\wiafbdrv.dll - ok
17:39:01.0468 3136 [ D4AC4BCC9075B921670DC2A09C84E6DF ] C:\WINDOWS\system32\hpsjmcro.dll
17:39:01.0468 3136 C:\WINDOWS\system32\hpsjmcro.dll - ok
17:39:01.0484 3136 [ D8B91D94ECB123862B390FDE3250D3BB ] C:\WINDOWS\system32\dciman32.dll
17:39:01.0484 3136 C:\WINDOWS\system32\dciman32.dll - ok
17:39:01.0500 3136 [ A340CD71EB535A3DD751B5F28723E50C ] C:\WINDOWS\system32\ddraw.dll
17:39:01.0500 3136 C:\WINDOWS\system32\ddraw.dll - ok
17:39:01.0500 3136 [ 187B944F719C5915BF5C615F56C0395A ] C:\WINDOWS\system32\hpgwiamd.dll
17:39:01.0500 3136 C:\WINDOWS\system32\hpgwiamd.dll - ok
17:39:01.0515 3136 [ 31B067C412FA1A9BAD3CA2A63D7DA440 ] C:\WINDOWS\system32\d3d8thk.dll
17:39:01.0515 3136 C:\WINDOWS\system32\d3d8thk.dll - ok
17:39:01.0515 3136 [ 0607CBC6FA20114CB491EFE4B2F9EFAD ] C:\WINDOWS\system32\d3d9.dll
17:39:01.0515 3136 C:\WINDOWS\system32\d3d9.dll - ok
17:39:01.0531 3136 [ 010472D0AE758227C6F6E6933549C219 ] C:\WINDOWS\system32\wbem\wbemsvc.dll
17:39:01.0531 3136 C:\WINDOWS\system32\wbem\wbemsvc.dll - ok
17:39:01.0531 3136 [ 378A0AEFB11D8B0DC8C27B9F7604B88D ] C:\WINDOWS\system32\wbem\fastprox.dll
17:39:01.0531 3136 C:\WINDOWS\system32\wbem\fastprox.dll - ok
17:39:01.0546 3136 [ AF1449AC1D79D37C7026C1D8912DDA8E ] C:\WINDOWS\system32\pnrpnsp.dll
17:39:01.0546 3136 C:\WINDOWS\system32\pnrpnsp.dll - ok
17:39:01.0562 3136 [ 55BCA12F7F523D35CA3CB833C725F54E ] C:\WINDOWS\system32\trkwks.dll
17:39:01.0562 3136 C:\WINDOWS\system32\trkwks.dll - ok
17:39:01.0562 3136 [ 80776884E7A05D6DA5040926F82B0273 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll
17:39:01.0562 3136 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll - ok
17:39:01.0578 3136 [ 6FE0532CB16300C09D098F808EAAEE9D ] C:\Program Files\Common Files\Mcafee\SystemCore\mcshield.exe
17:39:01.0578 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mcshield.exe - ok
17:39:01.0593 3136 [ 2D0E4ED081963804CCC196A0929275B5 ] C:\WINDOWS\system32\wbem\wmisvc.dll
17:39:01.0593 3136 C:\WINDOWS\system32\wbem\wmisvc.dll - ok
17:39:01.0609 3136 [ 416CC461000122E6BD6218BAEB694019 ] C:\Program Files\Common Files\Mcafee\SystemCore\lockdown.dll
17:39:01.0609 3136 C:\Program Files\Common Files\Mcafee\SystemCore\lockdown.dll - ok
17:39:01.0609 3136 [ ACACB8B14E66109B8ACD6644B5574B9A ] C:\WINDOWS\system32\vssapi.dll
17:39:01.0609 3136 C:\WINDOWS\system32\vssapi.dll - ok
17:39:01.0625 3136 [ 616E570A3FE60B3E5CB1E410D2464146 ] C:\Program Files\Common Files\Mcafee\SystemCore\mytilus3.dll
17:39:01.0625 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mytilus3.dll - ok
17:39:01.0625 3136 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] C:\WINDOWS\system32\wuauserv.dll
17:39:01.0640 3136 C:\WINDOWS\system32\wuauserv.dll - ok
17:39:01.0640 3136 [ B427E25437674DAA9DDBE90DB38C699F ] C:\Program Files\Common Files\Mcafee\SystemCore\mytilus3_server.dll
17:39:01.0640 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mytilus3_server.dll - ok
17:39:01.0656 3136 [ FC3EC24FCE372C89423E015A2AC1A31E ] C:\WINDOWS\system32\wuaueng.dll
17:39:01.0656 3136 C:\WINDOWS\system32\wuaueng.dll - ok
17:39:01.0656 3136 [ 235B2311786AC007AD644B12A2DA8AC7 ] C:\WINDOWS\system32\msvfw32.dll
17:39:01.0656 3136 C:\WINDOWS\system32\msvfw32.dll - ok
17:39:01.0671 3136 [ BCA5376C46ECBAFEB9108F5DCAD9A1D3 ] C:\Program Files\Common Files\Mcafee\SystemCore\ftl.dll
17:39:01.0671 3136 C:\Program Files\Common Files\Mcafee\SystemCore\ftl.dll - ok
17:39:01.0687 3136 [ 01CFA88F8DEE91EC9F8E0988F49D106E ] C:\WINDOWS\system32\avicap32.dll
17:39:01.0687 3136 C:\WINDOWS\system32\avicap32.dll - ok
17:39:01.0687 3136 [ B85E95679B5ADC12311BCD3F5385D623 ] C:\WINDOWS\system32\mspatcha.dll
17:39:01.0687 3136 C:\WINDOWS\system32\mspatcha.dll - ok
17:39:01.0703 3136 [ CFD4E51402DA9838B5A04AE680AF54A0 ] C:\WINDOWS\system32\browser.dll
17:39:01.0703 3136 C:\WINDOWS\system32\browser.dll - ok
17:39:01.0718 3136 [ 1A427BB508ACBEE09A88F08D1CA38E2F ] C:\Program Files\Common Files\Mcafee\SystemCore\mfefire.exe
17:39:01.0718 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mfefire.exe - ok
17:39:01.0718 3136 [ B83028A76E212B6BD73289F0105E13B5 ] C:\Program Files\Common Files\Mcafee\SystemCore\mfeelama.dll
17:39:01.0718 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mfeelama.dll - ok
17:39:01.0734 3136 [ 536DA356A42F7B941BAC2EB4391AEC06 ] C:\Program Files\Common Files\Mcafee\SystemCore\mfehida.dll
17:39:01.0734 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mfehida.dll - ok
17:39:01.0750 3136 [ F0BF811622F2DD6C8E26EE4600D83731 ] C:\WINDOWS\system32\wbem\wbemcore.dll
17:39:01.0750 3136 C:\WINDOWS\system32\wbem\wbemcore.dll - ok
17:39:01.0765 3136 [ 87349C3D0CBE29570403DCF4E8AC350F ] C:\Program Files\Common Files\Mcafee\SystemCore\mfevtpa.dll
17:39:01.0765 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mfevtpa.dll - ok
17:39:01.0765 3136 [ E4616430709F440CF1809D88DC2366EA ] C:\WINDOWS\system32\wbem\esscli.dll
17:39:01.0765 3136 C:\WINDOWS\system32\wbem\esscli.dll - ok
17:39:01.0781 3136 [ AF1064CC87500176411F60C25CB662A7 ] C:\Program Files\Common Files\Mcafee\SystemCore\mfeavfa.dll
17:39:01.0781 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mfeavfa.dll - ok
17:39:01.0781 3136 [ A529CFE32565C0B145578FFB2B32C9A5 ] C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
17:39:01.0781 3136 C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe - ok
17:39:01.0796 3136 [ 3458EDA96E30FBD0477A2800D3FB1909 ] C:\WINDOWS\system32\wups.dll
17:39:01.0796 3136 C:\WINDOWS\system32\wups.dll - ok
17:39:01.0812 3136 [ ED0C0DF222209E43AD9AFBF3FE87DDE0 ] C:\WINDOWS\system32\comsvcs.dll
17:39:01.0812 3136 C:\WINDOWS\system32\comsvcs.dll - ok
17:39:01.0812 3136 [ 690D97864735E8ECD87F55777E266690 ] C:\WINDOWS\system32\colbact.dll
17:39:01.0812 3136 C:\WINDOWS\system32\colbact.dll - ok
17:39:01.0828 3136 [ 36795A645EAA47FE31D2A8F136A2C69B ] C:\WINDOWS\system32\mtxclu.dll
17:39:01.0828 3136 C:\WINDOWS\system32\mtxclu.dll - ok
17:39:01.0843 3136 [ DF82E222578DBE59FCBBD69A02E4C806 ] C:\WINDOWS\system32\clusapi.dll
17:39:01.0843 3136 C:\WINDOWS\system32\clusapi.dll - ok
17:39:01.0843 3136 [ F51EBB6FC536A6B2D588FD668D3A8249 ] C:\WINDOWS\system32\resutils.dll
17:39:01.0843 3136 C:\WINDOWS\system32\resutils.dll - ok
17:39:01.0859 3136 [ 3273D1565BF30225C115B480A3BB2C9D ] C:\WINDOWS\system32\wbem\wmiutils.dll
17:39:01.0859 3136 C:\WINDOWS\system32\wbem\wmiutils.dll - ok
17:39:01.0875 3136 [ BDC0C99E472176C8C2C853A68ADC5073 ] C:\WINDOWS\system32\wups2.dll
17:39:01.0875 3136 C:\WINDOWS\system32\wups2.dll - ok
17:39:01.0875 3136 [ 942A17D2901A31EA68627CBFFCD268CC ] C:\WINDOWS\system32\wbem\repdrvfs.dll
17:39:01.0890 3136 C:\WINDOWS\system32\wbem\repdrvfs.dll - ok
17:39:01.0890 3136 [ 071143F687B4F887E21461CA6CC7EB29 ] C:\WINDOWS\system32\wbem\wmiprvsd.dll
17:39:01.0890 3136 C:\WINDOWS\system32\wbem\wmiprvsd.dll - ok
17:39:01.0906 3136 [ 2E0B0A051FFAA86E358465BB0880D453 ] C:\WINDOWS\system32\wuauclt.exe
17:39:01.0906 3136 C:\WINDOWS\system32\wuauclt.exe - ok
17:39:01.0906 3136 [ 26D881D27CBE51D3614E68D7313EA026 ] C:\WINDOWS\system32\wbem\wbemess.dll
17:39:01.0906 3136 C:\WINDOWS\system32\wbem\wbemess.dll - ok
17:39:01.0921 3136 [ 80A617849B004D1C6C4BEAB7AA86F021 ] C:\Program Files\McAfee\VirusScan\Engine\5500.1093\mcscan32.dll
17:39:01.0921 3136 C:\Program Files\McAfee\VirusScan\Engine\5500.1093\mcscan32.dll - ok
17:39:01.0937 3136 [ 37A62C6092AADD2EFDE0468DD8818E99 ] C:\WINDOWS\system32\netcfgx.dll
17:39:01.0937 3136 C:\WINDOWS\system32\netcfgx.dll - ok
17:39:01.0937 3136 [ 83F41D0D89645D7235C051AB1D9523AC ] C:\WINDOWS\system32\ipnathlp.dll
17:39:01.0937 3136 C:\WINDOWS\system32\ipnathlp.dll - ok
17:39:01.0953 3136 [ F721987C5A710EF2EDA2CBA9CFFAFAF7 ] C:\Program Files\Common Files\Mcafee\MNA\McNASvc.dll
17:39:01.0953 3136 C:\Program Files\Common Files\Mcafee\MNA\McNASvc.dll - ok
17:39:01.0968 3136 [ 8CD7F18D1EF09160FD201446CA70A2FD ] C:\PROGRA~1\McAfee\MPF\MpfSvc.dll
17:39:01.0968 3136 C:\PROGRA~1\McAfee\MPF\MpfSvc.dll - ok
17:39:01.0968 3136 [ 7C278E6408D1DCE642230C0585A854D5 ] C:\WINDOWS\system32\wscsvc.dll
17:39:01.0968 3136 C:\WINDOWS\system32\wscsvc.dll - ok
17:39:01.0984 3136 [ 798A9E6828997EEF4517ADA8A2259831 ] C:\WINDOWS\system32\wbem\wmiprvse.exe
17:39:01.0984 3136 C:\WINDOWS\system32\wbem\wmiprvse.exe - ok
17:39:02.0000 3136 [ 1A617835452EEE5060976C9B9F5FE635 ] C:\WINDOWS\system32\wuapi.dll
17:39:02.0000 3136 C:\WINDOWS\system32\wuapi.dll - ok
17:39:02.0000 3136 [ D26451B540720A7313A9BCBE794DAF62 ] C:\WINDOWS\system32\wbem\ncprov.dll
17:39:02.0000 3136 C:\WINDOWS\system32\wbem\ncprov.dll - ok
17:39:02.0015 3136 [ E837FDBB92E9873E538395B623F45462 ] C:\WINDOWS\system32\wbem\cimwin32.dll
17:39:02.0015 3136 C:\WINDOWS\system32\wbem\cimwin32.dll - ok
17:39:02.0031 3136 [ 6404807ABC7AF52FA3792697AE638B50 ] C:\WINDOWS\system32\wbem\wbemcons.dll
17:39:02.0031 3136 C:\WINDOWS\system32\wbem\wbemcons.dll - ok
17:39:02.0046 3136 [ F0012F09428AD9952FF57C93ACAAB585 ] C:\Program Files\Common Files\Mcafee\McProxy\McProxy.dll
17:39:02.0046 3136 C:\Program Files\Common Files\Mcafee\McProxy\McProxy.dll - ok
17:39:02.0062 3136 [ 13456C9CB5133B689C8630215DB4D7BF ] C:\Program Files\Common Files\Mcafee\SystemCore\mfefwctl.dll
17:39:02.0078 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mfefwctl.dll - ok
17:39:02.0093 3136 [ 8BCD11D38FCE43A519246A91CC40DE6A ] C:\WINDOWS\system32\security.dll
17:39:02.0093 3136 C:\WINDOWS\system32\security.dll - ok
17:39:02.0109 3136 [ 6C169A7B9CD228CD56BD95814EBC6194 ] C:\Program Files\Common Files\Mcafee\NMC\McNmcSrv.dll
17:39:02.0109 3136 C:\Program Files\Common Files\Mcafee\NMC\McNmcSrv.dll - ok
17:39:02.0125 3136 [ FF3477C03BE7201C294C35F684B3479F ] C:\WINDOWS\system32\termsrv.dll
17:39:02.0125 3136 C:\WINDOWS\system32\termsrv.dll - ok
17:39:02.0140 3136 [ 29F0FD02453EC44991856EBB1B37C3EF ] C:\PROGRA~1\McAfee\VIRUSS~1\mvsap.dll
17:39:02.0140 3136 C:\PROGRA~1\McAfee\VIRUSS~1\mvsap.dll - ok
17:39:02.0156 3136 [ DF6551E4C4C46655A0C76194F1FCEA5D ] C:\WINDOWS\system32\icaapi.dll
17:39:02.0156 3136 C:\WINDOWS\system32\icaapi.dll - ok
17:39:02.0171 3136 [ B17440A103BC883B57974D63F43B7485 ] C:\Program Files\Common Files\Mcafee\NMC\McDisc.dll
17:39:02.0171 3136 C:\Program Files\Common Files\Mcafee\NMC\McDisc.dll - ok
17:39:02.0187 3136 [ 2D65D56C2F8B6CC5EBFF8E7200C30304 ] C:\WINDOWS\system32\mstlsapi.dll
17:39:02.0187 3136 C:\WINDOWS\system32\mstlsapi.dll - ok
17:39:02.0203 3136 [ A518D3C9FB121F0F37F86B3F1F5D1C32 ] C:\Program Files\Common Files\Mcafee\NMC\McNDSv.dll
17:39:02.0203 3136 C:\Program Files\Common Files\Mcafee\NMC\McNDSv.dll - ok
17:39:02.0218 3136 [ 89093640759451A502FEB32D86C7D02A ] C:\PROGRA~1\McAfee\MSC\mclwapi.dll
17:39:02.0218 3136 C:\PROGRA~1\McAfee\MSC\mclwapi.dll - ok
17:39:02.0234 3136 [ 3A58027D1826642F9838C3A86AFB6E29 ] C:\PROGRA~1\McAfee\MSC\mcsubmgr\11_6_5~1\mcsubmgr.dll
17:39:02.0234 3136 C:\PROGRA~1\McAfee\MSC\mcsubmgr\11_6_5~1\mcsubmgr.dll - ok
17:39:02.0250 3136 [ 0CEFAA661995185832E5B01C5FF0DFC6 ] C:\PROGRA~1\McAfee\MSC\McMscShm.dll
17:39:02.0250 3136 C:\PROGRA~1\McAfee\MSC\McMscShm.dll - ok
17:39:02.0265 3136 [ 9EFBB3055B3EECE5B0FC7BAED07A6EE9 ] C:\WINDOWS\system32\msxml6.dll
17:39:02.0265 3136 C:\WINDOWS\system32\msxml6.dll - ok
17:39:02.0281 3136 [ 6895427873D6C37A6D6DA7C3DB37DA14 ] C:\WINDOWS\system32\licwmi.dll
17:39:02.0281 3136 C:\WINDOWS\system32\licwmi.dll - ok
17:39:02.0296 3136 [ A693A49A67673F2C8D76797EA9A628D0 ] C:\WINDOWS\system32\licdll.dll
17:39:02.0296 3136 C:\WINDOWS\system32\licdll.dll - ok
17:39:02.0312 3136 [ 3998D2F9E0F6EEB5BCCB80B30DEC3EE7 ] C:\Program Files\Common Files\Mcafee\SystemCore\mfeapfa.dll
17:39:02.0312 3136 C:\Program Files\Common Files\Mcafee\SystemCore\mfeapfa.dll - ok
17:39:02.0328 3136 [ A75338FABF3C24EBC4058FAF8A7203D7 ] C:\PROGRA~1\McAfee\MPF\MpfShm.dll
17:39:02.0328 3136 C:\PROGRA~1\McAfee\MPF\MpfShm.dll - ok
17:39:02.0343 3136 [ 6708AD7D9ABDD6FDE1EB9B54FFE426B0 ] C:\WINDOWS\system32\drivers\mfeapfk.sys
17:39:02.0343 3136 C:\WINDOWS\system32\drivers\mfeapfk.sys - ok
17:39:02.0359 3136 [ 355DB4F5E585CA04C08519CE98CD5CA2 ] C:\PROGRA~1\McAfee\MPF\MpfEvt.dll
17:39:02.0359 3136 C:\PROGRA~1\McAfee\MPF\MpfEvt.dll - ok
17:39:02.0375 3136 [ 93C088C2AEB2F23E720BDA7E32BD5117 ] C:\WINDOWS\system32\upnp.dll
17:39:02.0375 3136 C:\WINDOWS\system32\upnp.dll - ok
17:39:02.0390 3136 [ 9BD0C29C5C78C74A8D177399F07BD194 ] C:\PROGRA~1\McAfee\VIRUSS~1\McOasShm.dll
17:39:02.0390 3136 C:\PROGRA~1\McAfee\VIRUSS~1\McOasShm.dll - ok
17:39:02.0406 3136 [ 3D075865DCC26931972F6476AD0497BE ] C:\WINDOWS\system32\ssdpapi.dll
17:39:02.0406 3136 C:\WINDOWS\system32\ssdpapi.dll - ok
17:39:02.0437 3136 [ F80A415EF82CD06FFAF0D971528EAD38 ] C:\WINDOWS\system32\drivers\http.sys
17:39:02.0437 3136 C:\WINDOWS\system32\drivers\http.sys - ok
17:39:02.0453 3136 [ 43979C30662F322E720B50B3D95F5D95 ] C:\PROGRA~1\COMMON~1\Mcafee\HACKER~1\HWAPI.dll
17:39:02.0453 3136 C:\PROGRA~1\COMMON~1\Mcafee\HACKER~1\HWAPI.dll - ok
17:39:02.0468 3136 [ 416CC461000122E6BD6218BAEB694019 ] C:\Program Files\Common Files\Mcafee\VSCore\lockdown.dll
17:39:02.0468 3136 C:\Program Files\Common Files\Mcafee\VSCore\lockdown.dll - ok
17:39:02.0484 3136 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] C:\WINDOWS\system32\rasmans.dll
17:39:02.0484 3136 C:\WINDOWS\system32\rasmans.dll - ok
17:39:02.0500 3136 [ 566B1A3DF999E8B0C5C4778F66119E91 ] C:\Program Files\McAfee\MPF\L10N.dll
17:39:02.0500 3136 C:\Program Files\McAfee\MPF\L10N.dll - ok
17:39:02.0515 3136 [ 0A5679B3714EDAB99E357057EE88FCA6 ] C:\WINDOWS\system32\ssdpsrv.dll
17:39:02.0515 3136 C:\WINDOWS\system32\ssdpsrv.dll - ok
17:39:02.0515 3136 [ 037B1E7798960E0420003D05BB577EE6 ] C:\WINDOWS\system32\rundll32.exe
17:39:02.0515 3136 C:\WINDOWS\system32\rundll32.exe - ok
17:39:02.0531 3136 [ 3CB78C17BB664637787C9A1C98F79C38 ] C:\WINDOWS\system32\tapisrv.dll
17:39:02.0531 3136 C:\WINDOWS\system32\tapisrv.dll - ok
17:39:02.0546 3136 [ E84B3CB28AB4D95C07738AE9937C2734 ] C:\PROGRA~1\McAfee\SITEAD~1\sahook.dll
17:39:02.0546 3136 C:\PROGRA~1\McAfee\SITEAD~1\sahook.dll - ok
17:39:02.0578 3136 [ 8C515081584A38AA007909CD02020B3D ] C:\WINDOWS\system32\alg.exe
17:39:02.0578 3136 C:\WINDOWS\system32\alg.exe - ok
17:39:02.0593 3136 [ 5F7692CEC90E2E9AA32CD58321E234B8 ] C:\WINDOWS\system32\rastapi.dll
17:39:02.0593 3136 C:\WINDOWS\system32\rastapi.dll - ok
17:39:02.0609 3136 [ AACE07FE34FADDDF973CE068A6424957 ] C:\WINDOWS\system32\unimdm.tsp
17:39:02.0609 3136 C:\WINDOWS\system32\unimdm.tsp - ok
17:39:02.0625 3136 [ 995252FCC4692B5B97EE17D596C9386E ] C:\WINDOWS\system32\uniplat.dll
17:39:02.0625 3136 C:\WINDOWS\system32\uniplat.dll - ok
17:39:02.0656 3136 [ 25C323075C5EA4A2555E35355A01F793 ] C:\WINDOWS\system32\drivers\cfwids.sys
17:39:02.0656 3136 C:\WINDOWS\system32\drivers\cfwids.sys - ok
17:39:02.0656 3136 [ 76EC97C5068D3D9FAA7774B0F659D31A ] C:\WINDOWS\system32\kmddsp.tsp
17:39:02.0656 3136 C:\WINDOWS\system32\kmddsp.tsp - ok
17:39:02.0671 3136 [ 4589963D84F2984FA5949A72162BA4F4 ] C:\WINDOWS\system32\ndptsp.tsp
17:39:02.0671 3136 C:\WINDOWS\system32\ndptsp.tsp - ok
17:39:02.0703 3136 [ 8B8A45DF7CEF36D93C7BD3E4C84003B8 ] C:\WINDOWS\system32\ipconf.tsp
17:39:02.0703 3136 C:\WINDOWS\system32\ipconf.tsp - ok
17:39:02.0703 3136 [ 8BC2B02DC11C98D14CEE43B8E8393FF3 ] C:\WINDOWS\system32\h323.tsp
17:39:02.0703 3136 C:\WINDOWS\system32\h323.tsp - ok
17:39:02.0718 3136 [ 6B552ED3BEE5AA3C4560478FF779BA98 ] C:\WINDOWS\system32\hidphone.tsp
17:39:02.0718 3136 C:\WINDOWS\system32\hidphone.tsp - ok
17:39:02.0718 3136 [ 8973122796E3B5D6B5900FC186E55FEA ] C:\WINDOWS\system32\hid.dll
17:39:02.0718 3136 C:\WINDOWS\system32\hid.dll - ok
17:39:02.0734 3136 [ D0545A010ED2259A740C8414899A938F ] C:\WINDOWS\system32\rasppp.dll
17:39:02.0734 3136 C:\WINDOWS\system32\rasppp.dll - ok
17:39:02.0750 3136 [ B464BD425D5D09ABE4192234D1577B22 ] C:\WINDOWS\system32\ntlsapi.dll
17:39:02.0750 3136 C:\WINDOWS\system32\ntlsapi.dll - ok
17:39:02.0750 3136 [ A655C88AA555BB8EF8957BD29408827F ] C:\WINDOWS\system32\rasqec.dll
17:39:02.0750 3136 C:\WINDOWS\system32\rasqec.dll - ok
17:39:02.0765 3136 [ 3ECA9B282687A529995953E1C048BB2D ] C:\PROGRA~1\COMMON~1\Mcafee\NMC\McMPFEvt.dll
17:39:02.0765 3136 C:\PROGRA~1\COMMON~1\Mcafee\NMC\McMPFEvt.dll - ok
17:39:02.0765 3136 [ A727EAF1C956F05F51592D715E50F725 ] C:\PROGRA~1\McAfee\MPF\MpfApi.dll
17:39:02.0765 3136 C:\PROGRA~1\McAfee\MPF\MpfApi.dll - ok
17:39:02.0781 3136 [ 0671A791C292F46423CFE37B53D598D0 ] C:\Program Files\Spybot - Search & Destroy 2\SDFileScanLibrary.dll
17:39:02.0781 3136 C:\Program Files\Spybot - Search & Destroy 2\SDFileScanLibrary.dll - ok
17:39:02.0781 3136 [ FAD9807ACDE89A34D2EB4743D57016D7 ] C:\Program Files\Spybot - Search & Destroy 2\SDAdvancedCheckLibrary.dll
17:39:02.0781 3136 C:\Program Files\Spybot - Search & Destroy 2\SDAdvancedCheckLibrary.dll - ok
17:39:02.0796 3136 [ 178A34E5554DCE485E1262DDF027960C ] C:\DOCUME~1\Dave\LOCALS~1\temp\0282FC24-864E-4ED1-8AF7-DC5A90F5A243.exe
17:39:02.0796 3136 C:\DOCUME~1\Dave\LOCALS~1\temp\0282FC24-864E-4ED1-8AF7-DC5A90F5A243.exe - ok
17:39:02.0812 3136 [ 2DC5A8019E2387987905F77C664E4BE2 ] C:\WINDOWS\system32\linkinfo.dll
17:39:02.0812 3136 C:\WINDOWS\system32\linkinfo.dll - ok
17:39:02.0812 3136 [ A70A2D85AD143D6BB823C246CEB699A5 ] C:\WINDOWS\system32\ntshrui.dll
17:39:02.0812 3136 C:\WINDOWS\system32\ntshrui.dll - ok
17:39:02.0828 3136 [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\WINDOWS\system32\drivers\57202501.sys
17:39:02.0828 3136 C:\WINDOWS\system32\drivers\57202501.sys - ok
17:39:02.0828 3136 [ 165AE7A443F2139DD2C078AD87699F91 ] C:\Program Files\Microsoft Office\OFFICE11\MSOHEV.DLL
17:39:02.0828 3136 C:\Program Files\Microsoft Office\OFFICE11\MSOHEV.DLL - ok
17:39:02.0843 3136 [ C730F70351D950DDA7388C9A9763CF54 ] C:\WINDOWS\system32\wbem\wmipcima.dll
17:39:02.0843 3136 C:\WINDOWS\system32\wbem\wmipcima.dll - ok
17:39:02.0859 3136 [ 3CB07566302BCEEB898DE270A0BEC175 ] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
17:39:02.0859 3136 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe - ok
17:39:02.0859 3136 [ CC8915DB4E33E8FB29CA0D2DBF75306E ] C:\WINDOWS\system32\webcheck.dll
17:39:02.0859 3136 C:\WINDOWS\system32\webcheck.dll - ok
17:39:02.0875 3136 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] C:\WINDOWS\system32\imapi.exe
17:39:02.0875 3136 C:\WINDOWS\system32\imapi.exe - ok
17:39:02.0875 3136 [ B714735C12A70171DE28657948FD91F1 ] C:\WINDOWS\system32\mlang.dll
17:39:02.0875 3136 C:\WINDOWS\system32\mlang.dll - ok
17:39:02.0890 3136 [ 50512FC9B7878E3C2C147BC17326A7DB ] C:\WINDOWS\system32\stobject.dll
17:39:02.0890 3136 C:\WINDOWS\system32\stobject.dll - ok
17:39:02.0890 3136 [ 231A0B0E3BA7ABFE469A8262FAA1FD71 ] C:\WINDOWS\system32\batmeter.dll
17:39:02.0890 3136 C:\WINDOWS\system32\batmeter.dll - ok
17:39:02.0906 3136 [ 045E228F71C31901084B64BE59093499 ] C:\WINDOWS\system32\WPDShServiceObj.dll
17:39:02.0906 3136 C:\WINDOWS\system32\WPDShServiceObj.dll - ok
17:39:02.0921 3136 [ 538A270F35A713C360B7ED4168BB7521 ] C:\WINDOWS\system32\mydocs.dll
17:39:02.0921 3136 C:\WINDOWS\system32\mydocs.dll - ok
17:39:02.0921 3136 [ 22358578CB321F3325496A3723029409 ] C:\WINDOWS\system32\PortableDeviceTypes.dll
17:39:02.0921 3136 C:\WINDOWS\system32\PortableDeviceTypes.dll - ok
17:39:02.0937 3136 [ 9D45B2201D0ECF9F42136C7B99DEB8B2 ] C:\WINDOWS\system32\PortableDeviceApi.dll
17:39:02.0937 3136 C:\WINDOWS\system32\PortableDeviceApi.dll - ok
17:39:02.0937 3136 [ 744B13B59F3201DBCB52E469C4798531 ] C:\Program Files\McAfee.com\Agent\mcagent.exe
17:39:02.0937 3136 C:\Program Files\McAfee.com\Agent\mcagent.exe - ok
17:39:02.0953 3136 [ 9CC86BA7156660D27EBF48C7A48FCB41 ] C:\Program Files\PowerISO\PWRISOVM.EXE
17:39:02.0953 3136 C:\Program Files\PowerISO\PWRISOVM.EXE - ok
17:39:02.0953 3136 [ B8401FA52FF547C52052E150CBF759CF ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrobat_sl.exe
17:39:02.0953 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrobat_sl.exe - ok
17:39:02.0968 3136 [ 4C39358EBDD2FFCD9132A30E1EC31E16 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll
17:39:02.0968 3136 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll - ok
17:39:02.0984 3136 [ FAD8BDD26EC67C563CB15140237EA07C ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
17:39:02.0984 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe - ok
17:39:02.0984 3136 [ 3F2C8DD08549BB3419CDA372F5999FFA ] C:\WINDOWS\system32\igfxtray.exe
17:39:02.0984 3136 C:\WINDOWS\system32\igfxtray.exe - ok
17:39:03.0000 3136 [ CF833AC004268E1C3C4BF543656200A9 ] C:\WINDOWS\system32\hccutils.dll
17:39:03.0000 3136 C:\WINDOWS\system32\hccutils.dll - ok
17:39:03.0000 3136 [ 01018F75F3F18CE629FAC9689954A2AE ] C:\WINDOWS\system32\hkcmd.exe
17:39:03.0000 3136 C:\WINDOWS\system32\hkcmd.exe - ok
17:39:03.0015 3136 [ 996ABAC2332DE28F3B6A179C6DA20205 ] C:\WINDOWS\system32\igfxpers.exe
17:39:03.0015 3136 C:\WINDOWS\system32\igfxpers.exe - ok
17:39:03.0015 3136 [ B5A4EBA9487F08BECC843A87422B8052 ] C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
17:39:03.0015 3136 C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe - ok
17:39:03.0031 3136 [ 98B93FD3A8F8D140B18D414014C5F929 ] C:\WINDOWS\system32\igfxsrvc.exe
17:39:03.0031 3136 C:\WINDOWS\system32\igfxsrvc.exe - ok
17:39:03.0031 3136 [ 25A2C1F0A75AB0B6508784220D1B102C ] C:\WINDOWS\system32\igfxsrvc.dll
17:39:03.0031 3136 C:\WINDOWS\system32\igfxsrvc.dll - ok
17:39:03.0046 3136 [ 0229EACDF15ACA9403A789FF67FDD076 ] C:\Program Files\Adobe\Acrobat 10.0\Esl\Aiod.dll
17:39:03.0046 3136 C:\Program Files\Adobe\Acrobat 10.0\Esl\Aiod.dll - ok
17:39:03.0062 3136 [ 09DC1F2A2293E5536FE31D23AF3E8C05 ] C:\WINDOWS\system32\igfxdev.dll
17:39:03.0062 3136 C:\WINDOWS\system32\igfxdev.dll - ok
17:39:03.0062 3136 [ 401A8C0BE0BAA7D7A470F0942244152D ] C:\WINDOWS\system32\rasdlg.dll
17:39:03.0062 3136 C:\WINDOWS\system32\rasdlg.dll - ok
17:39:03.0078 3136 [ B176DCFD86D9C215905CA3DB7467E275 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe
17:39:03.0078 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe - ok
17:39:03.0078 3136 [ 0CE53628D1E49106B5AC1101FC784CEB ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrodist.exe
17:39:03.0078 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrodist.exe - ok
17:39:03.0093 3136 [ 41B2B21ABE8D2029AFE0F6194E0A8BBA ] C:\WINDOWS\system32\igfxres.dll
17:39:03.0093 3136 C:\WINDOWS\system32\igfxres.dll - ok
17:39:03.0093 3136 [ 5F1D5F88303D4A4DBC8E5F97BA967CC3 ] C:\WINDOWS\system32\ctfmon.exe
17:39:03.0093 3136 C:\WINDOWS\system32\ctfmon.exe - ok
17:39:03.0109 3136 [ 17AA58A54C00F1746B8654C050491F43 ] C:\WINDOWS\system32\msutb.dll
17:39:03.0109 3136 C:\WINDOWS\system32\msutb.dll - ok
17:39:03.0125 3136 [ 5D61BE7DB55B026A5D61A3EED09D0EAD ] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
17:39:03.0125 3136 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe - ok
17:39:03.0125 3136 [ 76E7410B3A308F6960D3CE06DC7874AD ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\gtn.dll
17:39:03.0125 3136 C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\gtn.dll - ok
17:39:03.0140 3136 [ 0CFB90C28768E26498834D780FBBD754 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AXE8SharedExpat.dll
17:39:03.0140 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AXE8SharedExpat.dll - ok
17:39:03.0140 3136 [ 759D71FC9442AB5A9B5749C0F6C0C263 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\BIB.dll
17:39:03.0140 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\BIB.dll - ok
17:39:03.0156 3136 [ 28AB9015A745A1F0F826B6FAD09435E6 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\sqlite.dll
17:39:03.0156 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\sqlite.dll - ok
17:39:03.0156 3136 [ 88BEEF09C654252F3E46B6167B7F4ECB ] C:\WINDOWS\system32\msisip.dll
17:39:03.0156 3136 C:\WINDOWS\system32\msisip.dll - ok
17:39:03.0171 3136 [ F6FAEC07446A78A9C5AF4558FF5BD118 ] C:\WINDOWS\ime\sptip.dll
17:39:03.0171 3136 C:\WINDOWS\ime\sptip.dll - ok
17:39:03.0187 3136 [ 3A6D465F379E5C815F4AD565391E654C ] C:\WINDOWS\system32\wshext.dll
17:39:03.0187 3136 C:\WINDOWS\system32\wshext.dll - ok
17:39:03.0187 3136 [ 917A728A12F25FCF4636858FAC9979FA ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
17:39:03.0187 3136 C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll - ok
17:39:03.0203 3136 [ F3AD8EA144F411A6292775FA2B230DE5 ] C:\WINDOWS\system32\windowspowershell\v1.0\pwrshsip.dll
17:39:03.0812 3136 C:\WINDOWS\system32\windowspowershell\v1.0\pwrshsip.dll - ok
17:39:03.0812 3136 [ 40FA2F035ED88108850757CA51DAD942 ] C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL
17:39:03.0812 3136 C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL - ok
17:39:03.0828 3136 [ BD713579A87D698E1F2158CE10E48130 ] C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
17:39:03.0828 3136 C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe - ok
17:39:03.0843 3136 [ 98E53CA00D3C0A2E9FAA4E59C101AEBA ] C:\WINDOWS\system32\mslbui.dll
17:39:03.0843 3136 C:\WINDOWS\system32\mslbui.dll - ok
17:39:03.0843 3136 [ 80CC8CBC1569678B7906317F82085E85 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrodistdll.dll
17:39:03.0843 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrodistdll.dll - ok
17:39:03.0859 3136 [ 97EA663282E10C6306769FEAD4E76867 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\ahclient.dll
17:39:03.0859 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\ahclient.dll - ok
17:39:03.0875 3136 [ 06CABCD25920159660B4F73B8BE85D5A ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AdobeXMP.dll
17:39:03.0875 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AdobeXMP.dll - ok
17:39:03.0890 3136 [ 819EB5ABEAE5B1728EDFF0AC8B696769 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\ACE.dll
17:39:03.0890 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\ACE.dll - ok
17:39:03.0906 3136 [ 171A13034F63617B1A905D0FDB94677A ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AdobePDFL.dll
17:39:03.0906 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AdobePDFL.dll - ok
17:39:03.0921 3136 [ 44DEDF5776D840C31E563323B5C81D18 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\JP2KLib.dll
17:39:03.0921 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\JP2KLib.dll - ok
17:39:03.0937 3136 [ B05953F956EB87A02E62096EAAFA9C5F ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\BIBUtils.dll
17:39:03.0937 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\BIBUtils.dll - ok
17:39:03.0953 3136 [ 5C019E7A96E00E7E9989EC45AD5F5A6C ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AGM.dll
17:39:03.0953 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AGM.dll - ok
17:39:03.0953 3136 [ 234490894C734DCA44C79933BD9FB439 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\CoolType.dll
17:39:03.0953 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\CoolType.dll - ok
17:39:03.0968 3136 [ 79BFC537A2D5005EDE7CBDE543B2C114 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\ARE.dll
17:39:03.0968 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\ARE.dll - ok
17:39:03.0984 3136 [ 6509896FBACBD0E87D0C1073121ADD15 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Adist.dll
17:39:03.0984 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Adist.dll - ok
17:39:04.0000 3136 [ EC161FF5E4A4CC230EA6A920CDFC6FA3 ] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\adistres.dll
17:39:04.0000 3136 C:\Program Files\Adobe\Acrobat 10.0\Acrobat\adistres.dll - ok
17:39:04.0000 3136 ============================================================
17:39:04.0000 3136 Scan finished
17:39:04.0000 3136 ============================================================
17:39:04.0187 3120 Detected object count: 7
17:39:04.0187 3120 Actual detected object count: 7
17:40:24.0296 3120 C:\WINDOWS\system32\DRIVERS\ACPI.sys - copied to quarantine
17:40:24.0609 3120 Backup copy found, using it..
17:40:24.0625 3120 C:\WINDOWS\system32\DRIVERS\ACPI.sys - will be cured on reboot
17:40:24.0625 3120 ACPI ( Virus.Win32.Rloader.a ) - User select action: Cure
17:40:24.0625 3120 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:40:24.0625 3120 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:40:24.0625 3120 NBService ( UnsignedFile.Multi.Generic ) - skipped by user
17:40:24.0625 3120 NBService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:40:24.0640 3120 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
17:40:24.0640 3120 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:40:24.0640 3120 SCDEmu ( UnsignedFile.Multi.Generic ) - skipped by user
17:40:24.0640 3120 SCDEmu ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:40:24.0640 3120 SolidWorks Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:40:24.0640 3120 SolidWorks Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:40:24.0640 3120 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
17:40:24.0640 3120 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
17:40:34.0843 0948 Deinitialize success

#33
dacuso

Posted 29 April 2013 - 04:26 PM

Member

Topic Starter
Member
27 posts

I ran kdsskiller and posted results seperately because it was a large file, see previous post. Then I ran Malwarebytes Anti-Rootkit and it was clean.

Google, Yahoo and Bing search engines now seem to be working in IE & FF - Thank you.

FF seems to be very slow compared to IE, is there anything I can do now to speed up the system? Please let me know.

I will keep checking different programs this week and let you know is there are any other issues - Thank you again.

#34
gringo_pr

Posted 29 April 2013 - 07:50 PM

Trusted Helper

Malware Removal
7,268 posts

Hello

I would like you to rerun TDSSKiller and this time when it gets to this part

\Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
\Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
I want you to select Delete this time instead of skip.

I want you to reset firefox back to defaults, this will remove everything from Firefox

I will let you keep your bookmarks so to do that you can go here - Export BookMarks

Now to reset firefox do the following.

At the top of the Firefox window, click the "Firefox" button,
go over to the "Help" sub-menu
- (on Windows XP, click the Help menu at the top of the Firefox window) and select "Troubleshooting Information".
Click the "Reset Firefox" button in the upper-right corner of the Troubleshooting Information page.
click "Reset Firefox" in the confirmation window that opens.
Firefox will close and be reset. When it's done. Click "Finish" and Firefox will open.

restart the computer and check firefox for me now

Gringo

#35
dacuso

Posted 30 April 2013 - 01:52 PM

Member

Topic Starter
Member
27 posts

OK, I ran it again. The searches are faster but the programs take a long time to load. Any other advice?

#36
gringo_pr

Posted 30 April 2013 - 07:54 PM

Trusted Helper

Malware Removal
7,268 posts

Hello dacuso

Did you also reset firefox?

I would like to see a report that combofix makes.

extra combofix report

push the "windows key" + "R" (between the "Ctrl" button and "Alt" Button)
please copy and past the following into the box

C:\Qoobox\Add-Remove Programs.txt

click ok

copy and paste the report into this topic for me to review

Gringo

#37
dacuso

Posted 01 May 2013 - 06:11 PM

Member

Topic Starter
Member
27 posts

Yes I did reset Firefox.

Her is the results of the latest script you asked me to run:

Adobe Acrobat X Pro
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.02)
AiO_Scan
Compatibility Pack for the 2007 Office system
Enterprise
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
HitmanPro 3.7
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB2779562)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB981793)
hp deskjet 5550 series
HP PSC & Officejet 5.3.B Corporate Edition
Intel® Extreme Graphics 2 Driver
Intel® PRO Network Connections Drivers
Internet Explorer (Enable DEP)
Java 7 Update 21
Java Auto Updater
Malwarebytes Anti-Malware version 1.75.0.1300
McAfee Security Scan Plus
McAfee SecurityCenter
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2742597)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Download Manager
Microsoft Office File Validation Add-In
Microsoft Office Professional Edition 2003
Microsoft Outlook Personal Folders Backup
Microsoft Security Client
Microsoft Security Essentials
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 15.0.1 (x86 en-US)
Mozilla Maintenance Service
Nero 7 Premium
PowerISO
QFolder
Registry Easy v5.6
Scan
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2530548)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2559049)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2761465)
Security Update for Windows Internet Explorer 8 (KB2792100)
Security Update for Windows Internet Explorer 8 (KB2797052)
Security Update for Windows Internet Explorer 8 (KB2799329)
Security Update for Windows Internet Explorer 8 (KB2809289)
Security Update for Windows Internet Explorer 8 (KB2817183)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2633171)
Security Update for Windows XP (KB2639417)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219-v2)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135-v2)
Security Update for Windows XP (KB2724197)
Security Update for Windows XP (KB2727528)
Security Update for Windows XP (KB2753842-v2)
Security Update for Windows XP (KB2757638)
Security Update for Windows XP (KB2758857)
Security Update for Windows XP (KB2770660)
Security Update for Windows XP (KB2778344)
Security Update for Windows XP (KB2779030)
Security Update for Windows XP (KB2780091)
Security Update for Windows XP (KB2799494)
Security Update for Windows XP (KB2802968)
Security Update for Windows XP (KB2807986)
Security Update for Windows XP (KB2808735)
Security Update for Windows XP (KB2813170)
Security Update for Windows XP (KB2813345)
Security Update for Windows XP (KB2820917)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982381)
Security Update for Windows XP (KB982665)
Shared C Run-time for x86
SolidWorks eDrawings 2011
SoundMAX
Spybot - Search & Destroy
TeamViewer 6
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Windows Internet Explorer 8 (KB2598845)
Update for Windows Internet Explorer 8 (KB2632503)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2492386)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2607712)
Update for Windows XP (KB2616676)
Update for Windows XP (KB2641690)
Update for Windows XP (KB2661254-v2)
Update for Windows XP (KB2736233)
Update for Windows XP (KB2749655)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Defender
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows PowerShell™ 1.0
Windows XP Service Pack 3
WinRAR archiver

#38
gringo_pr

Posted 02 May 2013 - 06:17 PM

Trusted Helper

Malware Removal
7,268 posts

Hello

These logs are looking allot better. But we still have some work to do.

Please print out these instructions, or copy them to a Notepad file. It will make it easier for you to follow the instructions and complete all of the necessary steps..

uninstall some programs

NOTE** Because of the cleanup process some of the programs I have listed may not be in add/remove anymore this is fine just move to the next item on the list.

You can remove these programs using add/remove or you can use the free uninstaller from Revo (Revo does allot better of a job)

Programs to remove

Java 7 Update 21
McAfee Security Scan Plus

[/list]

Please download and install Revo Uninstaller Free

Double click Revo Uninstaller to run it.
From the list of programs double click on The Program to remove
When prompted if you want to uninstall click Yes.
Be sure the Moderate option is selected then click Next.
The program will run, If prompted again click Yes
when the built-in uninstaller is finished click on Next.
Once the program has searched for leftovers click Next.
Check/tick the bolded items only on the list then click Delete
when prompted click on Yes and then on next.
put a check on any folders that are found and select delete
when prompted select yes then on next
Once done click Finish.

.

Clean Out Temp Files

This small application you may want to keep and use once a week to keep the computer clean.

Download CCleaner from here http://www.ccleaner.com/
Run the installer to install the application.
When it gives you the option to install Yahoo toolbar uncheck the box next to it.
Run CCleaner. default settings are fine
Click Run Cleaner.
Close CCleaner.

: Malwarebytes' Anti-Malware :

I see that you have MBAM installed - That is great!! and at this time I would like you to update it and run me a quick scan

Double-click mbam icon
go to the update tab at the top
click on check for updates
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.
When completed, a log will open in Notepad. please copy and paste the log into your next reply
If you accidentally close it, the log file is saved here and will be named like this:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

Download HijackThis

Go Here to download HijackThis program
Save HijackThis to your desktop.
Right Click on Hijackthis and select "Run as Admin" (XP users just need to double click to run)
Click on "Do A system scan and save a logfile" (if you do not see "Do A system scan and save a logfile" then click on main menu)
copy and paste hijackthis report into the topic

"information and logs"

In your next post I need the following

Log From MBAM
report from Hijackthis
let me know of any problems you may have had
How is the computer doing now?

Gringo

#39
dacuso

Posted 03 May 2013 - 07:30 AM

Member

Topic Starter
Member
27 posts

You requested these Programs to remove:

Java 7 Update 21
McAfee Security Scan Plus

I thought I already removed it but I understand why I should remove McAfee Security Scan Plus, since I have McAfee Security Center provided by AT&T. But why should I delete the latest Java update? I am always getting popup requests to update Java. Please advise.

I will work on the next round of cleanup later today. Thank you.

#40
gringo_pr

Posted 03 May 2013 - 07:43 AM

Trusted Helper

Malware Removal
7,268 posts

About Java

During the cleaning process if I found that Java was installed I asked for it to be uninstalled, Many home users will not miss it. If you use OpenOffice, play online games or use business applications which require Java, Then you need to install the latest version and make sure to disable it in your web browsers.

If an application or website requires it, you should receive a notification indicating that when you attempt to launch that application or access that website.

Link to download latest version. - install Java

How to disable java in your web browsers - Disable Java

#41
gringo_pr

Posted 06 May 2013 - 11:58 PM

Trusted Helper

Malware Removal
7,268 posts

Hello

48 Hour bump

It has been more than 48 hours since my last post.

do you still need help with this?
do you need more time?
are you having problems following my instructions?
if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo

#42
dacuso

Posted 07 May 2013 - 04:43 AM

Member

Topic Starter
Member
27 posts

I need a little more time please. Thank you.

#43
gringo_pr

Posted 07 May 2013 - 06:19 AM

Trusted Helper

Malware Removal
7,268 posts

no problem and I will check on you in a couple of days

#44
gringo_pr

Posted 10 May 2013 - 01:57 AM

Trusted Helper

Malware Removal
7,268 posts

Greetings

I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools

Gringo

#45
dacuso

Posted 11 May 2013 - 04:47 PM

Member

Topic Starter
Member
27 posts

Sorry for the long delay in getting back to you. McAfee Security Scan Plus was already removed and I disabled Jave in the web browsers. Let me know what to do next.

Here are the results you had asked for:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.05.09.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Dave :: D-P4-2-8GH-1GB [administrator]

5/9/2013 10:16:27 PM
mbam-log-2013-05-09 (22-16-27).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 248483
Time elapsed: 13 minute(s), 34 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 2
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:40:21 PM, on 5/11/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\mfevtps.exe
C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\McAfee.com\Agent\mcupdate.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dave\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingF6202] "C:\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe" "C:\WINDOWS\SchedLgU.Txt"
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.mi...b?1359832928455
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.mi...b?1360974035625
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{287CED10-193B-4A52-8855-6695A0930484}: NameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{287CED10-193B-4A52-8855-6695A0930484}: NameServer = 192.168.1.254
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~1\mcafee\msc\mcsniepl.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\896\G2AWinLogon.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Browser Defender Update Service - Unknown owner - C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe (file missing)
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\896\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\WINDOWS\system32\mfevtps.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

--
End of file - 11080 bytes