Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Ukash Metropolitan Police virus [Solved]


  • This topic is locked This topic is locked

#1
ChrisCart

ChrisCart

    Member

  • Member
  • PipPip
  • 21 posts
Hi

I have a laptop infected with Ukash, running AVG free anti-virus. Just before getting infected I noticed that the firewall had deactivated. I have run HitmanPro from USB but to no avail. This thread, http://www.geekstogo...mp-ukash-virus/ reflects very much my experience. Any help much appreciated. OTL.txt file as follows.

Many thanks

Chris

--------------------------------------------------------------------------------

OTL logfile created on: 5/14/2013 2:07:47 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 87.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 67.81 Gb Total Space | 17.31 Gb Free Space | 25.53% Space Free | Partition Type: NTFS
Drive X: | 284.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002

========== Win32 Services (SafeList) ==========

SRV - [2013/04/16 16:26:25 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/11/15 19:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- C:\Program Files\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/10/22 09:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe -- (avgwd)
SRV - [2012/10/19 12:14:08 | 000,160,944 | R--- | M] (Skype Technologies) [Auto] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/09/25 04:08:08 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2010/03/23 09:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) [Auto] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2009/12/19 20:00:00 | 006,095,504 | ---- | M] (MySQL AB) [Auto] -- C:\Program Files\Xampp\xampp\mysql\bin\mysqld.exe -- (MySQL)
SRV - [2009/12/19 20:00:00 | 000,029,416 | ---- | M] (Apache Software Foundation) [Auto] -- C:\Program Files\Xampp\xampp\apache\bin\httpd.exe -- (Apache2.2)
SRV - [2009/05/21 10:28:38 | 000,874,768 | ---- | M] (Intel® Corporation) [Auto] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel®
SRV - [2009/05/21 09:23:04 | 000,909,312 | ---- | M] (Intel® Corporation) [Auto] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel®
SRV - [2009/05/21 09:04:14 | 000,473,360 | ---- | M] (Intel® Corporation) [Auto] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel®
SRV - [2004/10/04 00:47:04 | 000,098,304 | ---- | M] () [Auto] -- C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor)
SRV - [2004/10/03 23:40:50 | 000,118,784 | ---- | M] () [Auto] -- C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe -- (PhotoshopElementsDeviceConnect)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (mde67b2)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | Auto] -- -- (DellBIOS)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - File not found [Kernel | System] -- -- (bhif686)
DRV - [2012/11/15 19:33:26 | 000,094,048 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2012/10/22 09:02:46 | 000,179,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System] -- C:\WINDOWS\system32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2012/10/14 23:48:52 | 000,055,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/10/01 23:30:38 | 000,159,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/09/20 23:46:06 | 000,164,832 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/09/20 23:46:00 | 000,177,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\avglogx.sys -- (Avglogx)
DRV - [2012/09/20 23:45:54 | 000,019,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System] -- C:\WINDOWS\system32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2012/09/13 23:05:20 | 000,035,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2012/03/11 08:48:52 | 000,071,440 | ---- | M] (Trusteer Ltd.) [Kernel | System] -- C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys -- (RapportEI)
DRV - [2012/03/11 08:48:50 | 000,164,112 | ---- | M] (Trusteer Ltd.) [Kernel | System] -- C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys -- (RapportPG)
DRV - [2012/03/11 08:48:50 | 000,056,208 | ---- | M] (Trusteer Ltd.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\RapportKELL.sys -- (RapportKELL)
DRV - [2011/12/15 12:51:11 | 000,228,208 | ---- | M] () [Kernel | System] -- C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\34302\RapportCerberus32_34302.sys -- (RapportCerberus_34302)
DRV - [2011/12/09 11:35:58 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys -- (WsAudio_DeviceS(5)) WsAudio_DeviceS(5)
DRV - [2011/12/09 11:35:58 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys -- (WsAudio_DeviceS(4)) WsAudio_DeviceS(4)
DRV - [2011/12/09 11:35:58 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys -- (WsAudio_DeviceS(3)) WsAudio_DeviceS(3)
DRV - [2011/12/09 11:35:58 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys -- (WsAudio_DeviceS(2)) WsAudio_DeviceS(2)
DRV - [2011/12/09 11:35:58 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys -- (WsAudio_DeviceS(1)) WsAudio_DeviceS(1)
DRV - [2011/08/17 04:06:46 | 000,021,520 | ---- | M] (Trusteer Ltd.) [Kernel | On_Demand] -- C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\28896\RapportIaso.sys -- (RapportIaso)
DRV - [2011/07/22 12:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011/07/12 17:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/03/23 09:15:36 | 000,308,859 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2009/05/28 18:23:24 | 004,203,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETw5x32.sys -- (NETw5x32) Intel®
DRV - [2008/11/16 14:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\dne2000.sys -- (DNE)
DRV - [2008/08/13 13:23:56 | 000,011,904 | ---- | M] (Intel Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2007/11/14 15:05:16 | 000,394,952 | ---- | M] (Zone Labs, LLC) [Kernel | On_Demand] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
DRV - [2007/01/18 16:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2006/08/25 03:23:08 | 000,044,544 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2006/04/26 19:13:04 | 001,429,632 | ---- | M] (Intel® Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel®
DRV - [2006/03/24 19:34:30 | 001,156,648 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2006/01/10 07:07:58 | 000,004,864 | ---- | M] (GTek Technologies Ltd.) [Kernel | On_Demand] -- C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys -- (DSproct)
DRV - [2005/10/14 11:40:18 | 000,307,968 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005/10/14 11:40:18 | 000,051,328 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005/10/14 11:40:18 | 000,028,544 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005/08/12 13:50:46 | 000,016,128 | ---- | M] (Dell Inc) [Kernel | System] -- C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS -- (APPDRV)
DRV - [2005/07/21 23:02:12 | 001,035,008 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2005/07/21 23:01:08 | 000,201,600 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2005/07/21 23:01:00 | 000,717,952 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004/06/09 04:29:56 | 000,006,977 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\DDMI2.sys -- (SDDMI2)
DRV - [2004/02/13 12:46:00 | 000,017,153 | ---- | M] (Dell Inc) [Kernel | System] -- C:\WINDOWS\system32\drivers\omci.sys -- (omci)
DRV - [1999/09/10 08:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | Auto] -- C:\WINDOWS\System32\drivers\aspi32.sys -- (Aspi32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2061119
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Start Page = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2061119


IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2061119
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2061119
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2061119
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www1.euro.del...c=uk&l=en&s=gen
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.co...html?channel=uk
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2061119
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Chris_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page =
IE - HKU\Chris_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
IE - HKU\Chris_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb
IE - HKU\Chris_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D6 E6 41 2E 10 B2 CC 01 [binary data]
IE - HKU\Chris_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Chris_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\Fiona_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2061119
IE - HKU\Fiona_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\Fiona_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKU\Fiona_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\Fiona_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\HelpAssistant_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.skybroadband.com
IE - HKU\HelpAssistant_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\HelpAssistant_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0




FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.2.72: C:\Program Files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.2.72: C:\Program Files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.2.72: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.2.72: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.2.72: C:\Program Files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/04/16 16:26:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/04/16 16:26:10 | 000,000,000 | ---D | M]

[2013/04/16 16:26:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013/04/16 16:26:26 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013/04/16 16:26:21 | 000,001,738 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2013/04/16 16:26:21 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2013/04/16 16:26:21 | 000,001,148 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2013/04/16 16:26:21 | 000,001,379 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2013/04/16 16:26:21 | 000,002,086 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2013/04/16 16:26:21 | 000,001,334 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2004/08/10 01:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - File not found
O2 - BHO: (Search Results Toolbar) - {94366e2c-9923-431c-b0d6-747447dd0f2b} - C:\Program Files\searchresults1\toolbar2X.dll (Ask.com)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O3 - HKLM\..\Toolbar: (Search Results Toolbar) - {94366e2c-9923-431c-b0d6-747447dd0f2b} - C:\Program Files\searchresults1\toolbar2X.dll (Ask.com)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\Fiona_ON_C\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\HelpAssistant_ON_C\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\HelpAssistant_ON_C\..\Toolbar\WebBrowser: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No CLSID value found.
O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CTSVolFE.exe] C:\Program Files\Creative\Mixer\CTSVolFE.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel® Corporation)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\Administrator_ON_C..\Run: [DellSupport] C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.)
O4 - HKU\Administrator_ON_C..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netwaiting.exe ()
O4 - HKU\Chris_ON_C..\Run: [DellSupport] C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.)
O4 - HKU\Chris_ON_C..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netwaiting.exe ()
O4 - HKU\Chris_ON_C..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - HKU\Fiona_ON_C..\Run: [DellSupport] C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.)
O4 - HKU\Fiona_ON_C..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netwaiting.exe ()
O4 - HKU\HelpAssistant_ON_C..\Run: [buefwftm] File not found
O4 - HKU\HelpAssistant_ON_C..\Run: [DellSupport] C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.)
O4 - HKU\HelpAssistant_ON_C..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netwaiting.exe ()
O4 - HKU\HelpAssistant_ON_C..\Run: [updateMgr] File not found
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10e.exe (Adobe Systems, Inc.)
O4 - HKU\.DEFAULT..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation)
O4 - HKU\HelpAssistant_ON_C..\RunOnce: [spchecker] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk = C:\WINDOWS\Installer\{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}\Icon3E5562ED7.ico ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Chris_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Chris_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = C2 FF FF 03 [binary data]
O7 - HKU\Fiona_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\HelpAssistant_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft....k/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} http://intel-drv-cdn...reqlab_srlx.cab (Reg Error: Key error.)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.micr...78f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.micros...b?1271724035390 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.mi...b?1260201689765 (MUWebControl Class)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ent/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKU\.DEFAULT Winlogon: Shell - (cmd.exe) - C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/08/16 00:43:04 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG2013\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2013/05/12 05:27:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft Antimalware
[2013/05/11 17:00:58 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Fiona\Cookies
[2013/04/28 13:41:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\Trials 2
[2013/04/28 13:41:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Local Settings\Application Data\Redlynx
[2013/04/28 13:37:14 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2013/04/28 13:36:48 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2013/04/28 13:36:27 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2013/04/28 13:36:26 | 000,413,696 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2013/04/28 13:36:26 | 000,110,592 | ---- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2013/04/28 13:36:07 | 000,000,000 | ---D | C] -- C:\Program Files\Trials 2 Second Edition
[2013/04/25 14:58:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2013/04/25 14:41:48 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smtpapi.dll
[2013/04/25 14:41:48 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwnh.dll
[2013/04/25 14:41:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieencode.dll
[2013/04/25 14:41:38 | 000,000,000 | ---D | C] -- C:\Program Files\msn
[2013/04/25 14:21:53 | 000,000,000 | ---D | C] -- C:\328562c906c870eeac9003
[2013/04/25 11:44:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\UAB
[2013/04/25 11:44:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Local Settings\Application Data\PC_Drivers_Headquarters
[2013/04/25 11:44:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Driver Inspector
[2013/04/25 11:42:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Driver Inspector
[2013/04/25 11:42:38 | 000,000,000 | ---D | C] -- C:\Program Files\Driver Inspector
[2013/04/25 09:01:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Application Data\Dell
[2013/04/25 09:00:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Dell Support Center
[2013/04/25 09:00:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PCDr
[2013/04/25 08:59:30 | 000,000,000 | ---D | C] -- C:\Program Files\Dell Support Center
[2013/04/25 08:56:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Application Data\PCDr
[2013/04/25 08:51:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Local Settings\Application Data\Deployment
[2013/04/23 17:01:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\Africa2
[2013/04/23 16:53:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\Africa
[2013/04/16 17:20:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Application Data\ElevatedDiagnostics
[2013/04/16 17:12:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows PowerShell 1.0
[2013/04/16 17:12:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\windowspowershell
[2013/04/16 16:25:56 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2007/11/10 17:28:25 | 005,822,168 | ---- | C] (Mozilla) -- C:\Program Files\Firefox Setup 2.0.0.9.exe
[24 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[14 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/05/12 15:23:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/05/12 04:38:29 | 000,000,412 | ---- | M] () -- C:\WINDOWS\tasks\RNUpgradeHelperLogonPrompt_Chris.job
[2013/05/12 04:37:30 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1381835960-4241067638-2893470200-1005.job
[2013/05/12 04:37:11 | 000,000,880 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/12 04:37:03 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-18.job
[2013/05/11 19:37:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2013/05/11 19:34:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2013/05/11 17:02:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/11 17:00:02 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2013/05/11 17:00:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2013/05/11 16:29:12 | 000,116,782 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\Application Data\2433f433
[2013/05/11 16:29:11 | 000,116,755 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\2433f433
[2013/05/11 16:29:11 | 000,116,747 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\2433f433
[2013/05/11 16:26:48 | 000,503,458 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/05/11 16:26:48 | 000,087,094 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/05/11 16:22:00 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk
[2013/05/11 12:09:13 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2013/05/11 12:09:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2013/05/11 07:07:04 | 000,000,406 | ---- | M] () -- C:\WINDOWS\tasks\ReclaimerUpdateFiles_Chris.job
[2013/05/11 07:00:00 | 000,000,506 | ---- | M] () -- C:\WINDOWS\tasks\SystemToolsDailyTest.job
[2013/05/11 07:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2013/05/11 07:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2013/05/11 05:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2013/05/11 05:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2013/05/10 06:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2013/05/10 06:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2013/05/10 04:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2013/05/10 04:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2013/05/09 18:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2013/05/09 18:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2013/05/09 16:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2013/05/09 16:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2013/05/09 15:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2013/05/09 15:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2013/05/09 12:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2013/05/09 12:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2013/05/09 10:01:13 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2013/05/09 10:01:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2013/05/08 09:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2013/05/08 09:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2013/05/08 08:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2013/05/08 08:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2013/05/08 06:37:16 | 000,002,489 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Word.lnk
[2013/05/06 13:06:02 | 000,000,402 | ---- | M] () -- C:\WINDOWS\tasks\ReclaimerUpdateXML_Chris.job
[2013/05/06 10:17:00 | 000,000,288 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-18.job
[2013/05/02 14:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2013/05/02 14:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2013/05/01 16:38:38 | 000,002,487 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Excel.lnk
[2013/04/30 15:17:23 | 000,129,576 | ---- | M] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2013/04/30 13:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2013/04/30 13:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2013/04/28 13:41:51 | 000,000,802 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\trials2_low.exe.lnk
[2013/04/28 13:36:27 | 000,413,696 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2013/04/28 13:36:26 | 000,110,592 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2013/04/25 17:52:32 | 000,276,008 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\bookmarks .html
[2013/04/25 15:54:17 | 000,224,816 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/04/25 15:05:41 | 000,000,568 | ---- | M] () -- C:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask.job
[2013/04/25 14:58:40 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/04/25 14:42:12 | 000,000,000 | R--D | M] -- C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2013/04/25 11:58:21 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013/04/25 11:42:53 | 000,002,064 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Driver Inspector.lnk
[2013/04/25 11:42:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Start Menu\Programs\Driver Inspector
[2013/04/25 09:00:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Start Menu\Programs\Dell Support Center
[2013/04/22 11:38:46 | 000,080,247 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\600px-Brosen_windrose_Full.svg.png
[2013/04/19 20:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2013/04/19 20:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2013/04/18 05:25:47 | 000,885,975 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Chris Cartwright PVG.pdf
[2013/04/17 04:10:40 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/04/17 04:10:40 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/04/16 17:12:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows PowerShell 1.0
[2013/04/16 17:02:16 | 000,000,706 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\CleanSilverlight.cmd
[24 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[14 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/05/11 16:29:12 | 000,116,782 | ---- | C] () -- C:\WINDOWS\system32\config\systemprofile\Application Data\2433f433
[2013/05/11 16:29:11 | 000,116,755 | ---- | C] () -- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\2433f433
[2013/05/11 16:29:11 | 000,116,747 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\2433f433
[2013/04/30 15:17:23 | 000,129,576 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2013/04/28 13:41:22 | 000,000,802 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\trials2_low.exe.lnk
[2013/04/25 17:52:32 | 000,276,008 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\bookmarks .html
[2013/04/25 15:05:39 | 000,000,568 | ---- | C] () -- C:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask.job
[2013/04/25 15:05:37 | 000,000,506 | ---- | C] () -- C:\WINDOWS\tasks\SystemToolsDailyTest.job
[2013/04/25 15:05:20 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\LocalService\Start Menu\Programs\Windows Media Player.lnk
[2013/04/25 11:42:53 | 000,002,064 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Driver Inspector.lnk
[2013/04/22 11:38:44 | 000,080,247 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\600px-Brosen_windrose_Full.svg.png
[2013/04/18 05:25:47 | 000,885,975 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Chris Cartwright PVG.pdf
[2013/04/16 17:12:48 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013/04/16 17:02:16 | 000,000,706 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\CleanSilverlight.cmd
[2012/12/04 09:36:57 | 000,047,987 | ---- | C] () -- C:\Documents and Settings\Chris\orchard1.jpg
[2012/09/15 12:17:10 | 000,021,504 | ---- | C] () -- C:\WINDOWS\jestertb.dll
[2012/03/14 05:46:55 | 000,224,282 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1381835960-4241067638-2893470200-1005-0.dat
[2012/03/14 05:46:44 | 000,224,282 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2011/12/03 19:23:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\{2563EFFB-83AC-48D0-B015-958E2E3A1995}
[2011/10/29 05:22:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\{332581EF-AD9C-4813-A416-0D2699B8DA44}
[2011/09/01 13:41:20 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\Chris\ntuser.pol
[2011/05/13 16:11:29 | 000,001,348 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\13nnf18pd0364y8w46p0i346m583t86kk1odd1c8w0
[2011/05/13 16:11:29 | 000,001,348 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\13nnf18pd0364y8w46p0i346m583t86kk1odd1c8w0
[2011/02/10 00:03:48 | 000,000,314 | ---- | C] () -- C:\WINDOWS\primopdf.ini
[2010/09/07 11:14:52 | 000,180,624 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll
[2010/08/04 05:07:07 | 000,077,374 | ---- | C] () -- C:\WINDOWS\hpqins05.dat
[2010/04/19 19:53:33 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\Chris\Application Data\Launch Internet Explorer Browser.lnk
[2010/04/19 03:28:07 | 000,012,182 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\w3u38AFn
[2010/04/19 03:28:07 | 000,012,182 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\w3u38AFn
[2010/03/26 16:34:53 | 000,015,076 | -HS- | C] () -- C:\Documents and Settings\Fiona\Local Settings\Application Data\OgDBc43wel
[2010/03/26 16:34:53 | 000,015,076 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\OgDBc43wel
[2010/03/26 16:19:39 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Fiona\Application Data\$_hpcst$.hpc
[2010/03/23 09:26:48 | 000,201,512 | ---- | C] () -- C:\WINDOWS\System32\vpnapi.dll
[2010/03/23 09:17:40 | 000,197,416 | ---- | C] () -- C:\WINDOWS\System32\CSGina.dll
[2010/02/12 13:37:28 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Application Data\$_hpcst$.hpc
[2010/01/13 22:41:00 | 000,309,248 | ---- | C] () -- C:\WINDOWS\System32\sqlite36_engine.dll
[2010/01/13 22:38:00 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\DirectCOM.dll
[2009/12/08 08:32:43 | 000,000,053 | ---- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\mm-device-08.ini
[2009/11/03 08:41:39 | 000,019,518 | ---- | C] () -- C:\WINDOWS\hpqins13.dat
[2009/10/19 03:01:10 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2009/06/16 07:56:58 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Chris\Application Data\$_hpcst$.hpc
[2009/05/13 16:07:00 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Fiona\ź9ź9
[2009/04/14 12:26:44 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009/03/28 14:59:52 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Chris\ź9ź9
[2009/03/28 14:55:21 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\MFSLib2888.dll
[2009/03/28 14:55:21 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\MFSBaseLib2888.dll
[2009/01/08 14:46:57 | 000,352,256 | ---- | C] () -- C:\WINDOWS\System32\rbvss.exe
[2008/07/09 16:22:32 | 000,038,425 | ---- | C] () -- C:\Documents and Settings\Fiona\Application Data\mdb.bin
[2008/05/26 16:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 16:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2007/12/20 02:27:31 | 000,002,907 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/09/27 05:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 05:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 05:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2007/09/01 03:29:56 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\instlsp.exe
[2007/04/20 15:37:54 | 000,000,037 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2007/01/08 18:19:28 | 000,082,044 | ---- | C] () -- C:\Documents and Settings\Chris\c5_1.prn
[2006/12/10 16:10:14 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/12/07 05:51:20 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Fiona\Application Data\wklnhst.dat
[2006/12/06 14:55:24 | 000,061,952 | ---- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/11/30 17:25:15 | 000,040,156 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2006/11/30 12:59:24 | 000,086,214 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
[2006/11/30 12:59:24 | 000,026,154 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
[2006/11/30 12:59:24 | 000,024,903 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
[2006/11/30 12:59:24 | 000,021,390 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
[2006/11/30 12:59:24 | 000,020,148 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
[2006/11/30 12:59:24 | 000,011,811 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
[2006/11/30 12:59:24 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
[2006/11/30 12:59:24 | 000,001,146 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2006/11/30 12:59:24 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2006/11/30 12:59:24 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2006/11/30 12:59:24 | 000,001,136 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2006/11/30 12:59:24 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2006/11/30 12:59:24 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2006/11/30 12:59:24 | 000,001,120 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2006/11/30 12:59:24 | 000,001,107 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2006/11/30 12:59:24 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2006/11/30 12:59:24 | 000,000,099 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2006/11/30 12:58:52 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDED68PE.ini
[2006/11/22 16:47:50 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2006/11/22 15:59:16 | 000,005,642 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2006/11/22 15:59:16 | 000,000,168 | RHS- | C] () -- C:\WINDOWS\System32\7D77566AE0.sys
[2006/11/22 15:29:27 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\Fiona\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/11/22 15:27:48 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Fiona\Local Settings\Application Data\fusioncache.dat
[2006/11/22 15:20:38 | 000,000,150 | ---- | C] () -- C:\Documents and Settings\Chris\Application Data\wklnhst.dat
[2006/11/22 15:12:46 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\fusioncache.dat
[2006/11/22 15:11:50 | 000,000,136 | ---- | C] () -- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\fusioncache.dat
[2006/11/19 06:48:08 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/11/19 06:37:53 | 000,000,136 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2006/11/19 06:35:35 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2006/11/19 06:05:02 | 000,049,152 | ---- | C] () -- C:\WINDOWS\setpwrcg.exe
[2006/11/19 06:04:54 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2006/11/19 06:04:46 | 000,000,474 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/08/16 16:52:01 | 000,000,136 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\fusioncache.dat
[2005/08/16 00:48:31 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/08/16 00:38:45 | 000,034,380 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005/08/16 00:37:24 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2005/08/16 00:33:38 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/08/16 00:27:59 | 000,224,816 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005/08/16 00:18:33 | 000,503,458 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2005/08/16 00:18:33 | 000,087,094 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2005/08/16 00:18:28 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005/04/09 13:04:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005/03/22 18:38:24 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2005/03/22 18:38:24 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/10 07:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/10 07:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/10 07:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/10 07:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/10 07:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/10 07:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/10 07:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/10 00:11:42 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

========== LOP Check ==========

[2012/12/13 03:08:39 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Application Data\AVG2013
[2012/03/30 06:06:30 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Application Data\searchresults1
[2012/03/15 08:18:33 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Application Data\searchresultstb
[2011/09/16 02:29:58 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Application Data\Trusteer
[2010/02/08 06:18:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Akadamia
[2010/03/23 18:57:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Artweaver
[2011/12/04 19:58:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\AVG
[2012/12/13 03:13:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\AVG2013
[2010/04/19 06:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\AVG9
[2009/12/14 18:27:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\BBCiPlayerDesktop.61DB7A798358575D6A969CCD73DDBBD723A6DA9D.1
[2010/11/20 14:10:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/04/19 05:36:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Cuheq
[2011/11/21 18:36:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Digiarty
[2011/08/25 17:54:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Dropbox
[2013/04/16 17:20:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\ElevatedDiagnostics
[2006/11/30 13:11:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\EPSON
[2011/11/25 18:29:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\HandBrake
[2007/11/08 18:38:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\iShell
[2013/03/27 17:43:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\JAM Software
[2006/11/22 18:14:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Leadertech
[2011/08/16 18:01:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\MSNInstaller
[2010/10/09 05:26:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\NCH Swift Sound
[2010/04/19 02:54:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Noreag
[2013/04/25 09:01:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\PCDr
[2011/01/09 16:15:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\PriceGong
[2013/03/25 19:19:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\PrimoPDF
[2012/05/03 12:27:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Scribus
[2012/11/19 13:47:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\searchresults1
[2012/11/19 13:46:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\searchresultstb
[2010/10/28 06:26:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Stellarium
[2006/12/07 18:12:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Template
[2009/09/25 15:58:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Trusteer
[2012/12/13 03:07:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\TuneUp Software
[2009/12/06 20:35:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Uniblue
[2008/08/10 15:20:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Viewpoint
[2010/04/21 07:56:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Windows Desktop Search
[2010/04/21 08:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Windows Search
[2007/08/31 06:15:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fiona\Application Data\AVG7
[2012/09/29 10:07:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fiona\Application Data\searchresults1
[2012/09/29 10:07:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fiona\Application Data\searchresultstb
[2006/12/07 05:51:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fiona\Application Data\Template
[2009/10/18 14:34:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Fiona\Application Data\Trusteer
[2010/03/26 16:49:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Trusteer
[2010/03/23 18:57:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Artweaver
[2013/01/25 16:06:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign
[2011/12/04 17:01:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2012/12/28 08:25:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG2013
[2010/10/17 07:20:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2010/10/17 07:52:24 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2013/04/25 11:44:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Driver Inspector
[2011/12/24 10:46:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Driver Manager
[2012/02/09 07:05:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\dvdfab
[2009/12/03 19:55:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit
[2009/12/08 08:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Memory-Map-License
[2013/05/02 04:09:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2010/10/09 05:27:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2013/04/25 09:01:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PCDr
[2009/01/08 14:46:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PliE6QGS
[2012/11/08 16:29:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2011/12/04 19:58:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/09/25 15:58:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Trusteer
[2013/04/25 11:44:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UAB
[2006/11/30 13:01:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UDL
[2006/11/19 06:36:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2011/01/09 15:32:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\xml_param
[2011/06/11 16:26:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/02/12 11:10:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2013/05/11 19:37:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2013/05/10 04:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2013/05/11 05:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2013/05/10 06:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2013/05/11 07:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2013/05/08 08:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2013/05/08 09:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2013/05/09 10:01:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2013/05/11 12:09:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2013/05/09 12:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2013/04/30 13:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2013/04/19 20:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2013/05/02 14:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2013/05/09 15:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2013/05/09 16:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2013/05/11 17:00:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2013/05/09 18:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2013/05/11 19:34:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job
[2013/04/19 20:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job
[2013/02/21 22:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job
[2013/02/23 23:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job
[2013/02/09 00:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job
[2013/02/21 22:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2013/02/09 01:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job
[2012/10/31 02:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job
[2013/03/07 03:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job
[2013/04/14 03:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job
[2013/05/10 04:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job
[2013/05/11 05:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job
[2013/05/10 06:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job
[2013/05/11 07:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job
[2013/05/08 08:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job
[2013/05/08 09:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job
[2013/02/23 23:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2013/05/09 10:01:13 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job
[2013/05/11 12:09:13 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job
[2013/05/09 12:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job
[2013/04/30 13:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job
[2013/05/02 14:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job
[2013/05/09 15:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job
[2013/05/09 16:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job
[2013/05/11 17:00:02 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job
[2013/05/09 18:00:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job
[2013/02/09 00:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2013/02/09 01:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2012/10/31 02:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2013/03/07 03:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2013/04/14 03:00:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
[2013/04/25 15:05:41 | 000,000,568 | ---- | M] () -- C:\WINDOWS\Tasks\PCDoctorBackgroundMonitorTask.job
[2013/03/21 12:41:07 | 000,000,268 | ---- | M] () -- C:\WINDOWS\Tasks\prismDowngrade.job
[2013/01/11 10:02:03 | 000,000,268 | ---- | M] () -- C:\WINDOWS\Tasks\prismShakeIcon.job
[2013/05/11 07:07:04 | 000,000,406 | ---- | M] () -- C:\WINDOWS\Tasks\ReclaimerUpdateFiles_Chris.job
[2013/05/06 13:06:02 | 000,000,402 | ---- | M] () -- C:\WINDOWS\Tasks\ReclaimerUpdateXML_Chris.job
[2013/05/12 04:38:29 | 000,000,412 | ---- | M] () -- C:\WINDOWS\Tasks\RNUpgradeHelperLogonPrompt_Chris.job
[2013/01/08 10:18:11 | 000,000,278 | ---- | M] () -- C:\WINDOWS\Tasks\switchShakeIcon.job
[2013/05/11 07:00:00 | 000,000,506 | ---- | M] () -- C:\WINDOWS\Tasks\SystemToolsDailyTest.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C39E55C5
< End of report >
  • 0

Advertisements


#2
gringo_pr

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
Hello ChrisCart

I would like to welcome you to the Malware Removal section of the forum.

Around here they call me Gringo and I will be glad to help you with your malware problems.

Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

I would like you to run this custom script for me now and when it is complete please let me have the report and a status update for the computer.

Run OTL Script

  • Double-click OTL.exe to start the program.
  • Copy and Paste the following code into the Posted Image text box.
    :OTL
    IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: File not found
    O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - File not found
    O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
    O3 - HKU\Fiona_ON_C\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
    O3 - HKU\HelpAssistant_ON_C\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
    O3 - HKU\HelpAssistant_ON_C\..\Toolbar\WebBrowser: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No CLSID value found.
    O4 - HKU\HelpAssistant_ON_C..\Run: [buefwftm] File not found
    O4 - HKU\HelpAssistant_ON_C..\Run: [updateMgr] File not found
    O4 - HKU\HelpAssistant_ON_C..\RunOnce: [spchecker] File not found
    O16 - DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} http://intel-drv-cdn...reqlab_srlx.cab (Reg Error: Key error.)
    O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.micr...78f/wvc1dmo.cab (Reg Error: Key error.)
    O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
    O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - File not found
    [2013/05/11 16:29:12 | 000,116,782 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\Application Data\2433f433
    [2013/05/11 16:29:11 | 000,116,755 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\2433f433
    [2013/05/11 16:29:11 | 000,116,747 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\2433f433
    [2011/05/13 16:11:29 | 000,001,348 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\13nnf18pd0364y8w46p0i346m583t86kk1odd1c8w0
    [2011/05/13 16:11:29 | 000,001,348 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\13nnf18pd0364y8w46p0i346m583t86kk1odd1c8w0
    [2010/04/19 03:28:07 | 000,012,182 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\w3u38AFn
    [2010/04/19 03:28:07 | 000,012,182 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\w3u38AFn
    [2010/03/26 16:34:53 | 000,015,076 | -HS- | C] () -- C:\Documents and Settings\Fiona\Local Settings\Application Data\OgDBc43wel
    [2010/03/26 16:34:53 | 000,015,076 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\OgDBc43wel
    @Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4
    @Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C39E55C5
    O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
    O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
    :Files
    ipconfig /flushdns /c
    C:\windows\tasks\At*.job
    :Commands
    [PURITY]
    [emptyjava]
    [EMPTYFLASH]
    [reboot]
    
  • Then click the Run Fix button at the top.
  • Click Posted Image.
  • OTL may ask to reboot the machine. Please do so if asked.
  • The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.

    Note** if the report does not popup after the computer reboots you can find it here in this folder - C:\_OTL\MovedFiles

    It will be named - mmddyyyy_hhmmss.log

    Where mmddyyyy_hhmmss - are numbers representing the date and time the fix was run.

Let me know How things are doing

Gringo
]
  • 0

#3
ChrisCart

ChrisCart

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Gringo

Thanks very much for your help. Ran code and rebooted as per instructions. Windows ran up to log in page and, after entering password, has not progressed beyond blue screen for over ten minutes.
  • 0

#4
gringo_pr

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
Try this please. You will need a USB drive.

Download http://unetbootin.so...dows-latest.exe & http://noahdfear.net.../xpud-0.9.2.iso to the desktop of your clean computer
  • Insert your USB drive
  • Press Start > My Computer > right click your USB drive > choose Format > Quick format
  • Double click the unetbootin-xpud-windows-387.exe that you just downloaded
  • Press Run then OK
  • It will install a little bootable OS on your USB
  • After it has completed do not choose to reboot the clean computer simply close the installer
  • Download xPUDtestdisk.exe and save it to the USB device
  • Double click xPUDtestdisk.exe to extract the contents to your USB device
  • Remove the USB and insert it in the sick computer
  • Boot the Sick computer
  • Press F12 and choose to boot from the USB
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Press Tool at the top
  • Choose Open Terminal
  • Type testdisk/testdisk_static
  • Press Enter
    • The TestDisk command window will open
    • Choose Create and press Enter
    • TestDisk will now detect all local hard drives
    • Use the arrow (up and down) keys to highlight the disk called /dev/sda if it represents your primary hard drive and press Enter
    • If your not sure then note everything you see and post it for my review
    • Select Intel (even if you have an AMD processor) and press Enter
    • Select Advanced and press Enter
    • Select [Boot] and press Enter
    • Select [Dump] and press Enter
    • Select [Quit] to exit
  • A log will be created in the root of the usb device
  • Remove the USB drive and insert back in your working computer

    Please note - all text entries are case sensitive
Copy and paste the resultant log for my review
  • 0

#5
ChrisCart

ChrisCart

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Gringo

Just as I received your response my normal windows desktop has appeared. I have not carried out any subsequent actions. Does this negate your last set of instructions?
  • 0

#6
gringo_pr

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
Hello ChrisCart

I Would like you to do the following.

Please print out or make a copy in notepad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
  • 0

#7
ChrisCart

ChrisCart

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Gringo

Have carried out the following:

Downloaded and ran Combofix.exe.
It identified that Microsoft Recovery Console was missing and installed.
Identified that "You are infected with Rootkit.ZeroAccess! It has inserted itself into the tcp/ip stack".
Combofix rebooted the machine. Signed in with password however did not get beyond blue screen Combofix continued to run.
Combofix commenced reboot again after completing roughly 50 "stages". Machine has not rebooted, sitting at blue screen, Combofix on screen instruction was not to manually reboot.
  • 0

#8
gringo_pr

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
what does it say at the screen?


gringo
  • 0

#9
ChrisCart

ChrisCart

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Nothing on screen. Combofix window closed down at start of reboot, but then no further progression.
  • 0

#10
gringo_pr

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
OK go ahead and restart the computer and let me know if combofix finishes after you reboot


gringo
  • 0

Advertisements


#11
ChrisCart

ChrisCart

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
On restart, after log in, message displayed: Windows cannot find C:\ComboFix\CF24414.3XE.
Clicked on OK to continue and desktop immediately appeared.
Combofix has not restarted
  • 0

#12
gringo_pr

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
Hello ChrisCart

I would like you to try and run these next.

TDSSKiller

Please download the latest version of TDSSKiller from here and save it to your Desktop.
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
  • Put a checkmark beside loaded modules.
  • A reboot will be needed to apply the changes. Do it.
  • TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
  • Then click on Change parameters in TDSSKiller.
  • Check all boxes then click OK.
  • Click the Start Scan button.
  • The scan should take no longer than 2 minutes.
  • If a suspicious object is detected, the default action will be Skip, click on Continue.
  • If malicious objects are found, they will show in the Scan results
  • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
    Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  • more than one report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". The one that I need is the larger one. Please copy and paste the contents of that file here.

    Note** this report can be very long - so if the website gives you an error saying it is to long you may attache it

    If the forum still complains about it being to long send me everything that is at the end of the report after where it says

    ==================
    Scan finished
    ==================

and I will see if I want to see the whole report

--RogueKiller--

Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit
  • Quit all programs that you may have started.
  • Please disconnect any external drives from the computer before you run this scan!
  • For Vista or Windows 7, right-click and select "Run as Administrator to start"
  • For Windows XP, double-click to start.
  • Wait until Prescan has finished ...
  • Then Click on "Scan" button
  • Wait until the Status box shows "Scan Finished"
  • click on "delete"
  • Wait until the Status box shows "Deleting Finished"
  • Click on "Report" and copy/paste the content of the Notepad into your next reply.
  • the scan will make two reports the one I would like to see is called RKreport[2].txt on your Desktop
  • Exit/Close RogueKiller+

send me the reports made from TDSSKiller and Roguekiller and also let me know how the computer is doing at this time.

Gringo
  • 0

#13
ChrisCart

ChrisCart

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
TDSSKiller Cure process has thrown up warning message: "Can't cure MBR. Write Standard boot code?" Should I go with Yes or No option?
  • 0

#14
gringo_pr

gringo_pr

    Trusted Helper

  • Malware Removal
  • 7,268 posts
yes
  • 0

#15
ChrisCart

ChrisCart

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Please find contents of TDSSKiller file:

08:19:51.0437 3860 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
08:19:51.0484 3860 ============================================================
08:19:51.0484 3860 Current date / time: 2013/05/15 08:19:51.0484
08:19:51.0484 3860 SystemInfo:
08:19:51.0484 3860
08:19:51.0500 3860 OS Version: 5.1.2600 ServicePack: 3.0
08:19:51.0500 3860 Product type: Workstation
08:19:51.0500 3860 ComputerName: ROBSTER
08:19:51.0500 3860 UserName: Chris
08:19:51.0500 3860 Windows directory: C:\WINDOWS
08:19:51.0500 3860 System windows directory: C:\WINDOWS
08:19:51.0500 3860 Processor architecture: Intel x86
08:19:51.0500 3860 Number of processors: 2
08:19:51.0500 3860 Page size: 0x1000
08:19:51.0500 3860 Boot type: Normal boot
08:19:51.0500 3860 ============================================================
08:19:55.0578 3860 BG loaded
08:19:58.0515 3860 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
08:19:58.0609 3860 ============================================================
08:19:58.0609 3860 \Device\Harddisk0\DR0:
08:19:58.0609 3860 MBR partitions:
08:19:58.0609 3860 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2738A, BlocksNum 0x879E994
08:19:58.0656 3860 ============================================================
08:19:58.0921 3860 C: <-> \Device\Harddisk0\DR0\Partition1
08:19:58.0921 3860 ============================================================
08:19:58.0921 3860 Initialize success
08:19:58.0921 3860 ============================================================
08:22:50.0609 5904 ============================================================
08:22:50.0609 5904 Scan started
08:22:50.0609 5904 Mode: Manual; SigCheck; TDLFS;
08:22:50.0609 5904 ============================================================
08:22:51.0796 5904 ================ Scan system memory ========================
08:22:51.0796 5904 System memory - ok
08:22:51.0796 5904 ================ Scan services =============================
08:22:51.0890 5904 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
08:22:53.0265 5904 !SASCORE ( UnsignedFile.Multi.Generic ) - warning
08:22:53.0265 5904 !SASCORE - detected UnsignedFile.Multi.Generic (1)
08:22:53.0406 5904 Abiosdsk - ok
08:22:53.0453 5904 [ 6ABB91494FE6C59089B9336452AB2EA3 ] abp480n5 C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
08:22:53.0625 5904 abp480n5 - ok
08:22:53.0671 5904 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
08:22:53.0875 5904 ACPI - ok
08:22:53.0906 5904 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
08:22:54.0046 5904 ACPIEC - ok
08:22:54.0125 5904 [ E42F7B36B4D8866184E8DF9776CA4226 ] AdobeActiveFileMonitor C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
08:22:54.0171 5904 AdobeActiveFileMonitor ( UnsignedFile.Multi.Generic ) - warning
08:22:54.0171 5904 AdobeActiveFileMonitor - detected UnsignedFile.Multi.Generic (1)
08:22:54.0218 5904 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
08:22:54.0359 5904 adpu160m - ok
08:22:54.0375 5904 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
08:22:54.0515 5904 aec - ok
08:22:54.0546 5904 [ 7618D5218F2A614672EC61A80D854A37 ] AFD C:\WINDOWS\System32\drivers\afd.sys
08:22:54.0593 5904 AFD - ok
08:22:54.0640 5904 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
08:22:54.0781 5904 agp440 - ok
08:22:54.0796 5904 [ 03A7E0922ACFE1B07D5DB2EEB0773063 ] agpCPQ C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
08:22:54.0953 5904 agpCPQ - ok
08:22:54.0953 5904 [ C23EA9B5F46C7F7910DB3EAB648FF013 ] Aha154x C:\WINDOWS\system32\DRIVERS\aha154x.sys
08:22:55.0031 5904 Aha154x - ok
08:22:55.0062 5904 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
08:22:55.0187 5904 aic78u2 - ok
08:22:55.0203 5904 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
08:22:55.0328 5904 aic78xx - ok
08:22:55.0359 5904 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
08:22:55.0500 5904 Alerter - ok
08:22:55.0515 5904 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
08:22:55.0671 5904 ALG - ok
08:22:55.0687 5904 [ 1140AB9938809700B46BB88E46D72A96 ] AliIde C:\WINDOWS\system32\DRIVERS\aliide.sys
08:22:55.0828 5904 AliIde - ok
08:22:55.0859 5904 [ CB08AED0DE2DD889A8A820CD8082D83C ] alim1541 C:\WINDOWS\system32\DRIVERS\alim1541.sys
08:22:55.0984 5904 alim1541 - ok
08:22:56.0000 5904 [ 95B4FB835E28AA1336CEEB07FD5B9398 ] amdagp C:\WINDOWS\system32\DRIVERS\amdagp.sys
08:22:56.0125 5904 amdagp - ok
08:22:56.0140 5904 [ 79F5ADD8D24BD6893F2903A3E2F3FAD6 ] amsint C:\WINDOWS\system32\DRIVERS\amsint.sys
08:22:56.0203 5904 amsint - ok
08:22:56.0296 5904 [ FB32F046A2578755FA0DA5052C6A9CD3 ] Apache2.2 C:\Program Files\Xampp\xampp\apache\bin\httpd.exe
08:22:56.0312 5904 Apache2.2 - ok
08:22:56.0359 5904 [ EC94E05B76D033B74394E7B2175103CF ] APPDRV C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS
08:22:56.0375 5904 APPDRV ( UnsignedFile.Multi.Generic ) - warning
08:22:56.0375 5904 APPDRV - detected UnsignedFile.Multi.Generic (1)
08:22:56.0437 5904 [ 20F6F19FE9E753F2780DC2FA083AD597 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
08:22:56.0453 5904 Apple Mobile Device - ok
08:22:56.0484 5904 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
08:22:56.0640 5904 AppMgmt - ok
08:22:56.0656 5904 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
08:22:56.0859 5904 Arp1394 - ok
08:22:56.0906 5904 [ 62D318E9A0C8FC9B780008E724283707 ] asc C:\WINDOWS\system32\DRIVERS\asc.sys
08:22:57.0046 5904 asc - ok
08:22:57.0093 5904 [ 69EB0CC7714B32896CCBFD5EDCBEA447 ] asc3350p C:\WINDOWS\system32\DRIVERS\asc3350p.sys
08:22:57.0156 5904 asc3350p - ok
08:22:57.0171 5904 [ 5D8DE112AA0254B907861E9E9C31D597 ] asc3550 C:\WINDOWS\system32\DRIVERS\asc3550.sys
08:22:57.0296 5904 asc3550 - ok
08:22:57.0343 5904 [ B979979AB8027F7F53FB16EC4229B7DB ] Aspi32 C:\WINDOWS\system32\drivers\Aspi32.sys
08:22:57.0359 5904 Aspi32 ( UnsignedFile.Multi.Generic ) - warning
08:22:57.0359 5904 Aspi32 - detected UnsignedFile.Multi.Generic (1)
08:22:57.0437 5904 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
08:22:57.0453 5904 aspnet_state - ok
08:22:57.0468 5904 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
08:22:57.0593 5904 AsyncMac - ok
08:22:57.0640 5904 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
08:22:57.0781 5904 atapi - ok
08:22:57.0796 5904 Atdisk - ok
08:22:57.0828 5904 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
08:22:57.0968 5904 Atmarpc - ok
08:22:58.0000 5904 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
08:22:58.0140 5904 AudioSrv - ok
08:22:58.0156 5904 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
08:22:58.0296 5904 audstub - ok
08:22:58.0656 5904 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] AVGIDSAgent C:\Program Files\AVG\AVG2013\avgidsagent.exe
08:22:59.0000 5904 AVGIDSAgent - ok
08:22:59.0046 5904 [ 7BB2C605094DBCA536D127B434214862 ] AVGIDSDriver C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys
08:22:59.0609 5904 AVGIDSDriver - ok
08:22:59.0640 5904 [ 8F50F98686C9A397A19FCBAE284DB1C5 ] AVGIDSHX C:\WINDOWS\system32\DRIVERS\avgidshx.sys
08:22:59.0656 5904 AVGIDSHX - ok
08:22:59.0687 5904 [ A8DE230CC8536790CA07D37FBCD87A74 ] AVGIDSShim C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys
08:22:59.0703 5904 AVGIDSShim - ok
08:22:59.0750 5904 [ D53D35031365A0ECCB1DC1BC1B15B18E ] Avgldx86 C:\WINDOWS\system32\DRIVERS\avgldx86.sys
08:22:59.0781 5904 Avgldx86 - ok
08:22:59.0828 5904 [ 95889A9D23F3133250FA8AD13C982D58 ] Avglogx C:\WINDOWS\system32\DRIVERS\avglogx.sys
08:22:59.0859 5904 Avglogx - ok
08:22:59.0906 5904 [ AF7AA9BA434CD28833A66E90993E8DFD ] Avgmfx86 C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
08:22:59.0953 5904 Avgmfx86 - ok
08:22:59.0968 5904 [ F3D57358DE0B8B3491013C615754A7C7 ] Avgrkx86 C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
08:22:59.0984 5904 Avgrkx86 - ok
08:23:00.0015 5904 [ BA73B38E9033FC6018DB736B635706AE ] Avgtdix C:\WINDOWS\system32\DRIVERS\avgtdix.sys
08:23:00.0031 5904 Avgtdix - ok
08:23:00.0062 5904 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd C:\Program Files\AVG\AVG2013\avgwdsvc.exe
08:23:00.0078 5904 avgwd - ok
08:23:00.0125 5904 [ 6489310D11971F6BA6C7F49BE0BAF6E0 ] bcm4sbxp C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
08:23:00.0187 5904 bcm4sbxp - ok
08:23:00.0218 5904 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
08:23:00.0359 5904 Beep - ok
08:23:00.0375 5904 bhif686 - ok
08:23:00.0421 5904 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
08:23:00.0671 5904 BITS - ok
08:23:00.0750 5904 [ F2060A34C8A75BC24A9222EB4F8C07BD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
08:23:00.0781 5904 Bonjour Service - ok
08:23:00.0812 5904 [ A06CE3399D16DB864F55FAEB1F1927A9 ] Browser C:\WINDOWS\System32\browser.dll
08:23:00.0953 5904 Browser - ok
08:23:01.0062 5904 catchme - ok
08:23:01.0109 5904 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
08:23:01.0250 5904 cbidf - ok
08:23:01.0250 5904 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
08:23:01.0375 5904 cbidf2k - ok
08:23:01.0421 5904 [ F3EC03299634490E97BBCE94CD2954C7 ] cd20xrnt C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
08:23:01.0500 5904 cd20xrnt - ok
08:23:01.0515 5904 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
08:23:01.0656 5904 Cdaudio - ok
08:23:01.0703 5904 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
08:23:01.0859 5904 Cdfs - ok
08:23:01.0890 5904 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
08:23:02.0046 5904 Cdrom - ok
08:23:02.0078 5904 [ 84853B3FD012251690570E9E7E43343F ] cercsr6 C:\WINDOWS\system32\drivers\cercsr6.sys
08:23:02.0093 5904 cercsr6 ( UnsignedFile.Multi.Generic ) - warning
08:23:02.0093 5904 cercsr6 - detected UnsignedFile.Multi.Generic (1)
08:23:02.0109 5904 Changer - ok
08:23:02.0140 5904 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
08:23:02.0265 5904 CiSvc - ok
08:23:02.0296 5904 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
08:23:02.0421 5904 ClipSrv - ok
08:23:02.0468 5904 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
08:23:02.0515 5904 clr_optimization_v2.0.50727_32 - ok
08:23:02.0609 5904 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
08:23:02.0625 5904 clr_optimization_v4.0.30319_32 - ok
08:23:02.0656 5904 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
08:23:02.0781 5904 CmBatt - ok
08:23:02.0843 5904 [ E5DCB56C533014ECBC556A8357C929D5 ] CmdIde C:\WINDOWS\system32\DRIVERS\cmdide.sys
08:23:02.0968 5904 CmdIde - ok
08:23:02.0984 5904 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
08:23:03.0187 5904 Compbatt - ok
08:23:03.0187 5904 COMSysApp - ok
08:23:03.0234 5904 [ 3EE529119EED34CD212A215E8C40D4B6 ] Cpqarray C:\WINDOWS\system32\DRIVERS\cpqarray.sys
08:23:03.0375 5904 Cpqarray - ok
08:23:03.0406 5904 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
08:23:03.0531 5904 CryptSvc - ok
08:23:03.0578 5904 [ B5ECADF7708960F1818C7FA015F4C239 ] CVirtA C:\WINDOWS\system32\DRIVERS\CVirtA.sys
08:23:03.0671 5904 CVirtA - ok
08:23:03.0812 5904 [ 66257CB4E4FB69887CDDC71663741435 ] CVPND C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
08:23:03.0875 5904 CVPND - ok
08:23:03.0937 5904 [ 18994842386FD3039279D7865740ABBD ] CVPNDRVA C:\WINDOWS\system32\Drivers\CVPNDRVA.sys
08:23:03.0953 5904 CVPNDRVA ( UnsignedFile.Multi.Generic ) - warning
08:23:03.0953 5904 CVPNDRVA - detected UnsignedFile.Multi.Generic (1)
08:23:04.0000 5904 [ E550E7418984B65A78299D248F0A7F36 ] dac2w2k C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
08:23:04.0156 5904 dac2w2k - ok
08:23:04.0187 5904 [ 683789CAA3864EB46125AE86FF677D34 ] dac960nt C:\WINDOWS\system32\DRIVERS\dac960nt.sys
08:23:04.0328 5904 dac960nt - ok
08:23:04.0375 5904 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
08:23:04.0421 5904 DcomLaunch - ok
08:23:04.0437 5904 DellBIOS - ok
08:23:04.0468 5904 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
08:23:04.0625 5904 Dhcp - ok
08:23:04.0640 5904 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
08:23:04.0781 5904 Disk - ok
08:23:04.0781 5904 dmadmin - ok
08:23:04.0843 5904 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
08:23:05.0062 5904 dmboot - ok
08:23:05.0093 5904 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\DRIVERS\dmio.sys
08:23:05.0234 5904 dmio - ok
08:23:05.0265 5904 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
08:23:05.0406 5904 dmload - ok
08:23:05.0437 5904 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
08:23:05.0562 5904 dmserver - ok
08:23:05.0593 5904 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
08:23:05.0703 5904 DMusic - ok
08:23:05.0765 5904 [ B5AA5AA5AC327BD7C1AEC0C58F0C1144 ] DNE C:\WINDOWS\system32\DRIVERS\dne2000.sys
08:23:05.0781 5904 DNE - ok
08:23:05.0812 5904 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
08:23:05.0828 5904 Dnscache - ok
08:23:05.0875 5904 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
08:23:06.0015 5904 Dot3svc - ok
08:23:06.0046 5904 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
08:23:06.0156 5904 dpti2o - ok
08:23:06.0218 5904 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
08:23:06.0343 5904 drmkaud - ok
08:23:06.0375 5904 [ E814854E6B246CCF498874839AB64D77 ] drvmcdb C:\WINDOWS\system32\drivers\drvmcdb.sys
08:23:06.0390 5904 drvmcdb ( UnsignedFile.Multi.Generic ) - warning
08:23:06.0390 5904 drvmcdb - detected UnsignedFile.Multi.Generic (1)
08:23:06.0406 5904 [ EE83A4EBAE70BC93CF14879D062F548B ] drvnddm C:\WINDOWS\system32\drivers\drvnddm.sys
08:23:06.0406 5904 drvnddm ( UnsignedFile.Multi.Generic ) - warning
08:23:06.0406 5904 drvnddm - detected UnsignedFile.Multi.Generic (1)
08:23:06.0500 5904 [ 2AC2372FFAD9ADC85672CC8E8AE14BE9 ] DSproct C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys
08:23:06.0515 5904 DSproct ( UnsignedFile.Multi.Generic ) - warning
08:23:06.0515 5904 DSproct - detected UnsignedFile.Multi.Generic (1)
08:23:06.0546 5904 [ 3FCA03CBCA11269F973B70FA483C88EF ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
08:23:06.0671 5904 E100B - ok
08:23:06.0734 5904 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
08:23:06.0875 5904 EapHost - ok
08:23:06.0937 5904 [ D039A0C347632622934906BD59A4E1EA ] ehRecvr C:\WINDOWS\eHome\ehRecvr.exe
08:23:07.0046 5904 ehRecvr - ok
08:23:07.0062 5904 [ A53243709439AC2A4C216B817F8D7411 ] ehSched C:\WINDOWS\eHome\ehSched.exe
08:23:07.0125 5904 ehSched - ok
08:23:07.0156 5904 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
08:23:07.0296 5904 ERSvc - ok
08:23:07.0328 5904 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
08:23:07.0375 5904 Eventlog - ok
08:23:07.0421 5904 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll
08:23:07.0484 5904 EventSystem - ok
08:23:07.0578 5904 [ 791464A9E9ADE063327A29F1B3F1A86C ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
08:23:07.0625 5904 EvtEng - ok
08:23:07.0656 5904 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
08:23:07.0781 5904 Fastfat - ok
08:23:07.0828 5904 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
08:23:07.0906 5904 FastUserSwitchingCompatibility - ok
08:23:07.0968 5904 [ E97D6A8684466DF94FF3BC24FB787A07 ] Fax C:\WINDOWS\system32\fxssvc.exe
08:23:08.0109 5904 Fax - ok
08:23:08.0140 5904 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
08:23:08.0281 5904 Fdc - ok
08:23:08.0312 5904 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
08:23:08.0453 5904 Fips - ok
08:23:08.0500 5904 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
08:23:08.0625 5904 Flpydisk - ok
08:23:08.0671 5904 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
08:23:08.0812 5904 FltMgr - ok
08:23:08.0890 5904 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
08:23:08.0906 5904 FontCache3.0.0.0 - ok
08:23:08.0937 5904 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
08:23:09.0062 5904 Fs_Rec - ok
08:23:09.0078 5904 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
08:23:09.0187 5904 Ftdisk - ok
08:23:09.0218 5904 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
08:23:09.0234 5904 GEARAspiWDM - ok
08:23:09.0265 5904 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
08:23:09.0421 5904 Gpc - ok
08:23:09.0500 5904 [ 626A24ED1228580B9518C01930936DF9 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
08:23:09.0515 5904 gupdate - ok
08:23:09.0515 5904 [ 626A24ED1228580B9518C01930936DF9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
08:23:09.0531 5904 gupdatem - ok
08:23:09.0578 5904 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
08:23:09.0593 5904 gusvc - ok
08:23:09.0625 5904 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
08:23:09.0781 5904 HDAudBus - ok
08:23:09.0859 5904 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
08:23:10.0000 5904 helpsvc - ok
08:23:10.0031 5904 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
08:23:10.0156 5904 HidServ - ok
08:23:10.0203 5904 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
08:23:10.0328 5904 HidUsb - ok
08:23:10.0375 5904 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
08:23:10.0500 5904 hkmsvc - ok
08:23:10.0546 5904 [ B028377DEA0546A5FCFBA928A8AEFAE0 ] hpn C:\WINDOWS\system32\DRIVERS\hpn.sys
08:23:10.0656 5904 hpn - ok
08:23:10.0703 5904 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
08:23:10.0828 5904 HPZid412 - ok
08:23:10.0875 5904 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
08:23:10.0906 5904 HPZipr12 - ok
08:23:10.0937 5904 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
08:23:10.0968 5904 HPZius12 - ok
08:23:11.0015 5904 [ 1C8CAA80E91FB71864E9426F9EED048D ] HSFHWAZL C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
08:23:11.0078 5904 HSFHWAZL - ok
08:23:11.0140 5904 [ 698204D9C2832E53633E53A30A53FC3D ] HSF_DPV C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
08:23:11.0218 5904 HSF_DPV - ok
08:23:11.0265 5904 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
08:23:11.0328 5904 HTTP - ok
08:23:11.0375 5904 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
08:23:11.0531 5904 HTTPFilter - ok
08:23:11.0578 5904 [ 9368670BD426EBEA5E8B18A62416EC28 ] i2omgmt C:\WINDOWS\system32\drivers\i2omgmt.sys
08:23:11.0703 5904 i2omgmt - ok
08:23:11.0750 5904 [ F10863BF1CCC290BABD1A09188AE49E0 ] i2omp C:\WINDOWS\system32\DRIVERS\i2omp.sys
08:23:11.0875 5904 i2omp - ok
08:23:11.0921 5904 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
08:23:12.0046 5904 i8042prt - ok
08:23:12.0140 5904 [ CC449157474D5E43DAEA7E20F52C635A ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
08:23:12.0281 5904 ialm - ok
08:23:12.0375 5904 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
08:23:12.0406 5904 IDriverT ( UnsignedFile.Multi.Generic ) - warning
08:23:12.0406 5904 IDriverT - detected UnsignedFile.Multi.Generic (1)
08:23:12.0484 5904 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
08:23:12.0546 5904 idsvc - ok
08:23:12.0578 5904 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
08:23:12.0703 5904 Imapi - ok
08:23:12.0734 5904 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
08:23:12.0875 5904 ImapiService - ok
08:23:12.0906 5904 [ 4A40E045FAEE58631FD8D91AFC620719 ] ini910u C:\WINDOWS\system32\DRIVERS\ini910u.sys
08:23:13.0046 5904 ini910u - ok
08:23:13.0062 5904 [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
08:23:13.0187 5904 IntelIde - ok
08:23:13.0234 5904 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
08:23:13.0359 5904 intelppm - ok
08:23:13.0375 5904 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
08:23:13.0515 5904 Ip6Fw - ok
08:23:13.0531 5904 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
08:23:13.0656 5904 IpFilterDriver - ok
08:23:13.0687 5904 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
08:23:13.0796 5904 IpInIp - ok
08:23:13.0843 5904 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
08:23:13.0984 5904 IpNat - ok
08:23:14.0015 5904 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
08:23:14.0140 5904 IPSec - ok
08:23:14.0171 5904 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
08:23:14.0281 5904 IRENUM - ok
08:23:14.0312 5904 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
08:23:14.0437 5904 isapnp - ok
08:23:14.0531 5904 [ 112325F53AB720CA77825726D427FBDC ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
08:23:14.0562 5904 JavaQuickStarterService - ok
08:23:14.0593 5904 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
08:23:14.0718 5904 Kbdclass - ok
08:23:14.0765 5904 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
08:23:14.0875 5904 kmixer - ok
08:23:14.0906 5904 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
08:23:15.0031 5904 KSecDD - ok
08:23:15.0062 5904 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
08:23:15.0125 5904 lanmanserver - ok
08:23:15.0171 5904 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
08:23:15.0234 5904 lanmanworkstation - ok
08:23:15.0250 5904 lbrtfdc - ok
08:23:15.0281 5904 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
08:23:15.0484 5904 LmHosts - ok
08:23:15.0515 5904 [ DF0A511F38F16016BF658FCA0090CB87 ] McrdSvc C:\WINDOWS\ehome\mcrdsvc.exe
08:23:15.0578 5904 McrdSvc - ok
08:23:15.0578 5904 mde67b2 - ok
08:23:15.0640 5904 [ 3C318B9CD391371BED62126581EE9961 ] mdmxsdk C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
08:23:15.0656 5904 mdmxsdk - ok
08:23:15.0687 5904 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
08:23:15.0812 5904 Messenger - ok
08:23:15.0875 5904 [ B7521F69C0A9B29D356157229376FB21 ] MHN C:\WINDOWS\System32\mhn.dll
08:23:15.0890 5904 MHN ( UnsignedFile.Multi.Generic ) - warning
08:23:15.0890 5904 MHN - detected UnsignedFile.Multi.Generic (1)
08:23:15.0953 5904 [ 7F2F1D2815A6449D346FCCCBC569FBD6 ] MHNDRV C:\WINDOWS\system32\DRIVERS\mhndrv.sys
08:23:15.0953 5904 MHNDRV ( UnsignedFile.Multi.Generic ) - warning
08:23:15.0953 5904 MHNDRV - detected UnsignedFile.Multi.Generic (1)
08:23:16.0000 5904 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
08:23:16.0171 5904 mnmdd - ok
08:23:16.0218 5904 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
08:23:16.0328 5904 mnmsrvc - ok
08:23:16.0359 5904 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
08:23:16.0468 5904 Modem - ok
08:23:16.0484 5904 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
08:23:16.0609 5904 Mouclass - ok
08:23:16.0640 5904 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
08:23:16.0765 5904 mouhid - ok
08:23:16.0796 5904 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
08:23:16.0921 5904 MountMgr - ok
08:23:16.0984 5904 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
08:23:17.0000 5904 MozillaMaintenance - ok
08:23:17.0031 5904 [ 3F4BB95E5A44F3BE34824E8E7CAF0737 ] mraid35x C:\WINDOWS\system32\DRIVERS\mraid35x.sys
08:23:17.0156 5904 mraid35x - ok
08:23:17.0171 5904 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
08:23:17.0281 5904 MRxDAV - ok
08:23:17.0343 5904 [ 0EA4D8ED179B75F8AFA7998BA22285CA ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
08:23:17.0437 5904 MRxSmb - ok
08:23:17.0484 5904 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
08:23:17.0609 5904 MSDTC - ok
08:23:17.0656 5904 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
08:23:17.0796 5904 Msfs - ok
08:23:17.0828 5904 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
08:23:17.0984 5904 MSKSSRV - ok
08:23:18.0015 5904 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
08:23:18.0140 5904 MSPCLOCK - ok
08:23:18.0156 5904 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
08:23:18.0265 5904 MSPQM - ok
08:23:18.0281 5904 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
08:23:18.0406 5904 mssmbios - ok
08:23:18.0453 5904 [ 2F625D11385B1A94360BFC70AAEFDEE1 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
08:23:18.0578 5904 Mup - ok
08:23:18.0906 5904 [ 21EEF976D53A0BCB603ABFF4AB6E4C88 ] MySQL C:\Program Files\Xampp\xampp\mysql\bin\mysqld.exe
08:23:19.0187 5904 MySQL - ok
08:23:19.0296 5904 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
08:23:19.0609 5904 napagent - ok
08:23:19.0671 5904 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
08:23:19.0812 5904 NDIS - ok
08:23:19.0843 5904 [ 1AB3D00C991AB086E69DB84B6C0ED78F ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
08:23:19.0984 5904 NdisTapi - ok
08:23:20.0000 5904 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
08:23:20.0125 5904 Ndisuio - ok
08:23:20.0171 5904 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
08:23:20.0296 5904 NdisWan - ok
08:23:20.0359 5904 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
08:23:20.0437 5904 NDProxy - ok
08:23:20.0468 5904 [ 2969D26EEE289BE7422AA46FC55F4E38 ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll
08:23:20.0484 5904 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
08:23:20.0484 5904 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
08:23:20.0515 5904 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
08:23:20.0640 5904 NetBIOS - ok
08:23:20.0687 5904 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
08:23:20.0812 5904 NetBT - ok
08:23:20.0843 5904 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
08:23:21.0328 5904 NetDDE - ok
08:23:21.0343 5904 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
08:23:21.0453 5904 NetDDEdsdm - ok
08:23:21.0468 5904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
08:23:21.0640 5904 Netlogon - ok
08:23:21.0687 5904 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
08:23:21.0812 5904 Netman - ok
08:23:21.0859 5904 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
08:23:21.0875 5904 NetTcpPortSharing - ok
08:23:22.0078 5904 [ 90F7FAD201E62732CBE6625B07E4C8F1 ] NETw5x32 C:\WINDOWS\system32\DRIVERS\NETw5x32.sys
08:23:22.0437 5904 NETw5x32 - ok
08:23:22.0468 5904 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
08:23:22.0671 5904 NIC1394 - ok
08:23:22.0718 5904 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
08:23:22.0734 5904 Nla - ok
08:23:22.0765 5904 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
08:23:22.0890 5904 Npfs - ok
08:23:22.0921 5904 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
08:23:23.0062 5904 Ntfs - ok
08:23:23.0078 5904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
08:23:23.0187 5904 NtLmSsp - ok
08:23:23.0234 5904 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
08:23:23.0359 5904 NtmsSvc - ok
08:23:23.0421 5904 [ CF7E041663119E09D2E118521ADA9300 ] NuidFltr C:\WINDOWS\system32\DRIVERS\NuidFltr.sys
08:23:23.0437 5904 NuidFltr - ok
08:23:23.0453 5904 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
08:23:23.0578 5904 Null - ok
08:23:23.0703 5904 [ 2B298519EDBFCF451D43E0F1E8F1006D ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
08:23:23.0875 5904 nv - ok
08:23:23.0953 5904 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
08:23:24.0109 5904 NwlnkFlt - ok
08:23:24.0156 5904 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
08:23:24.0281 5904 NwlnkFwd - ok
08:23:24.0312 5904 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
08:23:24.0468 5904 ohci1394 - ok
08:23:24.0515 5904 [ B17228142CEC9B3C222239FD935A37CA ] omci C:\WINDOWS\system32\DRIVERS\omci.sys
08:23:24.0515 5904 omci ( UnsignedFile.Multi.Generic ) - warning
08:23:24.0515 5904 omci - detected UnsignedFile.Multi.Generic (1)
08:23:24.0546 5904 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
08:23:24.0562 5904 ose - ok
08:23:24.0640 5904 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
08:23:24.0765 5904 Parport - ok
08:23:24.0796 5904 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
08:23:24.0921 5904 PartMgr - ok
08:23:24.0968 5904 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
08:23:25.0093 5904 ParVdm - ok
08:23:25.0125 5904 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
08:23:25.0250 5904 PCI - ok
08:23:25.0250 5904 PCIDump - ok
08:23:25.0281 5904 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
08:23:25.0406 5904 PCIIde - ok
08:23:25.0453 5904 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
08:23:25.0578 5904 Pcmcia - ok
08:23:25.0593 5904 PDCOMP - ok
08:23:25.0593 5904 PDFRAME - ok
08:23:25.0593 5904 PDRELI - ok
08:23:25.0609 5904 PDRFRAME - ok
08:23:25.0625 5904 [ 6C14B9C19BA84F73D3A86DBA11133101 ] perc2 C:\WINDOWS\system32\DRIVERS\perc2.sys
08:23:25.0750 5904 perc2 - ok
08:23:25.0781 5904 [ F50F7C27F131AFE7BEBA13E14A3B9416 ] perc2hib C:\WINDOWS\system32\DRIVERS\perc2hib.sys
08:23:25.0906 5904 perc2hib - ok
08:23:26.0000 5904 [ D0F9F362023BF94CF58A1C3CDBBEBE06 ] PhotoshopElementsDeviceConnect C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
08:23:26.0000 5904 PhotoshopElementsDeviceConnect ( UnsignedFile.Multi.Generic ) - warning
08:23:26.0000 5904 PhotoshopElementsDeviceConnect - detected UnsignedFile.Multi.Generic (1)
08:23:26.0031 5904 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
08:23:26.0078 5904 PlugPlay - ok
08:23:26.0109 5904 [ BAFC9706BDF425A02B66468AB2605C59 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll
08:23:26.0125 5904 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
08:23:26.0125 5904 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
08:23:26.0171 5904 [ DCDF0421A1C14F2923E298A30FD7636D ] Point32 C:\WINDOWS\system32\DRIVERS\point32.sys
08:23:26.0234 5904 Point32 - ok
08:23:26.0250 5904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
08:23:26.0359 5904 PolicyAgent - ok
08:23:26.0406 5904 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
08:23:26.0593 5904 PptpMiniport - ok
08:23:26.0593 5904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
08:23:26.0703 5904 ProtectedStorage - ok
08:23:26.0750 5904 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
08:23:26.0875 5904 PSched - ok
08:23:26.0906 5904 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
08:23:27.0031 5904 Ptilink - ok
08:23:27.0062 5904 [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
08:23:27.0093 5904 PxHelp20 - ok
08:23:27.0156 5904 [ 0A63FB54039EB5662433CABA3B26DBA7 ] ql1080 C:\WINDOWS\system32\DRIVERS\ql1080.sys
08:23:27.0265 5904 ql1080 - ok
08:23:27.0296 5904 [ 6503449E1D43A0FF0201AD5CB1B8C706 ] Ql10wnt C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
08:23:27.0453 5904 Ql10wnt - ok
08:23:27.0484 5904 [ 156ED0EF20C15114CA097A34A30D8A01 ] ql12160 C:\WINDOWS\system32\DRIVERS\ql12160.sys
08:23:27.0609 5904 ql12160 - ok
08:23:27.0671 5904 [ 70F016BEBDE6D29E864C1230A07CC5E6 ] ql1240 C:\WINDOWS\system32\DRIVERS\ql1240.sys
08:23:27.0890 5904 ql1240 - ok
08:23:27.0921 5904 [ 907F0AEEA6BC451011611E732BD31FCF ] ql1280 C:\WINDOWS\system32\DRIVERS\ql1280.sys
08:23:28.0062 5904 ql1280 - ok
08:23:28.0187 5904 [ 6B6F0A77365667912360FF1D5E984F25 ] RapportCerberus_34302 C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\34302\RapportCerberus32_34302.sys
08:23:28.0203 5904 RapportCerberus_34302 - ok
08:23:28.0312 5904 [ 43B9AA1423BF54367C5A3DE1559780E8 ] RapportEI C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys
08:23:28.0375 5904 RapportEI - ok
08:23:28.0437 5904 [ DD3E4610DE9252A957C5BD19BDF47AC4 ] RapportIaso c:\documents and settings\all users\application data\trusteer\rapport\store\exts\rapportms\28896\rapportiaso.sys
08:23:28.0468 5904 RapportIaso - ok
08:23:28.0500 5904 [ 118600AB8F15FE27F2C865F3FB4EFA58 ] RapportKELL C:\WINDOWS\system32\Drivers\RapportKELL.sys
08:23:28.0515 5904 RapportKELL - ok
08:23:28.0546 5904 [ 4AF05A67B643A5190DFCBB793273E0BC ] RapportPG C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys
08:23:28.0593 5904 RapportPG - ok
08:23:28.0640 5904 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
08:23:28.0765 5904 RasAcd - ok
08:23:29.0062 5904 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
08:23:29.0218 5904 RasAuto - ok
08:23:29.0312 5904 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
08:23:29.0484 5904 Rasl2tp - ok
08:23:29.0593 5904 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
08:23:29.0750 5904 RasMan - ok
08:23:29.0781 5904 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
08:23:29.0906 5904 RasPppoe - ok
08:23:29.0937 5904 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
08:23:30.0093 5904 Raspti - ok
08:23:30.0156 5904 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
08:23:30.0343 5904 Rdbss - ok
08:23:30.0375 5904 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
08:23:30.0562 5904 RDPCDD - ok
08:23:30.0640 5904 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
08:23:30.0796 5904 rdpdr - ok
08:23:30.0968 5904 [ 6728E45B66F93C08F11DE2E316FC70DD ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
08:23:31.0125 5904 RDPWD - ok
08:23:31.0375 5904 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
08:23:31.0640 5904 RDSessMgr - ok
08:23:31.0734 5904 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
08:23:31.0921 5904 redbook - ok
08:23:32.0140 5904 [ 636AAFAD77BEABE192D01E7E74F4A45B ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
08:23:32.0203 5904 RegSrvc - ok
08:23:32.0265 5904 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
08:23:32.0421 5904 RemoteAccess - ok
08:23:32.0468 5904 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
08:23:32.0593 5904 RemoteRegistry - ok
08:23:32.0625 5904 [ 24ED7AF20651F9FA1F249482E7C1F165 ] rimmptsk C:\WINDOWS\system32\DRIVERS\rimmptsk.sys
08:23:32.0703 5904 rimmptsk - ok
08:23:32.0765 5904 [ 1BDBA2D2D402415A78A4BA766DFE0F7B ] rimsptsk C:\WINDOWS\system32\DRIVERS\rimsptsk.sys
08:23:32.0828 5904 rimsptsk - ok
08:23:32.0875 5904 [ F774ECD11A064F0DEBB2D4395418153C ] rismxdp C:\WINDOWS\system32\DRIVERS\rixdptsk.sys
08:23:32.0953 5904 rismxdp - ok
08:23:32.0968 5904 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
08:23:33.0093 5904 RpcLocator - ok
08:23:33.0140 5904 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\System32\rpcss.dll
08:23:33.0187 5904 RpcSs - ok
08:23:33.0234 5904 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
08:23:33.0359 5904 RSVP - ok
08:23:33.0437 5904 [ 38B3B88728B3BA3CE726EB974AAFF772 ] S24EventMonitor C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
08:23:33.0484 5904 S24EventMonitor ( UnsignedFile.Multi.Generic ) - warning
08:23:33.0484 5904 S24EventMonitor - detected UnsignedFile.Multi.Generic (1)
08:23:33.0546 5904 [ 96B4494D4734970F47C566E098C4F527 ] s24trans C:\WINDOWS\system32\DRIVERS\s24trans.sys
08:23:33.0656 5904 s24trans - ok
08:23:33.0703 5904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
08:23:33.0828 5904 SamSs - ok
08:23:33.0937 5904 [ 39763504067962108505BFF25F024345 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
08:23:34.0062 5904 SASDIFSV - ok
08:23:34.0093 5904 [ 77B9FC20084B48408AD3E87570EB4A85 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
08:23:34.0140 5904 SASKUTIL - ok
08:23:34.0171 5904 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
08:23:34.0375 5904 SCardSvr - ok
08:23:34.0421 5904 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
08:23:34.0687 5904 Schedule - ok
08:23:35.0015 5904 [ 8D04819A3CE51B9EB47E5689B44D43C4 ] sdbus C:\WINDOWS\system32\DRIVERS\sdbus.sys
08:23:35.0203 5904 sdbus - ok
08:23:35.0281 5904 [ 8EDD7B9E4A4B4C16E2DAB9188CAA861B ] SDDMI2 C:\WINDOWS\system32\DDMI2.sys
08:23:35.0343 5904 SDDMI2 ( UnsignedFile.Multi.Generic ) - warning
08:23:35.0343 5904 SDDMI2 - detected UnsignedFile.Multi.Generic (1)
08:23:35.0390 5904 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
08:23:35.0562 5904 Secdrv - ok
08:23:35.0625 5904 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
08:23:35.0781 5904 seclogon - ok
08:23:35.0968 5904 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
08:23:36.0156 5904 SENS - ok
08:23:36.0218 5904 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
08:23:36.0390 5904 serenum - ok
08:23:36.0421 5904 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
08:23:36.0562 5904 Serial - ok
08:23:36.0718 5904 [ 0FA803C64DF0914B41F807EA276BF2A6 ] sffdisk C:\WINDOWS\system32\DRIVERS\sffdisk.sys
08:23:36.0937 5904 sffdisk - ok
08:23:36.0968 5904 [ C17C331E435ED8737525C86A7557B3AC ] sffp_sd C:\WINDOWS\system32\DRIVERS\sffp_sd.sys
08:23:37.0140 5904 sffp_sd - ok
08:23:37.0171 5904 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\DRIVERS\sfloppy.sys
08:23:37.0359 5904 Sfloppy - ok
08:23:37.0437 5904 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
08:23:37.0484 5904 ShellHWDetection - ok
08:23:37.0500 5904 Simbad - ok
08:23:37.0531 5904 [ 6B33D0EBD30DB32E27D1D78FE946A754 ] sisagp C:\WINDOWS\system32\DRIVERS\sisagp.sys
08:23:37.0656 5904 sisagp - ok
08:23:37.0718 5904 [ B866E8C5ED1DCBEA72285BA4107892C2 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
08:23:37.0750 5904 SkypeUpdate - ok
08:23:37.0796 5904 [ 83C0F71F86D3BDAF915685F3D568B20E ] Sparrow C:\WINDOWS\system32\DRIVERS\sparrow.sys
08:23:37.0875 5904 Sparrow - ok
08:23:37.0968 5904 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
08:23:38.0109 5904 splitter - ok
08:23:38.0156 5904 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
08:23:38.0218 5904 Spooler - ok
08:23:38.0234 5904 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
08:23:38.0406 5904 sr - ok
08:23:38.0453 5904 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
08:23:38.0593 5904 srservice - ok
08:23:38.0656 5904 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
08:23:38.0734 5904 Srv - ok
08:23:38.0796 5904 [ D7968049BE0ADBB6A57CEE3960320911 ] sscdbhk5 C:\WINDOWS\system32\drivers\sscdbhk5.sys
08:23:38.0796 5904 sscdbhk5 ( UnsignedFile.Multi.Generic ) - warning
08:23:38.0796 5904 sscdbhk5 - detected UnsignedFile.Multi.Generic (1)
08:23:38.0859 5904 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
08:23:39.0031 5904 SSDPSRV - ok
08:23:39.0093 5904 [ C3FFD65ABFB6441E7606CF74F1155273 ] ssrtln C:\WINDOWS\system32\drivers\ssrtln.sys
08:23:39.0140 5904 ssrtln ( UnsignedFile.Multi.Generic ) - warning
08:23:39.0140 5904 ssrtln - detected UnsignedFile.Multi.Generic (1)
08:23:39.0234 5904 [ 3AD78E22210D3FBD9F76DE84A8DF19B5 ] STHDA C:\WINDOWS\system32\drivers\sthda.sys
08:23:39.0406 5904 STHDA - ok
08:23:39.0500 5904 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
08:23:39.0687 5904 stisvc - ok
08:23:39.0718 5904 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
08:23:39.0859 5904 swenum - ok
08:23:39.0906 5904 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
08:23:40.0031 5904 swmidi - ok
08:23:40.0031 5904 SwPrv - ok
08:23:40.0093 5904 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
08:23:40.0203 5904 symc810 - ok
08:23:40.0250 5904 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
08:23:40.0375 5904 symc8xx - ok
08:23:40.0421 5904 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
08:23:40.0562 5904 sym_hi - ok
08:23:40.0609 5904 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
08:23:40.0765 5904 sym_u3 - ok
08:23:40.0828 5904 [ FA2DAA32BED908023272A0F77D625DAE ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
08:23:40.0890 5904 SynTP - ok
08:23:40.0921 5904 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
08:23:41.0046 5904 sysaudio - ok
08:23:41.0093 5904 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
08:23:41.0234 5904 SysmonLog - ok
08:23:41.0265 5904 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
08:23:41.0421 5904 TapiSrv - ok
08:23:41.0468 5904 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
08:23:41.0531 5904 Tcpip - ok
08:23:41.0578 5904 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
08:23:41.0765 5904 TDPIPE - ok
08:23:41.0781 5904 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
08:23:41.0937 5904 TDTCP - ok
08:23:41.0968 5904 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
08:23:42.0109 5904 TermDD - ok
08:23:42.0156 5904 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
08:23:42.0296 5904 TermService - ok
08:23:42.0343 5904 [ 30698355067D07DA5F9EB81132C9FDD6 ] tfsnboio C:\WINDOWS\system32\dla\tfsnboio.sys
08:23:42.0359 5904 tfsnboio ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0359 5904 tfsnboio - detected UnsignedFile.Multi.Generic (1)
08:23:42.0375 5904 [ FB9D825BB4A2ABDF24600F7505050E2B ] tfsncofs C:\WINDOWS\system32\dla\tfsncofs.sys
08:23:42.0406 5904 tfsncofs ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0406 5904 tfsncofs - detected UnsignedFile.Multi.Generic (1)
08:23:42.0421 5904 [ CAFD8CCA11AA1E8B6D2EA1BA8F70EC33 ] tfsndrct C:\WINDOWS\system32\dla\tfsndrct.sys
08:23:42.0453 5904 tfsndrct ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0453 5904 tfsndrct - detected UnsignedFile.Multi.Generic (1)
08:23:42.0468 5904 [ 8DB1E78FBF7C426D8EC3D8F1A33D6485 ] tfsndres C:\WINDOWS\system32\dla\tfsndres.sys
08:23:42.0500 5904 tfsndres ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0500 5904 tfsndres - detected UnsignedFile.Multi.Generic (1)
08:23:42.0515 5904 [ B92F67A71CC8176F331B8AA8D9F555AD ] tfsnifs C:\WINDOWS\system32\dla\tfsnifs.sys
08:23:42.0515 5904 tfsnifs ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0531 5904 tfsnifs - detected UnsignedFile.Multi.Generic (1)
08:23:42.0546 5904 [ 85985FAA9A71E2358FCC2EDEFC2A3C5C ] tfsnopio C:\WINDOWS\system32\dla\tfsnopio.sys
08:23:42.0562 5904 tfsnopio ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0562 5904 tfsnopio - detected UnsignedFile.Multi.Generic (1)
08:23:42.0609 5904 [ BBA22094F0F7C210567EFDAF11F64495 ] tfsnpool C:\WINDOWS\system32\dla\tfsnpool.sys
08:23:42.0640 5904 tfsnpool ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0640 5904 tfsnpool - detected UnsignedFile.Multi.Generic (1)
08:23:42.0671 5904 [ 81340BEF80B9811E98CE64611E67E3FF ] tfsnudf C:\WINDOWS\system32\dla\tfsnudf.sys
08:23:42.0687 5904 tfsnudf ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0687 5904 tfsnudf - detected UnsignedFile.Multi.Generic (1)
08:23:42.0734 5904 [ C035FD116224CCC8325F384776B6A8BB ] tfsnudfa C:\WINDOWS\system32\dla\tfsnudfa.sys
08:23:42.0750 5904 tfsnudfa ( UnsignedFile.Multi.Generic ) - warning
08:23:42.0750 5904 tfsnudfa - detected UnsignedFile.Multi.Generic (1)
08:23:42.0765 5904 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
08:23:42.0781 5904 Themes - ok
08:23:42.0812 5904 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
08:23:43.0000 5904 TlntSvr - ok
08:23:43.0031 5904 [ F2790F6AF01321B172AA62F8E1E187D9 ] TosIde C:\WINDOWS\system32\DRIVERS\toside.sys
08:23:43.0406 5904 TosIde - ok
08:23:43.0437 5904 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
08:23:43.0562 5904 TrkWks - ok
08:23:43.0640 5904 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
08:23:43.0828 5904 Udfs - ok
08:23:43.0890 5904 [ 1B698A51CD528D8DA4FFAED66DFC51B9 ] ultra C:\WINDOWS\system32\DRIVERS\ultra.sys
08:23:43.0968 5904 ultra - ok
08:23:44.0000 5904 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
08:23:44.0156 5904 Update - ok
08:23:44.0203 5904 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
08:23:44.0328 5904 upnphost - ok
08:23:44.0343 5904 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
08:23:44.0500 5904 UPS - ok
08:23:44.0546 5904 [ 83CAFCB53201BBAC04D822F32438E244 ] USBAAPL C:\WINDOWS\system32\Drivers\usbaapl.sys
08:23:44.0625 5904 USBAAPL - ok
08:23:44.0718 5904 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
08:23:44.0859 5904 usbaudio - ok
08:23:44.0906 5904 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
08:23:45.0015 5904 usbccgp - ok
08:23:45.0046 5904 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
08:23:45.0203 5904 usbehci - ok
08:23:45.0234 5904 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
08:23:45.0390 5904 usbhub - ok
08:23:45.0406 5904 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
08:23:45.0531 5904 usbprint - ok
08:23:45.0562 5904 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
08:23:45.0703 5904 usbscan - ok
08:23:45.0734 5904 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
08:23:45.0875 5904 USBSTOR - ok
08:23:45.0921 5904 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
08:23:46.0046 5904 usbuhci - ok
08:23:46.0078 5904 [ B6CC50279D6CD28E090A5D33244ADC9A ] usb_rndisx C:\WINDOWS\system32\DRIVERS\usb8023x.sys
08:23:46.0187 5904 usb_rndisx - ok
08:23:46.0218 5904 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
08:23:46.0343 5904 VgaSave - ok
08:23:46.0375 5904 [ 754292CE5848B3738281B4F3607EAEF4 ] viaagp C:\WINDOWS\system32\DRIVERS\viaagp.sys
08:23:46.0500 5904 viaagp - ok
08:23:46.0531 5904 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
08:23:46.0656 5904 ViaIde - ok
08:23:46.0703 5904 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
08:23:46.0828 5904 VolSnap - ok
08:23:46.0890 5904 [ 0354BA3A5BA5E28CC247EB5F5DD8793C ] vsdatant C:\WINDOWS\system32\vsdatant.sys
08:23:46.0937 5904 vsdatant - ok
08:23:46.0968 5904 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
08:23:47.0125 5904 VSS - ok
08:23:47.0156 5904 [ 54AF4B1D5459500EF0937F6D33B1914F ] w32time C:\WINDOWS\system32\w32time.dll
08:23:47.0296 5904 w32time - ok
08:23:47.0406 5904 [ 95C7421F8BAFC85BA09D33364058937D ] w39n51 C:\WINDOWS\system32\DRIVERS\w39n51.sys
08:23:47.0562 5904 w39n51 - ok
08:23:47.0609 5904 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
08:23:47.0750 5904 Wanarp - ok
08:23:47.0750 5904 wanatw - ok
08:23:47.0843 5904 [ 46A247F6617526AFE38B6F12F5512120 ] wceusbsh C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
08:23:47.0921 5904 wceusbsh - ok
08:23:48.0031 5904 [ FD47474BD21794508AF449D9D91AF6E6 ] Wdf01000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
08:23:48.0078 5904 Wdf01000 - ok
08:23:48.0093 5904 WDICA - ok
08:23:48.0140 5904 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
08:23:48.0312 5904 wdmaud - ok
08:23:48.0359 5904 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
08:23:48.0484 5904 WebClient - ok
08:23:48.0546 5904 [ 74CF3F2E4E40C4A2E18D39D6300A5C24 ] winachsf C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
08:23:48.0625 5904 winachsf - ok
08:23:48.0718 5904 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
08:23:48.0859 5904 winmgmt - ok
08:23:48.0906 5904 [ 051B1BDECD6DEE18C771B5D5EC7F044D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
08:23:49.0015 5904 WmdmPmSN - ok
08:23:49.0078 5904 [ E76F8807070ED04E7408A86D6D3A6137 ] Wmi C:\WINDOWS\System32\advapi32.dll
08:23:49.0125 5904 Wmi - ok
08:23:49.0171 5904 [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
08:23:49.0359 5904 WmiAcpi - ok
08:23:49.0390 5904 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
08:23:49.0500 5904 WmiApSrv - ok
08:23:49.0609 5904 [ 6BAB4DC65515A098505F8B3D01FB6FE5 ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
08:23:49.0750 5904 WMPNetworkSvc - ok
08:23:49.0953 5904 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
08:23:50.0015 5904 WPFFontCache_v0400 - ok
08:23:50.0078 5904 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
08:23:50.0265 5904 WS2IFSL - ok
08:23:50.0312 5904 [ 4160CBE59D9B5BE22E4C3897E8DB9D56 ] WsAudio_DeviceS(1) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys
08:23:50.0328 5904 WsAudio_DeviceS(1) - ok
08:23:50.0343 5904 [ 4160CBE59D9B5BE22E4C3897E8DB9D56 ] WsAudio_DeviceS(2) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys
08:23:50.0359 5904 WsAudio_DeviceS(2) - ok
08:23:50.0375 5904 [ 4160CBE59D9B5BE22E4C3897E8DB9D56 ] WsAudio_DeviceS(3) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys
08:23:50.0390 5904 WsAudio_DeviceS(3) - ok
08:23:50.0406 5904 [ 4160CBE59D9B5BE22E4C3897E8DB9D56 ] WsAudio_DeviceS(4) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys
08:23:50.0406 5904 WsAudio_DeviceS(4) - ok
08:23:50.0437 5904 [ 4160CBE59D9B5BE22E4C3897E8DB9D56 ] WsAudio_DeviceS(5) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys
08:23:50.0437 5904 WsAudio_DeviceS(5) - ok
08:23:50.0468 5904 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
08:23:50.0578 5904 wscsvc - ok
08:23:50.0578 5904 WSearch - ok
08:23:50.0640 5904 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
08:23:50.0781 5904 wuauserv - ok
08:23:50.0828 5904 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
08:23:50.0890 5904 WudfPf - ok
08:23:50.0906 5904 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
08:23:50.0921 5904 WudfRd - ok
08:23:50.0984 5904 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
08:23:51.0015 5904 WudfSvc - ok
08:23:51.0078 5904 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
08:23:51.0234 5904 WZCSVC - ok
08:23:51.0296 5904 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
08:23:51.0406 5904 xmlprov - ok
08:23:51.0421 5904 ================ Scan global ===============================
08:23:51.0468 5904 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
08:23:51.0500 5904 [ 42B5427FAC23BF6F1F31E466B7FEB084 ] C:\WINDOWS\system32\winsrv.dll
08:23:51.0515 5904 [ 42B5427FAC23BF6F1F31E466B7FEB084 ] C:\WINDOWS\system32\winsrv.dll
08:23:51.0546 5904 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
08:23:51.0546 5904 [Global] - ok
08:23:51.0546 5904 ================ Scan MBR ==================================
08:23:51.0562 5904 [ 9C603BC3977968C891DE319283E1E7AF ] \Device\Harddisk0\DR0
08:23:51.0562 5904 Suspicious mbr (Forged): \Device\Harddisk0\DR0
08:23:51.0593 5904 \Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - infected
08:23:51.0593 5904 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Wistler.a (0)
08:23:52.0640 5904 ================ Scan VBR ==================================
08:23:52.0687 5904 [ 46C6770165103ABD63CFAB591BE3DE8B ] \Device\Harddisk0\DR0\Partition1
08:23:52.0687 5904 \Device\Harddisk0\DR0\Partition1 - ok
08:23:52.0687 5904 ================ Scan active images ========================
08:23:52.0687 5904 [ 8C953733D8F36EB2133F5BB58808B66B ] C:\WINDOWS\system32\drivers\intelppm.sys
08:23:52.0687 5904 C:\WINDOWS\system32\drivers\intelppm.sys - ok
08:23:52.0687 5904 [ C42584FD66CE9E17403AEBCA199F7BDB ] C:\WINDOWS\system32\drivers\wmiacpi.sys
08:23:52.0687 5904 C:\WINDOWS\system32\drivers\wmiacpi.sys - ok
08:23:52.0703 5904 [ 0F6C187D38D98F8DF904589A5F94D411 ] C:\WINDOWS\system32\drivers\cmbatt.sys
08:23:52.0703 5904 C:\WINDOWS\system32\drivers\cmbatt.sys - ok
08:23:52.0703 5904 [ E28726B72C46821A28830E077D39A55B ] C:\WINDOWS\system32\drivers\videoprt.sys
08:23:52.0703 5904 C:\WINDOWS\system32\drivers\videoprt.sys - ok
08:23:52.0703 5904 [ CC449157474D5E43DAEA7E20F52C635A ] C:\WINDOWS\system32\drivers\ialmnt5.sys
08:23:52.0703 5904 C:\WINDOWS\system32\drivers\ialmnt5.sys - ok
08:23:52.0718 5904 [ 573C7D0A32852B48F3058CFD8026F511 ] C:\WINDOWS\system32\drivers\hdaudbus.sys
08:23:52.0718 5904 C:\WINDOWS\system32\drivers\hdaudbus.sys - ok
08:23:52.0718 5904 [ 90F7FAD201E62732CBE6625B07E4C8F1 ] C:\WINDOWS\system32\drivers\NETw5x32.sys
08:23:52.0718 5904 C:\WINDOWS\system32\drivers\NETw5x32.sys - ok
08:23:52.0718 5904 [ 791912E524CC2CC6F50B5F2B52D1EB71 ] C:\WINDOWS\system32\drivers\usbport.sys
08:23:52.0718 5904 C:\WINDOWS\system32\drivers\usbport.sys - ok
08:23:52.0734 5904 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] C:\WINDOWS\system32\drivers\usbuhci.sys
08:23:52.0734 5904 C:\WINDOWS\system32\drivers\usbuhci.sys - ok
08:23:52.0734 5904 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] C:\WINDOWS\system32\drivers\usbehci.sys
08:23:52.0734 5904 C:\WINDOWS\system32\drivers\usbehci.sys - ok
08:23:52.0734 5904 [ 6489310D11971F6BA6C7F49BE0BAF6E0 ] C:\WINDOWS\system32\drivers\bcm4sbxp.sys
08:23:52.0734 5904 C:\WINDOWS\system32\drivers\bcm4sbxp.sys - ok
08:23:52.0750 5904 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] C:\WINDOWS\system32\drivers\nic1394.sys
08:23:52.0750 5904 C:\WINDOWS\system32\drivers\nic1394.sys - ok
08:23:52.0750 5904 [ 8D04819A3CE51B9EB47E5689B44D43C4 ] C:\WINDOWS\system32\drivers\sdbus.sys
08:23:52.0750 5904 C:\WINDOWS\system32\drivers\sdbus.sys - ok
08:23:52.0750 5904 [ 24ED7AF20651F9FA1F249482E7C1F165 ] C:\WINDOWS\system32\drivers\rimmptsk.sys
08:23:52.0750 5904 C:\WINDOWS\system32\drivers\rimmptsk.sys - ok
08:23:52.0765 5904 [ 1BDBA2D2D402415A78A4BA766DFE0F7B ] C:\WINDOWS\system32\drivers\rimsptsk.sys
08:23:52.0765 5904 C:\WINDOWS\system32\drivers\rimsptsk.sys - ok
08:23:52.0765 5904 [ F774ECD11A064F0DEBB2D4395418153C ] C:\WINDOWS\system32\drivers\rixdptsk.sys
08:23:52.0765 5904 C:\WINDOWS\system32\drivers\rixdptsk.sys - ok
08:23:52.0765 5904 [ 4A0B06AA8943C1E332520F7440C0AA30 ] C:\WINDOWS\system32\drivers\i8042prt.sys
08:23:52.0765 5904 C:\WINDOWS\system32\drivers\i8042prt.sys - ok
08:23:52.0781 5904 [ 596EB39B50D6EBD9B734DC4AE0544693 ] C:\WINDOWS\system32\drivers\usbd.sys
08:23:52.0781 5904 C:\WINDOWS\system32\drivers\usbd.sys - ok
08:23:52.0781 5904 [ FA2DAA32BED908023272A0F77D625DAE ] C:\WINDOWS\system32\drivers\SynTP.sys
08:23:52.0781 5904 C:\WINDOWS\system32\drivers\SynTP.sys - ok
08:23:52.0781 5904 [ 35C9E97194C8CFB8430125F8DBC34D04 ] C:\WINDOWS\system32\drivers\mouclass.sys
08:23:52.0796 5904 C:\WINDOWS\system32\drivers\mouclass.sys - ok
08:23:52.0796 5904 [ 463C1EC80CD17420A542B7F36A36F128 ] C:\WINDOWS\system32\drivers\kbdclass.sys
08:23:52.0796 5904 C:\WINDOWS\system32\drivers\kbdclass.sys - ok
08:23:52.0796 5904 [ 083A052659F5310DD8B6A6CB05EDCF8E ] C:\WINDOWS\system32\drivers\imapi.sys
08:23:52.0796 5904 C:\WINDOWS\system32\drivers\imapi.sys - ok
08:23:52.0812 5904 [ D7968049BE0ADBB6A57CEE3960320911 ] C:\WINDOWS\system32\drivers\sscdbhk5.sys
08:23:52.0812 5904 C:\WINDOWS\system32\drivers\sscdbhk5.sys - ok
08:23:52.0812 5904 [ 1F4260CC5B42272D71F79E570A27A4FE ] C:\WINDOWS\system32\drivers\cdrom.sys
08:23:52.0812 5904 C:\WINDOWS\system32\drivers\cdrom.sys - ok
08:23:52.0812 5904 [ 0753515F78DF7F271A5E61C20BCD36A1 ] C:\WINDOWS\system32\drivers\ks.sys
08:23:52.0812 5904 C:\WINDOWS\system32\drivers\ks.sys - ok
08:23:52.0828 5904 [ F828DD7E1419B6653894A8F97A0094C5 ] C:\WINDOWS\system32\drivers\redbook.sys
08:23:52.0828 5904 C:\WINDOWS\system32\drivers\redbook.sys - ok
08:23:52.0828 5904 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
08:23:52.0828 5904 C:\WINDOWS\system32\drivers\GEARAspiWDM.sys - ok
08:23:52.0828 5904 [ D9F724AA26C010A217C97606B160ED68 ] C:\WINDOWS\system32\drivers\audstub.sys
08:23:52.0828 5904 C:\WINDOWS\system32\drivers\audstub.sys - ok
08:23:52.0843 5904 [ B5AA5AA5AC327BD7C1AEC0C58F0C1144 ] C:\WINDOWS\system32\drivers\dne2000.sys
08:23:52.0843 5904 C:\WINDOWS\system32\drivers\dne2000.sys - ok
08:23:52.0843 5904 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] C:\WINDOWS\system32\drivers\rasl2tp.sys
08:23:52.0843 5904 C:\WINDOWS\system32\drivers\rasl2tp.sys - ok
08:23:52.0843 5904 [ 1AB3D00C991AB086E69DB84B6C0ED78F ] C:\WINDOWS\system32\drivers\ndistapi.sys
08:23:52.0843 5904 C:\WINDOWS\system32\drivers\ndistapi.sys - ok
08:23:52.0859 5904 [ EDC1531A49C80614B2CFDA43CA8659AB ] C:\WINDOWS\system32\drivers\ndiswan.sys
08:23:52.0859 5904 C:\WINDOWS\system32\drivers\ndiswan.sys - ok
08:23:52.0859 5904 [ 5BC962F2654137C9909C3D4603587DEE ] C:\WINDOWS\system32\drivers\raspppoe.sys
08:23:52.0859 5904 C:\WINDOWS\system32\drivers\raspppoe.sys - ok
08:23:52.0859 5904 [ 0539D5E53587F82D1B4FD74C5BE205CF ] C:\WINDOWS\system32\drivers\tdi.sys
08:23:52.0859 5904 C:\WINDOWS\system32\drivers\tdi.sys - ok
08:23:52.0875 5904 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] C:\WINDOWS\system32\drivers\raspptp.sys
08:23:52.0875 5904 C:\WINDOWS\system32\drivers\raspptp.sys - ok
08:23:52.0875 5904 [ 09298EC810B07E5D582CB3A3F9255424 ] C:\WINDOWS\system32\drivers\psched.sys
08:23:52.0875 5904 C:\WINDOWS\system32\drivers\psched.sys - ok
08:23:52.0875 5904 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] C:\WINDOWS\system32\drivers\msgpc.sys
08:23:52.0875 5904 C:\WINDOWS\system32\drivers\msgpc.sys - ok
08:23:52.0875 5904 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] C:\WINDOWS\system32\drivers\ptilink.sys
08:23:52.0875 5904 C:\WINDOWS\system32\drivers\ptilink.sys - ok
08:23:52.0890 5904 [ FDBB1D60066FCFBB7452FD8F9829B242 ] C:\WINDOWS\system32\drivers\raspti.sys
08:23:52.0890 5904 C:\WINDOWS\system32\drivers\raspti.sys - ok
08:23:52.0890 5904 [ 15CABD0F7C00C47C70124907916AF3F1 ] C:\WINDOWS\system32\drivers\rdpdr.sys
08:23:52.0890 5904 C:\WINDOWS\system32\drivers\rdpdr.sys - ok
08:23:52.0890 5904 [ 88155247177638048422893737429D9E ] C:\WINDOWS\system32\drivers\termdd.sys
08:23:52.0890 5904 C:\WINDOWS\system32\drivers\termdd.sys - ok
08:23:52.0890 5904 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] C:\WINDOWS\system32\drivers\swenum.sys
08:23:52.0906 5904 C:\WINDOWS\system32\drivers\swenum.sys - ok
08:23:52.0921 5904 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] C:\WINDOWS\system32\drivers\update.sys
08:23:52.0921 5904 C:\WINDOWS\system32\drivers\update.sys - ok
08:23:52.0921 5904 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] C:\WINDOWS\system32\drivers\mssmbios.sys
08:23:52.0921 5904 C:\WINDOWS\system32\drivers\mssmbios.sys - ok
08:23:52.0921 5904 [ B17228142CEC9B3C222239FD935A37CA ] C:\WINDOWS\system32\drivers\omci.sys
08:23:52.0921 5904 C:\WINDOWS\system32\drivers\omci.sys - ok
08:23:52.0921 5904 [ 9282BD12DFB069D3889EB3FCC1000A9B ] C:\WINDOWS\system32\drivers\ndproxy.sys
08:23:52.0921 5904 C:\WINDOWS\system32\drivers\ndproxy.sys - ok
08:23:52.0937 5904 [ 6CB08593487F5701D2D2254E693EAFCE ] C:\WINDOWS\system32\drivers\drmk.sys
08:23:52.0937 5904 C:\WINDOWS\system32\drivers\drmk.sys - ok
08:23:52.0937 5904 [ E82A496C3961EFC6828B508C310CE98F ] C:\WINDOWS\system32\drivers\portcls.sys
08:23:52.0937 5904 C:\WINDOWS\system32\drivers\portcls.sys - ok
08:23:52.0937 5904 [ 3AD78E22210D3FBD9F76DE84A8DF19B5 ] C:\WINDOWS\system32\drivers\sthda.sys
08:23:52.0937 5904 C:\WINDOWS\system32\drivers\sthda.sys - ok
08:23:52.0937 5904 [ 1C8CAA80E91FB71864E9426F9EED048D ] C:\WINDOWS\system32\drivers\HSFHWAZL.sys
08:23:52.0937 5904 C:\WINDOWS\system32\drivers\HSFHWAZL.sys - ok
08:23:52.0953 5904 [ 698204D9C2832E53633E53A30A53FC3D ] C:\WINDOWS\system32\drivers\HSF_DPV.sys
08:23:52.0953 5904 C:\WINDOWS\system32\drivers\HSF_DPV.sys - ok
08:23:52.0953 5904 [ 74CF3F2E4E40C4A2E18D39D6300A5C24 ] C:\WINDOWS\system32\drivers\HSF_CNXT.sys
08:23:52.0953 5904 C:\WINDOWS\system32\drivers\HSF_CNXT.sys - ok
08:23:52.0953 5904 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] C:\WINDOWS\system32\drivers\modem.sys
08:23:52.0953 5904 C:\WINDOWS\system32\drivers\modem.sys - ok
08:23:52.0953 5904 [ 1AB3CDDE553B6E064D2E754EFE20285C ] C:\WINDOWS\system32\drivers\usbhub.sys
08:23:52.0953 5904 C:\WINDOWS\system32\drivers\usbhub.sys - ok
08:23:52.0968 5904 [ 6B6F0A77365667912360FF1D5E984F25 ] C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\34302\RapportCerberus32_34302.sys
08:23:52.0968 5904 C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\34302\RapportCerberus32_34302.sys - ok
08:23:52.0968 5904 [ 9368670BD426EBEA5E8B18A62416EC28 ] C:\WINDOWS\system32\drivers\i2omgmt.sys
08:23:52.0968 5904 C:\WINDOWS\system32\drivers\i2omgmt.sys - ok
08:23:52.0968 5904 [ C1B486A7658353D33A10CC15211A873B ] C:\WINDOWS\system32\drivers\cdaudio.sys
08:23:52.0968 5904 C:\WINDOWS\system32\drivers\cdaudio.sys - ok
08:23:52.0968 5904 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] C:\WINDOWS\system32\drivers\fs_rec.sys
08:23:52.0968 5904 C:\WINDOWS\system32\drivers\fs_rec.sys - ok
08:23:52.0984 5904 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] C:\WINDOWS\system32\drivers\null.sys
08:23:52.0984 5904 C:\WINDOWS\system32\drivers\null.sys - ok
08:23:52.0984 5904 [ DA1F27D85E0D1525F6621372E7B685E9 ] C:\WINDOWS\system32\drivers\beep.sys
08:23:52.0984 5904 C:\WINDOWS\system32\drivers\beep.sys - ok
08:23:52.0984 5904 [ C3FFD65ABFB6441E7606CF74F1155273 ] C:\WINDOWS\system32\drivers\ssrtln.sys
08:23:52.0984 5904 C:\WINDOWS\system32\drivers\ssrtln.sys - ok
08:23:52.0984 5904 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] C:\WINDOWS\system32\drivers\vga.sys
08:23:52.0984 5904 C:\WINDOWS\system32\drivers\vga.sys - ok
08:23:53.0000 5904 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] C:\WINDOWS\system32\drivers\mnmdd.sys
08:23:53.0000 5904 C:\WINDOWS\system32\drivers\mnmdd.sys - ok
08:23:53.0000 5904 [ 4912D5B403614CE99C28420F75353332 ] C:\WINDOWS\system32\drivers\rdpcdd.sys
08:23:53.0000 5904 C:\WINDOWS\system32\drivers\rdpcdd.sys - ok
08:23:53.0000 5904 [ C941EA2454BA8350021D774DAF0F1027 ] C:\WINDOWS\system32\drivers\msfs.sys
08:23:53.0000 5904 C:\WINDOWS\system32\drivers\msfs.sys - ok
08:23:53.0000 5904 [ 3182D64AE053D6FB034F44B6DEF8034A ] C:\WINDOWS\system32\drivers\npfs.sys
08:23:53.0000 5904 C:\WINDOWS\system32\drivers\npfs.sys - ok
08:23:53.0015 5904 [ 23C74D75E36E7158768DD63D92789A91 ] C:\WINDOWS\system32\drivers\ipsec.sys
08:23:53.0015 5904 C:\WINDOWS\system32\drivers\ipsec.sys - ok
08:23:53.0015 5904 [ FE0D99D6F31E4FAD8159F690D68DED9C ] C:\WINDOWS\system32\drivers\rasacd.sys
08:23:53.0015 5904 C:\WINDOWS\system32\drivers\rasacd.sys - ok
08:23:53.0015 5904 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] C:\WINDOWS\system32\drivers\tcpip.sys
08:23:53.0015 5904 C:\WINDOWS\system32\drivers\tcpip.sys - ok
08:23:53.0015 5904 [ BA73B38E9033FC6018DB736B635706AE ] C:\WINDOWS\system32\drivers\avgtdix.sys
08:23:53.0015 5904 C:\WINDOWS\system32\drivers\avgtdix.sys - ok
08:23:53.0031 5904 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] C:\WINDOWS\system32\drivers\netbt.sys
08:23:53.0031 5904 C:\WINDOWS\system32\drivers\netbt.sys - ok
08:23:53.0031 5904 [ 7618D5218F2A614672EC61A80D854A37 ] C:\WINDOWS\system32\drivers\afd.sys
08:23:53.0031 5904 C:\WINDOWS\system32\drivers\afd.sys - ok
08:23:53.0031 5904 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] C:\WINDOWS\system32\drivers\ws2ifsl.sys
08:23:53.0031 5904 C:\WINDOWS\system32\drivers\ws2ifsl.sys - ok
08:23:53.0046 5904 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] C:\WINDOWS\system32\drivers\netbios.sys
08:23:53.0046 5904 C:\WINDOWS\system32\drivers\netbios.sys - ok
08:23:53.0046 5904 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] C:\WINDOWS\system32\drivers\serial.sys
08:23:53.0046 5904 C:\WINDOWS\system32\drivers\serial.sys - ok
08:23:53.0046 5904 [ 39763504067962108505BFF25F024345 ] C:\Program Files\SUPERAntiSpyware\sasdifsv.sys
08:23:53.0046 5904 C:\Program Files\SUPERAntiSpyware\sasdifsv.sys - ok
08:23:53.0046 5904 [ 77B9FC20084B48408AD3E87570EB4A85 ] C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
08:23:53.0046 5904 C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS - ok
08:23:53.0062 5904 [ 7AD224AD1A1437FE28D89CF22B17780A ] C:\WINDOWS\system32\drivers\rdbss.sys
08:23:53.0062 5904 C:\WINDOWS\system32\drivers\rdbss.sys - ok
08:23:53.0062 5904 [ 43B9AA1423BF54367C5A3DE1559780E8 ] C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys
08:23:53.0062 5904 C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys - ok
08:23:53.0062 5904 [ 4AF05A67B643A5190DFCBB793273E0BC ] C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys
08:23:53.0062 5904 C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys - ok
08:23:53.0062 5904 [ 0EA4D8ED179B75F8AFA7998BA22285CA ] C:\WINDOWS\system32\drivers\mrxsmb.sys
08:23:53.0062 5904 C:\WINDOWS\system32\drivers\mrxsmb.sys - ok
08:23:53.0078 5904 [ D45926117EB9FA946A6AF572FBE1CAA3 ] C:\WINDOWS\system32\drivers\fips.sys
08:23:53.0078 5904 C:\WINDOWS\system32\drivers\fips.sys - ok
08:23:53.0078 5904 [ D53D35031365A0ECCB1DC1BC1B15B18E ] C:\WINDOWS\system32\drivers\avgldx86.sys
08:23:53.0078 5904 C:\WINDOWS\system32\drivers\avgldx86.sys - ok
08:23:53.0078 5904 [ E20B95BAEDB550F32DD489265C1DA1F6 ] C:\WINDOWS\system32\drivers\wanarp.sys
08:23:53.0078 5904 C:\WINDOWS\system32\drivers\wanarp.sys - ok
08:23:53.0078 5904 [ B5B8A80875C1DEDEDA8B02765642C32F ] C:\WINDOWS\system32\drivers\arp1394.sys
08:23:53.0078 5904 C:\WINDOWS\system32\drivers\arp1394.sys - ok
08:23:53.0093 5904 [ EC94E05B76D033B74394E7B2175103CF ] C:\WINDOWS\system32\drivers\APPDRV.SYS
08:23:53.0093 5904 C:\WINDOWS\system32\drivers\APPDRV.SYS - ok
08:23:53.0093 5904 [ 7BB2C605094DBCA536D127B434214862 ] C:\WINDOWS\system32\drivers\avgidsdriverx.sys
08:23:53.0093 5904 C:\WINDOWS\system32\drivers\avgidsdriverx.sys - ok
08:23:53.0093 5904 [ A8DE230CC8536790CA07D37FBCD87A74 ] C:\WINDOWS\system32\drivers\avgidsshimx.sys
08:23:53.0093 5904 C:\WINDOWS\system32\drivers\avgidsshimx.sys - ok
08:23:53.0109 5904 [ 5F816C1F539266D2D4C78694239DA0B5 ] C:\WINDOWS\system32\smss.exe
08:23:53.0109 5904 C:\WINDOWS\system32\smss.exe - ok
08:23:53.0109 5904 [ F8F0D25CA553E39DDE485D8FC7FCCE89 ] C:\WINDOWS\system32\ntdll.dll
08:23:53.0109 5904 C:\WINDOWS\system32\ntdll.dll - ok
08:23:53.0109 5904 [ 23043C91A0F9DFB4B9E9F87B680863B4 ] C:\WINDOWS\system32\autochk.exe
08:23:53.0109 5904 C:\WINDOWS\system32\autochk.exe - ok
08:23:53.0125 5904 [ 544D486301588C8199187C9AB5778B4B ] C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
08:23:53.0125 5904 C:\PROGRA~1\AVG\AVG2013\avgrsx.exe - ok
08:23:53.0125 5904 [ 484987420BC8DED2CB26C6F4EC9BA7F2 ] C:\Program Files\AVG\AVG2013\avgsysx.dll
08:23:53.0125 5904 C:\Program Files\AVG\AVG2013\avgsysx.dll - ok
08:23:53.0125 5904 [ 42836D10270B1940F9A2FF77AE679537 ] C:\Program Files\AVG\AVG2013\avgntopensslx.dll
08:23:53.0125 5904 C:\Program Files\AVG\AVG2013\avgntopensslx.dll - ok
08:23:53.0140 5904 [ 1C2E1FC9F8ED794CC191E92F27D1391C ] C:\Program Files\AVG\AVG2013\avglogx.dll
08:23:53.0140 5904 C:\Program Files\AVG\AVG2013\avglogx.dll - ok
08:23:53.0140 5904 [ C885B02847F5D2FD45A24E219ED93B32 ] C:\WINDOWS\system32\drivers\cdfs.sys
08:23:53.0140 5904 C:\WINDOWS\system32\drivers\cdfs.sys - ok
08:23:53.0140 5904 [ 60E16152D847D7A7B7D3DA4C4B8E2120 ] C:\WINDOWS\system32\ntoskrnl.exe
08:23:53.0140 5904 C:\WINDOWS\system32\ntoskrnl.exe - ok
08:23:53.0140 5904 [ 44F275C64738EA2056E3D9580C23B60F ] C:\WINDOWS\system32\csrss.exe
08:23:53.0140 5904 C:\WINDOWS\system32\csrss.exe - ok
08:23:53.0156 5904 [ 4EA92135C436D18975C2EBEC242B71DA ] C:\WINDOWS\system32\icmp.dll
08:23:53.0156 5904 C:\WINDOWS\system32\icmp.dll - ok
08:23:53.0156 5904 [ DAB9952E3626D84E74CBF4958B1B1F52 ] C:\WINDOWS\system32\kbduk.dll
08:23:53.0156 5904 C:\WINDOWS\system32\kbduk.dll - ok
08:23:53.0156 5904 [ 56C5B179FE3308B655EB6208C3256FEC ] C:\WINDOWS\system32\kbdus.dll
08:23:53.0156 5904 C:\WINDOWS\system32\kbdus.dll - ok
08:23:53.0156 5904 [ C3200506FB212A0F4FB736A80E646C40 ] C:\WINDOWS\system32\lz32.dll
08:23:53.0156 5904 C:\WINDOWS\system32\lz32.dll - ok
08:23:53.0171 5904 [ 6F9BEF24C578D5D6740E080BEDD6A448 ] C:\WINDOWS\system32\rasadhlp.dll
08:23:53.0171 5904 C:\WINDOWS\system32\rasadhlp.dll - ok
08:23:53.0171 5904 [ 96E1C926F22EE1BFBAE82901A35F6BF3 ] C:\WINDOWS\system32\sfc.dll
08:23:53.0171 5904 C:\WINDOWS\system32\sfc.dll - ok
08:23:53.0171 5904 [ C7CE131408739B0B3A318BE2D0032719 ] C:\WINDOWS\system32\version.dll
08:23:53.0171 5904 C:\WINDOWS\system32\version.dll - ok
08:23:53.0171 5904 [ ECB7591870F8BFB1A4C17B718AD5A4AA ] C:\WINDOWS\system32\vga.dll
08:23:53.0171 5904 C:\WINDOWS\system32\vga.dll - ok
08:23:53.0187 5904 [ AFFC87E2501FCE8F09D4C10BA6421CCF ] C:\WINDOWS\system32\msimg32.dll
08:23:53.0187 5904 C:\WINDOWS\system32\msimg32.dll - ok
08:23:53.0187 5904 [ E47E364C96467FD54FA44D59F927C3AB ] C:\WINDOWS\system32\msidle.dll
08:23:53.0187 5904 C:\WINDOWS\system32\msidle.dll - ok
08:23:53.0187 5904 [ 013C1148C1EC025596896E093F60F608 ] C:\WINDOWS\system32\nddeapi.dll
08:23:53.0187 5904 C:\WINDOWS\system32\nddeapi.dll - ok
08:23:53.0203 5904 [ D8361BEAB7109AB8B069F7F5028E37B1 ] C:\WINDOWS\system32\olesvr32.dll
08:23:53.0203 5904 C:\WINDOWS\system32\olesvr32.dll - ok
08:23:53.0203 5904 [ 3CBA2210FA39C6ED7895634842E930DD ] C:\WINDOWS\system32\sensapi.dll
08:23:53.0203 5904 C:\WINDOWS\system32\sensapi.dll - ok
08:23:53.0203 5904 [ 7B0770526801F05D58C51A3DFB87B4BD ] C:\WINDOWS\system32\wmi.dll
08:23:53.0203 5904 C:\WINDOWS\system32\wmi.dll - ok
08:23:53.0203 5904 [ 9789E95E1D88EEB4B922BF3EA7779C28 ] C:\WINDOWS\system32\ws2help.dll
08:23:53.0203 5904 C:\WINDOWS\system32\ws2help.dll - ok
08:23:53.0218 5904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] C:\WINDOWS\system32\lsass.exe
08:23:53.0218 5904 C:\WINDOWS\system32\lsass.exe - ok
08:23:53.0218 5904 [ 10753A3ADC3E39A3B10CC3F08E98E6B4 ] C:\WINDOWS\system32\normaliz.dll
08:23:53.0218 5904 C:\WINDOWS\system32\normaliz.dll - ok
08:23:53.0234 5904 [ 86440EDFF27095E03741AEDC5752AA51 ] C:\WINDOWS\system32\olecnv32.dll
08:23:53.0234 5904 C:\WINDOWS\system32\olecnv32.dll - ok
08:23:53.0234 5904 [ 9CFCB3CA3D83B4EAA133F0644A2C6F31 ] C:\WINDOWS\system32\psapi.dll
08:23:53.0234 5904 C:\WINDOWS\system32\psapi.dll - ok
08:23:53.0234 5904 [ 27C6D03BCDB8CFEB96B716F3D8BE3E18 ] C:\WINDOWS\system32\svchost.exe
08:23:53.0234 5904 C:\WINDOWS\system32\svchost.exe - ok
08:23:53.0234 5904 [ 6100D350770A5595FBF4C96F3510BADC ] C:\WINDOWS\system32\csrsrv.dll
08:23:53.0234 5904 C:\WINDOWS\system32\csrsrv.dll - ok
08:23:53.0250 5904 [ E9A7C2CA8650E4B741F4C0F649077AD9 ] C:\WINDOWS\system32\ialmrnt5.dll
08:23:53.0250 5904 C:\WINDOWS\system32\ialmrnt5.dll - ok
08:23:53.0250 5904 [ DD7BD97FB8BD800963789158A5E4B41D ] C:\WINDOWS\system32\mpr.dll
08:23:53.0250 5904 C:\WINDOWS\system32\mpr.dll - ok
08:23:53.0250 5904 [ DF6551E4C4C46655A0C76194F1FCEA5D ] C:\WINDOWS\system32\icaapi.dll
08:23:53.0250 5904 C:\WINDOWS\system32\icaapi.dll - ok
08:23:53.0250 5904 [ FCFA1C55971CC229D353B3A15ACCD995 ] C:\WINDOWS\system32\profmap.dll
08:23:53.0250 5904 C:\WINDOWS\system32\profmap.dll - ok
08:23:53.0265 5904 [ 5357826C8A8DD6A07F17C48BB45BE46E ] C:\WINDOWS\system32\secur32.dll
08:23:53.0265 5904 C:\WINDOWS\system32\secur32.dll - ok
08:23:53.0265 5904 [ 8985FCECE06A74017E23DDD093E34D4E ] C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll
08:23:53.0265 5904 C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll - ok
08:23:53.0265 5904 [ 6D280BC969218AE4A72180F907C32913 ] C:\WINDOWS\ehome\ehTrace.dll
08:23:53.0265 5904 C:\WINDOWS\ehome\ehTrace.dll - ok
08:23:53.0281 5904 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
08:23:53.0281 5904 C:\WINDOWS\system32\basesrv.dll - ok
08:23:53.0281 5904 [ A7DB739AE99A796D91580147E919CC59 ] C:\WINDOWS\system32\lmhsvc.dll
08:23:53.0281 5904 C:\WINDOWS\system32\lmhsvc.dll - ok
08:23:53.0281 5904 [ AF11C591F2F4AFF4A6CF699D376F618B ] C:\WINDOWS\system32\regapi.dll
08:23:53.0281 5904 C:\WINDOWS\system32\regapi.dll - ok
08:23:53.0281 5904 [ 4763CE0B8CF4CA355DB2FE6C74675DB8 ] C:\WINDOWS\system32\twext.dll
08:23:53.0281 5904 C:\WINDOWS\system32\twext.dll - ok
08:23:53.0296 5904 [ 714705F29A917993536A6AB2DEDB0B7F ] C:\WINDOWS\system32\authz.dll
08:23:53.0296 5904 C:\WINDOWS\system32\authz.dll - ok
08:23:53.0296 5904 [ 04D898830DF96A17A20FD35D7590F87E ] C:\WINDOWS\system32\msasn1.dll
08:23:53.0296 5904 C:\WINDOWS\system32\msasn1.dll - ok
08:23:53.0296 5904 [ AE9543F20FCC1E7BCAA13051CC076147 ] C:\WINDOWS\system32\olethk32.dll
08:23:53.0296 5904 C:\WINDOWS\system32\olethk32.dll - ok
08:23:53.0312 5904 [ 4E3D06D6E68EEDB52565080F55B460D3 ] C:\WINDOWS\system32\wshtcpip.dll
08:23:53.0312 5904 C:\WINDOWS\system32\wshtcpip.dll - ok
08:23:53.0312 5904 [ 0E2735281FBB9A764D5584C2A5DCBA59 ] C:\WINDOWS\system32\wtsapi32.dll
08:23:53.0312 5904 C:\WINDOWS\system32\wtsapi32.dll - ok
08:23:53.0312 5904 [ FA1B9CAE64B23C950DA3D96ABBF23BD0 ] C:\WINDOWS\system32\olecli32.dll
08:23:53.0312 5904 C:\WINDOWS\system32\olecli32.dll - ok
08:23:53.0312 5904 [ D72B9EC3337B247A666F098F3D6B43DE ] C:\WINDOWS\system32\winrnr.dll
08:23:53.0312 5904 C:\WINDOWS\system32\winrnr.dll - ok
08:23:53.0328 5904 [ 67156D5A9AC356DC99D7BCCB388E3316 ] C:\WINDOWS\system32\wsock32.dll
08:23:53.0328 5904 C:\WINDOWS\system32\wsock32.dll - ok
08:23:53.0328 5904 [ 81E9041DAC0983AACE5C8920AF73D64E ] C:\Program Files\Common Files\System\msadc\msadcer.dll
08:23:53.0328 5904 C:\Program Files\Common Files\System\msadc\msadcer.dll - ok
08:23:53.0328 5904 [ 5F0CE62E0831CF972EC6949FD3E37DA7 ] C:\WINDOWS\system32\cfgmgr32.dll
08:23:53.0328 5904 C:\WINDOWS\system32\cfgmgr32.dll - ok
08:23:53.0328 5904 [ E2092F0A1D7ABC243F9C2362483D150D ] C:\WINDOWS\system32\dimsntfy.dll
08:23:53.0328 5904 C:\WINDOWS\system32\dimsntfy.dll - ok
08:23:53.0343 5904 [ 6654698F76CF6E46D5D321C53721947C ] C:\WINDOWS\system32\oleaccrc.dll
08:23:53.0343 5904 C:\WINDOWS\system32\oleaccrc.dll - ok
08:23:53.0343 5904 [ 50A166237A0FA771261275A405646CC0 ] C:\WINDOWS\system32\powrprof.dll
08:23:53.0343 5904 C:\WINDOWS\system32\powrprof.dll - ok
08:23:53.0343 5904 [ CBE612E2BB6A10E3563336191EDA1250 ] C:\WINDOWS\system32\seclogon.dll
08:23:53.0343 5904 C:\WINDOWS\system32\seclogon.dll - ok
08:23:53.0343 5904 [ 205ADD80FF8099B1A8101EB490B933D1 ] C:\WINDOWS\system32\wbem\wbemprox.dll
08:23:53.0343 5904 C:\WINDOWS\system32\wbem\wbemprox.dll - ok
08:23:53.0359 5904 [ 430CEB794F6E6EF8AC86958C242366D6 ] C:\WINDOWS\system32\winsta.dll
08:23:53.0359 5904 C:\WINDOWS\system32\winsta.dll - ok
08:23:53.0359 5904 [ 57EDEC2E5F59F0335E92F35184BC8631 ] C:\WINDOWS\system32\dmserver.dll
08:23:53.0359 5904 C:\WINDOWS\system32\dmserver.dll - ok
08:23:53.0359 5904 [ 91617515AA185259694A1C4882080B99 ] C:\WINDOWS\system32\url.dll
08:23:53.0359 5904 C:\WINDOWS\system32\url.dll - ok
08:23:53.0359 5904 [ 17A1D675C12BBF80CAAC54A4855C41D0 ] C:\WINDOWS\system32\cryptdll.dll
08:23:53.0359 5904 C:\WINDOWS\system32\cryptdll.dll - ok
08:23:53.0375 5904 [ EC29A79F1E76DC509E24D401F29D0678 ] C:\WINDOWS\system32\ncobjapi.dll
08:23:53.0375 5904 C:\WINDOWS\system32\ncobjapi.dll - ok
08:23:53.0375 5904 [ 2CCC474EB85CEAA3E1FA1726580A3E5A ] C:\WINDOWS\system32\ws2_32.dll
08:23:53.0375 5904 C:\WINDOWS\system32\ws2_32.dll - ok
08:23:53.0375 5904 [ EA9EE60B408878E5F2012F9C783836DB ] C:\WINDOWS\AppPatch\acadproc.dll
08:23:53.0375 5904 C:\WINDOWS\AppPatch\acadproc.dll - ok
08:23:53.0375 5904 [ CF492D7E9AF1C628B3536D20EF6F5CC7 ] C:\WINDOWS\system32\apphelp.dll
08:23:53.0375 5904 C:\WINDOWS\system32\apphelp.dll - ok
08:23:53.0390 5904 [ E6EF7BC927D9F8F9BA1584BFC39E0C6F ] C:\WINDOWS\system32\eapolqec.dll
08:23:53.0390 5904 C:\WINDOWS\system32\eapolqec.dll - ok
08:23:53.0390 5904 [ C6BB1D1500DB4A0E224CB65E6C7E8A80 ] C:\WINDOWS\system32\msprivs.dll
08:23:53.0390 5904 C:\WINDOWS\system32\msprivs.dll - ok
08:23:53.0390 5904 [ 5F7E24FA9EAB896051FFB87F840730D2 ] C:\WINDOWS\system32\dnsrslvr.dll
08:23:53.0390 5904 C:\WINDOWS\system32\dnsrslvr.dll - ok
08:23:53.0390 5904 [ 8E2CC37BA87D8F681066E0E9C8A19F73 ] C:\WINDOWS\system32\dot3api.dll
08:23:53.0390 5904 C:\WINDOWS\system32\dot3api.dll - ok
08:23:53.0406 5904 [ 876CCF164E08D6B903CD14398E056DD2 ] C:\WINDOWS\system32\rtutils.dll
08:23:53.0406 5904 C:\WINDOWS\system32\rtutils.dll - ok
08:23:53.0406 5904 [ 3AAF9B35939FF9E58CCD18D41655C2FC ] C:\WINDOWS\system32\wdigest.dll
08:23:53.0406 5904 C:\WINDOWS\system32\wdigest.dll - ok
08:23:53.0406 5904 [ CA648BD638245EB83F971FF71B031BEC ] C:\WINDOWS\system32\imagehlp.dll
08:23:53.0406 5904 C:\WINDOWS\system32\imagehlp.dll - ok
08:23:53.0406 5904 [ C14AA05881A35B6D6BB8D55B117EE22D ] C:\WINDOWS\system32\shfolder.dll
08:23:53.0406 5904 C:\WINDOWS\system32\shfolder.dll - ok
08:23:53.0421 5904 [ FB32F046A2578755FA0DA5052C6A9CD3 ] C:\Program Files\Xampp\xampp\apache\bin\httpd.exe
08:23:53.0421 5904 C:\Program Files\Xampp\xampp\apache\bin\httpd.exe - ok
08:23:53.0421 5904 [ BC93B4A066477954555966D77FEC9ECB ] C:\WINDOWS\system32\ersvc.dll
08:23:53.0421 5904 C:\WINDOWS\system32\ersvc.dll - ok
08:23:53.0421 5904 [ DEB04DA35CC871B6D309B77E1443C796 ] C:\WINDOWS\system32\hidserv.dll
08:23:53.0421 5904 C:\WINDOWS\system32\hidserv.dll - ok
08:23:53.0421 5904 [ 7A660EDC0757849DF5F8706FB6E9F740 ] C:\WINDOWS\system32\msvcrt40.dll
08:23:53.0421 5904 C:\WINDOWS\system32\msvcrt40.dll - ok
08:23:53.0437 5904 [ 8329A39D5A402A75A74301D6A62ECDA1 ] C:\WINDOWS\system32\samlib.dll
08:23:53.0437 5904 C:\WINDOWS\system32\samlib.dll - ok
08:23:53.0437 5904 [ DEF7A7882BEC100FE0B2CE2549188F9D ] C:\WINDOWS\system32\audiosrv.dll
08:23:53.0437 5904 C:\WINDOWS\system32\audiosrv.dll - ok
08:23:53.0437 5904 [ FE6119094F9E690A32B4A7873C223653 ] C:\WINDOWS\system32\ialmdnt5.dll
08:23:53.0437 5904 C:\WINDOWS\system32\ialmdnt5.dll - ok
08:23:53.0437 5904 [ 0DA85218E92526972A821587E6A8BF8F ] C:\WINDOWS\system32\imm32.dll
08:23:53.0437 5904 C:\WINDOWS\system32\imm32.dll - ok
08:23:53.0453 5904 [ 6B7C6B32F8E84D56C6260D684019FEA2 ] C:\WINDOWS\system32\odbcint.dll
08:23:53.0453 5904 C:\WINDOWS\system32\odbcint.dll - ok
08:23:53.0453 5904 [ 1F03103598BD817B1078DAB1326DDE11 ] C:\WINDOWS\system32\shimeng.dll
08:23:53.0453 5904 C:\WINDOWS\system32\shimeng.dll - ok
08:23:53.0453 5904 [ 6D4FEB43EE538FC5428CC7F0565AA656 ] C:\WINDOWS\system32\eventlog.dll
08:23:53.0453 5904 C:\WINDOWS\system32\eventlog.dll - ok
08:23:53.0468 5904 [ EC4C0D9BFD9F7E33F8B395AD54E13063 ] C:\WINDOWS\system32\ntdsapi.dll
08:23:53.0468 5904 C:\WINDOWS\system32\ntdsapi.dll - ok
08:23:53.0468 5904 [ 5CE275CDC5FFB77B1EC29DBDFE4B6689 ] C:\WINDOWS\system32\odbcji32.dll
08:23:53.0468 5904 C:\WINDOWS\system32\odbcji32.dll - ok
08:23:53.0468 5904 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
08:23:53.0468 5904 C:\WINDOWS\system32\services.exe - ok
08:23:53.0468 5904 [ 130B2211668B9FFC5FCFB2B4E943731A ] C:\Program Files\Xampp\xampp\apache\bin\libapriconv-1.dll
08:23:53.0468 5904 C:\Program Files\Xampp\xampp\apache\bin\libapriconv-1.dll - ok
08:23:53.0484 5904 [ DF82E222578DBE59FCBBD69A02E4C806 ] C:\WINDOWS\system32\clusapi.dll
08:23:53.0484 5904 C:\WINDOWS\system32\clusapi.dll - ok
08:23:53.0484 5904 [ A7E06854EA2A20AEE8EC32BD8C754298 ] C:\WINDOWS\system32\mpnotify.exe
08:23:53.0484 5904 C:\WINDOWS\system32\mpnotify.exe - ok
08:23:53.0484 5904 [ 2098AB52BD5316E59AA36F3437B13BE6 ] C:\WINDOWS\system32\msacm32.dll
08:23:53.0484 5904 C:\WINDOWS\system32\msacm32.dll - ok
08:23:53.0484 5904 [ 20F6F19FE9E753F2780DC2FA083AD597 ] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
08:23:53.0484 5904 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe - ok
08:23:53.0500 5904 [ 3D76DD0CBC536E0F8C45D23ED230BEB2 ] C:\WINDOWS\system32\digest.dll
08:23:53.0500 5904 C:\WINDOWS\system32\digest.dll - ok
08:23:53.0500 5904 [ EC8DEC2C1FC37F10184CB7129A55601A ] C:\WINDOWS\system32\ialmdev5.dll
08:23:53.0500 5904 C:\WINDOWS\system32\ialmdev5.dll - ok
08:23:53.0500 5904 [ 0492CF5870F0E616B0C71695A433D162 ] C:\WINDOWS\system32\wldap32.dll
08:23:53.0500 5904 C:\WINDOWS\system32\wldap32.dll - ok
08:23:53.0500 5904 [ F24B12786D60A17008319E3F2AEE7799 ] C:\WINDOWS\system32\msapsspc.dll
08:23:53.0500 5904 C:\WINDOWS\system32\msapsspc.dll - ok
08:23:53.0515 5904 [ 690D97864735E8ECD87F55777E266690 ] C:\WINDOWS\system32\colbact.dll
08:23:53.0515 5904 C:\WINDOWS\system32\colbact.dll - ok
08:23:53.0515 5904 [ 86987A5000DFA3EBE2275C0456BCF2FE ] C:\WINDOWS\system32\comdlg32.dll
08:23:53.0515 5904 C:\WINDOWS\system32\comdlg32.dll - ok
08:23:53.0515 5904 [ F86A2C7C279C746D5C5E06941ED4C337 ] C:\Program Files\Common Files\System\Ole DB\oledb32r.dll
08:23:53.0515 5904 C:\Program Files\Common Files\System\Ole DB\oledb32r.dll - ok
08:23:53.0515 5904 [ 0099D24356585743B0B35C222092FD8F ] C:\WINDOWS\system32\faultrep.dll
08:23:53.0515 5904 C:\WINDOWS\system32\faultrep.dll - ok
08:23:53.0531 5904 [ AF07DC9B7CC455629E732340C7B15F3A ] C:\WINDOWS\system32\iphlpapi.dll
08:23:53.0531 5904 C:\WINDOWS\system32\iphlpapi.dll - ok
08:23:53.0531 5904 [ 02988B904C386B500CD08639C4C20EEA ] C:\WINDOWS\system32\winscard.dll
08:23:53.0531 5904 C:\WINDOWS\system32\winscard.dll - ok
08:23:53.0531 5904 [ 36795A645EAA47FE31D2A8F136A2C69B ] C:\WINDOWS\system32\mtxclu.dll
08:23:53.0531 5904 C:\WINDOWS\system32\mtxclu.dll - ok
08:23:53.0531 5904 [ F51EBB6FC536A6B2D588FD668D3A8249 ] C:\WINDOWS\system32\resutils.dll
08:23:53.0531 5904 C:\WINDOWS\system32\resutils.dll - ok
08:23:53.0546 5904 [ E5EDBD51476DB5001ABF5C82AE5C3DD1 ] C:\WINDOWS\system32\shgina.dll
08:23:53.0546 5904 C:\WINDOWS\system32\shgina.dll - ok
08:23:53.0546 5904 [ AEADC4FE32D6D60F36D9B9ACE5C642A2 ] C:\WINDOWS\system32\wintrust.dll
08:23:53.0546 5904 C:\WINDOWS\system32\wintrust.dll - ok
08:23:53.0546 5904 [ 8973122796E3B5D6B5900FC186E55FEA ] C:\WINDOWS\system32\hid.dll
08:23:53.0546 5904 C:\WINDOWS\system32\hid.dll - ok
08:23:53.0546 5904 [ 369F7B1A4F358B976176556A1A331F36 ] C:\WINDOWS\system32\odbcbcp.dll
08:23:53.0546 5904 C:\WINDOWS\system32\odbcbcp.dll - ok
08:23:53.0562 5904 [ 224FB925C641DA16CEB6D60F40CA4C75 ] C:\WINDOWS\system32\atl.dll
08:23:53.0562 5904 C:\WINDOWS\system32\atl.dll - ok
08:23:53.0562 5904 [ 0D14F07B29FBF0D750AA2495DD72B968 ] C:\WINDOWS\system32\msjter40.dll
08:23:53.0562 5904 C:\WINDOWS\system32\msjter40.dll - ok
08:23:53.0562 5904 [ 4DEF926F6A0545AE486A03C84F2EE482 ] C:\WINDOWS\system32\rasman.dll
08:23:53.0562 5904 C:\WINDOWS\system32\rasman.dll - ok
08:23:53.0562 5904 [ 2CC34E8BB667EEF78899546E12649196 ] C:\WINDOWS\system32\wlnotify.dll
08:23:53.0562 5904 C:\WINDOWS\system32\wlnotify.dll - ok
08:23:53.0578 5904 [ 60784F891563FB1B767F70117FC2428F ] C:\WINDOWS\system32\spoolsv.exe
08:23:53.0578 5904 C:\WINDOWS\system32\spoolsv.exe - ok
08:23:53.0578 5904 [ 77A354E28153AD2D5E120A5A8687BC06 ] C:\WINDOWS\system32\webclnt.dll
08:23:53.0578 5904 C:\WINDOWS\system32\webclnt.dll - ok
08:23:53.0578 5904 [ 8B1F3320AEBB536E021A5014409862DE ] C:\WINDOWS\system32\gdi32.dll
08:23:53.0578 5904 C:\WINDOWS\system32\gdi32.dll - ok
08:23:53.0593 5904 [ 8AE93AACC648921BAACB8602991AC4B3 ] C:\WINDOWS\system32\qutil.dll
08:23:53.0593 5904 C:\WINDOWS\system32\qutil.dll - ok
08:23:53.0593 5904 [ 99BC0B50F511924348BE19C7C7313BBF ] C:\WINDOWS\system32\shsvcs.dll
08:23:53.0593 5904 C:\WINDOWS\system32\shsvcs.dll - ok
08:23:53.0593 5904 [ 40B0F98BAD16AD5DEF894E88C3EF8014 ] C:\WINDOWS\system32\odbc32.dll
08:23:53.0593 5904 C:\WINDOWS\system32\odbc32.dll - ok
08:23:53.0593 5904 [ DDDD1D04D5F4360371BC99C7C476F70D ] C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll
08:23:53.0593 5904 C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll - ok
08:23:53.0609 5904 [ 210DB2C9AEB168550132561DB85D22DD ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\ModPerl\Util\Util.dll
08:23:53.0609 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\ModPerl\Util\Util.dll - ok
08:23:53.0609 5904 [ 2EDFC2A8893435723AD80481803C6D5C ] C:\WINDOWS\system32\umpnpmgr.dll
08:23:53.0609 5904 C:\WINDOWS\system32\umpnpmgr.dll - ok
08:23:53.0609 5904 [ 389496118B3B03C2328024AF320132AC ] C:\WINDOWS\system32\dnsapi.dll
08:23:53.0609 5904 C:\WINDOWS\system32\dnsapi.dll - ok
08:23:53.0609 5904 [ 6B5DB6789177A4FD0DEBC248041D0739 ] C:\WINDOWS\system32\sfc_os.dll
08:23:53.0609 5904 C:\WINDOWS\system32\sfc_os.dll - ok
08:23:53.0625 5904 [ 517561A1113B04E51D936CD018DE1C1F ] C:\WINDOWS\system32\msv1_0.dll
08:23:53.0625 5904 C:\WINDOWS\system32\msv1_0.dll - ok
08:23:53.0625 5904 [ 7EF0C8A9A1A57756F4868E3693173C08 ] C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll
08:23:53.0625 5904 C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll - ok
08:23:53.0640 5904 [ E5116E90B67711A8E447C2031F52D275 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Const\Const.dll
08:23:53.0640 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Const\Const.dll - ok
08:23:53.0640 5904 [ 616748CAB665F7E37FBBA7B7C567F863 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Const\Const.dll
08:23:53.0640 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Const\Const.dll - ok
08:23:53.0656 5904 [ 515A7FAE2070C2B0242B2353443E2F11 ] C:\WINDOWS\system32\cscdll.dll
08:23:53.0656 5904 C:\WINDOWS\system32\cscdll.dll - ok
08:23:53.0656 5904 [ 045DF7AE14CAAED71338916D6FB66812 ] C:\WINDOWS\system32\wow32.dll
08:23:53.0656 5904 C:\WINDOWS\system32\wow32.dll - ok
08:23:53.0656 5904 [ 15530639789C990827E594344EACC465 ] C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll
08:23:53.0656 5904 C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll - ok
08:23:53.0656 5904 [ F9BAAD39ED47576AE19B1F30AC37E567 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Util\Util.dll
08:23:53.0656 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Util\Util.dll - ok
08:23:53.0687 5904 [ 549290DBC280C887681D7652978DBBE0 ] C:\WINDOWS\system32\ntmarta.dll
08:23:53.0687 5904 C:\WINDOWS\system32\ntmarta.dll - ok
08:23:53.0687 5904 [ 73BAFFA0B02320690CDC606241078CE4 ] C:\Program Files\Common Files\System\Ole DB\msdatl3.dll
08:23:53.0687 5904 C:\Program Files\Common Files\System\Ole DB\msdatl3.dll - ok
08:23:53.0687 5904 [ 65AEF6855446B8FF4514F81083BA5F18 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Log\Log.dll
08:23:53.0687 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Log\Log.dll - ok
08:23:53.0703 5904 [ FB00CBD721EC0F81F0B8D90847FF5998 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\ServerUtil\ServerUtil.dll
08:23:53.0703 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\ServerUtil\ServerUtil.dll - ok
08:23:53.0703 5904 [ 0D625C67FB2E3A6A526170F0A51B83F4 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\URI\URI.dll
08:23:53.0703 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\URI\URI.dll - ok
08:23:53.0703 5904 [ 2AD73379A7025985F3BF22ABC6BAC5A0 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Date\Date.dll
08:23:53.0703 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Date\Date.dll - ok
08:23:53.0703 5904 [ 1A738CF00BFFB6F64DEC458C673B4932 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Table\Table.dll
08:23:53.0718 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Table\Table.dll - ok
08:23:53.0718 5904 [ 8FC2B854A46CAC287F932A590A807A5D ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Util\Util.dll
08:23:53.0718 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Util\Util.dll - ok
08:23:53.0718 5904 [ 45BEEF100A729C31329795EFB6C827CE ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Access\Access.dll
08:23:53.0718 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Access\Access.dll - ok
08:23:53.0718 5904 [ CF79DA8C652E59DB7F0AAE9FC45E83C0 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Module\Module.dll
08:23:53.0718 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Module\Module.dll - ok
08:23:53.0734 5904 [ 566382CA5F2C41FEAEEEFAC908F1EB92 ] C:\WINDOWS\system32\xmlprovi.dll
08:23:53.0734 5904 C:\WINDOWS\system32\xmlprovi.dll - ok
08:23:53.0734 5904 [ EA5B8BECA3F279C757578CD7F1E95855 ] C:\WINDOWS\system32\mprapi.dll
08:23:53.0734 5904 C:\WINDOWS\system32\mprapi.dll - ok
08:23:53.0734 5904 [ 30ACE70B3C0242F0D1AC3B4FA708710F ] C:\WINDOWS\system32\schannel.dll
08:23:53.0734 5904 C:\WINDOWS\system32\schannel.dll - ok
08:23:53.0750 5904 [ 9718414518CDE130764A29755F8E2F84 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Response\Response.dll
08:23:53.0750 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Response\Response.dll - ok
08:23:53.0750 5904 [ 56CE97FF94B7662A300D359CD6F4D601 ] C:\WINDOWS\system32\raschap.dll
08:23:53.0750 5904 C:\WINDOWS\system32\raschap.dll - ok
08:23:53.0750 5904 [ 54AF4B1D5459500EF0937F6D33B1914F ] C:\WINDOWS\system32\w32time.dll
08:23:53.0750 5904 C:\WINDOWS\system32\w32time.dll - ok
08:23:53.0750 5904 [ F1300D0B4C40754A01DF16F350F0EF60 ] C:\WINDOWS\system32\winmm.dll
08:23:53.0750 5904 C:\WINDOWS\system32\winmm.dll - ok
08:23:53.0750 5904 [ C448A248B743F5FB935C787A5D97268B ] C:\WINDOWS\system32\shlwapi.dll
08:23:53.0765 5904 C:\WINDOWS\system32\shlwapi.dll - ok
08:23:53.0765 5904 [ BE0534EA9B7621C5883C8C0BB9A9A679 ] C:\Program Files\Xampp\xampp\apache\modules\php5apache2_2.dll
08:23:53.0765 5904 C:\Program Files\Xampp\xampp\apache\modules\php5apache2_2.dll - ok
08:23:53.0765 5904 [ 5E38D7684A49CACFB752B046357E0589 ] C:\WINDOWS\system32\dhcpcsvc.dll
08:23:53.0765 5904 C:\WINDOWS\system32\dhcpcsvc.dll - ok
08:23:53.0765 5904 [ 49BE3D059178D139A420F61C734030E4 ] C:\Program Files\Xampp\xampp\apache\bin\libapreq2.dll
08:23:53.0765 5904 C:\Program Files\Xampp\xampp\apache\bin\libapreq2.dll - ok
08:23:53.0781 5904 [ 99860F5F15F9775B1DC80CD501CD6F11 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\ServerRec\ServerRec.dll
08:23:53.0781 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\ServerRec\ServerRec.dll - ok
08:23:53.0781 5904 [ ACDAFCD14EC0ECE89198503746A5C147 ] C:\WINDOWS\system32\perfos.dll
08:23:53.0781 5904 C:\WINDOWS\system32\perfos.dll - ok
08:23:53.0781 5904 [ 7A2CC3719B255E6B5D74396183B7715B ] C:\WINDOWS\system32\uxtheme.dll
08:23:53.0781 5904 C:\WINDOWS\system32\uxtheme.dll - ok
08:23:53.0781 5904 [ 767FF54A552732CE772C2302025FA82F ] C:\WINDOWS\system32\wzcsapi.dll
08:23:53.0781 5904 C:\WINDOWS\system32\wzcsapi.dll - ok
08:23:53.0796 5904 [ 58600F2BBE908697CCF4F46896F3C79F ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\RequestIO\RequestIO.dll
08:23:53.0796 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\RequestIO\RequestIO.dll - ok
08:23:53.0796 5904 [ B26B135FF1B9F60C9388B4A7D16F600B ] C:\WINDOWS\system32\user32.dll
08:23:53.0796 5904 C:\WINDOWS\system32\user32.dll - ok
08:23:53.0796 5904 [ 37BC9E0E4B3657B54037777135569D1E ] C:\Program Files\Bonjour\mdnsNSP.dll
08:23:53.0796 5904 C:\Program Files\Bonjour\mdnsNSP.dll - ok
08:23:53.0796 5904 [ FE99B6CEF6022812EBE22B775D54227E ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Status\Status.dll
08:23:53.0796 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Status\Status.dll - ok
08:23:53.0812 5904 [ 585992D78B671AAA075C02241309795D ] C:\WINDOWS\system32\msvcirt.dll
08:23:53.0812 5904 C:\WINDOWS\system32\msvcirt.dll - ok
08:23:53.0812 5904 [ 9AFFF9D49BF5F337AB980E300A23D09C ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\SubRequest\SubRequest.dll
08:23:53.0812 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\SubRequest\SubRequest.dll - ok
08:23:53.0812 5904 [ B921FB870C9AC0D509B2CCABBBBE95F3 ] C:\WINDOWS\system32\kernel32.dll
08:23:53.0812 5904 C:\WINDOWS\system32\kernel32.dll - ok
08:23:53.0812 5904 [ 387006CF9983000BAB76DD250D424045 ] C:\WINDOWS\system32\oleaut32.dll
08:23:53.0812 5904 C:\WINDOWS\system32\oleaut32.dll - ok
08:23:53.0828 5904 [ E86423AA9AA8C382AF02B94A058DC2AA ] C:\WINDOWS\system32\shell32.dll
08:23:53.0828 5904 C:\WINDOWS\system32\shell32.dll - ok
08:23:53.0828 5904 [ E392E172687BE172F8600C5F41AB03D9 ] C:\WINDOWS\system32\browseui.dll
08:23:53.0828 5904 C:\WINDOWS\system32\browseui.dll - ok
08:23:53.0828 5904 [ 9FB834B834DBBD7DAA252B9E81EF8CC4 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\RequestUtil\RequestUtil.dll
08:23:53.0828 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\RequestUtil\RequestUtil.dll - ok
08:23:53.0828 5904 [ 89D74683C859B7982056D15938BACA3E ] C:\WINDOWS\system32\propsys.dll
08:23:53.0828 5904 C:\WINDOWS\system32\propsys.dll - ok
08:23:53.0843 5904 [ DEF0F934FAB2987FEBF54E9BF03A27D9 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Connection\Connection.dll
08:23:53.0843 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Connection\Connection.dll - ok
08:23:53.0843 5904 [ 36FEA3C4A412ABEC8D5D5A4AED9A365C ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\ModPerl\Global\Global.dll
08:23:53.0843 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\ModPerl\Global\Global.dll - ok
08:23:53.0843 5904 [ 2C288AA87E4723AC9FF4D76A192EC3F8 ] C:\WINDOWS\system32\odbccp32.dll
08:23:53.0843 5904 C:\WINDOWS\system32\odbccp32.dll - ok
08:23:53.0843 5904 [ E42F7B36B4D8866184E8DF9776CA4226 ] C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
08:23:53.0843 5904 C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe - ok
08:23:53.0859 5904 [ D25C03D04159D462D69F294BA7142BDB ] C:\WINDOWS\system32\msdmo.dll
08:23:53.0859 5904 C:\WINDOWS\system32\msdmo.dll - ok
08:23:53.0859 5904 [ 7A6A7900B5E322763430BA6FD9A31224 ] C:\WINDOWS\system32\ole32.dll
08:23:53.0859 5904 C:\WINDOWS\system32\ole32.dll - ok
08:23:53.0859 5904 [ 93AFB83FBC1F9443CAC722FCA63D73BF ] C:\WINDOWS\system32\comctl32.dll
08:23:53.0859 5904 C:\WINDOWS\system32\comctl32.dll - ok
08:23:53.0859 5904 [ EF02858A04AA58BE1516FC89F1CD15DC ] C:\Program Files\Xampp\xampp\perl\lib\auto\Cwd\Cwd.dll
08:23:53.0859 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\Cwd\Cwd.dll - ok
08:23:53.0875 5904 [ 9DD07AF82244867CA36681EA2D29CE79 ] C:\WINDOWS\system32\sfcfiles.dll
08:23:53.0875 5904 C:\WINDOWS\system32\sfcfiles.dll - ok
08:23:53.0875 5904 [ E76F8807070ED04E7408A86D6D3A6137 ] C:\WINDOWS\system32\advapi32.dll
08:23:53.0875 5904 C:\WINDOWS\system32\advapi32.dll - ok
08:23:53.0875 5904 [ 9C79C1F36044181E76EC295A5AAB27AC ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\RequestRec\RequestRec.dll
08:23:53.0875 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\RequestRec\RequestRec.dll - ok
08:23:53.0875 5904 [ 355EDBB4D412B01F1740C17E3F50FA00 ] C:\WINDOWS\system32\msvcrt.dll
08:23:53.0875 5904 C:\WINDOWS\system32\msvcrt.dll - ok
08:23:53.0890 5904 [ 96F1CD75A4674D14F5DA84235A5EA4C3 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Pool\Pool.dll
08:23:53.0890 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Pool\Pool.dll - ok
08:23:53.0890 5904 [ D4502F124289A31976130CCCB014C9AA ] C:\WINDOWS\system32\rpcrt4.dll
08:23:53.0890 5904 C:\WINDOWS\system32\rpcrt4.dll - ok
08:23:53.0890 5904 [ CDF30340E1A4AC3EDAC63B5B62E00FE1 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Filter\Filter.dll
08:23:53.0890 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\Apache2\Filter\Filter.dll - ok
08:23:53.0890 5904 [ 222E55ED34776C522BAF2B2A9EEB48E4 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\URI\URI.dll
08:23:53.0890 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\URI\URI.dll - ok
08:23:53.0906 5904 [ 01F0CBEB457CAE7EF0CA52C7CCA5B0E8 ] C:\WINDOWS\system32\msdart.dll
08:23:53.0906 5904 C:\WINDOWS\system32\msdart.dll - ok
08:23:53.0906 5904 [ 681B807E53BDADA337735C28C0E48A1B ] C:\WINDOWS\system32\ntvdm.exe
08:23:53.0906 5904 C:\WINDOWS\system32\ntvdm.exe - ok
08:23:53.0906 5904 [ A9AC895B7891EDCF3358BA310C7233C9 ] C:\Program Files\Xampp\xampp\perl\lib\auto\Fcntl\Fcntl.dll
08:23:53.0906 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\Fcntl\Fcntl.dll - ok
08:23:53.0906 5904 [ 5FA52D59734CEF1E2F3943D67CE37125 ] C:\WINDOWS\system32\urlmon.dll
08:23:53.0906 5904 C:\WINDOWS\system32\urlmon.dll - ok
08:23:53.0921 5904 [ F192D49EEFE297FA858B2C774BA2291D ] C:\WINDOWS\system32\wininet.dll
08:23:53.0921 5904 C:\WINDOWS\system32\wininet.dll - ok
08:23:53.0921 5904 [ 9580EA74F2922D711ED66F8817FD011B ] C:\Program Files\Xampp\xampp\perl\lib\auto\Digest\MD5\MD5.dll
08:23:53.0921 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\Digest\MD5\MD5.dll - ok
08:23:53.0921 5904 [ ABFB673B24A9B3287761D497529FB5B9 ] C:\WINDOWS\system32\perfdisk.dll
08:23:53.0921 5904 C:\WINDOWS\system32\perfdisk.dll - ok
08:23:53.0921 5904 [ 54DAE3EA34802B4ED9AE1C6B1209FA56 ] C:\WINDOWS\system32\rsaenh.dll
08:23:53.0921 5904 C:\WINDOWS\system32\rsaenh.dll - ok
08:23:53.0937 5904 [ 248712EA6BA17B9FF0C542A3828375DD ] C:\WINDOWS\system32\winipsec.dll
08:23:53.0937 5904 C:\WINDOWS\system32\winipsec.dll - ok
08:23:53.0937 5904 [ 42B5427FAC23BF6F1F31E466B7FEB084 ] C:\WINDOWS\system32\winsrv.dll
08:23:53.0937 5904 C:\WINDOWS\system32\winsrv.dll - ok
08:23:53.0937 5904 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
08:23:53.0937 5904 C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll - ok
08:23:53.0937 5904 [ 3D4E199942E29207970E04315D02AD3B ] C:\WINDOWS\system32\cryptsvc.dll
08:23:53.0937 5904 C:\WINDOWS\system32\cryptsvc.dll - ok
08:23:53.0953 5904 [ A86BB5E61BF3E39B62AB4C7E7085A084 ] C:\WINDOWS\system32\scecli.dll
08:23:53.0953 5904 C:\WINDOWS\system32\scecli.dll - ok
08:23:53.0953 5904 [ 590A6247D56A8420898E6C4DE0983F5C ] C:\WINDOWS\system32\iertutil.dll
08:23:53.0953 5904 C:\WINDOWS\system32\iertutil.dll - ok
08:23:53.0953 5904 [ 22A978E7FE5E3B35B42C7BC7C14E2875 ] C:\WINDOWS\system32\ieframe.dll
08:23:53.0953 5904 C:\WINDOWS\system32\ieframe.dll - ok
08:23:53.0953 5904 [ 43D13C80EBEC0135A3611E0F616F179B ] C:\WINDOWS\system32\userenv.dll
08:23:53.0953 5904 C:\WINDOWS\system32\userenv.dll - ok
08:23:53.0968 5904 [ 1E644E3533DCE2B580A663AE1ACBD539 ] C:\WINDOWS\system32\atmfd.dll
08:23:53.0968 5904 C:\WINDOWS\system32\atmfd.dll - ok
08:23:53.0968 5904 [ 5F2DBE3CB563741C8084657BF956CE64 ] C:\WINDOWS\system32\oleacc.dll
08:23:53.0968 5904 C:\WINDOWS\system32\oleacc.dll - ok
08:23:53.0968 5904 [ A39BE37C9237DB5F1990D61B268EA555 ] C:\WINDOWS\system32\rastls.dll
08:23:53.0968 5904 C:\WINDOWS\system32\rastls.dll - ok
08:23:53.0968 5904 [ 15EC7A2A182D921EA074811F0D0E3B9F ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Brigade\Brigade.dll
08:23:53.0968 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Brigade\Brigade.dll - ok
08:23:53.0984 5904 [ CB89A887E42D947C801AE2B8EF6AA6D7 ] C:\WINDOWS\system32\ialmdd5.dll
08:23:53.0984 5904 C:\WINDOWS\system32\ialmdd5.dll - ok
08:23:53.0984 5904 [ ED0EF0A136DEC83DF69F04118870003E ] C:\WINDOWS\system32\winlogon.exe
08:23:53.0984 5904 C:\WINDOWS\system32\winlogon.exe - ok
08:23:53.0984 5904 [ BDAAF79DD63F194434D31A74B9BB8B77 ] C:\WINDOWS\system32\crypt32.dll
08:23:53.0984 5904 C:\WINDOWS\system32\crypt32.dll - ok
08:23:53.0984 5904 [ 57E4BEAA1E7509380E229661EFD7BB71 ] C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Bucket\Bucket.dll
08:23:53.0984 5904 C:\Program Files\Xampp\xampp\perl\site\lib\auto\APR\Bucket\Bucket.dll - ok
08:23:54.0000 5904 [ 318230E845919255EF3C5D5E1E863631 ] C:\WINDOWS\system32\netapi32.dll
08:23:54.0000 5904 C:\WINDOWS\system32\netapi32.dll - ok
08:23:54.0000 5904 [ 4455CD3AF61E47FC1335A1D50BD1D6C7 ] C:\Program Files\Xampp\xampp\perl\lib\auto\Time\HiRes\HiRes.dll
08:23:54.0000 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\Time\HiRes\HiRes.dll - ok
08:23:54.0000 5904 [ 24192246760E0E64435522E246B1D6C2 ] C:\WINDOWS\system32\setupapi.dll
08:23:54.0000 5904 C:\WINDOWS\system32\setupapi.dll - ok
08:23:54.0000 5904 [ 258D35F5F5F5F3F6045488ECDC14FAAB ] C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll
08:23:54.0000 5904 C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll - ok
08:23:54.0015 5904 [ A8888A5327621856C0CEC4E385F69309 ] C:\WINDOWS\system32\wkssvc.dll
08:23:54.0015 5904 C:\WINDOWS\system32\wkssvc.dll - ok
08:23:54.0015 5904 [ 739B42F4D5B09DEEC333F70B0C04E702 ] C:\Program Files\Xampp\xampp\perl\lib\auto\IO\IO.dll
08:23:54.0015 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\IO\IO.dll - ok
08:23:54.0015 5904 [ D7B7A57C0E57C836F18CF12A4C62A1CA ] C:\WINDOWS\system32\msgina.dll
08:23:54.0015 5904 C:\WINDOWS\system32\msgina.dll - ok
08:23:54.0015 5904 [ 7E2B58CE8C4013287371667880B1080D ] C:\WINDOWS\system32\msjint40.dll
08:23:54.0015 5904 C:\WINDOWS\system32\msjint40.dll - ok
08:23:54.0031 5904 [ 694503348B586E99D56C0E30AB5B3EF8 ] C:\WINDOWS\system32\sxs.dll
08:23:54.0031 5904 C:\WINDOWS\system32\sxs.dll - ok
08:23:54.0031 5904 [ 736B12B725AEB2B07F0241A9F680CB10 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
08:23:54.0031 5904 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll - ok
08:23:54.0031 5904 [ 00AABF131B4823785818DB99A075A313 ] C:\WINDOWS\system32\tapi32.dll
08:23:54.0031 5904 C:\WINDOWS\system32\tapi32.dll - ok
08:23:54.0031 5904 [ 9EEFE69139FDBB4A3C327630F8EB993A ] C:\WINDOWS\system32\wlanapi.dll
08:23:54.0031 5904 C:\WINDOWS\system32\wlanapi.dll - ok
08:23:54.0046 5904 [ 0D84657DBF93DB98673DEFDF2B29E25A ] C:\WINDOWS\system32\adsldpc.dll
08:23:54.0046 5904 C:\WINDOWS\system32\adsldpc.dll - ok
08:23:54.0046 5904 [ 853D0D0C6F02D7BFDF1CF99DD7553732 ] C:\WINDOWS\system32\pstorsvc.dll
08:23:54.0046 5904 C:\WINDOWS\system32\pstorsvc.dll - ok
08:23:54.0046 5904 [ 0833AF72EAF3F50256743D70E18D31DD ] C:\Program Files\Xampp\xampp\perl\lib\auto\Data\Dumper\Dumper.dll
08:23:54.0046 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\Data\Dumper\Dumper.dll - ok
08:23:54.0046 5904 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] C:\WINDOWS\system32\sens.dll
08:23:54.0046 5904 C:\WINDOWS\system32\sens.dll - ok
08:23:54.0062 5904 [ BD31DC6DBE9333C4FBD4BDF0899F2160 ] C:\WINDOWS\system32\lsasrv.dll
08:23:54.0062 5904 C:\WINDOWS\system32\lsasrv.dll - ok
08:23:54.0062 5904 [ FD6EEA8387782B02FF0990A790C98D08 ] C:\Program Files\Xampp\xampp\perl\lib\auto\SDBM_File\SDBM_File.dll
08:23:54.0062 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\SDBM_File\SDBM_File.dll - ok
08:23:54.0062 5904 [ F05B8CDB7FE0E55DCCFB1D946CE80064 ] C:\WINDOWS\system32\samsrv.dll
08:23:54.0062 5904 C:\WINDOWS\system32\samsrv.dll - ok
08:23:54.0062 5904 [ 310C15FD8358B2C4CD7A5B98A112883F ] C:\WINDOWS\AppPatch\acgenral.dll
08:23:54.0062 5904 C:\WINDOWS\AppPatch\acgenral.dll - ok
08:23:54.0078 5904 [ 4B9C38A70C9B6415AAF6A5106E381D48 ] C:\Program Files\Xampp\xampp\perl\lib\auto\List\Util\Util.dll
08:23:54.0078 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\List\Util\Util.dll - ok
08:23:54.0078 5904 [ F404830F3CD9BF8F2515E489C0CDA297 ] C:\WINDOWS\system32\msvcp60.dll
08:23:54.0078 5904 C:\WINDOWS\system32\msvcp60.dll - ok
08:23:54.0078 5904 [ B24A42A413E694AD73FDFB7FBD492C31 ] C:\WINDOWS\system32\scesrv.dll
08:23:54.0078 5904 C:\WINDOWS\system32\scesrv.dll - ok
08:23:54.0078 5904 [ A4388DF80E52695AE92EE5F3F61F1619 ] C:\WINDOWS\system32\msnsspc.dll
08:23:54.0078 5904 C:\WINDOWS\system32\msnsspc.dll - ok
08:23:54.0093 5904 [ A525C96C51D55111FDF3BEA9FFFFC7AE ] C:\WINDOWS\system32\kerberos.dll
08:23:54.0093 5904 C:\WINDOWS\system32\kerberos.dll - ok
08:23:54.0093 5904 [ EC426AD27A93AE0D5AF80BA3985186CD ] C:\Program Files\Adobe\Photoshop Elements 3.0\platform.dll
08:23:54.0093 5904 C:\Program Files\Adobe\Photoshop Elements 3.0\platform.dll - ok
08:23:54.0093 5904 [ 2969D26EEE289BE7422AA46FC55F4E38 ] C:\WINDOWS\system32\HPZinw12.dll
08:23:54.0093 5904 C:\WINDOWS\system32\HPZinw12.dll - ok
08:23:54.0093 5904 [ E40FCF943127DDC8FD60554B722D762B ] C:\WINDOWS\system32\msctf.dll
08:23:54.0093 5904 C:\WINDOWS\system32\msctf.dll - ok
08:23:54.0109 5904 [ 9ED77E2307F6EC6F174C063C15AA3B8C ] C:\WINDOWS\system32\ntkrnlpa.exe
08:23:54.0109 5904 C:\WINDOWS\system32\ntkrnlpa.exe - ok
08:23:54.0109 5904 [ 4F75715BA43456ED33B3BF437D46300A ] C:\Program Files\Xampp\xampp\apache\bin\libapr-1.dll
08:23:54.0109 5904 C:\Program Files\Xampp\xampp\apache\bin\libapr-1.dll - ok
08:23:54.0109 5904 [ 1B7F071C51B77C272875C3A23E1E4550 ] C:\WINDOWS\system32\netlogon.dll
08:23:54.0109 5904 C:\WINDOWS\system32\netlogon.dll - ok
08:23:54.0109 5904 [ DA45AD502B4F2B7FC4ADEBA2E309F384 ] C:\WINDOWS\system32\netevent.dll
08:23:54.0109 5904 C:\WINDOWS\system32\netevent.dll - ok
08:23:54.0125 5904 [ 17063190E94407460CC520F88BDA0041 ] C:\WINDOWS\system32\winbrand.dll
08:23:54.0125 5904 C:\WINDOWS\system32\winbrand.dll - ok
08:23:54.0125 5904 [ 6B27A5C03DFB94B4245739065431322C ] C:\WINDOWS\system32\rpcss.dll
08:23:54.0125 5904 C:\WINDOWS\system32\rpcss.dll - ok
08:23:54.0125 5904 [ 16403217AB6FC5C30C14C6B12098AD4B ] C:\WINDOWS\system32\xpsp2res.dll
08:23:54.0125 5904 C:\WINDOWS\system32\xpsp2res.dll - ok
08:23:54.0125 5904 [ CB26AC62138F9AC470AA3A0D74BB859E ] C:\Program Files\Intel\WiFi\bin\iWMSProv.dll
08:23:54.0125 5904 C:\Program Files\Intel\WiFi\bin\iWMSProv.dll - ok
08:23:54.0140 5904 [ BAFC9706BDF425A02B66468AB2605C59 ] C:\WINDOWS\system32\HPZipm12.dll
08:23:54.0140 5904 C:\WINDOWS\system32\HPZipm12.dll - ok
08:23:54.0140 5904 [ 3CB32D3B8CBE79899D63280BB7A83CD9 ] C:\WINDOWS\system32\hnetcfg.dll
08:23:54.0140 5904 C:\WINDOWS\system32\hnetcfg.dll - ok
08:23:54.0140 5904 [ 943337D786A56729263071623BBB9DE5 ] C:\WINDOWS\system32\mswsock.dll
08:23:54.0140 5904 C:\WINDOWS\system32\mswsock.dll - ok
08:23:54.0140 5904 [ 3CAEAE7608F1BD7BA873A3B02895B106 ] C:\WINDOWS\system32\sti.dll
08:23:54.0140 5904 C:\WINDOWS\system32\sti.dll - ok
08:23:54.0156 5904 [ 2081A5B5E4ABA206A0A8A1A97DF0FB23 ] C:\WINDOWS\system32\logonui.exe
08:23:54.0156 5904 C:\WINDOWS\system32\logonui.exe - ok
08:23:54.0156 5904 [ 3D41A9326F0376FC73AF961DD23B1FB1 ] C:\WINDOWS\system32\duser.dll
08:23:54.0156 5904 C:\WINDOWS\system32\duser.dll - ok
08:23:54.0156 5904 [ F137A0CA70003DB20448D540651FA003 ] C:\WINDOWS\system32\clbcatq.dll
08:23:54.0156 5904 C:\WINDOWS\system32\clbcatq.dll - ok
08:23:54.0156 5904 [ 2CDAE321B8E878A278BA2D2FA013060B ] C:\WINDOWS\system32\activeds.dll
08:23:54.0156 5904 C:\WINDOWS\system32\activeds.dll - ok
08:23:54.0171 5904 [ 6C26DCF01E2A92F183B97D434017268A ] C:\WINDOWS\system32\dpcdll.dll
08:23:54.0171 5904 C:\WINDOWS\system32\dpcdll.dll - ok
08:23:54.0171 5904 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] C:\WINDOWS\system32\schedsvc.dll
08:23:54.0171 5904 C:\WINDOWS\system32\schedsvc.dll - ok
08:23:54.0171 5904 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] C:\WINDOWS\system32\srvsvc.dll
08:23:54.0171 5904 C:\WINDOWS\system32\srvsvc.dll - ok
08:23:54.0171 5904 [ 626A24ED1228580B9518C01930936DF9 ] C:\Program Files\Google\Update\GoogleUpdate.exe
08:23:54.0171 5904 C:\Program Files\Google\Update\GoogleUpdate.exe - ok
08:23:54.0187 5904 [ 1280A158C722FA95A80FB7AEBE78FA7D ] C:\WINDOWS\system32\comres.dll
08:23:54.0187 5904 C:\WINDOWS\system32\comres.dll - ok
08:23:54.0187 5904 [ DC70310B3D079D667B67F0C7067209F3 ] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll
08:23:54.0187 5904 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll - ok
08:23:54.0187 5904 [ B575E7BB82BD1DA97BB0A13A1F3F6618 ] C:\Program Files\Intel\WiFi\bin\IntStngs.dll
08:23:54.0187 5904 C:\Program Files\Intel\WiFi\bin\IntStngs.dll - ok
08:23:54.0187 5904 [ BDB83C844EDEC9BD01A94750D2C38DDF ] C:\WINDOWS\system32\fxsevent.dll
08:23:54.0187 5904 C:\WINDOWS\system32\fxsevent.dll - ok
08:23:54.0203 5904 [ B4419B8FDFC6CA52DA38B72447B1BF62 ] C:\WINDOWS\system32\vsdata.dll
08:23:54.0203 5904 C:\WINDOWS\system32\vsdata.dll - ok
08:23:54.0203 5904 [ 5B19B557B0C188210A56A6B699D90B8F ] C:\WINDOWS\system32\regsvc.dll
08:23:54.0203 5904 C:\WINDOWS\system32\regsvc.dll - ok
08:23:54.0203 5904 [ F01ED9E3BED66B8AAD63F618E9BF0BF1 ] C:\Program Files\Intel\WiFi\bin\KMMDLPlugins\SupplicantPlugin.dll
08:23:54.0203 5904 C:\Program Files\Intel\WiFi\bin\KMMDLPlugins\SupplicantPlugin.dll - ok
08:23:54.0203 5904 [ 38B3B88728B3BA3CE726EB974AAFF772 ] C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
08:23:54.0203 5904 C:\Program Files\Intel\WiFi\bin\S24EvMon.exe - ok
08:23:54.0218 5904 [ 0A5679B3714EDAB99E357057EE88FCA6 ] C:\WINDOWS\system32\ssdpsrv.dll
08:23:54.0218 5904 C:\WINDOWS\system32\ssdpsrv.dll - ok
08:23:54.0218 5904 [ BAB1AD65778824CE73586537B9F89BD1 ] C:\Program Files\Common Files\Intel\WirelessCommon\PsRegApi.dll
08:23:54.0218 5904 C:\Program Files\Common Files\Intel\WirelessCommon\PsRegApi.dll - ok
08:23:54.0218 5904 [ 4AC2FA4A6F0DF2511BAC13393C06EFF1 ] C:\WINDOWS\system32\mscms.dll
08:23:54.0218 5904 C:\WINDOWS\system32\mscms.dll - ok
08:23:54.0218 5904 [ FFE63D58D90CDB81B7688A37CDCE0715 ] C:\Program Files\Common Files\Intel\WirelessCommon\TraceAPI.dll
08:23:54.0218 5904 C:\Program Files\Common Files\Intel\WirelessCommon\TraceAPI.dll - ok
08:23:54.0234 5904 [ 112325F53AB720CA77825726D427FBDC ] C:\Program Files\Java\jre6\bin\jqs.exe
08:23:54.0234 5904 C:\Program Files\Java\jre6\bin\jqs.exe - ok
08:23:54.0234 5904 [ 11ADD8816D61A6025844EB5123EC92D3 ] C:\Program Files\Common Files\Intel\WirelessCommon\libeay32.dll
08:23:54.0234 5904 C:\Program Files\Common Files\Intel\WirelessCommon\libeay32.dll - ok
08:23:54.0234 5904 [ 00709952D444EAE14DBBD30D36FBAE0F ] C:\WINDOWS\system32\certcli.dll
08:23:54.0234 5904 C:\WINDOWS\system32\certcli.dll - ok
08:23:54.0234 5904 [ 92C4F48B62B0B876194584C3FF09CCB6 ] C:\WINDOWS\system32\rasapi32.dll
08:23:54.0234 5904 C:\WINDOWS\system32\rasapi32.dll - ok
08:23:54.0250 5904 [ 55BCA12F7F523D35CA3CB833C725F54E ] C:\WINDOWS\system32\trkwks.dll
08:23:54.0250 5904 C:\WINDOWS\system32\trkwks.dll - ok
08:23:54.0250 5904 [ 474B8CA98D82AAF48E67637F049238DE ] C:\Program Files\Xampp\xampp\apache\bin\ssleay32.dll
08:23:54.0250 5904 C:\Program Files\Xampp\xampp\apache\bin\ssleay32.dll - ok
08:23:54.0250 5904 [ 1ED4C96EC76C3DDFCABD7644DA23F4B6 ] C:\Program Files\Common Files\System\Ole DB\msdasql.dll
08:23:54.0250 5904 C:\Program Files\Common Files\System\Ole DB\msdasql.dll - ok
08:23:54.0250 5904 [ D0F9F362023BF94CF58A1C3CDBBEBE06 ] C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
08:23:54.0250 5904 C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe - ok
08:23:54.0265 5904 [ 37A62C6092AADD2EFDE0468DD8818E99 ] C:\WINDOWS\system32\netcfgx.dll
08:23:54.0265 5904 C:\WINDOWS\system32\netcfgx.dll - ok
08:23:54.0265 5904 [ 1B05DCC75FBB903A17E3E0DDAEA8D508 ] C:\WINDOWS\system32\odbcjt32.dll
08:23:54.0265 5904 C:\WINDOWS\system32\odbcjt32.dll - ok
08:23:54.0265 5904 [ 142CEDECAE89E372EE347681C3FBB257 ] C:\Program Files\Common Files\System\msadc\msadce.dll
08:23:54.0265 5904 C:\Program Files\Common Files\System\msadc\msadce.dll - ok
08:23:54.0265 5904 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Program Files\Adobe\Photoshop Elements 3.0\msvcr71.dll
08:23:54.0265 5904 C:\Program Files\Adobe\Photoshop Elements 3.0\msvcr71.dll - ok
08:23:54.0281 5904 [ 22D89D84E8E081CDA529DBF8C0255A38 ] C:\WINDOWS\system32\psbase.dll
08:23:54.0281 5904 C:\WINDOWS\system32\psbase.dll - ok
08:23:54.0281 5904 [ D2E34061FA685E59CE274923D0CB4034 ] C:\Program Files\Xampp\xampp\apache\bin\libaprutil-1.dll
08:23:54.0281 5904 C:\Program Files\Xampp\xampp\apache\bin\libaprutil-1.dll - ok
08:23:54.0281 5904 [ 26687D8E9FEED2EBAB77670C72007B48 ] C:\Program Files\Common Files\System\ado\msado15.dll
08:23:54.0281 5904 C:\Program Files\Common Files\System\ado\msado15.dll - ok
08:23:54.0281 5904 [ DC095DB6D468CB5B653E05F865487E57 ] C:\Program Files\Common Files\System\Ole DB\oledb32.dll
08:23:54.0281 5904 C:\Program Files\Common Files\System\Ole DB\oledb32.dll - ok
08:23:54.0296 5904 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] C:\WINDOWS\system32\wzcsvc.dll
08:23:54.0296 5904 C:\WINDOWS\system32\wzcsvc.dll - ok
08:23:54.0296 5904 [ F5B754CDEA20BBB3A31E16A776EDE6D6 ] C:\WINDOWS\system32\esent.dll
08:23:54.0296 5904 C:\WINDOWS\system32\esent.dll - ok
08:23:54.0296 5904 [ ED0C0DF222209E43AD9AFBF3FE87DDE0 ] C:\WINDOWS\system32\comsvcs.dll
08:23:54.0296 5904 C:\WINDOWS\system32\comsvcs.dll - ok
08:23:54.0296 5904 [ B7E663FF6F235820BCA06BA925335AE3 ] C:\WINDOWS\system32\vpnapi.dll
08:23:54.0296 5904 C:\WINDOWS\system32\vpnapi.dll - ok
08:23:54.0312 5904 [ 9E70016C950B1F8FDEAA6F067E2E25A8 ] C:\WINDOWS\system32\msjet40.dll
08:23:54.0312 5904 C:\WINDOWS\system32\msjet40.dll - ok
08:23:54.0312 5904 [ AFDC647D16B285B9AE6140335B3B3255 ] C:\WINDOWS\system32\mswstr10.dll
08:23:54.0312 5904 C:\WINDOWS\system32\mswstr10.dll - ok
08:23:54.0312 5904 [ 6E4BE11D50F8A8DE2BAD644C9C9DE8D3 ] C:\WINDOWS\system32\cryptui.dll
08:23:54.0312 5904 C:\WINDOWS\system32\cryptui.dll - ok
08:23:54.0312 5904 [ F2060A34C8A75BC24A9222EB4F8C07BD ] C:\Program Files\Bonjour\mDNSResponder.exe
08:23:54.0312 5904 C:\Program Files\Bonjour\mDNSResponder.exe - ok
08:23:54.0328 5904 [ C1FAEA15E41F62D7BFA7FBC395C24BA6 ] C:\WINDOWS\system32\riched20.dll
08:23:54.0328 5904 C:\WINDOWS\system32\riched20.dll - ok
08:23:54.0328 5904 [ 561FA2ABB31DFA8FAB762145F81667C2 ] C:\Program Files\Adobe\Photoshop Elements 3.0\msvcp71.dll
08:23:54.0328 5904 C:\Program Files\Adobe\Photoshop Elements 3.0\msvcp71.dll - ok
08:23:54.0328 5904 [ FEDE68BF80052BAD393AFD5C2E60DCB0 ] C:\WINDOWS\system32\dssenh.dll
08:23:54.0328 5904 C:\WINDOWS\system32\dssenh.dll - ok
08:23:54.0328 5904 [ 235892E493845D64D890163CFEF90E97 ] C:\WINDOWS\system32\credui.dll
08:23:54.0328 5904 C:\WINDOWS\system32\credui.dll - ok
08:23:54.0343 5904 [ D4991D98F2DB73C60D042F1AEF79EFAE ] C:\WINDOWS\system32\es.dll
08:23:54.0343 5904 C:\WINDOWS\system32\es.dll - ok
08:23:54.0343 5904 [ 5B2FBA8F29D972E4347912F88342EF80 ] C:\Program Files\Xampp\xampp\apache\bin\libhttpd.dll
08:23:54.0343 5904 C:\Program Files\Xampp\xampp\apache\bin\libhttpd.dll - ok
08:23:54.0343 5904 [ AA5E22854F56C68148EB3345DBD62970 ] C:\WINDOWS\system32\devenum.dll
08:23:54.0343 5904 C:\WINDOWS\system32\devenum.dll - ok
08:23:54.0343 5904 [ 91E23A89C7648D8FC966544BFAC9BEE6 ] C:\WINDOWS\system32\vsinit.dll
08:23:54.0343 5904 C:\WINDOWS\system32\vsinit.dll - ok
08:23:54.0359 5904 [ 5F78CA4DBE18C2D5C477C94B8D49A05C ] C:\Program Files\Xampp\xampp\apache\bin\libeay32.dll
08:23:54.0359 5904 C:\Program Files\Xampp\xampp\apache\bin\libeay32.dll - ok
08:23:54.0359 5904 [ BDCE2878236FF4ED8BC2F22ACB410D89 ] C:\Program Files\Xampp\xampp\php\php5ts.dll
08:23:54.0359 5904 C:\Program Files\Xampp\xampp\php\php5ts.dll - ok
08:23:54.0359 5904 [ 20FD44370267CCD0A64A1B31861C21D2 ] C:\WINDOWS\system32\netmsg.dll
08:23:54.0359 5904 C:\WINDOWS\system32\netmsg.dll - ok
08:23:54.0359 5904 [ 026DA0B979410BB31B9E163001E6AB12 ] C:\Program Files\Xampp\xampp\perl\bin\perl510.dll
08:23:54.0359 5904 C:\Program Files\Xampp\xampp\perl\bin\perl510.dll - ok
08:23:54.0375 5904 [ 7AC813E17BD960987C5DA788AF295361 ] C:\WINDOWS\ehome\EhDebug.dll
08:23:54.0375 5904 C:\WINDOWS\ehome\EhDebug.dll - ok
08:23:54.0375 5904 [ 66257CB4E4FB69887CDDC71663741435 ] C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
08:23:54.0375 5904 C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe - ok
08:23:54.0375 5904 [ 76848CB1AA5818DB47D5F5986E0A7485 ] C:\WINDOWS\system32\mfc42.dll
08:23:54.0375 5904 C:\WINDOWS\system32\mfc42.dll - ok
08:23:54.0375 5904 [ 2D65D56C2F8B6CC5EBFF8E7200C30304 ] C:\WINDOWS\system32\mstlsapi.dll
08:23:54.0375 5904 C:\WINDOWS\system32\mstlsapi.dll - ok
08:23:54.0390 5904 [ 791464A9E9ADE063327A29F1B3F1A86C ] C:\Program Files\Intel\WiFi\bin\EvtEng.exe
08:23:54.0390 5904 C:\Program Files\Intel\WiFi\bin\EvtEng.exe - ok
08:23:54.0390 5904 [ 9435BFF0E8C12D3178647FF7041B3317 ] C:\Program Files\Intel\WiFi\bin\KMMDLPlugins\WSCPlugin.dll
08:23:54.0390 5904 C:\Program Files\Intel\WiFi\bin\KMMDLPlugins\WSCPlugin.dll - ok
08:23:54.0390 5904 [ 332760FBA1655FCFD35BD6F4FD871300 ] C:\WINDOWS\system32\ipsecsvc.dll
08:23:54.0390 5904 C:\WINDOWS\system32\ipsecsvc.dll - ok
08:23:54.0390 5904 [ 07CDB63F6171C4FF6F4ECD4D07A06720 ] C:\Program Files\Intel\WiFi\bin\PfMgrApi.dll
08:23:54.0390 5904 C:\Program Files\Intel\WiFi\bin\PfMgrApi.dll - ok
08:23:54.0390 5904 [ E8D9C671912774BA38D1F7A345B72F5B ] C:\Program Files\Intel\WiFi\bin\MurocApi.dll
08:23:54.0406 5904 C:\Program Files\Intel\WiFi\bin\MurocApi.dll - ok
08:23:54.0406 5904 [ D3F72D50DE53F9F1F55240115AF4D42E ] C:\WINDOWS\system32\msi.dll
08:23:54.0406 5904 C:\WINDOWS\system32\msi.dll - ok
08:23:54.0406 5904 [ 82161522CF0E2238F0F175E0D038F14F ] C:\Program Files\Intel\WiFi\bin\pfQOSMgr.dll
08:23:54.0406 5904 C:\Program Files\Intel\WiFi\bin\pfQOSMgr.dll - ok
08:23:54.0406 5904 [ 2D0E4ED081963804CCC196A0929275B5 ] C:\WINDOWS\system32\wbem\wmisvc.dll
08:23:54.0406 5904 C:\WINDOWS\system32\wbem\wmisvc.dll - ok
08:23:54.0421 5904 [ 8D25A3BF9D0005D264F105414AE2CDE6 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcp80.dll
08:23:54.0421 5904 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcp80.dll - ok
08:23:54.0421 5904 [ 0EF2917EFD6D96E4C9CF121738CF5409 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcr80.dll
08:23:54.0421 5904 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcr80.dll - ok
08:23:54.0421 5904 [ B714735C12A70171DE28657948FD91F1 ] C:\WINDOWS\system32\mlang.dll
08:23:54.0421 5904 C:\WINDOWS\system32\mlang.dll - ok
08:23:54.0421 5904 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Program Files\Java\jre6\bin\msvcr71.dll
08:23:54.0421 5904 C:\Program Files\Java\jre6\bin\msvcr71.dll - ok
08:23:54.0437 5904 [ 3550DFA6FFFBD7604DABB28DF4ABF096 ] C:\WINDOWS\ehome\custsat.dll
08:23:54.0437 5904 C:\WINDOWS\ehome\custsat.dll - ok
08:23:54.0437 5904 [ 62CF83A6989312A0DD39BBFFB3D1C166 ] C:\WINDOWS\system32\pdh.dll
08:23:54.0437 5904 C:\WINDOWS\system32\pdh.dll - ok
08:23:54.0437 5904 [ 994AD0D8550B8B26990A6E3AA0791502 ] C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll
08:23:54.0437 5904 C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll - ok
08:23:54.0437 5904 [ 3805DF0AC4296A34BA4BF93B346CC378 ] C:\WINDOWS\system32\srsvc.dll
08:23:54.0437 5904 C:\WINDOWS\system32\srsvc.dll - ok
08:23:54.0437 5904 [ 21EEF976D53A0BCB603ABFF4AB6E4C88 ] C:\Program Files\Xampp\xampp\mysql\bin\mysqld.exe
08:23:54.0453 5904 C:\Program Files\Xampp\xampp\mysql\bin\mysqld.exe - ok
08:23:54.0453 5904 [ 0AEB3E31266E64E3C832B7D663BD5184 ] C:\Program Files\Intel\WiFi\bin\S24MUDLL.dll
08:23:54.0453 5904 C:\Program Files\Intel\WiFi\bin\S24MUDLL.dll - ok
08:23:54.0453 5904 [ 4044E880593FE1AC9942190FCE414BE7 ] C:\WINDOWS\system32\mstask.dll
08:23:54.0453 5904 C:\WINDOWS\system32\mstask.dll - ok
08:23:54.0453 5904 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] C:\WINDOWS\system32\wuauserv.dll
08:23:54.0453 5904 C:\WINDOWS\system32\wuauserv.dll - ok
08:23:54.0468 5904 [ 8C77ECF3C7DCBB926312B7ECED6ECA75 ] C:\WINDOWS\system32\winhttp.dll
08:23:54.0468 5904 C:\WINDOWS\system32\winhttp.dll - ok
08:23:54.0468 5904 [ 008DF0C9D81BD814480DD9C052893E8C ] C:\WINDOWS\ehome\ehRec.exe
08:23:54.0468 5904 C:\WINDOWS\ehome\ehRec.exe - ok
08:23:54.0468 5904 [ C5FF8682EADA5B3B27A865F1C3EF9270 ] C:\WINDOWS\system32\oakley.dll
08:23:54.0468 5904 C:\WINDOWS\system32\oakley.dll - ok
08:23:54.0468 5904 [ D95C71052E5EF63B55997FB31483D02F ] C:\WINDOWS\system32\wbem\wbemcomn.dll
08:23:54.0468 5904 C:\WINDOWS\system32\wbem\wbemcomn.dll - ok
08:23:54.0484 5904 [ 636AAFAD77BEABE192D01E7E74F4A45B ] C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
08:23:54.0484 5904 C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe - ok
08:23:54.0484 5904 [ 2616A4398780B4D020ABB4B9E3132E6D ] C:\Program Files\Intel\WiFi\bin\supplicant.dll
08:23:54.0484 5904 C:\Program Files\Intel\WiFi\bin\supplicant.dll - ok
08:23:54.0484 5904 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] C:\WINDOWS\system32\wiaservc.dll
08:23:54.0484 5904 C:\WINDOWS\system32\wiaservc.dll - ok
08:23:54.0484 5904 [ 3CB78C17BB664637787C9A1C98F79C38 ] C:\WINDOWS\system32\tapisrv.dll
08:23:54.0484 5904 C:\WINDOWS\system32\tapisrv.dll - ok
08:23:54.0500 5904 [ FF3477C03BE7201C294C35F684B3479F ] C:\WINDOWS\system32\termsrv.dll
08:23:54.0500 5904 C:\WINDOWS\system32\termsrv.dll - ok
08:23:54.0500 5904 [ ACACB8B14E66109B8ACD6644B5574B9A ] C:\WINDOWS\system32\vssapi.dll
08:23:54.0500 5904 C:\WINDOWS\system32\vssapi.dll - ok
08:23:54.0500 5904 [ E97D6A8684466DF94FF3BC24FB787A07 ] C:\WINDOWS\system32\fxssvc.exe
08:23:54.0500 5904 C:\WINDOWS\system32\fxssvc.exe - ok
08:23:54.0500 5904 [ 1144EF6B4BB72E33B41912AE1AE4F97A ] C:\WINDOWS\system32\fxstiff.dll
08:23:54.0500 5904 C:\WINDOWS\system32\fxstiff.dll - ok
08:23:54.0515 5904 [ 0329D0A4F230094B669A87BB3B85606E ] C:\WINDOWS\system32\fxsapi.dll
08:23:54.0515 5904 C:\WINDOWS\system32\fxsapi.dll - ok
08:23:54.0515 5904 [ 3B9E8E49E86D22690E08B1350FA9A4D4 ] C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll
08:23:54.0515 5904 C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll - ok
08:23:54.0515 5904 [ 38711BB50D27B7145186F61CE31B3336 ] C:\Program Files\Common Files\Apple\Apple Application Support\icuin40.dll
08:23:54.0515 5904 C:\Program Files\Common Files\Apple\Apple Application Support\icuin40.dll - ok
08:23:54.0515 5904 [ 9E515554A3EA7B70C975F61971C6977D ] C:\Program Files\Common Files\Apple\Apple Application Support\icuuc40.dll
08:23:54.0515 5904 C:\Program Files\Common Files\Apple\Apple Application Support\icuuc40.dll - ok
08:23:54.0531 5904 [ C5A75EB48E2344ABDC162BDA79E16841 ] C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
08:23:54.0531 5904 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe - ok
08:23:54.0531 5904 [ 085ED2E391A871C7BAE87E0228B546BA ] C:\WINDOWS\system32\cscui.dll
08:23:54.0531 5904 C:\WINDOWS\system32\cscui.dll - ok
08:23:54.0531 5904 [ 6298277B73C77FA99106B271A7525163 ] C:\WINDOWS\system32\wuaueng.dll
08:23:54.0531 5904 C:\WINDOWS\system32\wuaueng.dll - ok
08:23:54.0531 5904 [ F036DB9CF05B3C21405403FF074A78D9 ] C:\Program Files\AVG\AVG2013\avgopensslx.dll
08:23:54.0531 5904 C:\Program Files\AVG\AVG2013\avgopensslx.dll - ok
08:23:54.0546 5904 [ 4DC81B32DCD8D981C9D4A7B556BBA782 ] C:\Program Files\AVG\AVG2013\avgscanx.dll
08:23:54.0546 5904 C:\Program Files\AVG\AVG2013\avgscanx.dll - ok
08:23:54.0546 5904 [ B866E8C5ED1DCBEA72285BA4107892C2 ] C:\Program Files\Skype\Updater\Updater.exe
08:23:54.0546 5904 C:\Program Files\Skype\Updater\Updater.exe - ok
08:23:54.0546 5904 [ A53243709439AC2A4C216B817F8D7411 ] C:\WINDOWS\ehome\ehSched.exe
08:23:54.0546 5904 C:\WINDOWS\ehome\ehSched.exe - ok
08:23:54.0546 5904 [ CF9EEA7F51101A281B99FCA7AFFA2524 ] C:\WINDOWS\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
08:23:54.0546 5904 C:\WINDOWS\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll - ok
08:23:54.0562 5904 [ 08A73B0E7EE6E32983B5F9E540A8E380 ] C:\WINDOWS\system32\mscoree.dll
08:23:54.0562 5904 C:\WINDOWS\system32\mscoree.dll - ok
08:23:54.0562 5904 [ F67480EE1AC3CB32C63AF86B0AE57AC9 ] C:\Program Files\AVG\AVG2013\avgwdwsc.dll
08:23:54.0562 5904 C:\Program Files\AVG\AVG2013\avgwdwsc.dll - ok
08:23:54.0562 5904 [ 0F0F5B564C5A3C9B38A6220230252567 ] C:\WINDOWS\ehome\ehProxy.dll
08:23:54.0562 5904 C:\WINDOWS\ehome\ehProxy.dll - ok
08:23:54.0562 5904 [ 1A692DBDAC7A578187E0A94A850A6240 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
08:23:54.0562 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - ok
08:23:54.0578 5904 [ 6F19639188F792BBB234B2A3FCB0C8C9 ] C:\Program Files\AVG\AVG2013\avgchclx.dll
08:23:54.0578 5904 C:\Program Files\AVG\AVG2013\avgchclx.dll - ok
08:23:54.0578 5904 [ 76FFA2433FEB42E78FB5421A50C8FBE3 ] C:\Program Files\AVG\AVG2013\avgclitx.dll
08:23:54.0578 5904 C:\Program Files\AVG\AVG2013\avgclitx.dll - ok
08:23:54.0578 5904 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] C:\Program Files\AVG\AVG2013\avgwdsvc.exe
08:23:54.0578 5904 C:\Program Files\AVG\AVG2013\avgwdsvc.exe - ok
08:23:54.0578 5904 [ 95EFDCB44DD093EDAD447F1D21C8A3F7 ] C:\Program Files\AVG\AVG2013\avgcertx.dll
08:23:54.0578 5904 C:\Program Files\AVG\AVG2013\avgcertx.dll - ok
08:23:54.0593 5904 [ E3C817F7FE44CC870ECDBCBC3EA36132 ] C:\WINDOWS\system32\msvcp100.dll
08:23:54.0593 5904 C:\WINDOWS\system32\msvcp100.dll - ok
08:23:54.0593 5904 [ A6251155B7017D4B4A77A3531A8DA6D8 ] C:\Program Files\AVG\AVG2013\avgcommx.dll
08:23:54.0593 5904 C:\Program Files\AVG\AVG2013\avgcommx.dll - ok
08:23:54.0593 5904 [ 1E8817866F2E5FE9D9BACE6BF1B540D1 ] C:\Program Files\AVG\AVG2013\avgvvx.dll
08:23:54.0593 5904 C:\Program Files\AVG\AVG2013\avgvvx.dll - ok
08:23:54.0609 5904 [ F820B93E4ABCCABD698A175FD5FC83FE ] C:\Program Files\AVG\AVG2013\avgntsqlitex.dll
08:23:54.0609 5904 C:\Program Files\AVG\AVG2013\avgntsqlitex.dll - ok
08:23:54.0609 5904 [ E5F7C30EDF0892667933BE879F067D67 ] C:\WINDOWS\system32\msvcr100_clr0400.dll
08:23:54.0609 5904 C:\WINDOWS\system32\msvcr100_clr0400.dll - ok
08:23:54.0609 5904 [ D039A0C347632622934906BD59A4E1EA ] C:\WINDOWS\ehome\ehrecvr.exe
08:23:54.0609 5904 C:\WINDOWS\ehome\ehrecvr.exe - ok
08:23:54.0609 5904 [ 926AFC4848FF3297BB264333BF51E21F ] C:\WINDOWS\system32\sbe.dll
08:23:54.0609 5904 C:\WINDOWS\system32\sbe.dll - ok
08:23:54.0625 5904 [ 0967D9749326622FA8FDE688CA126736 ] C:\WINDOWS\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
08:23:54.0625 5904 C:\WINDOWS\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll - ok
08:23:54.0625 5904 [ 2F67C092A56F2814BE4C75EDE8D1E176 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
08:23:54.0625 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll - ok
08:23:54.0625 5904 [ 8622AE563E2AC2F8BF9FAFEE726FC7B8 ] C:\Program Files\AVG\AVG2013\avgsched.dll
08:23:54.0625 5904 C:\Program Files\AVG\AVG2013\avgsched.dll - ok
08:23:54.0625 5904 [ D9FE8F43087E857D1F94376BD5F31229 ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehCIR\6.0.3000.0__31bf3856ad364e35_ecd6eaf9\ehCIR.dll
08:23:54.0625 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehCIR\6.0.3000.0__31bf3856ad364e35_ecd6eaf9\ehCIR.dll - ok
08:23:54.0640 5904 [ BDDABE946848359EB2BFE44548D32F9B ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepgdat\6.0.3000.0__31bf3856ad364e35_f82a76f5\ehepgdat.dll
08:23:54.0640 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepgdat\6.0.3000.0__31bf3856ad364e35_f82a76f5\ehepgdat.dll - ok
08:23:54.0640 5904 [ BF38660A9125935658CFA3E53FDC7D65 ] C:\WINDOWS\system32\msvcr100.dll
08:23:54.0640 5904 C:\WINDOWS\system32\msvcr100.dll - ok
08:23:54.0640 5904 [ B6E6F3F5B63053D5DC1F4EE32992492F ] C:\WINDOWS\system32\dbghelp.dll
08:23:54.0640 5904 C:\WINDOWS\system32\dbghelp.dll - ok
08:23:54.0656 5904 [ 491918E4C46ED4CEB6E7A90F7B73924D ] C:\Program Files\AVG\AVG2013\avgxpl.dll
08:23:54.0656 5904 C:\Program Files\AVG\AVG2013\avgxpl.dll - ok
08:23:54.0656 5904 [ 7C87A5FB95777E4132B11FC3D92CAAF5 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll
08:23:54.0656 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll - ok
08:23:54.0656 5904 [ 83BA5E873164A3711B44052F58C8FE9F ] C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
08:23:54.0656 5904 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok
08:23:54.0656 5904 [ A4932026499FFE9A493E3E9BBFDAA682 ] C:\Program Files\AVG\AVG2013\avgemcx.exe
08:23:54.0671 5904 C:\Program Files\AVG\AVG2013\avgemcx.exe - ok
08:23:54.0671 5904 [ 76B35CB0F3A4E69D6DFF27F542B9F856 ] C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
08:23:54.0671 5904 C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe - ok
08:23:54.0671 5904 [ B6335A2EFBF0B4B7D4080E8B933A9F9B ] C:\WINDOWS\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
08:23:54.0671 5904 C:\WINDOWS\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll - ok
08:23:54.0671 5904 [ 30D9CFDDDE206082A5A3CF71AAB6C9C3 ] C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
08:23:54.0671 5904 C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - ok
08:23:54.0687 5904 [ FF9AFBD2864BBEA6A9E7F90F8C94F6B7 ] C:\Program Files\AVG\AVG2013\avgidpsdkx.dll
08:23:54.0687 5904 C:\Program Files\AVG\AVG2013\avgidpsdkx.dll - ok
08:23:54.0687 5904 [ B40F5DCD59ED2A46EED8AE340CC167FB ] C:\Program Files\AVG\AVG2013\avgcfgx.dll
08:23:54.0687 5904 C:\Program Files\AVG\AVG2013\avgcfgx.dll - ok
08:23:54.0687 5904 [ 1CA7C04957F8419E426E334B5FF2D0FA ] C:\Program Files\AVG\AVG2013\avgnsx.exe
08:23:54.0687 5904 C:\Program Files\AVG\AVG2013\avgnsx.exe - ok
08:23:54.0687 5904 [ 1890D0B057FC0122C8B700A98804497F ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\EhCM\6.0.3000.0__31bf3856ad364e35_b5786f5d\EhCM.dll
08:23:54.0687 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\EhCM\6.0.3000.0__31bf3856ad364e35_b5786f5d\EhCM.dll - ok
08:23:54.0703 5904 [ 73B44FE5423982B2709D6EA2F674B807 ] C:\WINDOWS\ehome\ehepg.dll
08:23:54.0703 5904 C:\WINDOWS\ehome\ehepg.dll - ok
08:23:54.0703 5904 [ 9E30B21B14FB24C383AC255BDFA47E0E ] C:\Program Files\AVG\AVG2013\avgsecapix.dll
08:23:54.0703 5904 C:\Program Files\AVG\AVG2013\avgsecapix.dll - ok
08:23:54.0703 5904 [ 49804C9E6B0B709A0B607DB7E9462AA3 ] C:\WINDOWS\system32\quartz.dll
08:23:54.0703 5904 C:\WINDOWS\system32\quartz.dll - ok
08:23:54.0703 5904 [ 8BA39E5F79366F45AF9759C1DAE346AE ] C:\WINDOWS\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
08:23:54.0703 5904 C:\WINDOWS\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll - ok
08:23:54.0718 5904 [ 855F6333E3A4DFC6F3C8B0520C261FCD ] C:\WINDOWS\system32\msftedit.dll
08:23:54.0718 5904 C:\WINDOWS\system32\msftedit.dll - ok
08:23:54.0718 5904 [ 33DCB8AEFBBF88ED5ECA41BCED426AE0 ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehRecObj\6.0.3000.0__31bf3856ad364e35_8e16fe78\ehRecObj.dll
08:23:54.0718 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehRecObj\6.0.3000.0__31bf3856ad364e35_8e16fe78\ehRecObj.dll - ok
08:23:54.0718 5904 [ 5014D9C982E360176066F30D633D6600 ] C:\Program Files\AVG\AVG2013\avgwd.dll
08:23:54.0718 5904 C:\Program Files\AVG\AVG2013\avgwd.dll - ok
08:23:54.0718 5904 [ 66B6B27C8BE41680BF95696C6B9BC875 ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehiProxy\6.0.3000.0__31bf3856ad364e35_ecbc750d\ehiProxy.dll
08:23:54.0718 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehiProxy\6.0.3000.0__31bf3856ad364e35_ecbc750d\ehiProxy.dll - ok
08:23:54.0734 5904 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
08:23:54.0734 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll - ok
08:23:54.0734 5904 [ 66946DE593185983B6D05F837D452262 ] C:\WINDOWS\ehome\ehui.dll
08:23:54.0734 5904 C:\WINDOWS\ehome\ehui.dll - ok
08:23:54.0734 5904 [ D30DD708F05FB85EF2C53727ED3573D2 ] C:\Program Files\Common Files\Apple\Apple Application Support\icudt40.dll
08:23:54.0734 5904 C:\Program Files\Common Files\Apple\Apple Application Support\icudt40.dll - ok
08:23:54.0734 5904 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] C:\Program Files\AVG\AVG2013\avgidsagent.exe
08:23:54.0734 5904 C:\Program Files\AVG\AVG2013\avgidsagent.exe - ok
08:23:54.0750 5904 [ AB75A941F5FAE367AB077F080839AC8B ] C:\WINDOWS\system32\msvidctl.dll
08:23:54.0750 5904 C:\WINDOWS\system32\msvidctl.dll - ok
08:23:54.0750 5904 [ C9F44E08EF18BE1139386095360B0E39 ] C:\Program Files\AVG\AVG2013\avgcorex.dll
08:23:54.0750 5904 C:\Program Files\AVG\AVG2013\avgcorex.dll - ok
08:23:54.0750 5904 [ 73B44FE5423982B2709D6EA2F674B807 ] C:\WINDOWS\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
08:23:54.0750 5904 C:\WINDOWS\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll - ok
08:23:54.0750 5904 [ 87DACFE8B88E0435AFEAA5908E0B3795 ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepg\6.0.3000.0__31bf3856ad364e35_7a333d97\ehepg.dll
08:23:54.0750 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ehepg\6.0.3000.0__31bf3856ad364e35_7a333d97\ehepg.dll - ok
08:23:54.0765 5904 [ 758D99511FD82B6C55E70494039E9F1A ] C:\Program Files\Google\Update\1.3.21.145\goopdate.dll
08:23:54.0765 5904 C:\Program Files\Google\Update\1.3.21.145\goopdate.dll - ok
08:23:54.0765 5904 [ 6F640DC052CF77161A23E29261593793 ] C:\WINDOWS\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
08:23:54.0765 5904 C:\WINDOWS\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll - ok
08:23:54.0765 5904 [ 9921697AFAA1349535316A346D87BB78 ] C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
08:23:54.0765 5904 C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll - ok
08:23:54.0765 5904 [ 15B85831CE40CBA2A1061F8E3907CF2A ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_1b9b3ec3\System.dll
08:23:54.0765 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_1b9b3ec3\System.dll - ok
08:23:54.0781 5904 [ C094D20798A40EADCCB761EBEED6D8F6 ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_0bbfd0f8\mscorlib.dll
08:23:54.0781 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_0bbfd0f8\mscorlib.dll - ok
08:23:54.0781 5904 [ 52ABC8C57DFEE5A7AAA210CE2E9DFE73 ] C:\WINDOWS\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll
08:23:54.0781 5904 C:\WINDOWS\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll - ok
08:23:54.0781 5904 [ 0A8D6FE9110A23A2E561DD570C3B0508 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
08:23:54.0781 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll - ok
08:23:54.0781 5904 [ 74D879F95A0249E7007F6D94BD069C32 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
08:23:54.0781 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll - ok
08:23:54.0796 5904 [ C50686DD69A53B0A509C7258060072F5 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
08:23:54.0796 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - ok
08:23:54.0796 5904 [ 0E297F71CBFAA611F830407D1054DC70 ] C:\PROGRA~1\AVG\AVG2013\avgchjwx.dll
08:23:54.0796 5904 C:\PROGRA~1\AVG\AVG2013\avgchjwx.dll - ok
08:23:54.0796 5904 [ CCF775179F42797A3EE8BA5678543621 ] C:\PROGRA~1\AVG\AVG2013\avgcclix.dll
08:23:54.0796 5904 C:\PROGRA~1\AVG\AVG2013\avgcclix.dll - ok
08:23:54.0796 5904 [ 99997FA9056ACB38AA388BDA134CEF6E ] C:\Program Files\AVG\AVG2013\avgcsrvx.exe
08:23:54.0796 5904 C:\Program Files\AVG\AVG2013\avgcsrvx.exe - ok
08:23:54.0812 5904 [ 2F31B7F954BED437F2C75026C65CAF7B ] C:\WINDOWS\system32\drivers\wmilib.sys
08:23:54.0812 5904 C:\WINDOWS\system32\drivers\wmilib.sys - ok
08:23:54.0812 5904 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] C:\WINDOWS\system32\drivers\atapi.sys
08:23:54.0812 5904 C:\WINDOWS\system32\drivers\atapi.sys - ok
08:23:54.0812 5904 [ FE97D0343ACFDEBDD578FC67CC91FA87 ] C:\WINDOWS\system32\drivers\dxapi.sys
08:23:54.0812 5904 C:\WINDOWS\system32\drivers\dxapi.sys - ok
08:23:54.0812 5904 [ 9A10AACBFDC4922715375FB4065EC930 ] C:\WINDOWS\system32\watchdog.sys
08:23:54.0812 5904 C:\WINDOWS\system32\watchdog.sys - ok
08:23:54.0828 5904 [ 4F97E6BAAA847EA90EBBCD90A3FFA8E5 ] C:\WINDOWS\system32\win32k.sys
08:23:54.0828 5904 C:\WINDOWS\system32\win32k.sys - ok
08:23:54.0828 5904 [ AC7280566A7BB85CB3291F04DDC1198E ] C:\WINDOWS\system32\drivers\dxg.sys
08:23:54.0828 5904 C:\WINDOWS\system32\drivers\dxg.sys - ok
08:23:54.0828 5904 [ A73F5D6705B1D820C19B18782E176EFD ] C:\WINDOWS\system32\drivers\dxgthk.sys
08:23:54.0828 5904 C:\WINDOWS\system32\drivers\dxgthk.sys - ok
08:23:54.0828 5904 [ 5733177BCF16EE78B99543C9B0AB81EA ] C:\WINDOWS\system32\msctfime.ime
08:23:54.0828 5904 C:\WINDOWS\system32\msctfime.ime - ok
08:23:54.0843 5904 [ EE83A4EBAE70BC93CF14879D062F548B ] C:\WINDOWS\system32\drivers\drvnddm.sys
08:23:54.0843 5904 C:\WINDOWS\system32\drivers\drvnddm.sys - ok
08:23:54.0843 5904 [ 8DB1E78FBF7C426D8EC3D8F1A33D6485 ] C:\WINDOWS\system32\dla\tfsndres.sys
08:23:54.0843 5904 C:\WINDOWS\system32\dla\tfsndres.sys - ok
08:23:54.0843 5904 [ B92F67A71CC8176F331B8AA8D9F555AD ] C:\WINDOWS\system32\dla\tfsnifs.sys
08:23:54.0843 5904 C:\WINDOWS\system32\dla\tfsnifs.sys - ok
08:23:54.0843 5904 [ 85985FAA9A71E2358FCC2EDEFC2A3C5C ] C:\WINDOWS\system32\dla\tfsnopio.sys
08:23:54.0843 5904 C:\WINDOWS\system32\dla\tfsnopio.sys - ok
08:23:54.0859 5904 [ BBA22094F0F7C210567EFDAF11F64495 ] C:\WINDOWS\system32\dla\tfsnpool.sys
08:23:54.0859 5904 C:\WINDOWS\system32\dla\tfsnpool.sys - ok
08:23:54.0859 5904 [ 30698355067D07DA5F9EB81132C9FDD6 ] C:\WINDOWS\system32\dla\tfsnboio.sys
08:23:54.0859 5904 C:\WINDOWS\system32\dla\tfsnboio.sys - ok
08:23:54.0859 5904 [ FB9D825BB4A2ABDF24600F7505050E2B ] C:\WINDOWS\system32\dla\tfsncofs.sys
08:23:54.0859 5904 C:\WINDOWS\system32\dla\tfsncofs.sys - ok
08:23:54.0859 5904 [ CAFD8CCA11AA1E8B6D2EA1BA8F70EC33 ] C:\WINDOWS\system32\dla\tfsndrct.sys
08:23:54.0859 5904 C:\WINDOWS\system32\dla\tfsndrct.sys - ok
08:23:54.0875 5904 [ 81340BEF80B9811E98CE64611E67E3FF ] C:\WINDOWS\system32\dla\tfsnudf.sys
08:23:54.0875 5904 C:\WINDOWS\system32\dla\tfsnudf.sys - ok
08:23:54.0875 5904 [ C035FD116224CCC8325F384776B6A8BB ] C:\WINDOWS\system32\dla\tfsnudfa.sys
08:23:54.0875 5904 C:\WINDOWS\system32\dla\tfsnudfa.sys - ok
08:23:54.0875 5904 [ F927A4434C5028758A842943EF1A3849 ] C:\WINDOWS\system32\drivers\ndisuio.sys
08:23:54.0875 5904 C:\WINDOWS\system32\drivers\ndisuio.sys - ok
08:23:54.0875 5904 [ 96B4494D4734970F47C566E098C4F527 ] C:\WINDOWS\system32\drivers\s24trans.sys
08:23:54.0875 5904 C:\WINDOWS\system32\drivers\s24trans.sys - ok
08:23:54.0890 5904 [ BD83ABA61E8ACCC8D9FFB869F29418CE ] C:\WINDOWS\system32\winspool.drv
08:23:54.0890 5904 C:\WINDOWS\system32\winspool.drv - ok
08:23:54.0890 5904 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] C:\WINDOWS\system32\drivers\mrxdav.sys
08:23:54.0890 5904 C:\WINDOWS\system32\drivers\mrxdav.sys - ok
08:23:54.0890 5904 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
08:23:54.0890 5904 C:\Program Files\SUPERAntiSpyware\SASCORE.EXE - ok
08:23:54.0890 5904 [ 67722C73DBD6A1DEA9A4846371DD6F7B ] C:\Program Files\Xampp\xampp\apache\modules\mod_actions.so
08:23:54.0890 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_actions.so - ok
08:23:54.0906 5904 [ 7ABA074CDD0CE71D715FCF9C426E7D2E ] C:\Program Files\Xampp\xampp\apache\modules\mod_alias.so
08:23:54.0906 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_alias.so - ok
08:23:54.0906 5904 [ 315FEBB1FA83BBADEAC3523D36D95370 ] C:\Program Files\Xampp\xampp\apache\modules\mod_asis.so
08:23:54.0906 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_asis.so - ok
08:23:54.0906 5904 [ A920494292CF1242B6C76E37ABCB77EB ] C:\Program Files\Xampp\xampp\apache\modules\mod_auth_basic.so
08:23:54.0906 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_auth_basic.so - ok
08:23:54.0906 5904 [ 8F80C97DCDF2A36E6F2891B01BFF4827 ] C:\Program Files\Xampp\xampp\apache\modules\mod_auth_digest.so
08:23:54.0906 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_auth_digest.so - ok
08:23:54.0921 5904 [ 231E35507E08F248CCA8D8B690CAD8D8 ] C:\Program Files\Xampp\xampp\apache\modules\mod_authn_default.so
08:23:54.0921 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_authn_default.so - ok
08:23:54.0921 5904 [ 3921A376CA0C41CE968321B20F43C39B ] C:\Program Files\Xampp\xampp\apache\modules\mod_authn_file.so
08:23:54.0921 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_authn_file.so - ok
08:23:54.0921 5904 [ B4EE9AE7ED55895025D3DE252F57FC2D ] C:\Program Files\Xampp\xampp\apache\modules\mod_authz_default.so
08:23:54.0921 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_authz_default.so - ok
08:23:54.0921 5904 [ 105C881A0FF9B984673F44CF82F65D8B ] C:\Program Files\Xampp\xampp\apache\modules\mod_authz_groupfile.so
08:23:54.0921 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_authz_groupfile.so - ok
08:23:54.0937 5904 [ B979979AB8027F7F53FB16EC4229B7DB ] C:\WINDOWS\system32\drivers\aspi32.sys
08:23:54.0937 5904 C:\WINDOWS\system32\drivers\aspi32.sys - ok
08:23:54.0937 5904 [ 92C0EB871C20D3D838C7E37B6B973C1C ] C:\Program Files\Xampp\xampp\apache\modules\mod_authz_host.so
08:23:54.0937 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_authz_host.so - ok
08:23:54.0937 5904 [ 40412FE98CE277AAFD7676A13C550F4A ] C:\Program Files\Xampp\xampp\apache\modules\mod_authz_user.so
08:23:54.0937 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_authz_user.so - ok
08:23:54.0937 5904 [ E24A3E36A7EF6E8A5C6B3D2E8549E02F ] C:\Program Files\Xampp\xampp\apache\modules\mod_cgi.so
08:23:54.0937 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_cgi.so - ok
08:23:54.0953 5904 [ 34C5DCD0BA0FB6BF3157A74556EDAB4C ] C:\Program Files\Xampp\xampp\apache\modules\mod_dav.so
08:23:54.0953 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_dav.so - ok
08:23:54.0953 5904 [ 9C3A48E5DA9414D2FCA6796A0C77BCC7 ] C:\Program Files\Xampp\xampp\apache\modules\mod_dav_fs.so
08:23:54.0953 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_dav_fs.so - ok
08:23:54.0953 5904 [ 8BCA7C2DD122E7459EB8FD8387B3C9E2 ] C:\Program Files\Xampp\xampp\apache\modules\mod_dav_lock.so
08:23:54.0953 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_dav_lock.so - ok
08:23:54.0953 5904 [ 5D7C907D3094E0A8AE88046358678F61 ] C:\Program Files\Xampp\xampp\apache\modules\mod_dir.so
08:23:54.0953 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_dir.so - ok
08:23:54.0968 5904 [ 330643DF7248EFCC5E1DBE9F95DA4263 ] C:\Program Files\Xampp\xampp\apache\modules\mod_env.so
08:23:54.0968 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_env.so - ok
08:23:54.0968 5904 [ F39C1D6A3A0214FF4CE38364BF53F7D0 ] C:\Program Files\Xampp\xampp\apache\modules\mod_headers.so
08:23:54.0968 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_headers.so - ok
08:23:54.0968 5904 [ 3906A533D7C6A6476FD0975EBA528539 ] C:\Program Files\Xampp\xampp\apache\modules\mod_include.so
08:23:54.0968 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_include.so - ok
08:23:54.0968 5904 [ 3B512E1A73FF48C525555D2F3F9FB710 ] C:\Program Files\Xampp\xampp\apache\modules\mod_info.so
08:23:54.0968 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_info.so - ok
08:23:54.0984 5904 [ B5855242F4E8942F1FAF049B79505402 ] C:\Program Files\Xampp\xampp\apache\modules\mod_isapi.so
08:23:54.0984 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_isapi.so - ok
08:23:54.0984 5904 [ 30FBC1094DE3A35146AEDF3C9A934565 ] C:\Program Files\Xampp\xampp\apache\modules\mod_log_config.so
08:23:54.0984 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_log_config.so - ok
08:23:54.0984 5904 [ 6162A3972D8852C4B52AC3634843AA7E ] C:\Program Files\Xampp\xampp\apache\modules\mod_mime.so
08:23:54.0984 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_mime.so - ok
08:23:54.0984 5904 [ 23A30EA296379BFE724018A87F126920 ] C:\Program Files\Xampp\xampp\apache\modules\mod_negotiation.so
08:23:54.0984 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_negotiation.so - ok
08:23:55.0000 5904 [ 42435A60DE9C41F0544B7D112BADE6C5 ] C:\Program Files\Xampp\xampp\apache\modules\mod_rewrite.so
08:23:55.0000 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_rewrite.so - ok
08:23:55.0000 5904 [ F071261F8F5106E33CBC3A5211AA0D3C ] C:\Program Files\Xampp\xampp\apache\modules\mod_setenvif.so
08:23:55.0000 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_setenvif.so - ok
08:23:55.0000 5904 [ CB228937BAC80320149E301A7CE34FD5 ] C:\Program Files\Xampp\xampp\apache\modules\mod_ssl.so
08:23:55.0000 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_ssl.so - ok
08:23:55.0000 5904 [ 9DBA53893709ADDCDF88B883E8F61D3C ] C:\Program Files\Xampp\xampp\apache\modules\mod_status.so
08:23:55.0000 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_status.so - ok
08:23:55.0015 5904 [ AB95396C28FC2A20D1F7501FA32ACEE5 ] C:\Program Files\Xampp\xampp\apache\modules\mod_autoindex_color.so
08:23:55.0015 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_autoindex_color.so - ok
08:23:55.0015 5904 [ 8CB79E53B2F78BA427102188DD20C0FB ] C:\Program Files\Xampp\xampp\apache\modules\mod_perl.so
08:23:55.0015 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_perl.so - ok
08:23:55.0015 5904 [ B5368ACB60F110CEFBFD03F9C1C5FBA3 ] C:\Program Files\Xampp\xampp\apache\modules\mod_apreq2.so
08:23:55.0015 5904 C:\Program Files\Xampp\xampp\apache\modules\mod_apreq2.so - ok
08:23:55.0015 5904 [ 18994842386FD3039279D7865740ABBD ] C:\WINDOWS\system32\drivers\CVPNDRVA.sys
08:23:55.0015 5904 C:\WINDOWS\system32\drivers\CVPNDRVA.sys - ok
08:23:55.0031 5904 [ 2975C66459C426C20BC22D639DF6B611 ] C:\Program Files\SUPERAntiSpyware\SASSEH.DLL
08:23:55.0031 5904 C:\Program Files\SUPERAntiSpyware\SASSEH.DLL - ok
08:23:55.0031 5904 [ F80A415EF82CD06FFAF0D971528EAD38 ] C:\WINDOWS\system32\drivers\http.sys
08:23:55.0031 5904 C:\WINDOWS\system32\drivers\http.sys - ok
08:23:55.0031 5904 [ E9296800685ED622132C0E1FA9241F92 ] C:\Program Files\AVG\AVG2013\avgkrnlapix.dll
08:23:55.0031 5904 C:\Program Files\AVG\AVG2013\avgkrnlapix.dll - ok
08:23:55.0031 5904 [ 3C318B9CD391371BED62126581EE9961 ] C:\WINDOWS\system32\drivers\mdmxsdk.sys
08:23:55.0031 5904 C:\WINDOWS\system32\drivers\mdmxsdk.sys - ok
08:23:55.0046 5904 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] C:\WINDOWS\system32\drivers\srv.sys
08:23:55.0046 5904 C:\WINDOWS\system32\drivers\srv.sys - ok
08:23:55.0046 5904 [ 254CCDC043DFADC5D5EF99B533BB1DC2 ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll
08:23:55.0046 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll - ok
08:23:55.0046 5904 [ A5205B3AF85B1477AB2C2A1E12201598 ] C:\WINDOWS\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll
08:23:55.0046 5904 C:\WINDOWS\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll - ok
08:23:55.0046 5904 [ BF7A0049947C504450F9430F1A043590 ] C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_f8fd8d7e\System.Xml.dll
08:23:55.0046 5904 C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_f8fd8d7e\System.Xml.dll - ok
08:23:55.0062 5904 [ 79EFE0C582683997E50699FA370321EC ] C:\Program Files\Xampp\xampp\perl\lib\auto\File\Glob\Glob.dll
08:23:55.0062 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\File\Glob\Glob.dll - ok
08:23:55.0062 5904 [ CDC1E0144EA825D4F020DA556089946C ] C:\Program Files\Xampp\xampp\perl\lib\auto\Compress\Raw\Zlib\Zlib.dll
08:23:55.0062 5904 C:\Program Files\Xampp\xampp\perl\lib\auto\Compress\Raw\Zlib\Zlib.dll - ok
08:23:55.0062 5904 [ F9D3C78CFE15271D80790677C893CE45 ] C:\WINDOWS\system32\cabinet.dll
08:23:55.0062 5904 C:\WINDOWS\system32\cabinet.dll - ok
08:23:55.0062 5904 [ 7778BDFA3F6F6FBA0E75B9594098F737 ] C:\WINDOWS\system32\searchindexer.exe
08:23:55.0062 5904 C:\WINDOWS\system32\searchindexer.exe - ok
08:23:55.0078 5904 [ B85E95679B5ADC12311BCD3F5385D623 ] C:\WINDOWS\system32\mspatcha.dll
08:23:55.0078 5904 C:\WINDOWS\system32\mspatcha.dll - ok
08:23:55.0078 5904 [ A06CE3399D16DB864F55FAEB1F1927A9 ] C:\WINDOWS\system32\browser.dll
08:23:55.0078 5904 C:\WINDOWS\system32\browser.dll - ok
08:23:55.0078 5904 [ 912B67BB8249925A5C972FC5839EAE09 ] C:\WINDOWS\system32\actxprxy.dll
08:23:55.0078 5904 C:\WINDOWS\system32\actxprxy.dll - ok
08:23:55.0078 5904 [ 1D326842006C4BE77ECD848CF89F01AB ] C:\WINDOWS\system32\wups.dll
08:23:55.0078 5904 C:\WINDOWS\system32\wups.dll - ok
08:23:55.0093 5904 [ 0CBD1906F74BEB539FCEF6493095B933 ] C:\WINDOWS\system32\tquery.dll
08:23:55.0093 5904 C:\WINDOWS\system32\tquery.dll - ok
08:23:55.0093 5904 [ 5BD1234E11B39C63BBA87022AF6D43C2 ] C:\WINDOWS\system32\wups2.dll
08:23:55.0093 5904 C:\WINDOWS\system32\wups2.dll - ok
08:23:55.0093 5904 [ 3C923E1911CED5802C3BDB9CE18F64DA ] C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
08:23:55.0093 5904 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - ok
08:23:55.0093 5904 [ EA08C74D9BE05E53D3C92456413AA656 ] C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
08:23:55.0093 5904 C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll - ok
08:23:55.0109 5904 [ E65C5F612400B39D7AA83E7057D798C2 ] C:\WINDOWS\system32\mssrch.dll
08:23:55.0109 5904 C:\WINDOWS\system32\mssrch.dll - ok
08:23:55.0109 5904 [ 62BB79160F86CD962F312C68C6239BFD ] C:\WINDOWS\system32\wuauclt.exe
08:23:55.0109 5904 C:\WINDOWS\system32\wuauclt.exe - ok
08:23:55.0109 5904 [ C5E3E8481C58572092C55F6F42D2220B ] C:\Program Files\Xampp\xampp\php\ext\php_bz2.dll
08:23:55.0109 5904 C:\Program Files\Xampp\xampp\php\ext\php_bz2.dll - ok
08:23:55.0109 5904 [ EB9119860EAEBFF810BE21FC6B88AADA ] C:\Program Files\Xampp\xampp\php\ext\php_mbstring.dll
08:23:55.0109 5904 C:\Program Files\Xampp\xampp\php\ext\php_mbstring.dll - ok
08:23:55.0125 5904 [ 43E4758953F454090CAD65C303796ED5 ] C:\WINDOWS\system32\query.dll
08:23:55.0125 5904 C:\WINDOWS\system32\query.dll - ok
08:23:55.0125 5904 [ 4E56546816B5A18A195A2C74C83CABB7 ] C:\Program Files\Xampp\xampp\php\ext\php_exif.dll
08:23:55.0125 5904 C:\Program Files\Xampp\xampp\php\ext\php_exif.dll - ok
08:23:55.0125 5904 [ 79E3A8C328E7E569C32B0998377D9742 ] C:\WINDOWS\system32\spoolss.dll
08:23:55.0125 5904 C:\WINDOWS\system32\spoolss.dll - ok
08:23:55.0125 5904 [ D118D63936AA11AD88100D50AF564C55 ] C:\Program Files\Xampp\xampp\php\ext\php_fileinfo.dll
08:23:55.0125 5904 C:\Program Files\Xampp\xampp\php\ext\php_fileinfo.dll - ok
08:23:55.0140 5904 [ DF0A511F38F16016BF658FCA0090CB87 ] C:\WINDOWS\ehome\mcrdsvc.exe
08:23:55.0140 5904 C:\WINDOWS\ehome\mcrdsvc.exe - ok
08:23:55.0140 5904 [ AA897735D5AB916297A6823A9B2D61B1 ] C:\WINDOWS\system32\localspl.dll
08:23:55.0140 5904 C:\WINDOWS\system32\localspl.dll - ok
08:23:55.0140 5904 [ 3D075865DCC26931972F6476AD0497BE ] C:\WINDOWS\system32\ssdpapi.dll
08:23:55.0140 5904 C:\WINDOWS\system32\ssdpapi.dll - ok
08:23:55.0140 5904 [ 7C278E6408D1DCE642230C0585A854D5 ] C:\WINDOWS\system32\wscsvc.dll
08:23:55.0140 5904 C:\WINDOWS\system32\wscsvc.dll - ok
08:23:55.0156 5904 [ 062F837C1FBDB6A0A75F82EFC2EE8E74 ] C:\WINDOWS\system32\netshell.dll
08:23:55.0156 5904 C:\WINDOWS\system32\netshell.dll - ok
08:23:55.0156 5904 [ 5D3D1AB0EF4EA55B731863050482C111 ] C:\WINDOWS\system32\cnbjmon.dll
08:23:55.0156 5904 C:\WINDOWS\system32\cnbjmon.dll - ok
08:23:55.0156 5904 [ 7AEC176A5DE912D440E3B37120E2E38F ] C:\WINDOWS\system32\E_FLMAAE.DLL
08:23:55.0156 5904 C:\WINDOWS\system32\E_FLMAAE.DLL - ok
08:23:55.0156 5904 [ BEA4AEE74FEF171EB61DE1BAD8FAF427 ] C:\WINDOWS\system32\xmllite.dll
08:23:55.0156 5904 C:\WINDOWS\system32\xmllite.dll - ok
08:23:55.0171 5904 [ CC6292CA575E851E5B74BF8883AB967A ] C:\WINDOWS\system32\fxsmon.dll
08:23:55.0171 5904 C:\WINDOWS\system32\fxsmon.dll - ok
08:23:55.0171 5904 [ 8C053E5EEC2846D8A2A09AA4D2C79792 ] C:\WINDOWS\system32\hpz3l692.dll
08:23:55.0171 5904 C:\WINDOWS\system32\hpz3l692.dll - ok
08:23:55.0171 5904 [ 222DE7F5EDB9DDBE628384A1A8BE59CE ] C:\WINDOWS\system32\pjlmon.dll
08:23:55.0171 5904 C:\WINDOWS\system32\pjlmon.dll - ok
08:23:55.0171 5904 [ 2C6786656869093C521337D6AC813BC6 ] C:\WINDOWS\system32\Primomonnt.dll
08:23:55.0171 5904 C:\WINDOWS\system32\Primomonnt.dll - ok
08:23:55.0187 5904 [ FFB3115AA757ABEFBA7FBA90BAD5DD0A ] C:\WINDOWS\system32\en-us\tquery.dll.mui
08:23:55.0187 5904 C:\WINDOWS\system32\en-us\tquery.dll.mui - ok
08:23:55.0187 5904 [ AE0382AD9C73D343D85E1A50C80B7C20 ] C:\WINDOWS\system32\tcpmon.dll
08:23:55.0187 5904 C:\WINDOWS\system32\tcpmon.dll - ok
08:23:55.0187 5904 [ F26385E8BA4549B5186B774EC0E45D86 ] C:\WINDOWS\system32\usbmon.dll
08:23:55.0187 5904 C:\WINDOWS\system32\usbmon.dll - ok
08:23:55.0187 5904 [ 8F580BCC5296ECC9DC8A649D75BE6BA5 ] C:\WINDOWS\system32\msscb.dll
08:23:55.0187 5904 C:\WINDOWS\system32\msscb.dll - ok
08:23:55.0203 5904 [ 93A7308E84ACA26622A5A2FE6DBBE29C ] C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp692.dll
08:23:55.0203 5904 C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp692.dll - ok
08:23:55.0203 5904 [ 9A0C7B83E109F1F0B32BEF35A3AA18F2 ] C:\Program Files\Xampp\xampp\php\ext\php_gd2.dll
08:23:55.0203 5904 C:\Program Files\Xampp\xampp\php\ext\php_gd2.dll - ok
08:23:55.0203 5904 [ EEE7F12D9FF46F68FBC0DA059A359E9E ] C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
08:23:55.0203 5904 C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - ok
08:23:55.0203 5904 [ 4E8F3230BAC8C1CAADF01A8C728E1C5C ] C:\WINDOWS\system32\dot3dlg.dll
08:23:55.0203 5904 C:\WINDOWS\system32\dot3dlg.dll - ok
08:23:55.0218 5904 [ CA04959077AFE36369D37B3504740C87 ] C:\WINDOWS\system32\onex.dll
08:23:55.0218 5904 C:\WINDOWS\system32\onex.dll - ok
08:23:55.0218 5904 [ 22DD6D7D4BFE2B8CE705CC950C8AEA4C ] C:\WINDOWS\system32\win32spl.dll
08:23:55.0218 5904 C:\WINDOWS\system32\win32spl.dll - ok
08:23:55.0218 5904 [ B41D53899E37CC43DA85DA19998BEE81 ] C:\WINDOWS\system32\netrap.dll
08:23:55.0218 5904 C:\WINDOWS\system32\netrap.dll - ok
08:23:55.0218 5904 [ 5DB625E7D095604010CF84DE2D8ACFA6 ] C:\WINDOWS\system32\eappcfg.dll
08:23:55.0218 5904 C:\WINDOWS\system32\eappcfg.dll - ok
08:23:55.0234 5904 [ EE4C651A217B01D636B5364AC77DA892 ] C:\WINDOWS\system32\inetpp.dll
08:23:55.0234 5904 C:\WINDOWS\system32\inetpp.dll - ok
08:23:55.0234 5904 [ ABC4206543450C0666D152F4B65833B8 ] C:\WINDOWS\system32\eappprxy.dll
08:23:55.0234 5904 C:\WINDOWS\system32\eappprxy.dll - ok
08:23:55.0234 5904 [ B26F77AB2277287D91E4179F24533336 ] C:\Program Files\Xampp\xampp\php\ext\php_gettext.dll
08:23:55.0234 5904 C:\Program Files\Xampp\xampp\php\ext\php_gettext.dll - ok
08:23:55.0234 5904 [ F0BF811622F2DD6C8E26EE4600D83731 ] C:\WINDOWS\system32\wbem\wbemcore.dll
08:23:55.0234 5904 C:\WINDOWS\system32\wbem\wbemcore.dll - ok
08:23:55.0250 5904 [ 6264204A2274C068A82C6BEFDE1630EB ] C:\Program Files\Xampp\xampp\php\ext\php_imap.dll
08:23:55.0250 5904 C:\Program Files\Xampp\xampp\php\ext\php_imap.dll - ok
08:23:55.0250 5904 [ E4616430709F440CF1809D88DC2366EA ] C:\WINDOWS\system32\wbem\esscli.dll
08:23:55.0250 5904 C:\WINDOWS\system32\wbem\esscli.dll - ok
08:23:55.0250 5904 [ 0CE5F8AE9C371A965D17E3F2ED134809 ] C:\WINDOWS\system32\fxst30.dll
08:23:55.0250 5904 C:\WINDOWS\system32\fxst30.dll - ok
08:23:55.0250 5904 [ 378A0AEFB11D8B0DC8C27B9F7604B88D ] C:\WINDOWS\system32\wbem\fastprox.dll
08:23:55.0250 5904 C:\WINDOWS\system32\wbem\fastprox.dll - ok
08:23:55.0265 5904 [ 2D583E2844FDD592D1629EB6B10E5702 ] C:\WINDOWS\system32\fxsroute.dll
08:23:55.0265 5904 C:\WINDOWS\system32\fxsroute.dll - ok
08:23:55.0265 5904 [ EC512E8773D4A831025004787F086500 ] C:\Program Files\Xampp\xampp\php\ext\php_mcrypt.dll
08:23:55.0265 5904 C:\Program Files\Xampp\xampp\php\ext\php_mcrypt.dll - ok
08:23:55.0265 5904 [ AACE07FE34FADDDF973CE068A6424957 ] C:\WINDOWS\system32\unimdm.tsp
08:23:55.0265 5904 C:\WINDOWS\system32\unimdm.tsp - ok
08:23:55.0265 5904 [ 7547F535237F11CBB9F68CBCF30EC967 ] C:\Program Files\Xampp\xampp\php\ext\php_mysql_libmysql.dll
08:23:55.0265 5904 C:\Program Files\Xampp\xampp\php\ext\php_mysql_libmysql.dll - ok
08:23:55.0281 5904 [ C71850684E8572B1E6D0A4402372495B ] C:\Program Files\Xampp\xampp\apache\bin\libmysql.dll
08:23:55.0281 5904 C:\Program Files\Xampp\xampp\apache\bin\libmysql.dll - ok
08:23:55.0281 5904 [ 995252FCC4692B5B97EE17D596C9386E ] C:\WINDOWS\system32\uniplat.dll
08:23:55.0281 5904 C:\WINDOWS\system32\uniplat.dll - ok
08:23:55.0281 5904 [ 010472D0AE758227C6F6E6933549C219 ] C:\WINDOWS\system32\wbem\wbemsvc.dll
08:23:55.0281 5904 C:\WINDOWS\system32\wbem\wbemsvc.dll - ok
08:23:55.0281 5904 [ 3273D1565BF30225C115B480A3BB2C9D ] C:\WINDOWS\system32\wbem\wmiutils.dll
08:23:55.0281 5904 C:\WINDOWS\system32\wbem\wmiutils.dll - ok
08:23:55.0296 5904 [ 942A17D2901A31EA68627CBFFCD268CC ] C:\WINDOWS\system32\wbem\repdrvfs.dll
08:23:55.0296 5904 C:\WINDOWS\system32\wbem\repdrvfs.dll - ok
08:23:55.0296 5904 [ 19AE6CBA05B9005698A6DEDCC88F202E ] C:\WINDOWS\system32\unimdmat.dll
08:23:55.0296 5904 C:\WINDOWS\system32\unimdmat.dll - ok
08:23:55.0296 5904 [ FE4A73CDBC882A19D070F1C01586E81A ] C:\WINDOWS\system32\modemui.dll
08:23:55.0296 5904 C:\WINDOWS\system32\modemui.dll - ok
08:23:55.0296 5904 [ 76EC97C5068D3D9FAA7774B0F659D31A ] C:\WINDOWS\system32\kmddsp.tsp
08:23:55.0296 5904 C:\WINDOWS\system32\kmddsp.tsp - ok
08:23:55.0312 5904 [ 4589963D84F2984FA5949A72162BA4F4 ] C:\WINDOWS\system32\ndptsp.tsp
08:23:55.0312 5904 C:\WINDOWS\system32\ndptsp.tsp - ok
08:23:55.0312 5904 [ 8B8A45DF7CEF36D93C7BD3E4C84003B8 ] C:\WINDOWS\system32\ipconf.tsp
08:23:55.0312 5904 C:\WINDOWS\system32\ipconf.tsp - ok
08:23:55.0312 5904 [ D1475A111E34D5914A6811EEEB623634 ] C:\Program Files\Xampp\xampp\php\ext\php_mysqli_libmysql.dll
08:23:55.0312 5904 C:\Program Files\Xampp\xampp\php\ext\php_mysqli_libmysql.dll - ok
08:23:55.0312 5904 [ 888C92C374E616EF6DD02D4BC9C258FF ] C:\Program Files\Xampp\xampp\php\ext\php_pdo.dll
08:23:55.0312 5904 C:\Program Files\Xampp\xampp\php\ext\php_pdo.dll - ok
08:23:55.0328 5904 [ 8BC2B02DC11C98D14CEE43B8E8393FF3 ] C:\WINDOWS\system32\h323.tsp
08:23:55.0328 5904 C:\WINDOWS\system32\h323.tsp - ok
08:23:55.0328 5904 [ D9C3461015AF95956FC9616A7F0C98EF ] C:\Program Files\Xampp\xampp\php\ext\php_pdo_mysql_libmysql.dll
08:23:55.0328 5904 C:\Program Files\Xampp\xampp\php\ext\php_pdo_mysql_libmysql.dll - ok
08:23:55.0328 5904 [ 6DE40B5B695C95284C67D3989C66C4DA ] C:\Program Files\Xampp\xampp\php\ext\php_pdo_odbc.dll
08:23:55.0328 5904 C:\Program Files\Xampp\xampp\php\ext\php_pdo_odbc.dll - ok
08:23:55.0328 5904 [ 85485CCB5F2FB69B5C4719C2E8863C2E ] C:\Program Files\Xampp\xampp\php\ext\php_pdo_sqlite.dll
08:23:55.0328 5904 C:\Program Files\Xampp\xampp\php\ext\php_pdo_sqlite.dll - ok
08:23:55.0343 5904 [ 071143F687B4F887E21461CA6CC7EB29 ] C:\WINDOWS\system32\wbem\wmiprvsd.dll
08:23:55.0343 5904 C:\WINDOWS\system32\wbem\wmiprvsd.dll - ok
08:23:55.0343 5904 [ 6B552ED3BEE5AA3C4560478FF779BA98 ] C:\WINDOWS\system32\hidphone.tsp
08:23:55.0343 5904 C:\WINDOWS\system32\hidphone.tsp - ok
08:23:55.0343 5904 [ FEBDA3D85B6FA85FF66AC55D8D9E2C95 ] C:\Program Files\Xampp\xampp\php\ext\php_soap.dll
08:23:55.0343 5904 C:\Program Files\Xampp\xampp\php\ext\php_soap.dll - ok
08:23:55.0343 5904 [ 26D881D27CBE51D3614E68D7313EA026 ] C:\WINDOWS\system32\wbem\wbemess.dll
08:23:55.0343 5904 C:\WINDOWS\system32\wbem\wbemess.dll - ok
08:23:55.0359 5904 [ 31E64DECBFF4EE396CEE538AA0BD8DE5 ] C:\Program Files\Xampp\xampp\php\ext\php_sockets.dll
08:23:55.0359 5904 C:\Program Files\Xampp\xampp\php\ext\php_sockets.dll - ok
08:23:55.0359 5904 [ 175BED3F6AC8E40C14CC6A1E770039F3 ] C:\Program Files\Xampp\xampp\php\ext\php_sqlite.dll
08:23:55.0359 5904 C:\Program Files\Xampp\xampp\php\ext\php_sqlite.dll - ok
08:23:55.0359 5904 [ 1793CC660605F63B14FB96C7707F75BA ] C:\WINDOWS\system32\perfproc.dll
08:23:55.0359 5904 C:\WINDOWS\system32\perfproc.dll - ok
08:23:55.0359 5904 [ E5A2D4119D8B088234EA26A842DCF122 ] C:\Program Files\Xampp\xampp\php\ext\php_sqlite3.dll
08:23:55.0359 5904 C:\Program Files\Xampp\xampp\php\ext\php_sqlite3.dll - ok
08:23:55.0375 5904 [ FB234DDA3664DEFE2436E56C828589E8 ] C:\Program Files\Xampp\xampp\php\ext\php_xmlrpc.dll
08:23:55.0375 5904 C:\Program Files\Xampp\xampp\php\ext\php_xmlrpc.dll - ok
08:23:55.0375 5904 [ 1D8661E121A6EE1FACD8CAC32ABC91FD ] C:\Program Files\Xampp\xampp\php\ext\php_zip.dll
08:23:55.0375 5904 C:\Program Files\Xampp\xampp\php\ext\php_zip.dll - ok
08:23:55.0375 5904 [ 828220BCB7814385467B5D1DCE697E2F ] C:\Program Files\Xampp\xampp\php\ext\php_ming.dll
08:23:55.0375 5904 C:\Program Files\Xampp\xampp\php\ext\php_ming.dll - ok
08:23:55.0375 5904 [ 009758CC06B7F55B4A4D16A66E243C24 ] C:\WINDOWS\system32\wuapi.dll
08:23:55.0375 5904 C:\WINDOWS\system32\wuapi.dll - ok
08:23:55.0390 5904 [ E9B0A164556812D7C6AE426BF95CE8B5 ] C:\Program Files\Xampp\xampp\php\ext\php_pdflib.dll
08:23:55.0390 5904 C:\Program Files\Xampp\xampp\php\ext\php_pdflib.dll - ok
08:23:55.0390 5904 [ D26451B540720A7313A9BCBE794DAF62 ] C:\WINDOWS\system32\wbem\ncprov.dll
08:23:55.0390 5904 C:\WINDOWS\system32\wbem\ncprov.dll - ok
08:23:55.0390 5904 [ 6404807ABC7AF52FA3792697AE638B50 ] C:\WINDOWS\system32\wbem\wbemcons.dll
08:23:55.0390 5904 C:\WINDOWS\system32\wbem\wbemcons.dll - ok
08:23:55.0390 5904 [ E2395AE8398EDF4CA03F5015B7F66931 ] C:\WINDOWS\system32\NetProvCredMan.dll
08:23:55.0390 5904 C:\WINDOWS\system32\NetProvCredMan.dll - ok
08:23:55.0406 5904 [ 680B56A8B62D1BCF4A0B2AAAD03D88E4 ] C:\WINDOWS\system32\wdmaud.drv
08:23:55.0406 5904 C:\WINDOWS\system32\wdmaud.drv - ok
08:23:55.0406 5904 [ 6768ACF64B18196494413695F0C3A00F ] C:\WINDOWS\system32\drivers\wdmaud.sys
08:23:55.0406 5904 C:\WINDOWS\system32\drivers\wdmaud.sys - ok
08:23:55.0406 5904 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] C:\WINDOWS\system32\drivers\sysaudio.sys
08:23:55.0406 5904 C:\WINDOWS\system32\drivers\sysaudio.sys - ok
08:23:55.0406 5904 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] C:\WINDOWS\system32\drivers\splitter.sys
08:23:55.0406 5904 C:\WINDOWS\system32\drivers\splitter.sys - ok
08:23:55.0421 5904 [ 8BED39E3C35D6A489438B8141717A557 ] C:\WINDOWS\system32\drivers\aec.sys
08:23:55.0421 5904 C:\WINDOWS\system32\drivers\aec.sys - ok
08:23:55.0421 5904 [ A93AEE1928A9D7CE3E16D24EC7380F89 ] C:\WINDOWS\system32\userinit.exe
08:23:55.0421 5904 C:\WINDOWS\system32\userinit.exe - ok
08:23:55.0421 5904 [ 8BEAF2B4BCDE405AF7EC46A9E03B2D65 ] C:\WINDOWS\system32\mssprxy.dll
08:23:55.0421 5904 C:\WINDOWS\system32\mssprxy.dll - ok
08:23:55.0421 5904 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] C:\WINDOWS\system32\drivers\swmidi.sys
08:23:55.0421 5904 C:\WINDOWS\system32\drivers\swmidi.sys - ok
08:23:55.0437 5904 [ 8A208DFCF89792A484E76C40E5F50B45 ] C:\WINDOWS\system32\drivers\dmusic.sys
08:23:55.0437 5904 C:\WINDOWS\system32\drivers\dmusic.sys - ok
08:23:55.0437 5904 [ 692BCF44383D056AED41B045A323D378 ] C:\WINDOWS\system32\drivers\kmixer.sys
08:23:55.0437 5904 C:\WINDOWS\system32\drivers\kmixer.sys - ok
08:23:55.0437 5904 [ F92E1076C42FCD6DB3D72D8CFE9816D5 ] C:\WINDOWS\system32\wscntfy.exe
08:23:55.0437 5904 C:\WINDOWS\system32\wscntfy.exe - ok
08:23:55.0437 5904 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] C:\WINDOWS\system32\drivers\drmkaud.sys
08:23:55.0437 5904 C:\WINDOWS\system32\drivers\drmkaud.sys - ok
08:23:55.0453 5904 [ A5B966D8D84B77FBEF1F3C988A970611 ] C:\Documents and Settings\Chris\Application Data\Real\Update\UpgradeHelper\RealPlayer\10.40\agent\rnupgagent.exe
08:23:55.0453 5904 C:\Documents and Settings\Chris\Application Data\Real\Update\UpgradeHelper\RealPlayer\10.40\agent\rnupgagent.exe - ok
08:23:55.0453 5904 [ 9A3BD5F55AADFF859539142F6328A66E ] C:\WINDOWS\system32\msacm32.drv
08:23:55.0453 5904 C:\WINDOWS\system32\msacm32.drv - ok
08:23:55.0453 5904 [ 5C12660A97822F6E61576943B49AAAD6 ] C:\WINDOWS\system32\midimap.dll
08:23:55.0453 5904 C:\WINDOWS\system32\midimap.dll - ok
08:23:55.0453 5904 [ 12896823FB95BFB3DC9B46BCAEDC9923 ] C:\WINDOWS\explorer.exe
08:23:55.0453 5904 C:\WINDOWS\explorer.exe - ok
08:23:55.0468 5904 [ 8535493AB374BE5B1B3A34671F42CCB3 ] C:\Program Files\real\RealUpgrade\realupgrade.exe
08:23:55.0468 5904 C:\Program Files\real\RealUpgrade\realupgrade.exe - ok
08:23:55.0468 5904 [ 355FE68A41EC27C2A3D1A6E86A582820 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.5570_x-ww_0517bbc6\msvcr90.dll
08:23:55.0468 5904 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.5570_x-ww_0517bbc6\msvcr90.dll - ok
08:23:55.0468 5904 [ 26CB10FA893F940AB09713FF46DCDADE ] C:\WINDOWS\system32\shdocvw.dll
08:23:55.0468 5904 C:\WINDOWS\system32\shdocvw.dll - ok
08:23:55.0468 5904 [ D622C0DD759A3D25174FAD44C7B22540 ] C:\Program Files\real\RealUpgrade\Common\hxmedpltfm.dll
08:23:55.0468 5904 C:\Program Files\real\RealUpgrade\Common\hxmedpltfm.dll - ok
08:23:55.0484 5904 [ E0B432F20FA54FA689949AC6DBC4C4AB ] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.5570_x-ww_0517bbc6\msvcp90.dll
08:23:55.0484 5904 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.5570_x-ww_0517bbc6\msvcp90.dll - ok
08:23:55.0484 5904 [ DBC2246E41D54CE62DE47A71D267479B ] C:\Program Files\real\RealUpgrade\Plugins\upgrade.dll
08:23:55.0484 5904 C:\Program Files\real\RealUpgrade\Plugins\upgrade.dll - ok
08:23:55.0484 5904 [ B4ED498E3BFEE64E952BC44FC6057DB8 ] C:\WINDOWS\system32\desk.cpl
08:23:55.0484 5904 C:\WINDOWS\system32\desk.cpl - ok
08:23:55.0484 5904 [ A314EEA2A503A8E04085201E436384A5 ] C:\WINDOWS\system32\themeui.dll
08:23:55.0484 5904 C:\WINDOWS\system32\themeui.dll - ok
08:23:55.0500 5904 [ 6D778E0F95447E6546553EEEA709D03C ] C:\WINDOWS\system32\cmd.exe
08:23:55.0500 5904 C:\WINDOWS\system32\cmd.exe - ok
08:23:55.0500 5904 [ 178A34E5554DCE485E1262DDF027960C ] C:\DOCUME~1\Chris\LOCALS~1\temp\7BEFA3B5-334F-4109-BBC7-E903290E23E0.exe
08:23:55.0500 5904 C:\DOCUME~1\Chris\LOCALS~1\temp\7BEFA3B5-334F-4109-BBC7-E903290E23E0.exe - ok
08:23:55.0500 5904 [ 54A9F1E18AAB48579AB70A32D60D780A ] C:\Program Files\Windows Media Player\wmpband.dll
08:23:55.0500 5904 C:\Program Files\Windows Media Player\wmpband.dll - ok
08:23:55.0500 5904 [ 17AA58A54C00F1746B8654C050491F43 ] C:\WINDOWS\system32\msutb.dll
08:23:55.0500 5904 C:\WINDOWS\system32\msutb.dll - ok
08:23:55.0515 5904 [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\WINDOWS\system32\drivers\34657652.sys
08:23:55.0515 5904 C:\WINDOWS\system32\drivers\34657652.sys - ok
08:23:55.0515 5904 [ A70A2D85AD143D6BB823C246CEB699A5 ] C:\WINDOWS\system32\ntshrui.dll
08:23:55.0515 5904 C:\WINDOWS\system32\ntshrui.dll - ok
08:23:55.0515 5904 [ 91790D6749EBED90E2C40479C0A91879 ] C:\WINDOWS\system32\verclsid.exe
08:23:55.0515 5904 C:\WINDOWS\system32\verclsid.exe - ok
08:23:55.0515 5904 [ 0AD792A78419867BF5D750853D80FA11 ] C:\WINDOWS\system32\msxml3.dll
08:23:55.0515 5904 C:\WINDOWS\system32\msxml3.dll - ok
08:23:55.0531 5904 [ 2DC5A8019E2387987905F77C664E4BE2 ] C:\WINDOWS\system32\linkinfo.dll
08:23:55.0531 5904 C:\WINDOWS\system32\linkinfo.dll - ok
08:23:55.0531 5904 [ ABB85828C394CEACACBC90373C59C529 ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
08:23:55.0531 5904 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe - ok
08:23:55.0531 5904 [ AD2506958DE1937C16C553C0A1BE0572 ] C:\WINDOWS\stsystra.exe
08:23:55.0531 5904 C:\WINDOWS\stsystra.exe - ok
08:23:55.0531 5904 [ 381E144D2111593F87FBAF85347FCF28 ] C:\WINDOWS\system32\stlang.dll
08:23:55.0531 5904 C:\WINDOWS\system32\stlang.dll - ok
08:23:55.0546 5904 [ 798A9E6828997EEF4517ADA8A2259831 ] C:\WINDOWS\system32\wbem\wmiprvse.exe
08:23:55.0546 5904 C:\WINDOWS\system32\wbem\wmiprvse.exe - ok
08:23:55.0546 5904 [ 0AEE5668EB59912F32FF245BFA72465F ] C:\Program Files\QuickTime\QTTask.exe
08:23:55.0546 5904 C:\Program Files\QuickTime\QTTask.exe - ok
08:23:55.0546 5904 [ CC8915DB4E33E8FB29CA0D2DBF75306E ] C:\WINDOWS\system32\webcheck.dll
08:23:55.0546 5904 C:\WINDOWS\system32\webcheck.dll - ok
08:23:55.0562 5904 [ 0557F18CA388BD2D2EAF9F0474FD75C7 ] C:\WINDOWS\system32\SynCOM.dll
08:23:55.0562 5904 C:\WINDOWS\system32\SynCOM.dll - ok
08:23:55.0562 5904 [ F6F2BFC17069EB335ACCEEF7595F9302 ] C:\WINDOWS\system32\mfc42u.dll
08:23:55.0562 5904 C:\WINDOWS\system32\mfc42u.dll - ok
08:23:55.0562 5904 [ 50512FC9B7878E3C2C147BC17326A7DB ] C:\WINDOWS\system32\stobject.dll
08:23:55.0562 5904 C:\WINDOWS\system32\stobject.dll - ok
08:23:55.0562 5904 [ C6A7045E0D5C975028976E940CE76BB8 ] C:\WINDOWS\system32\SynTPAPI.dll
08:23:55.0562 5904 C:\WINDOWS\system32\SynTPAPI.dll - ok
08:23:55.0578 5904 [ 231A0B0E3BA7ABFE469A8262FAA1FD71 ] C:\WINDOWS\system32\batmeter.dll
08:23:55.0578 5904 C:\WINDOWS\system32\batmeter.dll - ok
08:23:55.0578 5904 [ D7D69F304A604387B86BE991CBF07663 ] C:\WINDOWS\system32\WPDShServiceObj.dll
08:23:55.0578 5904 C:\WINDOWS\system32\WPDShServiceObj.dll - ok
08:23:55.0578 5904 [ 538A270F35A713C360B7ED4168BB7521 ] C:\WINDOWS\system32\mydocs.dll
08:23:55.0578 5904 C:\WINDOWS\system32\mydocs.dll - ok
08:23:55.0578 5904 [ 1C22A3866112ED41E1F3684DAE9AD5D2 ] C:\WINDOWS\system32\mmcshext.dll
08:23:55.0578 5904 C:\WINDOWS\system32\mmcshext.dll - ok
08:23:55.0593 5904 [ D3E868700D9B5E3C54B7EED060215CC1 ] C:\WINDOWS\system32\hhsetup.dll
08:23:55.0593 5904 C:\WINDOWS\system32\hhsetup.dll - ok
08:23:55.0593 5904 [ 763DAB43BDAB27316DBF3373192823D7 ] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
08:23:55.0593 5904 C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe - ok
08:23:55.0593 5904 [ A687C458B80C7D55CBE39649D952ED2A ] C:\WINDOWS\system32\PortableDeviceTypes.dll
08:23:55.0593 5904 C:\WINDOWS\system32\PortableDeviceTypes.dll - ok
08:23:55.0593 5904 [ E132AD94798E72ACB650E985984C7F58 ] C:\WINDOWS\system32\PortableDeviceApi.dll
08:23:55.0593 5904 C:\WINDOWS\system32\PortableDeviceApi.dll - ok
08:23:55.0609 5904 [ FB9E5C251CF6C37749F296BACB34A69B ] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
08:23:55.0609 5904 C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe - ok
08:23:55.0609 5904 [ 72A0DF237F9118F18AD136E99266E816 ] C:\Program Files\Microsoft Office\Office10\MSOHEV.DLL
08:23:55.0609 5904 C:\Program Files\Microsoft Office\Office10\MSOHEV.DLL - ok
08:23:55.0609 5904 [ E837FDBB92E9873E538395B623F45462 ] C:\WINDOWS\system32\wbem\cimwin32.dll
08:23:55.0609 5904 C:\WINDOWS\system32\wbem\cimwin32.dll - ok
08:23:55.0609 5904 [ BE29D794C872BC95EC4FFCAC0E57CF6A ] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
08:23:55.0609 5904 C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe - ok
08:23:55.0625 5904 [ D146D85ED0170E483311DF7175819AAA ] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
08:23:55.0625 5904 C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe - ok
08:23:55.0625 5904 [ 4306FA2F1099D7C606139255FDB62B19 ] C:\WINDOWS\system32\wbem\framedyn.dll
08:23:55.0625 5904 C:\WINDOWS\system32\wbem\framedyn.dll - ok
08:23:55.0625 5904 [ F771EE80948971858BEEF36839C24E65 ] C:\Program Files\Common Files\InstallShield\UpdateService\_ispmres.dll
08:23:55.0625 5904 C:\Program Files\Common Files\InstallShield\UpdateService\_ispmres.dll - ok
08:23:55.0625 5904 [ F802B6381408D3BED6EE1DF87BFE1EB8 ] C:\WINDOWS\system32\stacapi.dll
08:23:55.0625 5904 C:\WINDOWS\system32\stacapi.dll - ok
08:23:55.0640 5904 [ 091BE9A85F5681632E3C035E4F559448 ] C:\Program Files\Microsoft IntelliPoint\ipoint.exe
08:23:55.0640 5904 C:\Program Files\Microsoft IntelliPoint\ipoint.exe - ok
08:23:55.0640 5904 [ 45985C1B266666CB7BBAC01428AC2FAD ] C:\WINDOWS\system32\igfxtray.exe
08:23:55.0640 5904 C:\WINDOWS\system32\igfxtray.exe - ok
08:23:55.0640 5904 [ 697963452107C59BE69A67BEE54E3EAC ] C:\WINDOWS\system32\igfxpers.exe
08:23:55.0640 5904 C:\WINDOWS\system32\igfxpers.exe - ok
08:23:55.0640 5904 [ 91C797FDDAEEAAEBE705B5283B6E50A4 ] C:\WINDOWS\system32\hccutils.dll
08:23:55.0640 5904 C:\WINDOWS\system32\hccutils.dll - ok
08:23:55.0656 5904 [ 19D63CF10330B51FD42ABB1D4D39D0C4 ] C:\WINDOWS\system32\hkcmd.exe
08:23:55.0656 5904 C:\WINDOWS\system32\hkcmd.exe - ok
08:23:55.0656 5904 [ 7A21E06385E748E9CB0252F1BBC493F1 ] C:\WINDOWS\ehome\ehtray.exe
08:23:55.0656 5904 C:\WINDOWS\ehome\ehtray.exe - ok
08:23:55.0656 5904 [ 0B467F470CC9918FDCEEDCFD7DC4D697 ] C:\WINDOWS\system32\oledlg.dll
08:23:55.0656 5904 C:\WINDOWS\system32\oledlg.dll - ok
08:23:55.0656 5904 [ 161ADD7F4201B55536954C0A1FEE2828 ] C:\Program Files\Microsoft IntelliPoint\dpgmkb.dll
08:23:55.0656 5904 C:\Program Files\Microsoft IntelliPoint\dpgmkb.dll - ok
08:23:55.0671 5904 [ 9212D6DF2A00DAB5C0C8A65399167CB2 ] C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
08:23:55.0671 5904 C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe - ok
08:23:55.0671 5904 [ E6C210A5CC9211D077556D0C9891A977 ] C:\Program Files\Creative\Mixer\CTSVolFE.exe
08:23:55.0671 5904 C:\Program Files\Creative\Mixer\CTSVolFE.exe - ok
08:23:55.0671 5904 [ 93084839F7517112829F2A26F486E8CF ] C:\WINDOWS\system32\igfxsrvc.exe
08:23:55.0671 5904 C:\WINDOWS\system32\igfxsrvc.exe - ok
08:23:55.0671 5904 [ 0EC18F61E86F87C0ADE782920B403D9A ] C:\Program Files\real\realplayer\Update\realsched.exe
08:23:55.0671 5904 C:\Program Files\real\realplayer\Update\realsched.exe - ok
08:23:55.0687 5904 [ 350A59743CFF24B94561602E4B238181 ] C:\Program Files\Creative\Mixer\CTSVolFE.crl
08:23:55.0687 5904 C:\Program Files\Creative\Mixer\CTSVolFE.crl - ok
08:23:55.0687 5904 [ 0600CB2613BEA0C6C0987B58D56D77B9 ] C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
08:23:55.0687 5904 C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe - ok
08:23:55.0687 5904 [ 11E2B4DED4A051DC9067461996F5E02A ] C:\WINDOWS\system32\igfxsrvc.dll
08:23:55.0687 5904 C:\WINDOWS\system32\igfxsrvc.dll - ok
08:23:55.0687 5904 [ 8BCD11D38FCE43A519246A91CC40DE6A ] C:\WINDOWS\system32\security.dll
08:23:55.0687 5904 C:\WINDOWS\system32\security.dll - ok
08:23:55.0703 5904 [ 3CB07566302BCEEB898DE270A0BEC175 ] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
08:23:55.0703 5904 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe - ok
08:23:55.0703 5904 [ 28296742DA636800BA2CABD00990502F ] C:\Program Files\Creative\Shared Files\CTTheme.dll
08:23:55.0703 5904 C:\Program Files\Creative\Shared Files\CTTheme.dll - ok
08:23:55.0703 5904 [ 03A905FBA1D62317087DB5C21C0F8F62 ] C:\WINDOWS\ehome\ehmsas.exe
08:23:55.0703 5904 C:\WINDOWS\ehome\ehmsas.exe - ok
08:23:55.0703 5904 [ 8B29A4110CDA0DDA453815094D5E993E ] C:\Program Files\Creative\Shared Files\CtrlSrc.dll
08:23:55.0703 5904 C:\Program Files\Creative\Shared Files\CtrlSrc.dll - ok
08:23:55.0718 5904 [ EFC3639AE8A452DC8DDDF7D526092D3E ] C:\WINDOWS\system32\igfxdev.dll
08:23:55.0718 5904 C:\WINDOWS\system32\igfxdev.dll - ok
08:23:55.0718 5904 [ 9DADF1A809ECEC86F04BDE35190D59FE ] C:\Program Files\AVG\AVG2013\avgui.exe
08:23:55.0718 5904 C:\Program Files\AVG\AVG2013\avgui.exe - ok
08:23:55.0718 5904 [ 8084668D40E5EB157839C5519E533541 ] C:\Program Files\Creative\Shared Files\CTIniF.dll
08:23:55.0718 5904 C:\Program Files\Creative\Shared Files\CTIniF.dll - ok
08:23:55.0718 5904 [ 2E75AFD880546928C2DA7F4D7318BB41 ] C:\Program Files\Microsoft IntelliPoint\ipres.dll
08:23:55.0718 5904 C:\Program Files\Microsoft IntelliPoint\ipres.dll - ok
08:23:55.0734 5904 [ 3E930C641079443D4DE036167A69CAA2 ] C:\Program Files\Messenger\msmsgs.exe
08:23:55.0734 5904 C:\Program Files\Messenger\msmsgs.exe - ok
08:23:55.0734 5904 [ C730F70351D950DDA7388C9A9763CF54 ] C:\WINDOWS\system32\wbem\wmipcima.dll
08:23:55.0734 5904 C:\WINDOWS\system32\wbem\wmipcima.dll - ok
08:23:55.0734 5904 [ 676B1D0BFA5EF8005395AB43F33DE1F1 ] C:\Program Files\NetWaiting\netwaiting.exe
08:23:55.0734 5904 C:\Program Files\NetWaiting\netwaiting.exe - ok
08:23:55.0734 5904 [ F32077DF74EFD435A1DCDF415E189DF1 ] C:\WINDOWS\system32\mfc100u.dll
08:23:55.0734 5904 C:\WINDOWS\system32\mfc100u.dll - ok
08:23:55.0750 5904 [ B52AE3CFA8EB665004500484B3A9FC62 ] C:\WINDOWS\system32\igfxres.dll
08:23:55.0750 5904 C:\WINDOWS\system32\igfxres.dll - ok
08:23:55.0750 5904 [ 825EDDDB0521EB2183C7E3C45BB5FE97 ] C:\Program Files\Dell Support\DSAgnt.exe
08:23:55.0750 5904 C:\Program Files\Dell Support\DSAgnt.exe - ok
08:23:55.0750 5904 [ 131966DA924DDFFBE8AE6AAD0F048630 ] C:\Program Files\NetWaiting\BVRPDiag.dll
08:23:55.0750 5904 C:\Program Files\NetWaiting\BVRPDiag.dll - ok
08:23:55.0750 5904 [ E4407196305A5820837CD7384E321754 ] C:\Program Files\Microsoft IntelliPoint\srres.dll
08:23:55.0750 5904 C:\Program Files\Microsoft IntelliPoint\srres.dll - ok
08:23:55.0765 5904 [ 39C7DD2EB6C81118F497F2D5F4ECDBC9 ] C:\Program Files\Common Files\Intel\WirelessCommon\CustomUIResource.dll
08:23:55.0765 5904 C:\Program Files\Common Files\Intel\WirelessCommon\CustomUIResource.dll - ok
08:23:55.0765 5904 [ 5A42034F1A337F831D2275EBAD223CC9 ] C:\Program Files\Creative\Shared Files\GDICtrl.skc
08:23:55.0765 5904 C:\Program Files\Creative\Shared Files\GDICtrl.skc - ok
08:23:55.0765 5904 [ 208E667393822BA7C9349BE19CADBEE8 ] C:\Program Files\NetWaiting\ModemMOH.dll
08:23:55.0765 5904 C:\Program Files\NetWaiting\ModemMOH.dll - ok
08:23:55.0765 5904 [ 5F1D5F88303D4A4DBC8E5F97BA967CC3 ] C:\WINDOWS\system32\ctfmon.exe
08:23:55.0765 5904 C:\WINDOWS\system32\ctfmon.exe - ok
08:23:55.0781 5904 [ 8B1DB47AE508698BE86B84DFB4A3526A ] C:\Program Files\NetWaiting\BVRPCTLN.DLL
08:23:55.0781 5904 C:\Program Files\NetWaiting\BVRPCTLN.DLL - ok
08:23:55.0781 5904 [ ECAF233EA2F9E47C2C4B4FD00351C3DC ] C:\Program Files\Creative\Shared Files\GDICtrl2.skc
08:23:55.0781 5904 C:\Program Files\Creative\Shared Files\GDICtrl2.skc - ok
08:23:55.0781 5904 [ B0F7E4DE96B15A9EA074B49931A05932 ] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
08:23:55.0781 5904 C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE - ok
08:23:55.0781 5904 [ D437C6B6C1CA63C3D5BF5A280A4FE60A ] C:\Program Files\Skype\Phone\Skype.exe
08:23:55.0781 5904 C:\Program Files\Skype\Phone\Skype.exe - ok
08:23:55.0796 5904 [ F6FAEC07446A78A9C5AF4558FF5BD118 ] C:\WINDOWS\ime\sptip.dll
08:23:55.0796 5904 C:\WINDOWS\ime\sptip.dll - ok
08:23:55.0796 5904 [ 33D9B7BB7BA323BAFE489DF033DAC824 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll
08:23:55.0796 5904 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll - ok
08:23:55.0796 5904 [ 5515EB5E3A8B073F66CFC697EB0D4B55 ] C:\Program Files\Microsoft ActiveSync\wcescomm.exe
08:23:55.0796 5904 C:\Program Files\Microsoft ActiveSync\wcescomm.exe - ok
08:23:55.0796 5904 [ DA63E3CBD330411244FF50B56DAE7FB6 ] C:\WINDOWS\system32\mdmxsdk.dll
08:23:55.0796 5904 C:\WINDOWS\system32\mdmxsdk.dll - ok
08:23:55.0812 5904 [ B499C4B7FE828B7004ACA72B459949E9 ] C:\Program Files\Creative\Shared Files\GDICtrl3.skc
08:23:55.0812 5904 C:\Program Files\Creative\Shared Files\GDICtrl3.skc - ok
08:23:55.0812 5904 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] C:\WINDOWS\system32\rasmans.dll
08:23:55.0812 5904 C:\WINDOWS\system32\rasmans.dll - ok
08:23:55.0812 5904 [ 88BEEF09C654252F3E46B6167B7F4ECB ] C:\WINDOWS\system32\msisip.dll
08:23:55.0812 5904 C:\WINDOWS\system32\msisip.dll - ok
08:23:55.0812 5904 [ 0A9BA6AF531AFE7FA5E4FB973852D863 ] C:\WINDOWS\system32\dllhost.exe
08:23:55.0812 5904 C:\WINDOWS\system32\dllhost.exe - ok
08:23:55.0828 5904 [ 43CCB246B3D0C385E54F14B04DF96E9F ] C:\WINDOWS\system32\ceutil.dll
08:23:55.0828 5904 C:\WINDOWS\system32\ceutil.dll - ok
08:23:55.0828 5904 [ 3A6D465F379E5C815F4AD565391E654C ] C:\WINDOWS\system32\wshext.dll
08:23:55.0828 5904 C:\WINDOWS\system32\wshext.dll - ok
08:23:55.0828 5904 [ C20F65EB34E29D80F655348A74C93953 ] C:\Program Files\Creative\Shared Files\RtxCtrl.skc
08:23:55.0828 5904 C:\Program Files\Creative\Shared Files\RtxCtrl.skc - ok
08:23:55.0828 5904 [ B12C853961947ED89B9437966C7507B4 ] C:\WINDOWS\system32\rapi.dll
08:23:55.0828 5904 C:\WINDOWS\system32\rapi.dll - ok
08:23:55.0843 5904 [ F3AD8EA144F411A6292775FA2B230DE5 ] C:\WINDOWS\system32\windowspowershell\v1.0\pwrshsip.dll
08:23:55.0843 5904 C:\WINDOWS\system32\windowspowershell\v1.0\pwrshsip.dll - ok
08:23:55.0843 5904 [ FE9141073B7F9597A99E4203C7706BE2 ] C:\PROGRA~1\MICROS~3\Office10\MCPS.DLL
08:23:55.0843 5904 C:\PROGRA~1\MICROS~3\Office10\MCPS.DLL - ok
08:23:55.0843 5904 [ 2F92ED73AC0335C73B07AADC9CA79674 ] C:\Program Files\NetWaiting\mohrc.dll
08:23:55.0843 5904 C:\Program Files\NetWaiting\mohrc.dll - ok
08:23:55.0843 5904 [ 7FACB452456EF5C053AF3EE4B228FE0D ] C:\WINDOWS\system32\xpob2res.dll
08:23:55.0843 5904 C:\WINDOWS\system32\xpob2res.dll - ok
08:23:55.0859 5904 [ DB0AA3706292AF63B46C7084BECCB8C7 ] C:\Program Files\Microsoft ActiveSync\tcp2udp.dll
08:23:55.0859 5904 C:\Program Files\Microsoft ActiveSync\tcp2udp.dll - ok
08:23:55.0859 5904 [ F908FE45F8FE9E0D4CBE65F9FF5DF6DA ] C:\WINDOWS\system32\mfc100enu.dll
08:23:55.0859 5904 C:\WINDOWS\system32\mfc100enu.dll - ok
08:23:55.0859 5904 [ C2FF17734176CD15221C10044EF0BA1A ] C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
08:23:55.0859 5904 C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe - ok
08:23:55.0859 5904 [ A216AAB7F57401A51FB7755A97834CC4 ] C:\Program Files\Common Files\Intel\WirelessCommon\FrameworkPlugins\WiWiTray.dll
08:23:55.0859 5904 C:\Program Files\Common Files\Intel\WirelessCommon\FrameworkPlugins\WiWiTray.dll - ok
08:23:55.0875 5904 [ C48B53F34704EF6FF4A14C9B33118E6B ] C:\Program Files\Dell Support\gtagnt.dll
08:23:55.0875 5904 C:\Program Files\Dell Support\gtagnt.dll - ok
08:23:55.0875 5904 [ 7F0A04C6CA207C3926B9B1C421105EC2 ] C:\Program Files\Dell Support\cfgdata.dll
08:23:55.0875 5904 C:\Program Files\Dell Support\cfgdata.dll - ok
08:23:55.0875 5904 [ B66E56733E2CD6A10FDA5919625FBF46 ] C:\Program Files\Digital Line Detect\DLG.exe
08:23:55.0875 5904 C:\Program Files\Digital Line Detect\DLG.exe - ok
08:23:55.0875 5904 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] C:\WINDOWS\system32\netman.dll
08:23:55.0875 5904 C:\WINDOWS\system32\netman.dll - ok
08:23:55.0890 5904 [ A476968C08667B1E09F2A95234E8CEEF ] C:\Program Files\Digital Line Detect\BVRPDiag.dll
08:23:55.0890 5904 C:\Program Files\Digital Line Detect\BVRPDiag.dll - ok
08:23:55.0890 5904 [ 4DD881B1918D195682EA7E696000D342 ] C:\Program Files\Creative\Shared Files\MxLib.dll
08:23:55.0890 5904 C:\Program Files\Creative\Shared Files\MxLib.dll - ok
08:23:55.0890 5904 [ 178B964D97388D1341F13AE43F90EA70 ] C:\Program Files\Intel\WiFi\bin\DbEngine.dll
08:23:55.0890 5904 C:\Program Files\Intel\WiFi\bin\DbEngine.dll - ok
08:23:55.0890 5904 [ 5BC65464354A9FD3BEAA28E18839734A ] C:\Program Files\Microsoft Office\Office10\OSA.EXE
08:23:55.0890 5904 C:\Program Files\Microsoft Office\Office10\OSA.EXE - ok
08:23:55.0906 5904 [ EBBC14D79FAC8E637DEE73C8892A198F ] C:\Program Files\Dell Support\actmgr.dll
08:23:55.0906 5904 C:\Program Files\Dell Support\actmgr.dll - ok
08:23:55.0906 5904 [ 5F7692CEC90E2E9AA32CD58321E234B8 ] C:\WINDOWS\system32\rastapi.dll
08:23:55.0906 5904 C:\WINDOWS\system32\rastapi.dll - ok
08:23:55.0906 5904 [ F7005524CA9CC83F862789B61174D577 ] C:\Program Files\Common Files\Intel\WirelessCommon\FrameworkPlugins\ConnMgr.dll
08:23:55.0906 5904 C:\Program Files\Common Files\Intel\WirelessCommon\FrameworkPlugins\ConnMgr.dll - ok
08:23:55.0906 5904 [ 7D4A768DEA3DC643CBB65222D5B1377B ] C:\PROGRA~1\MICROS~4\rapimgr.exe
08:23:55.0906 5904 C:\PROGRA~1\MICROS~4\rapimgr.exe - ok
08:23:55.0921 5904 [ 17E0CF9C8CBB717D05948656BCD86EFA ] C:\WINDOWS\system32\txflog.dll
08:23:55.0921 5904 C:\WINDOWS\system32\txflog.dll - ok
08:23:55.0921 5904 [ A3CDCDF1A0EE11A39F6BDEABB4DDE7EE ] C:\Program Files\Common Files\Microsoft Shared\Office10\MSO.DLL
08:23:55.0921 5904 C:\Program Files\Common Files\Microsoft Shared\Office10\MSO.DLL - ok
08:23:55.0921 5904 [ AAEA0CC711DC358ECA96AC6C635539DC ] C:\Program Files\Microsoft IntelliPoint\dpgcmd.dll
08:23:55.0921 5904 C:\Program Files\Microsoft IntelliPoint\dpgcmd.dll - ok
08:23:55.0921 5904 [ 93C088C2AEB2F23E720BDA7E32BD5117 ] C:\WINDOWS\system32\upnp.dll
08:23:55.0921 5904 C:\WINDOWS\system32\upnp.dll - ok
08:23:55.0937 5904 [ 9730643AB698D3B7F19D9192E4D3E4B0 ] C:\Program Files\AVG\AVG2013\avgidpmx.dll
08:23:55.0937 5904 C:\Program Files\AVG\AVG2013\avgidpmx.dll - ok
08:23:55.0937 5904 [ 2DE1190196EE9555DB548A57622022EB ] C:\WINDOWS\system32\drprov.dll
08:23:55.0937 5904 C:\WINDOWS\system32\drprov.dll - ok
08:23:55.0937 5904 [ 6C1F256696FDB4CCBB46048C206ECEB7 ] C:\Program Files\Microsoft ActiveSync\rapiproxystub.dll
08:23:55.0937 5904 C:\Program Files\Microsoft ActiveSync\rapiproxystub.dll - ok
08:23:55.0937 5904 [ F202F638B47A036F7FC028DDCB98EFB0 ] C:\Program Files\Microsoft IntelliPoint\Components\Commands\DPGHnt\DPGHnt.dll
08:23:55.0937 5904 C:\Program Files\Microsoft IntelliPoint\Components\Commands\DPGHnt\DPGHnt.dll - ok
08:23:55.0953 5904 [ 36468087E22C57A83DF758B3F90DF73F ] C:\WINDOWS\system32\ntlanman.dll
08:23:55.0953 5904 C:\WINDOWS\system32\ntlanman.dll - ok
08:23:55.0953 5904 [ 532F1D7F6F40019E1DC56A2470EC6EE2 ] C:\Program Files\Microsoft ActiveSync\dtptdns.dll
08:23:55.0953 5904 C:\Program Files\Microsoft ActiveSync\dtptdns.dll - ok
08:23:55.0953 5904 [ AC5DF42FE314C1446B1DAD237BFCFFE0 ] C:\WINDOWS\system32\netui0.dll
08:23:55.0953 5904 C:\WINDOWS\system32\netui0.dll - ok
08:23:55.0953 5904 [ DE35D659575C700BA4E8E912671EA4BA ] C:\Program Files\AVG\AVG2013\avgdiagex.exe
08:23:55.0953 5904 C:\Program Files\AVG\AVG2013\avgdiagex.exe - ok
08:23:55.0968 5904 [ D0545A010ED2259A740C8414899A938F ] C:\WINDOWS\system32\rasppp.dll
08:23:55.0968 5904 C:\WINDOWS\system32\rasppp.dll - ok
08:23:55.0968 5904 [ ED5A816D8E11E03F1937AC3C56826EE4 ] C:\WINDOWS\system32\netui1.dll
08:23:55.0968 5904 C:\WINDOWS\system32\netui1.dll - ok
08:23:55.0968 5904 [ 477E08FE0114AFEA114FC954C983D4DB ] C:\Program Files\SUPERAntiSpyware\SASCTXMN.DLL
08:23:55.0968 5904 C:\Program Files\SUPERAntiSpyware\SASCTXMN.DLL - ok
08:23:55.0968 5904 [ 3E4A1172FB27F77F93FADF76BC6DE7A8 ] C:\PROGRA~1\DELLSU~1\GTAction\handlers\grouph.dll
08:23:55.0968 5904 C:\PROGRA~1\DELLSU~1\GTAction\handlers\grouph.dll - ok
08:23:55.0984 5904 [ C7000F2DB2A5515C64C257478769A481 ] C:\WINDOWS\system32\wbem\unsecapp.exe
08:23:55.0984 5904 C:\WINDOWS\system32\wbem\unsecapp.exe - ok
08:23:55.0984 5904 [ B464BD425D5D09ABE4192234D1577B22 ] C:\WINDOWS\system32\ntlsapi.dll
08:23:55.0984 5904 C:\WINDOWS\system32\ntlsapi.dll - ok
08:23:55.0984 5904 [ 751EEDB874FD17A6F26B9E2CC5E19170 ] C:\Program Files\AVG\AVG2013\avglngx.dll
08:23:55.0984 5904 C:\Program Files\AVG\AVG2013\avglngx.dll - ok
08:23:55.0984 5904 [ A763DC95B9FC813108E6CE66B9527714 ] C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
08:23:55.0984 5904 C:\Program Files\Cisco Systems\VPN Client\vpngui.exe - ok
08:23:56.0000 5904 [ FB8F8EEC8D9C2157789472DD61CDC78B ] C:\WINDOWS\system32\davclnt.dll
08:23:56.0000 5904 C:\WINDOWS\system32\davclnt.dll - ok
08:23:56.0000 5904 [ 80AA4214C5BC0A355151BD115017313F ] C:\WINDOWS\system32\bthprops.cpl
08:23:56.0000 5904 C:\WINDOWS\system32\bthprops.cpl - ok
08:23:56.0000 5904 [ A655C88AA555BB8EF8957BD29408827F ] C:\WINDOWS\system32\rasqec.dll
08:23:56.0000 5904 C:\WINDOWS\system32\rasqec.dll - ok
08:23:56.0000 5904 [ 6B447F5802D67E20220BE91917F76033 ] C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
08:23:56.0000 5904 C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - ok
08:23:56.0015 5904 [ 960F6D3CD9A1BA6435D7AADD102B297F ] C:\WINDOWS\system32\wbem\wmiprov.dll
08:23:56.0015 5904 C:\WINDOWS\system32\wbem\wmiprov.dll - ok
08:23:56.0015 5904 [ B5C9F63C01FCFEC3F64EC6A0940A1825 ] C:\Program Files\Windows Desktop Search\WindowsSearch.exe
08:23:56.0015 5904 C:\Program Files\Windows Desktop Search\WindowsSearch.exe - ok
08:23:56.0015 5904 [ B1762156256B0238C21BAA4C06CEF727 ] C:\WINDOWS\system32\devmgr.dll
08:23:56.0015 5904 C:\WINDOWS\system32\devmgr.dll - ok
08:23:56.0015 5904 [ BA8FDF82D0B1316D5EAF60F5A0498DE1 ] C:\WINDOWS\system32\UncDMS.dll
08:23:56.0015 5904 C:\WINDOWS\system32\UncDMS.dll - ok
08:23:56.0031 5904 [ 401A8C0BE0BAA7D7A470F0942244152D ] C:\WINDOWS\system32\rasdlg.dll
08:23:56.0031 5904 C:\WINDOWS\system32\rasdlg.dll - ok
08:23:56.0031 5904 [ 3D516A4D183458005DE56DC188BC817E ] C:\PROGRA~1\DELLSU~1\GTAction\handlers\qdiagh.dll
08:23:56.0031 5904 C:\PROGRA~1\DELLSU~1\GTAction\handlers\qdiagh.dll - ok
08:23:56.0031 5904 [ D59A7119054D70FC745A1BF9C06DCC65 ] C:\WINDOWS\system32\oeph.dll
08:23:56.0031 5904 C:\WINDOWS\system32\oeph.dll - ok
08:23:56.0031 5904 [ FE56C0DA05F4C3B8BEAB297C486FF737 ] C:\Program Files\Cisco Systems\VPN Client\qt-mt335.dll
08:23:56.0031 5904 C:\Program Files\Cisco Systems\VPN Client\qt-mt335.dll - ok
08:23:56.0046 5904 [ 22D71D1DB6FC789A1CE8AC6963580259 ] C:\WINDOWS\system32\hhctrl.ocx
08:23:56.0046 5904 C:\WINDOWS\system32\hhctrl.ocx - ok
08:23:56.0046 5904 [ EB74C861075ECFA1B51B396615387657 ] C:\Program Files\AVG\AVG2013\avguires.dll
08:23:56.0046 5904 C:\Program Files\AVG\AVG2013\avguires.dll - ok
08:23:56.0046 5904 [ CA4AFACF60FD1C3E48E0C50001A40E9B ] C:\PROGRA~1\DELLSU~1\GTAction\handlers\trgloadh.dll
08:23:56.0046 5904 C:\PROGRA~1\DELLSU~1\GTAction\handlers\trgloadh.dll - ok
08:23:56.0046 5904 [ 52736026BF97A67726E566EEFE1B9206 ] C:\PROGRA~1\DELLSU~1\GTAction\handlers\trgregh.dll
08:23:56.0046 5904 C:\PROGRA~1\DELLSU~1\GTAction\handlers\trgregh.dll - ok
08:23:56.0062 5904 [ 6E914EEDD145C5ACCE56F4D5F3D606FC ] C:\WINDOWS\system32\mssph.dll
08:23:56.0062 5904 C:\WINDOWS\system32\mssph.dll - ok
08:23:56.0062 5904 [ FB30C571F722FF6338DE94D6619BB9EB ] C:\Program Files\Dell Support\trgmgr.dll
08:23:56.0062 5904 C:\Program Files\Dell Support\trgmgr.dll - ok
08:23:56.0062 5904 [ E81BBE78A8EF85ACD490B3E64EF63A7C ] C:\WINDOWS\system32\mapi32.dll
08:23:56.0062 5904 C:\WINDOWS\system32\mapi32.dll - ok
08:23:56.0062 5904 [ 90A9B542C9300E540864D9FE1C42A130 ] C:\WINDOWS\system32\fxsst.dll
08:23:56.0062 5904 C:\WINDOWS\system32\fxsst.dll - ok
08:23:56.0078 5904 [ 56183FB6413B7C5CB42B8AC1541A4EE8 ] C:\Program Files\Windows Desktop Search\en-US\WindowsSearchRes.dll.mui
08:23:56.0078 5904 C:\Program Files\Windows Desktop Search\en-US\WindowsSearchRes.dll.mui - ok
08:23:56.0078 5904 [ CBFD0FB0A9491ED3F1BAB4C64A04D2F1 ] C:\Program Files\Windows Desktop Search\WindowsSearchRes.dll
08:23:56.0078 5904 C:\Program Files\Windows Desktop Search\WindowsSearchRes.dll - ok
08:23:56.0078 5904 [ 0607CBC6FA20114CB491EFE4B2F9EFAD ] C:\WINDOWS\system32\d3d9.dll
08:23:56.0078 5904 C:\WINDOWS\system32\d3d9.dll - ok
08:23:56.0078 5904 [ F23A5D407B753F2E5E2BB6A95AB6D12B ] C:\Program Files\Windows Desktop Search\WdsMktTools.dll
08:23:56.0078 5904 C:\Program Files\Windows Desktop Search\WdsMktTools.dll - ok
08:23:56.0093 5904 [ F7E915FA38C119101873AE5E0E7C8B66 ] C:\Program Files\AVG\AVG2013\avgapps.dll
08:23:56.0093 5904 C:\Program Files\AVG\AVG2013\avgapps.dll - ok
08:23:56.0093 5904 [ A983FE9AA2258037BE2A81ECB55B354A ] C:\Program Files\Intel\WiFi\bin\iCrdCll.exe
08:23:56.0093 5904 C:\Program Files\Intel\WiFi\bin\iCrdCll.exe - ok
08:23:56.0093 5904 [ CDBBFFD3ADAA56C4C8E0A9690FE83476 ] C:\Program Files\Outlook Express\msoe.dll
08:23:56.0093 5904 C:\Program Files\Outlook Express\msoe.dll - ok
08:23:56.0093 5904 [ 31B067C412FA1A9BAD3CA2A63D7DA440 ] C:\WINDOWS\system32\d3d8thk.dll
08:23:56.0093 5904 C:\WINDOWS\system32\d3d8thk.dll - ok
08:23:56.0109 5904 [ B60DDDD2D63CE41CB8C487FCFBB6419E ] C:\Program Files\Internet Explorer\iexplore.exe
08:23:56.0109 5904 C:\Program Files\Internet Explorer\iexplore.exe - ok
08:23:56.0109 5904 [ B5F4BEC85451703FA2BEA6B7F6BA7055 ] C:\PROGRA~1\DELLSU~1\gdql_d.dll
08:23:56.0109 5904 C:\PROGRA~1\DELLSU~1\gdql_d.dll - ok
08:23:56.0109 5904 [ 5652F6CE1D9E9D8068B9D29BC21B5409 ] C:\WINDOWS\system32\olepro32.dll
08:23:56.0109 5904 C:\WINDOWS\system32\olepro32.dll - ok
08:23:56.0109 5904 [ 2389B22075F80C4C04829B158DFC405F ] C:\Program Files\Intel\WiFi\bin\LSAWRAPI.DLL
08:23:56.0109 5904 C:\Program Files\Intel\WiFi\bin\LSAWRAPI.DLL - ok
08:23:56.0125 5904 [ 0485AB01B862FB91C21D39BD60BDF2AC ] C:\WINDOWS\system32\msoert2.dll
08:23:56.0125 5904 C:\WINDOWS\system32\msoert2.dll - ok
08:23:56.0125 5904 [ 41F0FEE2F8EADC554E01AA2E9A95D20A ] C:\Program Files\Intel\WiFi\bin\C1XStngs.dll
08:23:56.0125 5904 C:\Program Files\Intel\WiFi\bin\C1XStngs.dll - ok
08:23:56.0125 5904 [ 871888B4AA0CA343E73C81E94AD4ED93 ] C:\WINDOWS\system32\msoeacct.dll
08:23:56.0125 5904 C:\WINDOWS\system32\msoeacct.dll - ok
08:23:56.0125 5904 [ E106233B925ADBE99CB26D548FC98DEF ] C:\WINDOWS\system32\inetcomm.dll
08:23:56.0125 5904 C:\WINDOWS\system32\inetcomm.dll - ok
08:23:56.0140 5904 [ 441086F355F0DEA94621984C9A3BE765 ] C:\WINDOWS\system32\acctres.dll
08:23:56.0140 5904 C:\WINDOWS\system32\acctres.dll - ok
08:23:56.0140 5904 [ A6F6923B46802785B9A47A03AE3CD8BF ] C:\WINDOWS\system32\inetres.dll
08:23:56.0140 5904 C:\WINDOWS\system32\inetres.dll - ok
08:23:56.0140 5904 [ 0689622E6484934EB6E5F4D3A96311F9 ] C:\WINDOWS\system32\jscript.dll
08:23:56.0140 5904 C:\WINDOWS\system32\jscript.dll - ok
08:23:56.0140 5904 [ 10243DEE4B842E494570A6B64F8A9688 ] C:\Program Files\Intel\WiFi\bin\iWrap.exe
08:23:56.0140 5904 C:\Program Files\Intel\WiFi\bin\iWrap.exe - ok
08:23:56.0156 5904 [ 116AA2B169ABD0B620961CAFF0AEAC84 ] C:\Program Files\Outlook Express\msoeres.dll
08:23:56.0156 5904 C:\Program Files\Outlook Express\msoeres.dll - ok
08:23:56.0156 5904 [ C2EF2335F1B6C2BE20A67D9098F6C9A1 ] C:\WINDOWS\system32\mshtml.dll
08:23:56.0156 5904 C:\WINDOWS\system32\mshtml.dll - ok
08:23:56.0156 5904 [ 235B2311786AC007AD644B12A2DA8AC7 ] C:\WINDOWS\system32\msvfw32.dll
08:23:56.0156 5904 C:\WINDOWS\system32\msvfw32.dll - ok
08:23:56.0156 5904 [ 01CFA88F8DEE91EC9F8E0988F49D106E ] C:\WINDOWS\system32\avicap32.dll
08:23:56.0156 5904 C:\WINDOWS\system32\avicap32.dll - ok
08:23:56.0171 5904 [ 6E67638E0FE37E80ACDA1EB10E227C66 ] C:\PROGRA~1\DELLSU~1\GTAction\triggers\timert.dll
08:23:56.0171 5904 C:\PROGRA~1\DELLSU~1\GTAction\triggers\timert.dll - ok
08:23:56.0171 5904 [ B7C7FA3BEDE83AC5F1DE03B30D494CC1 ] C:\WINDOWS\system32\httpapi.dll
08:23:56.0171 5904 C:\WINDOWS\system32\httpapi.dll - ok
08:23:56.0171 5904 [ 6100A808600F44D999CEBDEF8841C7A3 ] C:\WINDOWS\system32\w3ssl.dll
08:23:56.0171 5904 C:\WINDOWS\system32\w3ssl.dll - ok
08:23:56.0171 5904 [ 85AC5F11D4759D13674B3E92EAC3F140 ] C:\WINDOWS\system32\msident.dll
08:23:56.0171 5904 C:\WINDOWS\system32\msident.dll - ok
08:23:56.0187 5904 [ 4A93B65CFB514F2EA76B59568D5F39CE ] C:\WINDOWS\system32\strmfilt.dll
08:23:56.0187 5904 C:\WINDOWS\system32\strmfilt.dll - ok
08:23:56.0187 5904 [ 7ED041C7F82A381417AA3F43AB55F95A ] C:\WINDOWS\system32\msidntld.dll
08:23:56.0187 5904 C:\WINDOWS\system32\msidntld.dll - ok
08:23:56.0187 5904 [ A14D324C50EB71FB480DDD60481D0C04 ] C:\WINDOWS\system32\pstorec.dll
08:23:56.0187 5904 C:\WINDOWS\system32\pstorec.dll - ok
08:23:56.0187 5904 [ 841CCD0DBEA2054251BFB22949C38829 ] C:\PROGRA~1\DELLSU~1\GTAction\triggers\DSproct.dll
08:23:56.0187 5904 C:\PROGRA~1\DELLSU~1\GTAction\triggers\DSproct.dll - ok
08:23:56.0203 5904 [ A0C2CB21F4B521429F033FDEB18D63D7 ] C:\Program Files\Common Files\System\directdb.dll
08:23:56.0203 5904 C:\Program Files\Common Files\System\directdb.dll - ok
08:23:56.0203 5904 [ 2AC2372FFAD9ADC85672CC8E8AE14BE9 ] C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys
08:23:56.0203 5904 C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys - ok
08:23:56.0203 5904 [ 183DAD2D7060FF4252E9142DCF0E1E7A ] C:\PROGRA~1\DELLSU~1\GTAction\triggers\DSWnHnt.dll
08:23:56.0203 5904 C:\PROGRA~1\DELLSU~1\GTAction\triggers\DSWnHnt.dll - ok
08:23:56.0203 5904 [ 2ACCD352451EC0F99AF2AD9DB6DB4439 ] C:\WINDOWS\system32\msls31.dll
08:23:56.0203 5904 C:\WINDOWS\system32\msls31.dll - ok
08:23:56.0218 5904 [ AF8BB0C804D2F01E12CF238A8CF205C1 ] C:\Program Files\Dell Support\AUFile.dll
08:23:56.0218 5904 C:\Program Files\Dell Support\AUFile.dll - ok
08:23:56.0218 5904 [ F8A2EF4ED551B280C9D535448B84D90D ] C:\Program Files\Dell Support\AUInst.dll
08:23:56.0218 5904 C:\Program Files\Dell Support\AUInst.dll - ok
08:23:56.0218 5904 [ 98CE14A0ADEBF164CFD3E28DCD9A23EB ] C:\Program Files\Dell Support\AUPNP.dll
08:23:56.0218 5904 C:\Program Files\Dell Support\AUPNP.dll - ok
08:23:56.0218 5904 [ 64AB82CBC9993F8C6C58DFAF4A685407 ] C:\Program Files\Dell Support\AUReg.dll
08:23:56.0218 5904 C:\Program Files\Dell Support\AUReg.dll - ok
08:23:56.0234 5904 [ AF8841FEF8DE40D36E77C6662843EDAE ] C:\WINDOWS\AppPatch\aclayers.dll
08:23:56.0234 5904 C:\WINDOWS\AppPatch\aclayers.dll - ok
08:23:56.0234 5904 [ 5EB87BA0B93CA7E894FC8002E3CE4C2A ] C:\Program Files\Internet Explorer\sqmapi.dll
08:23:56.0234 5904 C:\Program Files\Internet Explorer\sqmapi.dll - ok
08:23:56.0234 5904 [ 2B08BDE2472D6E422E48D0609D37E050 ] C:\Program Files\Internet Explorer\xpshims.dll
08:23:56.0234 5904 C:\Program Files\Internet Explorer\xpshims.dll - ok
08:23:56.0234 5904 [ 11734790410900D2CD6B7839020E4DD9 ] C:\WINDOWS\system32\ieui.dll
08:23:56.0234 5904 C:\WINDOWS\system32\ieui.dll - ok
08:23:56.0250 5904 [ 031CCDFF85A57172F3402CB99B3E9D46 ] C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
08:23:56.0250 5904 C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll - ok
08:23:56.0250 5904 [ 4B4A063542F603906D4A0CC5365475BD ] C:\Program Files\Internet Explorer\ieproxy.dll
08:23:56.0250 5904 C:\Program Files\Internet Explorer\ieproxy.dll - ok
08:23:56.0250 5904 [ E11457C66FDD966EE415FBBC6D9BE643 ] C:\WINDOWS\system32\msimtf.dll
08:23:56.0250 5904 C:\WINDOWS\system32\msimtf.dll - ok
08:23:56.0250 5904 [ BE0A5F2DEE7C4771A42293F44576C4E6 ] C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
08:23:56.0250 5904 C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll - ok
08:23:56.0265 5904 [ DB4B28B8F25B3A2548B947A42B2DF3B3 ] C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
08:23:56.0265 5904 C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll - ok
08:23:56.0265 5904 [ 42B928FC8518D793BF7A5EAFC57B1D8B ] C:\WINDOWS\system32\imgutil.dll
08:23:56.0265 5904 C:\WINDOWS\system32\imgutil.dll - ok
08:23:56.0265 5904 [ 11AB72D5D603DB401C190B454FB935A7 ] C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
08:23:56.0265 5904 C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL - ok
08:23:56.0265 5904 [ E5FA1B044DAC5F6F600A1742D73F6936 ] C:\WINDOWS\system32\pngfilt.dll
08:23:56.0265 5904 C:\WINDOWS\system32\pngfilt.dll - ok
08:23:56.0281 5904 [ A082A9B4FA6802F83D60B67CCEE908E2 ] C:\WINDOWS\system32\iepeers.dll
08:23:56.0281 5904 C:\WINDOWS\system32\iepeers.dll - ok
08:23:56.0281 5904 [ 9E03DC5AB51CFD0190541CE2038D819D ] C:\WINDOWS\system32\usp10.dll
08:23:56.0281 5904 C:\WINDOWS\system32\usp10.dll - ok
08:23:56.0281 5904 [ C6958AD2091238B71237D73358CEC2AB ] C:\Program Files\SUPERAntiSpyware\SSUpdate.exe
08:23:56.0281 5904 C:\Program Files\SUPERAntiSpyware\SSUpdate.exe - ok
08:23:56.0281 5904 [ 5DEEDBBF0C31641925832E3D5FFD630C ] C:\Program Files\Java\jre6\bin\awt.dll
08:23:56.0281 5904 C:\Program Files\Java\jre6\bin\awt.dll - ok
08:23:56.0296 5904 [ 91914C2BA8B7DE1ACD625C23B833B30A ] C:\Program Files\Java\jre6\bin\client\jvm.dll
08:23:56.0296 5904 C:\Program Files\Java\jre6\bin\client\jvm.dll - ok
08:23:56.0296 5904 [ F23A7D1CC6F854ED59EB8D5E52893106 ] C:\Program Files\Java\jre6\bin\dcpr.dll
08:23:56.0296 5904 C:\Program Files\Java\jre6\bin\dcpr.dll - ok
08:23:56.0296 5904 [ C287FB8542805190819C4E89B0ED4FD9 ] C:\Program Files\Java\jre6\bin\deploy.dll
08:23:56.0296 5904 C:\Program Files\Java\jre6\bin\deploy.dll - ok
08:23:56.0296 5904 [ 9224A31667776E2E74D2C0B3531CB666 ] C:\Program Files\Java\jre6\bin\fontmanager.dll
08:23:56.0296 5904 C:\Program Files\Java\jre6\bin\fontmanager.dll - ok
08:23:56.0312 5904 [ 70FE398D1050459C164BEF4CDAC1CF53 ] C:\Program Files\Java\jre6\bin\hpi.dll
08:23:56.0312 5904 C:\Program Files\Java\jre6\bin\hpi.dll - ok
08:23:56.0312 5904 [ 8D8530720C7EE2621D56600787CBB630 ] C:\Program Files\Java\jre6\bin\java.dll
08:23:56.0312 5904 C:\Program Files\Java\jre6\bin\java.dll - ok
08:23:56.0312 5904 [ F1AA94EC34AABCD94973AA553F2BCB4F ] C:\Program Files\Java\jre6\bin\java.exe
08:23:56.0312 5904 C:\Program Files\Java\jre6\bin\java.exe - ok
08:23:56.0312 5904 [ 77122F1513B28666F46BE581163DFA71 ] C:\Program Files\Java\jre6\bin\jp2native.dll
08:23:56.0312 5904 C:\Program Files\Java\jre6\bin\jp2native.dll - ok
08:23:56.0328 5904 [ 15A1061F1F148F9A79F3B7587855AF80 ] C:\Program Files\Java\jre6\bin\jpeg.dll
08:23:56.0328 5904 C:\Program Files\Java\jre6\bin\jpeg.dll - ok
08:23:56.0328 5904 [ AADC80A8F0867D632FB7D8B523E704EC ] C:\Program Files\Java\jre6\bin\net.dll
08:23:56.0328 5904 C:\Program Files\Java\jre6\bin\net.dll - ok
08:23:56.0328 5904 [ D5EDC76DFADE2BE98C44A5B65A49F115 ] C:\Program Files\Java\jre6\bin\nio.dll
08:23:56.0328 5904 C:\Program Files\Java\jre6\bin\nio.dll - ok
08:23:56.0328 5904 [ C2725AEA885C1DD95184B4256EC7C900 ] C:\Program Files\Java\jre6\bin\regutils.dll
08:23:56.0328 5904 C:\Program Files\Java\jre6\bin\regutils.dll - ok
08:23:56.0343 5904 [ 75E396AA1F886EC91D976A9050B98C01 ] C:\Program Files\Java\jre6\bin\verify.dll
08:23:56.0343 5904 C:\Program Files\Java\jre6\bin\verify.dll - ok
08:23:56.0343 5904 [ 575A48A01DB1F33F3EF7AC658ABF9FB8 ] C:\Program Files\Java\jre6\bin\zip.dll
08:23:56.0343 5904 C:\Program Files\Java\jre6\bin\zip.dll - ok
08:23:56.0343 5904 [ C06E6E160F34CE092301BD2B29067F3F ] C:\WINDOWS\system32\Macromed\Flash\Flash10e.ocx
08:23:56.0343 5904 C:\WINDOWS\system32\Macromed\Flash\Flash10e.ocx - ok
08:23:56.0343 5904 [ 5E1A0476E009A1930A524DFF4CA13982 ] C:\WINDOWS\system32\dxtrans.dll
08:23:56.0343 5904 C:\WINDOWS\system32\dxtrans.dll - ok
08:23:56.0359 5904 [ A47F6A13202AA54541CA46D6CED79F5F ] C:\WINDOWS\system32\ddrawex.dll
08:23:56.0359 5904 C:\WINDOWS\system32\ddrawex.dll - ok
08:23:56.0359 5904 [ A340CD71EB535A3DD751B5F28723E50C ] C:\WINDOWS\system32\ddraw.dll
08:23:56.0359 5904 C:\WINDOWS\system32\ddraw.dll - ok
08:23:56.0359 5904 [ D8B91D94ECB123862B390FDE3250D3BB ] C:\WINDOWS\system32\dciman32.dll
08:23:56.0359 5904 C:\WINDOWS\system32\dciman32.dll - ok
08:23:56.0359 5904 [ 057D53F1490598D41D9D4DEE9A92B0B1 ] C:\WINDOWS\system32\dxtmsft.dll
08:23:56.0359 5904 C:\WINDOWS\system32\dxtmsft.dll - ok
08:23:56.0375 5904 ============================================================
08:23:56.0375 5904 Scan finished
08:23:56.0375 5904 ============================================================
08:23:56.0484 5868 Detected object count: 30
08:23:56.0484 5868 Actual detected object count: 30
08:25:22.0515 5868 !SASCORE ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0515 5868 !SASCORE ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0515 5868 AdobeActiveFileMonitor ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0515 5868 AdobeActiveFileMonitor ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 APPDRV ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 APPDRV ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 Aspi32 ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 Aspi32 ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 cercsr6 ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 cercsr6 ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 CVPNDRVA ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 CVPNDRVA ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 drvmcdb ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 drvmcdb ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 drvnddm ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 drvnddm ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 DSproct ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 DSproct ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0531 5868 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0531 5868 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0546 5868 MHN ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0546 5868 MHN ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0546 5868 MHNDRV ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0546 5868 MHNDRV ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0546 5868 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0546 5868 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0546 5868 omci ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0546 5868 omci ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0546 5868 PhotoshopElementsDeviceConnect ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0546 5868 PhotoshopElementsDeviceConnect ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0546 5868 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0546 5868 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0546 5868 S24EventMonitor ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0546 5868 S24EventMonitor ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 SDDMI2 ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 SDDMI2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 sscdbhk5 ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 sscdbhk5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 ssrtln ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 ssrtln ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 tfsnboio ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 tfsnboio ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 tfsncofs ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 tfsncofs ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 tfsndrct ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 tfsndrct ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 tfsndres ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 tfsndres ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 tfsnifs ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 tfsnifs ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0562 5868 tfsnopio ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0562 5868 tfsnopio ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0578 5868 tfsnpool ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0578 5868 tfsnpool ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0578 5868 tfsnudf ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0578 5868 tfsnudf ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:22.0578 5868 tfsnudfa ( UnsignedFile.Multi.Generic ) - skipped by user
08:25:22.0578 5868 tfsnudfa ( UnsignedFile.Multi.Generic ) - User select action: Skip
08:25:27.0218 5868 \Device\Harddisk0\DR0\# - copied to quarantine
08:25:27.0265 5868 \Device\Harddisk0\DR0 - copied to quarantine
08:25:29.0796 5868 \Device\Harddisk0\DR0 - processing error
08:43:50.0843 5868 \Device\Harddisk0\DR0 - will be restored on reboot
08:43:50.0843 5868 \Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - User select action: Cure Restore
08:44:35.0062 3828 Deinitialize success
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP