Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

up down arrow keys seem to be "stuck" [Closed] [Solved]

Started by cupdegrave , Sep 03 2013 06:14 PM

This topic is locked

#31
Crowbar

Posted 30 September 2013 - 01:01 PM

Teacher

GeekU Moderator
4,798 posts

C:\Users\Chris\AppData\Roaming\0D0S1L2Z1P1B\Zip Extractor Packages\uninstaller.exe a variant of Win32/InstallCore.AZ application

This is about all that is left - seems to be a download from a site like Cnet.
I would like it of you were to uninstall this program, Zip Extractor, but I don't think it's really harmful.

Is the system behaving better now with all the adware junk removed, and having some more free space?

Just to make sure your services and drivers are ok, can you do one more scan for me?

Download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

Put a checkmark beside loaded modules.

A reboot will be needed to apply the changes. Do it.
TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
Then click on Change parameters in TDSSKiller.
Check all boxes then click OK.

Click the Start Scan button.

The scan should take no longer than 2 minutes.
If a suspicious object is detected, the default action will be Skip, click on Continue.

If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.

Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

#32
cupdegrave

Posted 30 September 2013 - 08:46 PM

Member

Topic Starter
Member
26 posts

22:15:04.0815 3704 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
22:15:05.0252 3704 ============================================================
22:15:05.0252 3704 Current date / time: 2013/09/30 22:15:05.0252
22:15:05.0252 3704 SystemInfo:
22:15:05.0252 3704
22:15:05.0252 3704 OS Version: 6.1.7601 ServicePack: 1.0
22:15:05.0252 3704 Product type: Workstation
22:15:05.0252 3704 ComputerName: CHRIS-PC
22:15:05.0252 3704 UserName: Chris
22:15:05.0252 3704 Windows directory: C:\windows
22:15:05.0252 3704 System windows directory: C:\windows
22:15:05.0252 3704 Running under WOW64
22:15:05.0252 3704 Processor architecture: Intel x64
22:15:05.0252 3704 Number of processors: 4
22:15:05.0252 3704 Page size: 0x1000
22:15:05.0252 3704 Boot type: Normal boot
22:15:05.0252 3704 ============================================================
22:15:05.0954 3704 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:15:05.0954 3704 ============================================================
22:15:05.0954 3704 \Device\Harddisk0\DR0:
22:15:05.0954 3704 MBR partitions:
22:15:05.0954 3704 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D4C000
22:15:05.0954 3704 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D7E800, BlocksNum 0x38607030
22:15:05.0954 3704 ============================================================
22:15:06.0032 3704 C: <-> \Device\Harddisk0\DR0\Partition2
22:15:06.0032 3704 ============================================================
22:15:06.0032 3704 Initialize success
22:15:06.0032 3704 ============================================================
22:15:11.0632 5724 ============================================================
22:15:11.0632 5724 Scan started
22:15:11.0632 5724 Mode: Manual;
22:15:11.0632 5724 ============================================================
22:15:12.0085 5724 ================ Scan system memory ========================
22:15:12.0085 5724 System memory - ok
22:15:12.0085 5724 ================ Scan services =============================
22:15:12.0740 5724 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys
22:15:12.0771 5724 1394ohci - ok
22:15:12.0974 5724 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
22:15:12.0974 5724 ACDaemon - ok
22:15:13.0052 5724 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys
22:15:13.0067 5724 ACPI - ok
22:15:13.0114 5724 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys
22:15:13.0130 5724 AcpiPmi - ok
22:15:13.0270 5724 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:15:13.0270 5724 AdobeARMservice - ok
22:15:13.0504 5724 [ 24A0876D07EF356DCBC1D7A7929354AB ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
22:15:13.0520 5724 AdobeFlashPlayerUpdateSvc - ok
22:15:13.0645 5724 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys
22:15:13.0676 5724 adp94xx - ok
22:15:13.0801 5724 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys
22:15:13.0832 5724 adpahci - ok
22:15:13.0894 5724 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys
22:15:13.0925 5724 adpu320 - ok
22:15:14.0019 5724 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll
22:15:14.0019 5724 AeLookupSvc - ok
22:15:14.0456 5724 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe
22:15:14.0456 5724 AESTFilters - ok
22:15:14.0627 5724 [ 6CCD1135320109D6B219F1A6E04AD9F6 ] Afc C:\windows\syswow64\drivers\Afc.sys
22:15:14.0627 5724 Afc - ok
22:15:14.0877 5724 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys
22:15:14.0893 5724 AFD - ok
22:15:15.0002 5724 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys
22:15:15.0017 5724 agp440 - ok
22:15:15.0127 5724 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe
22:15:15.0127 5724 ALG - ok
22:15:15.0298 5724 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys
22:15:15.0314 5724 aliide - ok
22:15:15.0407 5724 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys
22:15:15.0423 5724 amdide - ok
22:15:15.0517 5724 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys
22:15:15.0548 5724 AmdK8 - ok
22:15:15.0579 5724 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys
22:15:15.0595 5724 AmdPPM - ok
22:15:15.0657 5724 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys
22:15:15.0688 5724 amdsata - ok
22:15:15.0969 5724 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys
22:15:16.0000 5724 amdsbs - ok
22:15:16.0031 5724 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys
22:15:16.0031 5724 amdxata - ok
22:15:16.0297 5724 [ 24ED0EB2B2558970176ECEE680F8F806 ] ApfiltrService C:\windows\system32\DRIVERS\Apfiltr.sys
22:15:16.0328 5724 ApfiltrService - ok
22:15:16.0406 5724 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys
22:15:16.0421 5724 AppID - ok
22:15:16.0468 5724 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll
22:15:16.0468 5724 AppIDSvc - ok
22:15:16.0499 5724 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\windows\System32\appinfo.dll
22:15:16.0499 5724 Appinfo - ok
22:15:16.0593 5724 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
22:15:16.0609 5724 Apple Mobile Device - ok
22:15:16.0624 5724 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys
22:15:16.0655 5724 arc - ok
22:15:16.0687 5724 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys
22:15:16.0702 5724 arcsas - ok
22:15:16.0936 5724 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
22:15:16.0967 5724 aspnet_state - ok
22:15:16.0983 5724 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
22:15:16.0999 5724 AsyncMac - ok
22:15:17.0030 5724 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys
22:15:17.0030 5724 atapi - ok
22:15:17.0077 5724 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
22:15:17.0092 5724 AudioEndpointBuilder - ok
22:15:17.0123 5724 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll
22:15:17.0123 5724 AudioSrv - ok
22:15:17.0201 5724 [ 877FC6E4E22218C1C1B1F41E63AC825A ] Avgdiska C:\windows\system32\DRIVERS\avgdiska.sys
22:15:17.0201 5724 Avgdiska - ok
22:15:17.0389 5724 [ 75295E1C49F068F0C7C3ED1211DF3EFB ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
22:15:17.0404 5724 AVGIDSAgent - ok
22:15:17.0451 5724 [ 06963A6DE8B1C8F15A8E1053AE9505A4 ] AVGIDSDriver C:\windows\system32\DRIVERS\avgidsdrivera.sys
22:15:17.0451 5724 AVGIDSDriver - ok
22:15:17.0482 5724 [ E4F5607D1437FFDEE33CADA40D256D4F ] AVGIDSHA C:\windows\system32\DRIVERS\avgidsha.sys
22:15:17.0482 5724 AVGIDSHA - ok
22:15:17.0545 5724 [ B010FF7C984FFFFFF019F2CF162F1DE8 ] Avgldx64 C:\windows\system32\DRIVERS\avgldx64.sys
22:15:17.0545 5724 Avgldx64 - ok
22:15:17.0560 5724 [ F05BF4010D3F0E8C2D8CBFE45D7CFCE1 ] Avgloga C:\windows\system32\DRIVERS\avgloga.sys
22:15:17.0576 5724 Avgloga - ok
22:15:17.0591 5724 [ 4B459C2FCF22ECE548766B2FCF46F62C ] Avgmfx64 C:\windows\system32\DRIVERS\avgmfx64.sys
22:15:17.0591 5724 Avgmfx64 - ok
22:15:17.0623 5724 [ 66D00CC6F7D148980071F55F9056D450 ] Avgrkx64 C:\windows\system32\DRIVERS\avgrkx64.sys
22:15:17.0623 5724 Avgrkx64 - ok
22:15:17.0654 5724 [ 4E364FABBD147F59E5D524C9EA86D772 ] Avgtdia C:\windows\system32\DRIVERS\avgtdia.sys
22:15:17.0654 5724 Avgtdia - ok
22:15:17.0685 5724 [ A1F53D2A00E64679A1D81B61D2333D06 ] avgtp C:\windows\system32\drivers\avgtpx64.sys
22:15:17.0701 5724 avgtp - ok
22:15:17.0732 5724 [ D9EB91D8DD04D4DCE41C8FAE67D20449 ] avgwd C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
22:15:17.0732 5724 avgwd - ok
22:15:17.0779 5724 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll
22:15:17.0779 5724 AxInstSV - ok
22:15:17.0825 5724 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys
22:15:17.0857 5724 b06bdrv - ok
22:15:17.0903 5724 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys
22:15:17.0919 5724 b57nd60a - ok
22:15:17.0966 5724 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll
22:15:17.0966 5724 BDESVC - ok
22:15:17.0981 5724 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys
22:15:17.0981 5724 Beep - ok
22:15:18.0028 5724 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll
22:15:18.0028 5724 BFE - ok
22:15:18.0106 5724 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\System32\qmgr.dll
22:15:18.0153 5724 BITS - ok
22:15:18.0200 5724 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
22:15:18.0215 5724 blbdrive - ok
22:15:18.0340 5724 [ 093B1B419EF25B15D3A1CA6953F41AFB ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
22:15:18.0356 5724 Bluetooth Device Monitor - ok
22:15:18.0434 5724 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
22:15:18.0434 5724 Bonjour Service - ok
22:15:18.0465 5724 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys
22:15:18.0465 5724 bowser - ok
22:15:18.0512 5724 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys
22:15:18.0527 5724 BrFiltLo - ok
22:15:18.0574 5724 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys
22:15:18.0590 5724 BrFiltUp - ok
22:15:18.0621 5724 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll
22:15:18.0637 5724 Browser - ok
22:15:18.0652 5724 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys
22:15:18.0699 5724 Brserid - ok
22:15:18.0746 5724 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
22:15:18.0761 5724 BrSerWdm - ok
22:15:18.0793 5724 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
22:15:18.0808 5724 BrUsbMdm - ok
22:15:18.0839 5724 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
22:15:18.0855 5724 BrUsbSer - ok
22:15:18.0902 5724 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\windows\system32\drivers\BthEnum.sys
22:15:18.0917 5724 BthEnum - ok
22:15:18.0964 5724 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\DRIVERS\bthmodem.sys
22:15:18.0980 5724 BTHMODEM - ok
22:15:19.0027 5724 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\windows\system32\DRIVERS\bthpan.sys
22:15:19.0027 5724 BthPan - ok
22:15:19.0105 5724 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\windows\System32\Drivers\BTHport.sys
22:15:19.0167 5724 BTHPORT - ok
22:15:19.0229 5724 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll
22:15:19.0245 5724 bthserv - ok
22:15:19.0261 5724 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\windows\System32\Drivers\BTHUSB.sys
22:15:19.0276 5724 BTHUSB - ok
22:15:19.0307 5724 [ 16C1BAC9760C9FA85A30F3FA0FBB1B7A ] btmaux C:\windows\system32\DRIVERS\btmaux.sys
22:15:19.0339 5724 btmaux - ok
22:15:19.0354 5724 [ 0C468D8DA95BE16BFDD380BB9DE88259 ] btmhsf C:\windows\system32\DRIVERS\btmhsf.sys
22:15:19.0385 5724 btmhsf - ok
22:15:19.0417 5724 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
22:15:19.0417 5724 cdfs - ok
22:15:19.0463 5724 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
22:15:19.0495 5724 cdrom - ok
22:15:19.0541 5724 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll
22:15:19.0541 5724 CertPropSvc - ok
22:15:19.0557 5724 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys
22:15:19.0573 5724 circlass - ok
22:15:19.0635 5724 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys
22:15:19.0635 5724 CLFS - ok
22:15:19.0697 5724 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:15:19.0697 5724 clr_optimization_v2.0.50727_32 - ok
22:15:19.0744 5724 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:15:19.0744 5724 clr_optimization_v2.0.50727_64 - ok
22:15:19.0822 5724 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:15:19.0900 5724 clr_optimization_v4.0.30319_32 - ok
22:15:19.0931 5724 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:15:19.0963 5724 clr_optimization_v4.0.30319_64 - ok
22:15:20.0009 5724 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
22:15:20.0025 5724 CmBatt - ok
22:15:20.0087 5724 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys
22:15:20.0103 5724 cmdide - ok
22:15:20.0181 5724 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\windows\system32\Drivers\cng.sys
22:15:20.0181 5724 CNG - ok
22:15:20.0212 5724 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\drivers\compbatt.sys
22:15:20.0212 5724 Compbatt - ok
22:15:20.0243 5724 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\DRIVERS\CompositeBus.sys
22:15:20.0259 5724 CompositeBus - ok
22:15:20.0275 5724 COMSysApp - ok
22:15:20.0321 5724 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys
22:15:20.0337 5724 crcdisk - ok
22:15:20.0384 5724 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\windows\system32\cryptsvc.dll
22:15:20.0399 5724 CryptSvc - ok
22:15:20.0462 5724 [ DF214BFF646880D0EB31BDC86136B29B ] CtClsFlt C:\windows\system32\DRIVERS\CtClsFlt.sys
22:15:20.0493 5724 CtClsFlt - ok
22:15:20.0555 5724 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll
22:15:20.0571 5724 DcomLaunch - ok
22:15:20.0602 5724 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll
22:15:20.0618 5724 defragsvc - ok
22:15:20.0680 5724 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys
22:15:20.0680 5724 DfsC - ok
22:15:20.0711 5724 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll
22:15:20.0727 5724 Dhcp - ok
22:15:20.0758 5724 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys
22:15:20.0758 5724 discache - ok
22:15:20.0805 5724 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys
22:15:20.0821 5724 Disk - ok
22:15:20.0836 5724 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll
22:15:20.0852 5724 Dnscache - ok
22:15:20.0867 5724 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll
22:15:20.0883 5724 dot3svc - ok
22:15:20.0930 5724 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll
22:15:20.0930 5724 DPS - ok
22:15:20.0961 5724 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
22:15:20.0977 5724 drmkaud - ok
22:15:21.0148 5724 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
22:15:21.0179 5724 DXGKrnl - ok
22:15:21.0195 5724 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll
22:15:21.0195 5724 EapHost - ok
22:15:21.0367 5724 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys
22:15:21.0507 5724 ebdrv - ok
22:15:21.0585 5724 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe
22:15:21.0585 5724 EFS - ok
22:15:21.0803 5724 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe
22:15:21.0819 5724 ehRecvr - ok
22:15:21.0835 5724 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe
22:15:21.0850 5724 ehSched - ok
22:15:21.0881 5724 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys
22:15:21.0913 5724 elxstor - ok
22:15:21.0959 5724 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys
22:15:21.0975 5724 ErrDev - ok
22:15:22.0100 5724 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll
22:15:22.0100 5724 EventSystem - ok
22:15:22.0225 5724 [ 8B6C9924B0D333DBF76086B8258A0891 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
22:15:22.0240 5724 EvtEng - ok
22:15:22.0318 5724 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys
22:15:22.0396 5724 exfat - ok
22:15:22.0521 5724 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys
22:15:22.0521 5724 fastfat - ok
22:15:22.0583 5724 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe
22:15:22.0615 5724 Fax - ok
22:15:22.0708 5724 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys
22:15:22.0724 5724 fdc - ok
22:15:22.0786 5724 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll
22:15:22.0802 5724 fdPHost - ok
22:15:22.0802 5724 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll
22:15:22.0802 5724 FDResPub - ok
22:15:22.0817 5724 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys
22:15:22.0817 5724 FileInfo - ok
22:15:22.0833 5724 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys
22:15:22.0833 5724 Filetrace - ok
22:15:22.0849 5724 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys
22:15:22.0864 5724 flpydisk - ok
22:15:22.0880 5724 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
22:15:22.0895 5724 FltMgr - ok
22:15:23.0051 5724 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\windows\system32\FntCache.dll
22:15:23.0067 5724 FontCache - ok
22:15:23.0129 5724 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:15:23.0129 5724 FontCache3.0.0.0 - ok
22:15:23.0161 5724 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys
22:15:23.0161 5724 FsDepends - ok
22:15:23.0207 5724 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
22:15:23.0207 5724 Fs_Rec - ok
22:15:23.0254 5724 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
22:15:23.0254 5724 fvevol - ok
22:15:23.0285 5724 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys
22:15:23.0301 5724 gagp30kx - ok
22:15:23.0395 5724 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys
22:15:23.0410 5724 GEARAspiWDM - ok
22:15:23.0457 5724 [ D3316F6E3C011435F36E3D6E49B3196C ] GoToAssist C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
22:15:23.0457 5724 GoToAssist - ok
22:15:23.0519 5724 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll
22:15:23.0535 5724 gpsvc - ok
22:15:23.0675 5724 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:15:23.0675 5724 gupdate - ok
22:15:23.0707 5724 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:15:23.0707 5724 gupdatem - ok
22:15:23.0753 5724 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
22:15:23.0769 5724 hcw85cir - ok
22:15:23.0831 5724 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
22:15:23.0878 5724 HdAudAddService - ok
22:15:23.0925 5724 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\DRIVERS\HDAudBus.sys
22:15:23.0925 5724 HDAudBus - ok
22:15:23.0956 5724 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys
22:15:23.0972 5724 HidBatt - ok
22:15:24.0019 5724 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys
22:15:24.0034 5724 HidBth - ok
22:15:24.0097 5724 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys
22:15:24.0112 5724 HidIr - ok
22:15:24.0206 5724 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\system32\hidserv.dll
22:15:24.0206 5724 hidserv - ok
22:15:24.0253 5724 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
22:15:24.0268 5724 HidUsb - ok
22:15:24.0346 5724 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll
22:15:24.0346 5724 hkmsvc - ok
22:15:24.0393 5724 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll
22:15:24.0393 5724 HomeGroupListener - ok
22:15:24.0455 5724 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll
22:15:24.0471 5724 HomeGroupProvider - ok
22:15:24.0487 5724 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys
22:15:24.0502 5724 HpSAMD - ok
22:15:24.0674 5724 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys
22:15:24.0689 5724 HTTP - ok
22:15:24.0705 5724 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
22:15:24.0705 5724 hwpolicy - ok
22:15:24.0752 5724 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\DRIVERS\i8042prt.sys
22:15:24.0767 5724 i8042prt - ok
22:15:24.0830 5724 [ D7921D5A870B11CC1ADAB198A519D50A ] iaStor C:\windows\system32\DRIVERS\iaStor.sys
22:15:24.0830 5724 iaStor - ok
22:15:24.0877 5724 [ 8FFF9083252C16FE3960173722605E9E ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
22:15:24.0877 5724 IAStorDataMgrSvc - ok
22:15:24.0908 5724 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
22:15:24.0939 5724 iaStorV - ok
22:15:25.0001 5724 [ FC85972037815FA7B413E790B426ACB2 ] iBtFltCoex C:\windows\system32\DRIVERS\iBtFltCoex.sys
22:15:25.0017 5724 iBtFltCoex - ok
22:15:25.0079 5724 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
22:15:25.0095 5724 IDriverT - ok
22:15:25.0157 5724 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:15:25.0189 5724 idsvc - ok
22:15:25.0469 5724 [ 174BCAC474DE13B2650E444CF124828E ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys
22:15:25.0703 5724 igfx - ok
22:15:25.0735 5724 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys
22:15:25.0750 5724 iirsp - ok
22:15:25.0797 5724 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll
22:15:25.0828 5724 IKEEXT - ok
22:15:25.0891 5724 [ CADDF0927DAC63EDAE48F5C35A61D87D ] intaud_WaveExtensible C:\windows\system32\drivers\intelaud.sys
22:15:25.0906 5724 intaud_WaveExtensible - ok
22:15:25.0969 5724 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys
22:15:26.0000 5724 IntcDAud - ok
22:15:26.0031 5724 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys
22:15:26.0031 5724 intelide - ok
22:15:26.0078 5724 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
22:15:26.0078 5724 intelppm - ok
22:15:26.0125 5724 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll
22:15:26.0125 5724 IPBusEnum - ok
22:15:26.0140 5724 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
22:15:26.0171 5724 IpFilterDriver - ok
22:15:26.0218 5724 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll
22:15:26.0234 5724 iphlpsvc - ok
22:15:26.0249 5724 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys
22:15:26.0265 5724 IPMIDRV - ok
22:15:26.0281 5724 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys
22:15:26.0296 5724 IPNAT - ok
22:15:26.0421 5724 [ 78486992AC657AE5065C4A2135838570 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
22:15:26.0437 5724 iPod Service - ok
22:15:26.0468 5724 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys
22:15:26.0468 5724 IRENUM - ok
22:15:26.0483 5724 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys
22:15:26.0499 5724 isapnp - ok
22:15:26.0577 5724 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys
22:15:26.0593 5724 iScsiPrt - ok
22:15:26.0624 5724 [ 716F66336F10885D935B08174DC54242 ] iwdbus C:\windows\system32\DRIVERS\iwdbus.sys
22:15:26.0639 5724 iwdbus - ok
22:15:26.0671 5724 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
22:15:26.0686 5724 kbdclass - ok
22:15:26.0702 5724 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys
22:15:26.0717 5724 kbdhid - ok
22:15:26.0749 5724 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe
22:15:26.0749 5724 KeyIso - ok
22:15:26.0780 5724 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
22:15:26.0780 5724 KSecDD - ok
22:15:26.0795 5724 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
22:15:26.0795 5724 KSecPkg - ok
22:15:26.0811 5724 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys
22:15:26.0827 5724 ksthunk - ok
22:15:26.0858 5724 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll
22:15:26.0889 5724 KtmRm - ok
22:15:26.0951 5724 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\system32\srvsvc.dll
22:15:26.0951 5724 LanmanServer - ok
22:15:26.0983 5724 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll
22:15:26.0983 5724 LanmanWorkstation - ok
22:15:27.0029 5724 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
22:15:27.0029 5724 lltdio - ok
22:15:27.0061 5724 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll
22:15:27.0076 5724 lltdsvc - ok
22:15:27.0107 5724 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll
22:15:27.0107 5724 lmhosts - ok
22:15:27.0154 5724 [ 0803906D607A9B83184447B75B60ECC2 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
22:15:27.0154 5724 LMS - ok
22:15:27.0201 5724 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys
22:15:27.0201 5724 LSI_FC - ok
22:15:27.0263 5724 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys
22:15:27.0279 5724 LSI_SAS - ok
22:15:27.0310 5724 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys
22:15:27.0326 5724 LSI_SAS2 - ok
22:15:27.0341 5724 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys
22:15:27.0357 5724 LSI_SCSI - ok
22:15:27.0373 5724 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys
22:15:27.0373 5724 luafv - ok
22:15:27.0388 5724 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\windows\system32\drivers\mbam.sys
22:15:27.0388 5724 MBAMProtector - ok
22:15:27.0419 5724 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
22:15:27.0435 5724 MBAMScheduler - ok
22:15:27.0451 5724 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
22:15:27.0466 5724 MBAMService - ok
22:15:27.0591 5724 [ FD3AD5E1ECDAA94A89D6697F5C5465D6 ] McComponentHostService C:\Program Files (x86)\McAfee Security Scan\2.1.121\McCHSvc.exe
22:15:27.0591 5724 McComponentHostService - ok
22:15:27.0638 5724 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
22:15:27.0653 5724 Mcx2Svc - ok
22:15:27.0685 5724 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys
22:15:27.0716 5724 megasas - ok
22:15:27.0747 5724 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys
22:15:27.0778 5724 MegaSR - ok
22:15:27.0809 5724 [ 1C6E73FC46B509EFF9D0086AA37132DF ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys
22:15:27.0825 5724 MEIx64 - ok
22:15:27.0856 5724 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll
22:15:27.0856 5724 MMCSS - ok
22:15:27.0887 5724 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys
22:15:27.0903 5724 Modem - ok
22:15:27.0934 5724 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys
22:15:27.0934 5724 monitor - ok
22:15:27.0950 5724 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
22:15:27.0981 5724 mouclass - ok
22:15:27.0997 5724 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
22:15:28.0012 5724 mouhid - ok
22:15:28.0028 5724 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys
22:15:28.0028 5724 mountmgr - ok
22:15:28.0043 5724 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys
22:15:28.0059 5724 mpio - ok
22:15:28.0075 5724 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
22:15:28.0075 5724 mpsdrv - ok
22:15:28.0106 5724 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll
22:15:28.0121 5724 MpsSvc - ok
22:15:28.0137 5724 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
22:15:28.0153 5724 MRxDAV - ok
22:15:28.0184 5724 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
22:15:28.0184 5724 mrxsmb - ok
22:15:28.0215 5724 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
22:15:28.0215 5724 mrxsmb10 - ok
22:15:28.0231 5724 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
22:15:28.0231 5724 mrxsmb20 - ok
22:15:28.0277 5724 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys
22:15:28.0277 5724 msahci - ok
22:15:28.0340 5724 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys
22:15:28.0355 5724 msdsm - ok
22:15:28.0387 5724 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe
22:15:28.0418 5724 MSDTC - ok
22:15:28.0465 5724 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys
22:15:28.0465 5724 Msfs - ok
22:15:28.0465 5724 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
22:15:28.0480 5724 mshidkmdf - ok
22:15:28.0480 5724 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys
22:15:28.0480 5724 msisadrv - ok
22:15:28.0527 5724 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll
22:15:28.0543 5724 MSiSCSI - ok
22:15:28.0558 5724 msiserver - ok
22:15:28.0574 5724 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
22:15:28.0589 5724 MSKSSRV - ok
22:15:28.0605 5724 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
22:15:28.0621 5724 MSPCLOCK - ok
22:15:28.0621 5724 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys
22:15:28.0621 5724 MSPQM - ok
22:15:28.0652 5724 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys
22:15:28.0652 5724 MsRPC - ok
22:15:28.0652 5724 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\DRIVERS\mssmbios.sys
22:15:28.0652 5724 mssmbios - ok
22:15:28.0667 5724 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys
22:15:28.0683 5724 MSTEE - ok
22:15:28.0699 5724 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys
22:15:28.0699 5724 MTConfig - ok
22:15:28.0714 5724 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys
22:15:28.0714 5724 Mup - ok
22:15:28.0777 5724 [ 6ED8935257672F4CD04A88A0F3DE093D ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
22:15:28.0792 5724 MyWiFiDHCPDNS - ok
22:15:28.0823 5724 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll
22:15:28.0855 5724 napagent - ok
22:15:28.0886 5724 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
22:15:28.0886 5724 NativeWifiP - ok
22:15:28.0964 5724 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys
22:15:28.0979 5724 NDIS - ok
22:15:28.0995 5724 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
22:15:29.0011 5724 NdisCap - ok
22:15:29.0026 5724 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
22:15:29.0042 5724 NdisTapi - ok
22:15:29.0057 5724 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
22:15:29.0057 5724 Ndisuio - ok
22:15:29.0073 5724 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
22:15:29.0089 5724 NdisWan - ok
22:15:29.0120 5724 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
22:15:29.0120 5724 NDProxy - ok
22:15:29.0151 5724 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
22:15:29.0151 5724 NetBIOS - ok
22:15:29.0182 5724 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys
22:15:29.0182 5724 NetBT - ok
22:15:29.0229 5724 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe
22:15:29.0229 5724 Netlogon - ok
22:15:29.0291 5724 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll
22:15:29.0291 5724 Netman - ok
22:15:29.0354 5724 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:29.0385 5724 NetMsmqActivator - ok
22:15:29.0401 5724 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:29.0401 5724 NetPipeActivator - ok
22:15:29.0447 5724 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll
22:15:29.0463 5724 netprofm - ok
22:15:29.0463 5724 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:29.0479 5724 NetTcpActivator - ok
22:15:29.0479 5724 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:29.0479 5724 NetTcpPortSharing - ok
22:15:30.0212 5724 [ 5D262402B0634C998F8CBCEAD7DD8676 ] NETwNs64 C:\windows\system32\DRIVERS\NETwNs64.sys
22:15:30.0446 5724 NETwNs64 - ok
22:15:30.0477 5724 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys
22:15:30.0493 5724 nfrd960 - ok
22:15:30.0524 5724 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll
22:15:30.0524 5724 NlaSvc - ok
22:15:30.0539 5724 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys
22:15:30.0539 5724 Npfs - ok
22:15:30.0571 5724 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll
22:15:30.0571 5724 nsi - ok
22:15:30.0602 5724 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
22:15:30.0602 5724 nsiproxy - ok
22:15:30.0695 5724 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
22:15:30.0711 5724 Ntfs - ok
22:15:30.0742 5724 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys
22:15:30.0742 5724 Null - ok
22:15:30.0773 5724 [ 158AD24745BD85BA9BE3C51C38F48C32 ] nusb3hub C:\windows\system32\DRIVERS\nusb3hub.sys
22:15:30.0805 5724 nusb3hub - ok
22:15:30.0836 5724 [ D40A13B2C0891E218F9523B376955DB6 ] nusb3xhc C:\windows\system32\DRIVERS\nusb3xhc.sys
22:15:30.0851 5724 nusb3xhc - ok
22:15:30.0883 5724 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys
22:15:30.0914 5724 nvraid - ok
22:15:30.0929 5724 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys
22:15:30.0961 5724 nvstor - ok
22:15:31.0007 5724 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys
22:15:31.0023 5724 nv_agp - ok
22:15:31.0101 5724 [ 952AB3BDEF38A7391AA05BC8C6028F15 ] NWADI C:\windows\system32\DRIVERS\NWADIenum.sys
22:15:31.0117 5724 NWADI - ok
22:15:31.0148 5724 [ DE3ABD010D9734CD4AD4E0BA81F50B63 ] NWUSBCDFIL64 C:\windows\system32\DRIVERS\NwUsbCdFil64.sys
22:15:31.0163 5724 NWUSBCDFIL64 - ok
22:15:31.0195 5724 [ 6AE72C04633788C3C3B71B5BEB17183C ] NWUSBModem C:\windows\system32\DRIVERS\nwusbmdm.sys
22:15:31.0210 5724 NWUSBModem - ok
22:15:31.0241 5724 [ 6AE72C04633788C3C3B71B5BEB17183C ] NWUSBPort C:\windows\system32\DRIVERS\nwusbser.sys
22:15:31.0257 5724 NWUSBPort - ok
22:15:31.0273 5724 [ 6AE72C04633788C3C3B71B5BEB17183C ] NWUSBPort2 C:\windows\system32\DRIVERS\nwusbser2.sys
22:15:31.0288 5724 NWUSBPort2 - ok
22:15:31.0304 5724 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys
22:15:31.0335 5724 ohci1394 - ok
22:15:31.0413 5724 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll
22:15:31.0429 5724 p2pimsvc - ok
22:15:31.0460 5724 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll
22:15:31.0475 5724 p2psvc - ok
22:15:31.0491 5724 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys
22:15:31.0507 5724 Parport - ok
22:15:31.0538 5724 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys
22:15:31.0538 5724 partmgr - ok
22:15:31.0553 5724 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll
22:15:31.0553 5724 PcaSvc - ok
22:15:31.0585 5724 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys
22:15:31.0585 5724 pci - ok
22:15:31.0616 5724 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys
22:15:31.0631 5724 pciide - ok
22:15:31.0663 5724 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys
22:15:31.0678 5724 pcmcia - ok
22:15:31.0694 5724 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys
22:15:31.0694 5724 pcw - ok
22:15:31.0725 5724 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys
22:15:31.0725 5724 PEAUTH - ok
22:15:31.0834 5724 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe
22:15:31.0850 5724 PerfHost - ok
22:15:31.0897 5724 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll
22:15:31.0928 5724 pla - ok
22:15:31.0990 5724 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll
22:15:32.0006 5724 PlugPlay - ok
22:15:32.0021 5724 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
22:15:32.0021 5724 PNRPAutoReg - ok
22:15:32.0053 5724 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll
22:15:32.0053 5724 PNRPsvc - ok
22:15:32.0084 5724 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
22:15:32.0099 5724 PolicyAgent - ok
22:15:32.0115 5724 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll
22:15:32.0115 5724 Power - ok
22:15:32.0162 5724 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
22:15:32.0177 5724 PptpMiniport - ok
22:15:32.0177 5724 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys
22:15:32.0193 5724 Processor - ok
22:15:32.0240 5724 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll
22:15:32.0240 5724 ProfSvc - ok
22:15:32.0255 5724 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe
22:15:32.0255 5724 ProtectedStorage - ok
22:15:32.0271 5724 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys
22:15:32.0287 5724 Psched - ok
22:15:32.0318 5724 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\windows\system32\Drivers\PxHlpa64.sys
22:15:32.0318 5724 PxHlpa64 - ok
22:15:32.0365 5724 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys
22:15:32.0411 5724 ql2300 - ok
22:15:32.0443 5724 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys
22:15:32.0458 5724 ql40xx - ok
22:15:32.0489 5724 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll
22:15:32.0489 5724 QWAVE - ok
22:15:32.0505 5724 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
22:15:32.0505 5724 QWAVEdrv - ok
22:15:32.0521 5724 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
22:15:32.0536 5724 RasAcd - ok
22:15:32.0583 5724 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
22:15:32.0583 5724 RasAgileVpn - ok
22:15:32.0599 5724 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll
22:15:32.0614 5724 RasAuto - ok
22:15:32.0630 5724 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
22:15:32.0630 5724 Rasl2tp - ok
22:15:32.0661 5724 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll
22:15:32.0661 5724 RasMan - ok
22:15:32.0677 5724 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
22:15:32.0692 5724 RasPppoe - ok
22:15:32.0692 5724 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
22:15:32.0708 5724 RasSstp - ok
22:15:32.0739 5724 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
22:15:32.0739 5724 rdbss - ok
22:15:32.0755 5724 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys
22:15:32.0755 5724 rdpbus - ok
22:15:32.0786 5724 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
22:15:32.0786 5724 RDPCDD - ok
22:15:32.0801 5724 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
22:15:32.0801 5724 RDPENCDD - ok
22:15:32.0817 5724 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
22:15:32.0817 5724 RDPREFMP - ok
22:15:32.0848 5724 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys
22:15:32.0895 5724 RDPWD - ok
22:15:32.0911 5724 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys
22:15:32.0911 5724 rdyboost - ok
22:15:33.0082 5724 [ 189C5A8D2098E0AA14FD157A954B34FC ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
22:15:33.0098 5724 RegSrvc - ok
22:15:33.0113 5724 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll
22:15:33.0113 5724 RemoteAccess - ok
22:15:33.0160 5724 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll
22:15:33.0160 5724 RemoteRegistry - ok
22:15:33.0191 5724 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\windows\system32\DRIVERS\rfcomm.sys
22:15:33.0207 5724 RFCOMM - ok
22:15:33.0332 5724 [ 3C957189B31C34D3AD21967B12B6AED7 ] RoxMediaDB12OEM c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
22:15:33.0363 5724 RoxMediaDB12OEM - ok
22:15:33.0394 5724 [ 2B73088CC2CA757A172B425C9398E5BC ] RoxWatch12 c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
22:15:33.0394 5724 RoxWatch12 - ok
22:15:33.0425 5724 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
22:15:33.0425 5724 RpcEptMapper - ok
22:15:33.0472 5724 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe
22:15:33.0472 5724 RpcLocator - ok
22:15:33.0503 5724 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll
22:15:33.0503 5724 RpcSs - ok
22:15:33.0535 5724 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
22:15:33.0535 5724 rspndr - ok
22:15:33.0628 5724 [ BE29B0A3AC1E8BD02FFAB8CEE86BADFA ] RSUSBSTOR C:\windows\system32\Drivers\RtsUStor.sys
22:15:33.0628 5724 RSUSBSTOR - ok
22:15:33.0675 5724 [ 2777226EE8BF50B059D7A7C90177E99C ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys
22:15:33.0691 5724 RTL8167 - ok
22:15:33.0706 5724 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe
22:15:33.0706 5724 SamSs - ok
22:15:33.0722 5724 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys
22:15:33.0737 5724 sbp2port - ok
22:15:33.0753 5724 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll
22:15:33.0769 5724 SCardSvr - ok
22:15:33.0784 5724 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
22:15:33.0784 5724 scfilter - ok
22:15:33.0815 5724 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll
22:15:33.0815 5724 Schedule - ok
22:15:33.0847 5724 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll
22:15:33.0847 5724 SCPolicySvc - ok
22:15:33.0862 5724 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll
22:15:33.0862 5724 SDRSVC - ok
22:15:33.0893 5724 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys
22:15:33.0893 5724 secdrv - ok
22:15:33.0909 5724 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll
22:15:33.0909 5724 seclogon - ok
22:15:33.0940 5724 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\System32\sens.dll
22:15:33.0940 5724 SENS - ok
22:15:33.0971 5724 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll
22:15:33.0971 5724 SensrSvc - ok
22:15:34.0003 5724 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\drivers\serenum.sys
22:15:34.0018 5724 Serenum - ok
22:15:34.0049 5724 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys
22:15:34.0065 5724 Serial - ok
22:15:34.0081 5724 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys
22:15:34.0096 5724 sermouse - ok
22:15:34.0127 5724 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll
22:15:34.0127 5724 SessionEnv - ok
22:15:34.0143 5724 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys
22:15:34.0143 5724 sffdisk - ok
22:15:34.0174 5724 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys
22:15:34.0174 5724 sffp_mmc - ok
22:15:34.0190 5724 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys
22:15:34.0190 5724 sffp_sd - ok
22:15:34.0205 5724 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys
22:15:34.0221 5724 sfloppy - ok
22:15:34.0283 5724 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll
22:15:34.0283 5724 SharedAccess - ok
22:15:34.0330 5724 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll
22:15:34.0346 5724 ShellHWDetection - ok
22:15:34.0377 5724 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys
22:15:34.0408 5724 SiSRaid2 - ok
22:15:34.0439 5724 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys
22:15:34.0455 5724 SiSRaid4 - ok
22:15:34.0564 5724 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
22:15:34.0564 5724 SkypeUpdate - ok
22:15:34.0611 5724 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys
22:15:34.0627 5724 Smb - ok
22:15:34.0689 5724 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe
22:15:34.0689 5724 SNMPTRAP - ok
22:15:34.0720 5724 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys
22:15:34.0720 5724 spldr - ok
22:15:34.0861 5724 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe
22:15:34.0876 5724 Spooler - ok
22:15:35.0126 5724 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe
22:15:35.0141 5724 sppsvc - ok
22:15:35.0188 5724 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll
22:15:35.0204 5724 sppuinotify - ok
22:15:35.0235 5724 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys
22:15:35.0251 5724 srv - ok
22:15:35.0266 5724 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys
22:15:35.0282 5724 srv2 - ok
22:15:35.0313 5724 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
22:15:35.0329 5724 srvnet - ok
22:15:35.0344 5724 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
22:15:35.0360 5724 SSDPSRV - ok
22:15:35.0375 5724 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll
22:15:35.0375 5724 SstpSvc - ok
22:15:35.0453 5724 [ B2D8B364A831427A5741F6C408FA8AE3 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe
22:15:35.0469 5724 STacSV - ok
22:15:35.0500 5724 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys
22:15:35.0500 5724 stexstor - ok
22:15:35.0547 5724 [ EF5ACDE92BA3F691BBFEF781CB063501 ] STHDA C:\windows\system32\DRIVERS\stwrt64.sys
22:15:35.0563 5724 STHDA - ok
22:15:35.0625 5724 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll
22:15:35.0641 5724 stisvc - ok
22:15:35.0656 5724 [ 7731F46EC0D687A931CBA063E8F90EF0 ] stllssvr c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
22:15:35.0672 5724 stllssvr - ok
22:15:35.0734 5724 [ 85BF0B7CE3D9B6D1611E05872E1C3E56 ] SWDUMon C:\windows\system32\DRIVERS\SWDUMon.sys
22:15:35.0750 5724 SWDUMon - ok
22:15:35.0781 5724 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\DRIVERS\swenum.sys
22:15:35.0797 5724 swenum - ok
22:15:35.0859 5724 [ 9F0A0C3EE91FD7CB709F7D0D97207F7E ] swg3kser00 C:\windows\system32\DRIVERS\swg3kser00.sys
22:15:35.0890 5724 swg3kser00 - ok
22:15:35.0921 5724 [ C6A7E54A31803E6F95E23D1B5D967D57 ] swiwdmbx C:\windows\system32\DRIVERS\swiwdmbx64.sys
22:15:35.0937 5724 swiwdmbx - ok
22:15:35.0953 5724 [ DC345FC7CE9BA3005153062407263BB2 ] SWNC8UA3 C:\windows\system32\DRIVERS\swnc8ua3.sys
22:15:35.0984 5724 SWNC8UA3 - ok
22:15:36.0015 5724 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll
22:15:36.0031 5724 swprv - ok
22:15:36.0077 5724 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll
22:15:36.0093 5724 SysMain - ok
22:15:36.0124 5724 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll
22:15:36.0124 5724 TabletInputService - ok
22:15:36.0140 5724 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll
22:15:36.0155 5724 TapiSrv - ok
22:15:36.0155 5724 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll
22:15:36.0155 5724 TBS - ok
22:15:36.0249 5724 [ DB74544B75566C974815E79A62433F29 ] Tcpip C:\windows\system32\drivers\tcpip.sys
22:15:36.0265 5724 Tcpip - ok
22:15:36.0327 5724 [ DB74544B75566C974815E79A62433F29 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
22:15:36.0343 5724 TCPIP6 - ok
22:15:36.0374 5724 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
22:15:36.0389 5724 tcpipreg - ok
22:15:36.0405 5724 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
22:15:36.0436 5724 TDPIPE - ok
22:15:36.0483 5724 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
22:15:36.0499 5724 TDTCP - ok
22:15:36.0514 5724 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys
22:15:36.0530 5724 tdx - ok
22:15:36.0561 5724 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\DRIVERS\termdd.sys
22:15:36.0561 5724 TermDD - ok
22:15:36.0623 5724 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll
22:15:36.0655 5724 TermService - ok
22:15:36.0670 5724 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll
22:15:36.0670 5724 Themes - ok
22:15:36.0717 5724 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll
22:15:36.0717 5724 THREADORDER - ok
22:15:36.0733 5724 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll
22:15:36.0748 5724 TrkWks - ok
22:15:36.0857 5724 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
22:15:36.0857 5724 TrustedInstaller - ok
22:15:36.0904 5724 [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
22:15:36.0904 5724 tssecsrv - ok
22:15:36.0935 5724 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys
22:15:36.0935 5724 TsUsbFlt - ok
22:15:36.0967 5724 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys
22:15:36.0982 5724 TsUsbGD - ok
22:15:37.0029 5724 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
22:15:37.0029 5724 tunnel - ok
22:15:37.0060 5724 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys
22:15:37.0076 5724 uagp35 - ok
22:15:37.0091 5724 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys
22:15:37.0091 5724 udfs - ok
22:15:37.0154 5724 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe
22:15:37.0154 5724 UI0Detect - ok
22:15:37.0201 5724 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys
22:15:37.0216 5724 uliagpkx - ok
22:15:37.0263 5724 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys
22:15:37.0279 5724 umbus - ok
22:15:37.0294 5724 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\drivers\umpass.sys
22:15:37.0310 5724 UmPass - ok
22:15:37.0591 5724 [ EB79C6C91A99930015EF29AE7FA802D1 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
22:15:37.0606 5724 UNS - ok
22:15:37.0622 5724 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll
22:15:37.0637 5724 upnphost - ok
22:15:37.0653 5724 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys
22:15:37.0669 5724 USBAAPL64 - ok
22:15:37.0684 5724 [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
22:15:37.0715 5724 usbccgp - ok
22:15:37.0747 5724 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys
22:15:37.0762 5724 usbcir - ok
22:15:37.0778 5724 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys
22:15:37.0793 5724 usbehci - ok
22:15:37.0825 5724 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys
22:15:37.0856 5724 usbhub - ok
22:15:37.0871 5724 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys
22:15:37.0887 5724 usbohci - ok
22:15:37.0918 5724 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\DRIVERS\usbprint.sys
22:15:37.0918 5724 usbprint - ok
22:15:37.0949 5724 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\windows\system32\DRIVERS\usbscan.sys
22:15:37.0965 5724 usbscan - ok
22:15:37.0981 5724 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
22:15:37.0996 5724 USBSTOR - ok
22:15:38.0012 5724 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys
22:15:38.0012 5724 usbuhci - ok
22:15:38.0043 5724 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys
22:15:38.0059 5724 usbvideo - ok
22:15:38.0090 5724 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll
22:15:38.0090 5724 UxSms - ok
22:15:38.0105 5724 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe
22:15:38.0105 5724 VaultSvc - ok
22:15:38.0137 5724 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys
22:15:38.0137 5724 vdrvroot - ok
22:15:38.0152 5724 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe
22:15:38.0168 5724 vds - ok
22:15:38.0183 5724 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys
22:15:38.0199 5724 vga - ok
22:15:38.0215 5724 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys
22:15:38.0215 5724 VgaSave - ok
22:15:38.0230 5724 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys
22:15:38.0261 5724 vhdmp - ok
22:15:38.0277 5724 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys
22:15:38.0293 5724 viaide - ok
22:15:38.0308 5724 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys
22:15:38.0308 5724 volmgr - ok
22:15:38.0324 5724 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys
22:15:38.0324 5724 volmgrx - ok
22:15:38.0371 5724 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\windows\system32\drivers\volsnap.sys
22:15:38.0371 5724 volsnap - ok
22:15:38.0402 5724 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys
22:15:38.0449 5724 vsmraid - ok
22:15:38.0558 5724 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe
22:15:38.0589 5724 VSS - ok
22:15:38.0714 5724 [ 54A70D5B6E1EDB8313BC2594557551FC ] vToolbarUpdater17.0.1 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.1\ToolbarUpdater.exe
22:15:38.0729 5724 vToolbarUpdater17.0.1 - ok
22:15:38.0745 5724 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys
22:15:38.0745 5724 vwifibus - ok
22:15:38.0776 5724 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys
22:15:38.0776 5724 vwififlt - ok
22:15:38.0792 5724 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys
22:15:38.0792 5724 vwifimp - ok
22:15:38.0823 5724 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll
22:15:38.0823 5724 W32Time - ok
22:15:38.0854 5724 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys
22:15:38.0870 5724 WacomPen - ok
22:15:38.0901 5724 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
22:15:38.0901 5724 WANARP - ok
22:15:38.0917 5724 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
22:15:38.0917 5724 Wanarpv6 - ok
22:15:39.0010 5724 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe
22:15:39.0291 5724 WatAdminSvc - ok
22:15:39.0353 5724 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe
22:15:39.0400 5724 wbengine - ok
22:15:39.0447 5724 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll
22:15:39.0463 5724 WbioSrvc - ok
22:15:39.0478 5724 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll
22:15:39.0478 5724 wcncsvc - ok
22:15:39.0494 5724 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
22:15:39.0494 5724 WcsPlugInService - ok
22:15:39.0525 5724 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys
22:15:39.0541 5724 Wd - ok
22:15:39.0572 5724 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
22:15:39.0587 5724 Wdf01000 - ok
22:15:39.0603 5724 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll
22:15:39.0603 5724 WdiServiceHost - ok
22:15:39.0603 5724 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll
22:15:39.0603 5724 WdiSystemHost - ok
22:15:39.0619 5724 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll
22:15:39.0634 5724 WebClient - ok
22:15:39.0634 5724 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll
22:15:39.0650 5724 Wecsvc - ok
22:15:39.0681 5724 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll
22:15:39.0681 5724 wercplsupport - ok
22:15:39.0728 5724 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll
22:15:39.0743 5724 WerSvc - ok
22:15:39.0775 5724 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
22:15:39.0790 5724 WfpLwf - ok
22:15:39.0853 5724 [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr C:\windows\system32\DRIVERS\wimfltr.sys
22:15:39.0868 5724 WimFltr - ok
22:15:39.0899 5724 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys
22:15:39.0899 5724 WIMMount - ok
22:15:39.0915 5724 WinDefend - ok
22:15:39.0931 5724 WinHttpAutoProxySvc - ok
22:15:40.0133 5724 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
22:15:40.0149 5724 Winmgmt - ok
22:15:40.0383 5724 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll
22:15:40.0414 5724 WinRM - ok
22:15:40.0477 5724 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys
22:15:40.0492 5724 WinUsb - ok
22:15:40.0539 5724 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll
22:15:40.0555 5724 Wlansvc - ok
22:15:40.0601 5724 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
22:15:40.0617 5724 wlcrasvc - ok
22:15:40.0867 5724 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:15:40.0882 5724 wlidsvc - ok
22:15:40.0929 5724 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\DRIVERS\wmiacpi.sys
22:15:40.0929 5724 WmiAcpi - ok
22:15:40.0960 5724 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
22:15:40.0976 5724 wmiApSrv - ok
22:15:41.0007 5724 WMPNetworkSvc - ok
22:15:41.0054 5724 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll
22:15:41.0054 5724 WPCSvc - ok
22:15:41.0085 5724 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
22:15:41.0085 5724 WPDBusEnum - ok
22:15:41.0101 5724 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
22:15:41.0101 5724 ws2ifsl - ok
22:15:41.0132 5724 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\System32\wscsvc.dll
22:15:41.0132 5724 wscsvc - ok
22:15:41.0132 5724 WSearch - ok
22:15:41.0225 5724 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll
22:15:41.0319 5724 wuauserv - ok
22:15:41.0350 5724 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys
22:15:41.0350 5724 WudfPf - ok
22:15:41.0413 5724 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
22:15:41.0413 5724 WUDFRd - ok
22:15:41.0459 5724 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll
22:15:41.0459 5724 wudfsvc - ok
22:15:41.0491 5724 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\windows\System32\wwansvc.dll
22:15:41.0506 5724 WwanSvc - ok
22:15:41.0615 5724 [ DD0042F0C3B606A6A8B92D49AFB18AD6 ] YahooAUService C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
22:15:41.0631 5724 YahooAUService - ok
22:15:41.0678 5724 ================ Scan global ===============================
22:15:41.0693 5724 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll
22:15:41.0725 5724 [ 88EDD0B34EED542745931E581AD21A32 ] C:\windows\system32\winsrv.dll
22:15:41.0740 5724 [ 88EDD0B34EED542745931E581AD21A32 ] C:\windows\system32\winsrv.dll
22:15:41.0803 5724 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll
22:15:41.0881 5724 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe
22:15:41.0896 5724 [Global] - ok
22:15:41.0896 5724 ================ Scan MBR ==================================
22:15:41.0912 5724 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
22:15:42.0349 5724 \Device\Harddisk0\DR0 - ok
22:15:42.0349 5724 ================ Scan VBR ==================================
22:15:42.0349 5724 [ 17E6064B18AA88ED8319B3238FE06A25 ] \Device\Harddisk0\DR0\Partition1
22:15:42.0349 5724 \Device\Harddisk0\DR0\Partition1 - ok
22:15:42.0364 5724 [ 9353CF31A6EC515E78353D1600509A2F ] \Device\Harddisk0\DR0\Partition2
22:15:42.0364 5724 \Device\Harddisk0\DR0\Partition2 - ok
22:15:42.0364 5724 ============================================================
22:15:42.0364 5724 Scan finished
22:15:42.0364 5724 ============================================================
22:15:42.0380 2176 Detected object count: 0
22:15:42.0380 2176 Actual detected object count: 0
22:15:54.0969 5552 Deinitialize success

#33
cupdegrave

Posted 30 September 2013 - 08:53 PM

Member

Topic Starter
Member
26 posts

ran scan but made a mistake and did not "SKIP" but chose "DELETE" on the half dozen threats found...

System is running more stable after freeing up over half my hard drive space and all the adware removal.

BUT... upon booting up the system there is a rapid clicking sound, like if you held a key down too long in a program. This happens at the very start of the "Welcome to Windows" initiation point.

I need to give it a little more time and see if the "stuck key" issue is still there, it was always intermittent. If it keeps coming back I will have to make a Windows 7 disc, get a freeware driver backup/restore program and reload Windows 7.

#34
Crowbar

Posted 01 October 2013 - 05:23 AM

Teacher

GeekU Moderator
4,798 posts

Do you remember what the entries were that you deleted, as this log shows that it did not find anything to offer to delete.
Is this log from a second running of the program? If so, can you post the original log file?

The log files are found in the root folder on your c: drive, and should have the date and time that it was run as the very end of the file name.

Sometimes TDSSKiller will show you unsigned driver files as a threat, and those were what I wanted you to skip,

As for your reformatting plans, if your keyboard is bad, reloading Windows will not help you very much. Not to discourage you from reloading Windows, but it will not fix broken hardware.

#35
cupdegrave

Posted 01 October 2013 - 05:42 AM

Member

Topic Starter
Member
26 posts

#36
Crowbar

Posted 01 October 2013 - 08:19 AM

Teacher

GeekU Moderator
4,798 posts

Hmmm, that seems to be the same log file as before. Did you run TDSSKiller twice?

Before we wrap this up, let's look at your services and drivers once more with an OTL scan -

I think after we clean up the tools you should post over in our hardware forum and let one of the techs there examine your keyboard issue

Run OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following

BASESERVICES
Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
Post the log it produces in your next reply.

#37
cupdegrave

Posted 03 October 2013 - 06:06 AM

Member

Topic Starter
Member
26 posts

OTL logfile created on: 10/3/2013 7:51:32 AM - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Chris\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16686)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.91 Gb Total Physical Memory | 1.99 Gb Available Physical Memory | 50.81% Memory free
7.82 Gb Paging File | 5.73 Gb Available in Paging File | 73.32% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.01 Gb Total Space | 252.35 Gb Free Space | 55.95% Space Free | Partition Type: NTFS

Computer Name: CHRIS-PC | User Name: Chris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/10/01 20:10:59 | 002,404,376 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
PRC - [2013/10/01 20:10:59 | 001,734,680 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe
PRC - [2013/10/01 20:10:59 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\loggingserver.exe
PRC - [2013/09/22 23:09:00 | 000,301,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
PRC - [2013/09/15 23:12:16 | 004,851,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe
PRC - [2013/09/03 23:17:50 | 003,538,480 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
PRC - [2013/09/03 19:51:52 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe
PRC - [2013/05/10 00:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/05 12:59:08 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2011/08/12 12:46:02 | 000,520,330 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2011/05/27 18:58:48 | 000,793,416 | ---- | M] (AVG) -- C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
PRC - [2010/11/17 13:53:16 | 000,113,288 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2010/11/17 11:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2010/11/06 00:54:22 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010/11/06 00:54:20 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
PRC - [2010/10/05 22:04:12 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2010/10/05 22:04:08 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2008/11/09 16:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

========== Modules (No Company Name) ==========

MOD - [2013/10/01 20:10:59 | 002,404,376 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
MOD - [2013/10/01 20:10:59 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\log4cplusU.dll
MOD - [2013/10/01 20:10:59 | 000,142,360 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.0.12\SiteSafety.dll
MOD - [2013/09/11 23:06:30 | 000,771,584 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll
MOD - [2013/08/14 09:09:45 | 000,475,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2b87cb064e64ff40778ca12322abb710\IAStorUtil.ni.dll
MOD - [2013/08/14 08:49:48 | 012,436,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll
MOD - [2013/08/14 08:49:39 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
MOD - [2013/08/14 08:49:16 | 003,348,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1f6f220f9efe936d1158c79b9d4b451f\WindowsBase.ni.dll
MOD - [2013/08/14 08:49:09 | 005,464,064 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
MOD - [2013/08/14 08:49:05 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8f7d83126a3cf283e5ac97f2d6d99f12\System.Configuration.ni.dll
MOD - [2013/08/14 08:48:44 | 007,989,760 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
MOD - [2013/07/10 23:02:31 | 000,014,336 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\14dd60b57c8e7542cc9711866ef63e8a\IAStorCommon.ni.dll
MOD - [2013/07/10 22:32:57 | 011,499,520 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
MOD - [2011/09/27 10:23:00 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/09/27 10:22:40 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/05/25 13:53:14 | 000,350,024 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\madExcept_.bpl
MOD - [2011/05/25 13:53:12 | 000,184,136 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\madBasic_.bpl
MOD - [2011/05/25 13:53:12 | 000,050,504 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\madDisAsm_.bpl
MOD - [2010/11/24 23:44:02 | 000,375,280 | ---- | M] () -- c:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\SQLite352.dll
MOD - [2010/11/17 11:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe

========== Services (SafeList) ==========

SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2011/01/25 05:57:18 | 000,296,448 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:64bit: - [2010/12/17 15:41:32 | 001,515,792 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2010/12/17 15:28:46 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2010/12/17 15:26:50 | 000,836,880 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/03/03 06:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
SRV - [2013/10/01 20:10:59 | 001,734,680 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe -- (vToolbarUpdater17.0.12)
SRV - [2013/09/22 23:09:00 | 000,301,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)
SRV - [2013/09/20 07:54:48 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/09/03 23:17:50 | 003,538,480 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2013/05/10 00:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/07/13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011/08/30 22:46:20 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)
SRV - [2010/11/25 06:34:18 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)
SRV - [2010/11/25 06:33:18 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)
SRV - [2010/11/06 00:54:22 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010/10/05 22:04:12 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010/10/05 22:04:08 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010/09/03 02:45:02 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.1.121\McCHSvc.exe -- (McComponentHostService)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/11/09 16:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/10/01 20:10:59 | 000,046,368 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:64bit: - [2013/09/08 22:11:42 | 000,031,544 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:64bit: - [2013/09/02 10:59:14 | 000,212,280 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:64bit: - [2013/09/02 10:29:18 | 000,294,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
DRV:64bit: - [2013/09/02 10:26:50 | 000,192,824 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
DRV:64bit: - [2013/09/02 10:26:42 | 000,241,464 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
DRV:64bit: - [2013/08/20 22:53:58 | 000,123,704 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:64bit: - [2013/08/01 16:07:06 | 000,251,192 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
DRV:64bit: - [2013/08/01 16:06:28 | 000,147,768 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)
DRV:64bit: - [2013/05/03 02:18:52 | 000,025,584 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- c:\Program Files\My Dell\pcdsrvc_x64.pkms -- (PCDSRVC{D3412D80-CF3B4A27-06020200}_0)
DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/12/13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/08/17 09:29:21 | 000,015,712 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/06/16 17:40:20 | 000,176,000 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2011/05/28 14:45:43 | 000,297,472 | ---- | M] (Sierra Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\swnc8ua3.sys -- (SWNC8UA3)
DRV:64bit: - [2011/05/16 14:44:24 | 000,109,312 | ---- | M] (Sierra Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\swiwdmbx64.sys -- (swiwdmbx)
DRV:64bit: - [2011/05/13 16:54:12 | 000,258,432 | ---- | M] (Sierra Wireless Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\swg3kser00.sys -- (swg3kser00)
DRV:64bit: - [2011/05/13 04:28:46 | 000,363,856 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2011/04/10 15:51:06 | 012,223,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/24 07:47:02 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011/03/24 07:47:02 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/01/25 05:57:18 | 000,520,192 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2010/12/21 10:08:48 | 008,505,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:64bit: - [2010/12/10 17:50:36 | 000,181,248 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010/12/10 17:50:36 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2010/11/20 23:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 23:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/06 19:45:48 | 000,438,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/11/04 06:07:06 | 000,058,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)
DRV:64bit: - [2010/11/04 04:31:44 | 000,059,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)
DRV:64bit: - [2010/10/29 20:11:42 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2010/10/26 15:08:08 | 000,406,632 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/10/19 19:12:58 | 000,274,432 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)
DRV:64bit: - [2010/10/15 05:28:16 | 000,317,440 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2010/09/21 10:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010/03/19 04:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008/07/07 14:23:56 | 000,025,600 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NwUsbCdFil64.sys -- (NWUSBCDFIL64)
DRV:64bit: - [2008/06/02 18:28:52 | 000,247,808 | ---- | M] (Novatel Wireless Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NWADIenum.sys -- (NWADI)
DRV:64bit: - [2008/05/09 13:08:40 | 000,213,120 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nwusbser2.sys -- (NWUSBPort2)
DRV:64bit: - [2008/05/09 13:08:40 | 000,213,120 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nwusbser.sys -- (NWUSBPort)
DRV:64bit: - [2008/05/09 13:08:40 | 000,213,120 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nwusbmdm.sys -- (NWUSBModem)
DRV:64bit: - [2006/11/01 13:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06}: "URL" = http://isearch.glary...s}&src=iesearch

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>

========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.0.12\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.0.1.12 [2013/10/01 20:11:18 | 000,000,000 | ---D | M]

[2013/09/20 08:10:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.0.1.12\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.0.1.12\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
O4:64bit: - HKLM..\Run: [DellStage] C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [EMET Notifier] C:\Program Files (x86)\EMET\EMET_notifier.exe (Microsoft Corporation)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe (Nikon Corporation)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [RoxWatchTray] c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()
O4 - HKCU..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.micros...n/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support....veX/MSDcode.cab (Microsoft Data Collection Control)
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} http://www.photogize...geUploader5.cab (Image Uploader Control)
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creat...102/CTSUEng.cab (Creative Software AutoUpdate)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab (Reg Error: Key error.)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creat...13/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creat...10926/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{02501F36-6B77-4141-B1BD-49ECA95C8C89}: NameServer = 172.26.38.1 172.26.38.28-899BD0EA64F9}
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27676741-B84C-4D07-83BD-6D91813B9BE5}: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9CA05766-C6DF-43A9-9718-899BD0EA64F9}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18:64bit: - Protocol\Handler\linkscanner - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\linkscanner - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll (AVG Secure Search)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL) - File not found
O20 - AppInit_DLLs: (c:\progra~2\optimi~1\optpro~1.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3931546d-51c9-11e1-bc1b-ac72895522b4}\Shell - "" = AutoRun
O33 - MountPoints2\{3931546d-51c9-11e1-bc1b-ac72895522b4}\Shell\AutoRun\command - "" = F:\iStudio.exe
O33 - MountPoints2\{5de0fe38-74ab-11e2-bc90-ac72895522b4}\Shell - "" = AutoRun
O33 - MountPoints2\{5de0fe38-74ab-11e2-bc90-ac72895522b4}\Shell\AutoRun\command - "" = E:\WIN\setup.exe -ap
O33 - MountPoints2\{a5236adf-d8b6-11e0-90c0-ac72895522b4}\Shell - "" = AutoRun
O33 - MountPoints2\{a5236adf-d8b6-11e0-90c0-ac72895522b4}\Shell\AutoRun\command - "" = F:\MI.exe
O33 - MountPoints2\{c35498e3-d9ff-11e0-b38d-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c35498e3-d9ff-11e0-b38d-806e6f6e6963}\Shell\AutoRun\command - "" = E:\VZAccess_Manager.exe /z detect
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/09/30 22:29:31 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013/09/30 22:14:52 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Chris\Desktop\tdsskiller.exe
[2013/09/30 08:33:13 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Sonic_Solutions
[2013/09/29 21:25:30 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\windows disc
[2013/09/28 18:02:14 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Malwarebytes
[2013/09/28 18:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/09/28 18:01:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/09/28 18:01:50 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys
[2013/09/28 18:01:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/09/28 18:01:17 | 010,285,040 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Chris\Desktop\mbam-setup-1.75.0.1300.exe
[2013/09/28 06:59:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\AVG2014
[2013/09/28 06:55:09 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2014
[2013/09/28 06:55:01 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013/09/28 06:46:33 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Avg2014
[2013/09/26 23:13:32 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\{6373621D-5080-4626-A16C-6A7D54879B24}
[2013/09/25 12:39:57 | 000,000,000 | ---D | C] -- C:\windows\ERUNT
[2013/09/25 12:17:43 | 001,030,038 | ---- | C] (Thisisu) -- C:\Users\Chris\Desktop\JRT.exe
[2013/09/25 09:21:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search
[2013/09/25 09:21:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG SafeGuard toolbar
[2013/09/24 10:11:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\PROGRESSIVE
[2013/09/24 07:34:03 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/09/24 07:07:33 | 000,000,000 | ---D | C] -- C:\_OTL
[2013/09/22 22:05:40 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\ZERO ACCESS
[2013/09/22 21:58:43 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\RK_Quarantine
[2013/09/22 20:16:38 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\old resume
[2013/09/22 07:06:55 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\BUGDET
[2013/09/14 17:54:58 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\AVG SafeGuard toolbar
[2013/09/14 17:54:48 | 000,046,368 | ---- | C] (AVG Technologies) -- C:\windows\SysNative\drivers\avgtpx64.sys
[2013/09/14 17:54:43 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar
[2013/09/13 19:28:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Sports
[2013/09/13 19:28:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX 2
[2013/09/13 19:27:59 | 000,000,000 | ---D | C] -- C:\ProgramData\String Comparison
[2013/09/13 19:27:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Sounds
[2013/09/13 19:27:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Automator
[2013/09/13 10:02:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2013/09/08 22:11:42 | 000,031,544 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\windows\SysNative\drivers\avgrkx64.sys
[2013/09/03 19:51:51 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe

========== Files - Modified Within 30 Days ==========

[2013/10/03 07:54:08 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2013/10/03 07:50:17 | 000,020,928 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/10/03 07:50:17 | 000,020,928 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/10/03 07:43:20 | 000,000,892 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/10/03 07:42:33 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013/10/03 07:42:28 | 3148,222,464 | -HS- | M] () -- C:\hiberfil.sys
[2013/10/01 22:07:03 | 000,000,020 | -H-- | M] () -- C:\ProgramData\PKP_DLbz.DAT
[2013/10/01 22:00:52 | 000,000,020 | -H-- | M] () -- C:\ProgramData\PKP_DLes.DAT
[2013/10/01 21:57:04 | 000,000,020 | -H-- | M] () -- C:\ProgramData\PKP_DLev.DAT
[2013/10/01 21:51:27 | 000,000,186 | ---- | M] () -- C:\Users\Chris\Desktop\Health Insurance Marketplace, Affordable Care Act HealthCare.gov.url
[2013/10/01 20:27:01 | 000,000,896 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/10/01 20:10:59 | 000,046,368 | ---- | M] (AVG Technologies) -- C:\windows\SysNative\drivers\avgtpx64.sys
[2013/09/30 22:14:52 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Chris\Desktop\tdsskiller.exe
[2013/09/30 08:02:12 | 000,000,157 | ---- | M] () -- C:\Users\Chris\Desktop\FoodLion Careers.url
[2013/09/29 07:56:18 | 000,000,247 | ---- | M] () -- C:\Users\Chris\Desktop\How to Install Windows 7 Without the Disc PCWorld.url
[2013/09/29 07:36:28 | 000,779,266 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2013/09/29 07:36:28 | 000,660,530 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2013/09/29 07:36:28 | 000,121,426 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2013/09/28 18:01:52 | 000,001,107 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/28 18:01:20 | 010,285,040 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Chris\Desktop\mbam-setup-1.75.0.1300.exe
[2013/09/28 06:56:29 | 000,000,967 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk
[2013/09/26 21:59:08 | 000,013,695 | ---- | M] () -- C:\Users\Chris\Documents\SEPT BUDGET.ods
[2013/09/25 21:04:23 | 006,484,157 | ---- | M] () -- C:\Users\Chris\Desktop\dimension-9100_owner's manual_en-us.pdf
[2013/09/25 12:17:43 | 001,030,038 | ---- | M] (Thisisu) -- C:\Users\Chris\Desktop\JRT.exe
[2013/09/25 09:21:54 | 000,001,060 | ---- | M] () -- C:\Users\Chris\Desktop\Optimizer Pro.lnk
[2013/09/24 07:50:06 | 000,891,144 | ---- | M] () -- C:\Users\Chris\Desktop\SecurityCheck.exe
[2013/09/24 07:33:11 | 001,042,066 | ---- | M] () -- C:\Users\Chris\Desktop\adwcleaner.exe
[2013/09/24 07:24:33 | 003,812,352 | ---- | M] () -- C:\Users\Chris\Desktop\RogueKillerX64.exe
[2013/09/23 21:38:34 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2013/09/23 20:57:40 | 000,000,227 | ---- | M] () -- C:\Users\Chris\Desktop\Trojan.Zeroaccess Symantec.url
[2013/09/22 21:22:54 | 000,000,180 | ---- | M] () -- C:\Users\Chris\Desktop\Geeks to Go! – Free help from tech experts.url
[2013/09/21 19:13:54 | 000,000,258 | R-S- | M] () -- C:\Users\Chris\ntuser.pol
[2013/09/21 07:33:47 | 000,134,795 | ---- | M] () -- C:\Users\Chris\Documents\PROGRESSIVE INSURANCE CARDS 09-21-13.pdf
[2013/09/20 08:07:41 | 000,000,192 | ---- | M] () -- C:\Users\Chris\Desktop\Télécharger RogueKiller (Site Officiel).url
[2013/09/18 13:39:07 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013/09/17 08:29:46 | 000,000,020 | ---- | M] () -- C:\ProgramData\PKP_DLet.DAT
[2013/09/16 18:25:41 | 000,056,236 | ---- | M] () -- C:\Users\Chris\Documents\tt-130916-.pdf
[2013/09/15 06:19:20 | 000,000,235 | ---- | M] () -- C:\Users\Chris\Desktop\Kill Devil Hills Weather - AccuWeather Forecast for NC 27948.url
[2013/09/13 19:28:52 | 000,000,268 | RH-- | M] () -- C:\Users\Chris\AppData\Roaming\Classic Thick
[2013/09/13 19:28:52 | 000,000,268 | R--- | M] () -- C:\ProgramData\Cocoa
[2013/09/13 19:28:16 | 000,002,051 | ---- | M] () -- C:\Users\Public\Desktop\ViewNX 2.lnk
[2013/09/13 19:27:59 | 000,000,268 | RH-- | M] () -- C:\Users\Chris\AppData\Roaming\Classical
[2013/09/13 19:27:59 | 000,000,268 | RH-- | M] () -- C:\Users\Chris\AppData\Roaming\Chorus
[2013/09/13 19:27:59 | 000,000,268 | R--- | M] () -- C:\ProgramData\ColorSync
[2013/09/13 19:27:59 | 000,000,268 | R--- | M] () -- C:\ProgramData\Clips
[2013/09/13 19:27:22 | 000,000,020 | ---- | M] () -- C:\ProgramData\PKP_DLeo.DAT
[2013/09/13 19:27:21 | 000,000,268 | RH-- | M] () -- C:\Users\Chris\AppData\Roaming\Components
[2013/09/13 19:27:21 | 000,000,268 | R--- | M] () -- C:\ProgramData\Console
[2013/09/13 19:20:53 | 000,000,000 | ---- | M] () -- C:\ProgramData\Common
[2013/09/13 10:32:53 | 000,000,493 | ---- | M] () -- C:\Users\Chris\Desktop\Google News.website
[2013/09/11 23:38:43 | 000,348,712 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2013/09/08 22:11:42 | 000,031,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\windows\SysNative\drivers\avgrkx64.sys
[2013/09/05 00:02:49 | 000,000,177 | ---- | M] () -- C:\Users\Chris\Desktop\Crom - Prestressed Concrete Water Tanks, Wastewater Treatment & Storage Tank, Water Tank Design & Construction Company.url
[2013/09/03 19:51:52 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe
[2013/09/03 11:42:16 | 000,000,188 | ---- | M] () -- C:\Users\Chris\Desktop\hampton roads all jobs classifieds - craigslist.url

========== Files Created - No Company Name ==========

[2013/10/01 21:51:27 | 000,000,186 | ---- | C] () -- C:\Users\Chris\Desktop\Health Insurance Marketplace, Affordable Care Act HealthCare.gov.url
[2013/09/30 08:02:12 | 000,000,157 | ---- | C] () -- C:\Users\Chris\Desktop\FoodLion Careers.url
[2013/09/29 07:56:18 | 000,000,247 | ---- | C] () -- C:\Users\Chris\Desktop\How to Install Windows 7 Without the Disc PCWorld.url
[2013/09/28 18:01:52 | 000,001,107 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/28 06:56:29 | 000,000,967 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2014.lnk
[2013/09/25 21:04:23 | 006,484,157 | ---- | C] () -- C:\Users\Chris\Desktop\dimension-9100_owner's manual_en-us.pdf
[2013/09/25 09:21:54 | 000,001,060 | ---- | C] () -- C:\Users\Chris\Desktop\Optimizer Pro.lnk
[2013/09/24 07:49:48 | 000,891,144 | ---- | C] () -- C:\Users\Chris\Desktop\SecurityCheck.exe
[2013/09/24 07:33:11 | 001,042,066 | ---- | C] () -- C:\Users\Chris\Desktop\adwcleaner.exe
[2013/09/24 07:24:33 | 003,812,352 | ---- | C] () -- C:\Users\Chris\Desktop\RogueKillerX64.exe
[2013/09/23 20:57:40 | 000,000,227 | ---- | C] () -- C:\Users\Chris\Desktop\Trojan.Zeroaccess Symantec.url
[2013/09/22 21:22:54 | 000,000,180 | ---- | C] () -- C:\Users\Chris\Desktop\Geeks to Go! – Free help from tech experts.url
[2013/09/22 07:07:11 | 000,013,695 | ---- | C] () -- C:\Users\Chris\Documents\SEPT BUDGET.ods
[2013/09/21 07:33:47 | 000,134,795 | ---- | C] () -- C:\Users\Chris\Documents\PROGRESSIVE INSURANCE CARDS 09-21-13.pdf
[2013/09/20 08:11:49 | 000,000,258 | R-S- | C] () -- C:\Users\Chris\ntuser.pol
[2013/09/20 08:07:41 | 000,000,192 | ---- | C] () -- C:\Users\Chris\Desktop\Télécharger RogueKiller (Site Officiel).url
[2013/09/16 18:25:40 | 000,056,236 | ---- | C] () -- C:\Users\Chris\Documents\tt-130916-.pdf
[2013/09/13 19:28:52 | 000,000,268 | R--- | C] () -- C:\ProgramData\Cocoa
[2013/09/13 19:28:16 | 000,002,051 | ---- | C] () -- C:\Users\Public\Desktop\ViewNX 2.lnk
[2013/09/13 19:27:59 | 000,000,268 | R--- | C] () -- C:\ProgramData\ColorSync
[2013/09/13 19:27:59 | 000,000,268 | R--- | C] () -- C:\ProgramData\Clips
[2013/09/13 19:27:21 | 000,000,268 | R--- | C] () -- C:\ProgramData\Console
[2013/09/13 19:20:53 | 000,000,000 | ---- | C] () -- C:\ProgramData\Common
[2013/09/05 00:02:49 | 000,000,177 | ---- | C] () -- C:\Users\Chris\Desktop\Crom - Prestressed Concrete Water Tanks, Wastewater Treatment & Storage Tank, Water Tank Design & Construction Company.url
[2013/09/03 11:42:16 | 000,000,188 | ---- | C] () -- C:\Users\Chris\Desktop\hampton roads all jobs classifieds - craigslist.url
[2012/08/17 08:16:05 | 000,000,268 | RH-- | C] () -- C:\Users\Chris\AppData\Roaming\Components
[2012/08/17 08:16:05 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLeo.DAT
[2012/08/16 08:04:49 | 000,023,552 | ---- | C] () -- C:\windows\SysWow64\LXEAsmr.dll
[2012/08/16 08:04:48 | 000,299,008 | ---- | C] () -- C:\windows\SysWow64\LXEAsm.dll
[2012/07/11 09:33:03 | 000,000,268 | RH-- | C] () -- C:\Users\Chris\AppData\Roaming\Classical
[2012/05/23 20:17:48 | 000,003,584 | ---- | C] () -- C:\Users\Chris\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/22 21:52:43 | 000,000,268 | RH-- | C] () -- C:\Users\Chris\AppData\Roaming\Classic Thick
[2011/09/06 19:11:51 | 000,000,268 | RH-- | C] () -- C:\Users\Chris\AppData\Roaming\Generic
[2011/09/06 19:11:51 | 000,000,268 | R--- | C] () -- C:\ProgramData\Guides
[2011/09/06 19:09:42 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLbz.DAT
[2011/09/06 18:53:43 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLev.DAT
[2011/09/06 18:53:42 | 000,000,268 | RH-- | C] () -- C:\Users\Chris\AppData\Roaming\Chorus
[2011/09/06 18:53:42 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLes.DAT
[2011/09/06 18:53:42 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLet.DAT

========== ZeroAccess Check ==========

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 22:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 21:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 23:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2011/09/22 23:53:54 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\AVG
[2013/09/28 06:59:22 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\AVG2014
[2011/09/06 11:30:50 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Fingertapps
[2012/05/23 21:38:08 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\GlarySoft
[2011/09/16 11:46:34 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\IDT
[2012/07/27 10:33:43 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Nikon
[2012/07/27 10:33:43 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\OpenOffice.org
[2013/06/25 06:00:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Oracle
[2013/09/03 19:16:37 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\PCDr
[2012/02/15 15:28:02 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Preclick Photo Organizer
[2012/04/22 18:27:39 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Recover Files Platinum
[2013/02/11 20:35:45 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Sierra Wireless
[2011/09/08 05:55:37 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Smith Micro
[2013/05/15 10:02:00 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TuneUp Software
[2011/09/25 04:41:15 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Windows Live Writer

========== Purity Check ==========

========== Custom Scans ==========

========== Base Services ==========
SRV:64bit: - [2009/07/13 21:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:64bit: - [2013/02/27 01:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:64bit: - [2009/07/13 21:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:64bit: - [2010/11/20 23:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:64bit: - [2010/11/20 23:24:00 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:64bit: - [2011/11/17 02:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
SRV:64bit: - [2009/07/13 21:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2009/07/13 21:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:64bit: - [2012/07/04 18:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:64bit: - [2013/07/09 01:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV - [2013/07/09 00:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
SRV:64bit: - [2010/11/20 23:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:64bit: - [2010/11/20 23:24:00 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2010/11/20 23:24:09 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2011/03/03 02:24:16 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:64bit: - [2009/07/13 21:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
SRV:64bit: - [2009/07/13 21:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2009/07/13 21:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:64bit: - [2009/07/13 21:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:64bit: - [2010/11/20 23:23:48 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:64bit: - [2009/07/13 21:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:64bit: - [2009/07/13 21:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:64bit: - [2009/07/13 21:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:64bit: - [2009/07/13 21:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
SRV - [2009/07/13 21:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
SRV:64bit: - [2012/10/03 13:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:64bit: - [2009/07/13 21:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:64bit: - [2011/05/24 07:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:64bit: - [2012/02/11 02:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
SRV:64bit: - [2011/11/17 02:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
No service found with a name of EMDMgmt
SRV:64bit: - [2009/07/13 21:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:64bit: - [2010/11/20 23:24:17 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:64bit: - [2010/11/20 23:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:64bit: - [2010/11/20 23:24:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:64bit: - [2011/11/17 02:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:64bit: - [2009/07/13 21:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:64bit: - [2010/11/20 23:23:48 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:64bit: - [2010/11/20 23:23:55 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2010/11/20 23:24:03 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:64bit: - [2010/11/20 23:24:16 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:64bit: - [2010/11/20 23:24:32 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2010/11/20 23:24:00 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:64bit: - [2009/07/13 21:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2012/05/01 01:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:64bit: - [2010/11/20 23:23:55 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:64bit: - [2010/11/20 23:24:32 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
SRV:64bit: - [2010/11/20 23:24:32 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2010/11/20 23:25:06 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010/11/20 23:23:55 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
SRV:64bit: - [2010/11/20 23:24:28 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:64bit: - [2010/11/20 23:24:48 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:64bit: - [2010/11/20 23:24:15 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\msiexec.exe -- (msiserver)
SRV - [2010/11/20 23:24:28 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysWow64\msiexec.exe -- (msiserver)
SRV:64bit: - [2009/07/13 21:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:64bit: - [2012/06/02 18:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:64bit: - [2010/11/20 23:24:09 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:64bit: - [2009/07/13 21:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
SRV:64bit: - [2010/11/20 23:24:32 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)

========== Alternate Data Streams ==========

@Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:0B4227B4
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:0B4227B4
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:373E1720

< End of report >

#38
Crowbar

Posted 04 October 2013 - 09:03 PM

Teacher

GeekU Moderator
4,798 posts

Hi,
Sorry about the delay, I was buried in work and almost forgot you tonight.

I don't see any malware on your system at this point, so I would like to clean up my tools and give some recommendations.
You can post over in the hardware forum and have one of the techs there troubleshoot your stuck key issue, as they would be better at that than I would.
If after following these instructions, any of the tools are left on your desktop, you can simply right click them and select Delete.

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Run OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following

:Commands
[resethosts]
[emptytemp]
[Reboot]
Then click the Run Fix button at the top
Let the program run unhindered, reboot the PC when it is done

Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.

We will now confirm that your hidden files are set to that, as some of the tools I use will change that

Go to control panel
Select folder options (Appearance > Folder options in category view)
Select the View Tab.
Under the Hidden files and folders heading select Do not show hidden files and folders.
Click Yes to confirm.
Click OK.

Do you use Java If you do not use it, you are better off uninstalling it completely. Go to your Control Panel, Uninstall a Program, then find any instance of Java in the list and click on Uninstall - do this until there are no instances of Java in the list. If you do use Java....
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.

Upgrading Java:

Go to this site and click Do I have Java
It will check your current version and then offer to update to the latest version

SPRING CLEAN

Clear Restore Points

Go Start > All Programmes > Accessories > System tools
Right click Disc Cleanup and select run as administrator
When it pops up at the first prompt select OK after it has done some calculations the tabs will appear
Select More Options tab
Press Sytem Restore and Shadow Copies Cleanup button
Posted Image

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
Posted Image

Malwarebytes. Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programs on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit

Microsoft Windows Update

To learn more about how to protect yourself while on the internet read these two articles:
How did I get infected in the first place ?
So how did I get infectd in the first place

Keep safe :wave:

#39
cupdegrave

Posted 06 October 2013 - 07:00 PM

Member

Topic Starter
Member
26 posts

Thanks for all the help! My system is much more stable although still having the intermittent "stuck key" keyboard issue. Removed Java and now have to complete the rest of your spring cleaning recommendation. I will also be posting a new request in the Hardware area of site.

THANKS AGAIN!

Chris
Kitty Hawk, NC

#40
Crowbar

Posted 08 October 2013 - 12:49 PM

Teacher

GeekU Moderator
4,798 posts

Glad to hear the system is more stable -

You are very welcome!! :cool:

#41
Crowbar

Posted 08 October 2013 - 12:49 PM

Teacher

GeekU Moderator
4,798 posts

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.