[kuratowa2]

Malwarebytes noted an infection this morning of the win32.downloader.gen virus on our computer, tied to what appears to be either an installation of the Conduit toolbar in Firefox or OpenCandy tied to to DivX upgrade. Spybot did not see this infection.

 

We attempted to clean the infection using the steps outlined in the following blog post and programs:

http://malwaretips.c...der-gen-trojan/

 

 

Kaspersky TDSSKiller

Located two suspect files and deleted them.

MalwareBytes Chameleon

Could not get MalwareBytes to work. Computer began to crash in the middle of scans, with various error messages as to why (Kernals, memory, etc.)

 

 

Roguekiller

Identified a few suspicious Registry keys which we removed.

 

 

Hitman Pro

Identified no malware threats.

After running these programs we found some further stability issues with Windows 7 - Windows Task Manger would close unexpectedly or tell us it had run out of memory.

We've restarted the computer in Safe Mode and removed the the Conduit toolbar and FireFox fromt he computer. We ran Spybot Search and Destroy and this time in found two win32.downloader.gen files - one from the deleted conduit folder and the second from a data file in windows that we can't locate.

At the end of the search, I noted that Spybot searched more files than it has originally listed it would scan. Almost all of these files included the words zlob.downloader in their names. SpyBot never identified these as a threat, but I saw in forums this is another malicious set of files. I read that this trojan can also cause some of the Blue Screens we encountered.

Any assistance you can provide would be greatly appreciated!

 

 

[Advertisements]

Hello and Welcome on board kuratowa2 ,

my Name is Machiavelli and I will assist you with your problem.
If you booted into safe mode on your computer then print my instructions!
I'm in the 'Malware Staff Team' and will provide you with advice:

To remove Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do. just ask me! Please stay in contact with me until the problem is fixed.

Below are a few tips:

• Removing Malware is usually very difficult.
  We need to search and analyse a lot of files. As this is done in our free time, please be patient especially if I don't answer every day!
• Please follow these instructions
  If you don't follow the instructions your computer may crash. If you fix your PC by yourself, this can be very risky!
• Please stay in contact with me until your problem is resolved
  As Malware may not be totally removed in one session or in one day, please stay in contact with me until the problem is resolved.
• Please don't run any other tools without consulting with me as this can complicate finding and removing all Malware
  Don't run any tools while I'm fixing your PC. That is counter productive and again, will only complicate finding and removing all Malware!
• Read my post completely
  If you don't do so, you may make mistakes that could result in your System crashing by your own actions!

 

Hiya,
 

Malwarebytes noted an infection this morning of the win32.downloader.gen virus on our computer,

• Start Malwarebytes
• Go to the tab called History
• Then click on Application Logs

• Then select the one log where it has found anything, do a double click on it
• Then click on the Export
• Button - select in the menu Text File (.txt)

• Save it on your Desktop and post the content of this text file into your next reply.

Kaspersky TDSSKiller
Located two suspect files and deleted them.

A report has been created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
 

Roguekiller
Identified a few suspicious Registry keys which we removed.

Please post also that log. (RKreport.txt)
 

We ran Spybot Search and Destroy and this time in found two win32.downloader.gen files

Please post, if possible, also that log.

 

Step 1: OTL Scan

Please download OTL (by OldTimer) (if you haven't already) from the link below and save it to your Desktop.
 

Download Mirror #1

• Please copy the text in the Quote box below, (Do Not copy the word Quote), and paste it in the box in OTL. To do that:
  

  netsvcs
  BASESERVICES
  %SYSTEMDRIVE%\*.exe
  /md5start
  services.*
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  qmgr.dll
  mpsvc.dll
  winsock.*
  rpcss.dll
  /md5stop
  dir "%systemdrive%\*" /S /A:L /C
  CREATERESTOREPOINT

  • Highlight everything inside the quote box, (except the word Quote), right click the mouse and click Copy.
• Open on the desktop. To do that:
  • XP users: Double click on the OTL icon.
  • Vista / 7 Users: Right click on the icon and click Run as Administrator)
• Make sure all other windows are closed.
  • You will see a console like the one below:
    
    
    • Click the box beside Scan All Users at the top of the console
    • If you have a 64bit Windows, click the box beside Include 64bit Scans at the top of the console.
    • Make sure the Output box at the top is set to Standard Output.
    • Check the boxes beside LOP Check and Purity Check.
    • Place the mouse pointer inside the box, right click and click Paste. This will put the above script inside OTL
    • Click the button. Do not change any settings unless otherwise told to do so.
    • Let the scan run uninterrupted.
    • When the scan completes, it will open OTL.Txt on the desktop.
    • Please copy the contents of these files and paste it into your reply. To do that:
      • On the OTL.txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
      • Right click inside the forum post window then click Paste. This will paste the contents of the OTL.txt file in the in the post window.
    • Please do the same for the Extras.txt

Step 2: ASWMBR

Please download aswMBR from one of the links below and save it to your Desktop.

Download Mirror #1

• Right-click on aswMBR.exe and select Run as Administrator.
• Click Yes when asked to download the Avast! definitions.
• Click Scan to initiate the scan.
• When the scan finishes, click Save Log and save this to your Desktop.
• Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this log into your next post please.

[Machiavelli]

Hello and Welcome on board kuratowa2 ,

my Name is Machiavelli and I will assist you with your problem.
If you booted into safe mode on your computer then print my instructions!
I'm in the 'Malware Staff Team' and will provide you with advice:

To remove Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do. just ask me! Please stay in contact with me until the problem is fixed.

Below are a few tips:

• Removing Malware is usually very difficult.
  We need to search and analyse a lot of files. As this is done in our free time, please be patient especially if I don't answer every day!
• Please follow these instructions
  If you don't follow the instructions your computer may crash. If you fix your PC by yourself, this can be very risky!
• Please stay in contact with me until your problem is resolved
  As Malware may not be totally removed in one session or in one day, please stay in contact with me until the problem is resolved.
• Please don't run any other tools without consulting with me as this can complicate finding and removing all Malware
  Don't run any tools while I'm fixing your PC. That is counter productive and again, will only complicate finding and removing all Malware!
• Read my post completely
  If you don't do so, you may make mistakes that could result in your System crashing by your own actions!

 

Hiya,
 

Malwarebytes noted an infection this morning of the win32.downloader.gen virus on our computer,

• Start Malwarebytes
• Go to the tab called History
• Then click on Application Logs

• Then select the one log where it has found anything, do a double click on it
• Then click on the Export
• Button - select in the menu Text File (.txt)

• Save it on your Desktop and post the content of this text file into your next reply.

Kaspersky TDSSKiller
Located two suspect files and deleted them.

A report has been created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
 

Roguekiller
Identified a few suspicious Registry keys which we removed.

Please post also that log. (RKreport.txt)
 

We ran Spybot Search and Destroy and this time in found two win32.downloader.gen files

Please post, if possible, also that log.

 

Step 1: OTL Scan

Please download OTL (by OldTimer) (if you haven't already) from the link below and save it to your Desktop.
 

Download Mirror #1

• Please copy the text in the Quote box below, (Do Not copy the word Quote), and paste it in the box in OTL. To do that:
  

  netsvcs
  BASESERVICES
  %SYSTEMDRIVE%\*.exe
  /md5start
  services.*
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  qmgr.dll
  mpsvc.dll
  winsock.*
  rpcss.dll
  /md5stop
  dir "%systemdrive%\*" /S /A:L /C
  CREATERESTOREPOINT

  • Highlight everything inside the quote box, (except the word Quote), right click the mouse and click Copy.
• Open on the desktop. To do that:
  • XP users: Double click on the OTL icon.
  • Vista / 7 Users: Right click on the icon and click Run as Administrator)
• Make sure all other windows are closed.
  • You will see a console like the one below:
    
    
    • Click the box beside Scan All Users at the top of the console
    • If you have a 64bit Windows, click the box beside Include 64bit Scans at the top of the console.
    • Make sure the Output box at the top is set to Standard Output.
    • Check the boxes beside LOP Check and Purity Check.
    • Place the mouse pointer inside the box, right click and click Paste. This will put the above script inside OTL
    • Click the button. Do not change any settings unless otherwise told to do so.
    • Let the scan run uninterrupted.
    • When the scan completes, it will open OTL.Txt on the desktop.
    • Please copy the contents of these files and paste it into your reply. To do that:
      • On the OTL.txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
      • Right click inside the forum post window then click Paste. This will paste the contents of the OTL.txt file in the in the post window.
    • Please do the same for the Extras.txt

Step 2: ASWMBR

Please download aswMBR from one of the links below and save it to your Desktop.

Download Mirror #1

• Right-click on aswMBR.exe and select Run as Administrator.
• Click Yes when asked to download the Avast! definitions.
• Click Scan to initiate the scan.
• When the scan finishes, click Save Log and save this to your Desktop.
• Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this log into your next post please.

[kuratowa2]

Because Malwarebytes kept crashing, there is no log.  I can not locate the Spybot log either.  However, below are the RogueKiller and TDSSKiller logs below.

 

RogueKiller:

 

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software

mail : http://www.adlice.com/contact/

Feedback : http://forum.adlice.com

Website : http://www.adlice.co...es/roguekiller/

Blog : http://www.adlice.com

 

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Union [Admin rights]

Mode : Remove -- Date : 05/02/2014 12:36:53

| ARK || FAK || MBR |

 

¤¤¤ Bad processes : 0 ¤¤¤

 

¤¤¤ Registry Entries : 9 ¤¤¤

[RUN][SUSP PATH] HKCU\[...]\Run : ROC_ROC_APR2013_AV (C:\Users\Union\AppData\Roaming\AVG April 2013 Campaign\AVG-Secure-Search-Update.exe /PROMPT --mid 0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4 --CMPID ROC_APR2013_AV --CMPIDEXTRA 2013 [x][x][x][x]) -> DELETED

[RUN][SUSP PATH] HKCU\[...]\Run : AVG-Secure-Search-Update_0913a (C:\Users\Union\AppData\Roaming\AVG 0913a Campaign\AVG-Secure-Search-Update-0913a.exe /PROMPT --mid 0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4 --CMPID 0913a [x][x][x]) -> DELETED

[RUN][SUSP PATH] HKCU\[...]\Run : AVG-Secure-Search-Update_0214c (C:\Users\Union\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4 /CMPID=0214c [x][x]) -> DELETED

[RUN][SUSP PATH] HKUS\S-1-5-21-3164183197-2720610983-350624195-1000\[...]\Run : ROC_ROC_APR2013_AV (C:\Users\Union\AppData\Roaming\AVG April 2013 Campaign\AVG-Secure-Search-Update.exe /PROMPT --mid 0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4 --CMPID ROC_APR2013_AV --CMPIDEXTRA 2013 [x][x][x][x]) -> [0x2] The system cannot find the file specified. 

[RUN][SUSP PATH] HKUS\S-1-5-21-3164183197-2720610983-350624195-1000\[...]\Run : AVG-Secure-Search-Update_0913a (C:\Users\Union\AppData\Roaming\AVG 0913a Campaign\AVG-Secure-Search-Update-0913a.exe /PROMPT --mid 0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4 --CMPID 0913a [x][x][x]) -> [0x2] The system cannot find the file specified. 

[RUN][SUSP PATH] HKUS\S-1-5-21-3164183197-2720610983-350624195-1000\[...]\Run : AVG-Secure-Search-Update_0214c (C:\Users\Union\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4 /CMPID=0214c [x][x]) -> [0x2] The system cannot find the file specified. 

[RUN][SUSP PATH] HKLM\[...]\Wow6432Node\[...]\Run : DivXMediaServer (C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [-][x][-][x]) -> DELETED

[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)

[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

 

¤¤¤ Scheduled tasks : 0 ¤¤¤

 

¤¤¤ Startup Entries : 0 ¤¤¤

 

¤¤¤ Web browsers : 0 ¤¤¤

 

¤¤¤ Browser Addons : 1 ¤¤¤

[CHR][PUP] Default : AVG SafeGuard

 

¤¤¤ Particular Files / Folders: ¤¤¤

 

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

 

¤¤¤ External Hives: ¤¤¤

-> G:\windows\system32\config\SYSTEM | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - C:] [Sys32 - FOUND] | USERINFO [Startup - FOUND]

-> G:\windows\system32\config\SOFTWARE | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - C:] [Sys32 - FOUND] | USERINFO [Startup - FOUND]

-> G:\windows\system32\config\SECURITY | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - C:] [Sys32 - FOUND] | USERINFO [Startup - FOUND]

-> G:\Documents and Settings\Administrator\NTUSER.DAT | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - C:] [Sys32 - FOUND] | USERINFO [Startup - FOUND]

-> G:\Documents and Settings\Default User\NTUSER.DAT | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - C:] [Sys32 - FOUND] | USERINFO [Startup - FOUND]

-> G:\Documents and Settings\LocalService\NTUSER.DAT | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - C:] [Sys32 - FOUND] | USERINFO [Startup - FOUND]

-> G:\Documents and Settings\NetworkService\NTUSER.DAT | DRVINFO [Drv - G:] | SYSTEMINFO [Sys - C:] [Sys32 - FOUND] | USERINFO [Startup - FOUND]

 

¤¤¤ Infection : PUP ¤¤¤

 

¤¤¤ HOSTS File: ¤¤¤

--> %SystemRoot%\System32\drivers\etc\hosts

 

 

 

 

127.0.0.1 www.007guard.com

 

127.0.0.1 007guard.com

 

127.0.0.1 008i.com

 

127.0.0.1 www.008k.com

 

127.0.0.1 008k.com

 

127.0.0.1 www.00hq.com

 

127.0.0.1 00hq.com

 

127.0.0.1 010402.com

 

127.0.0.1 www.032439.com

 

127.0.0.1 032439.com

 

127.0.0.1 www.0scan.com

 

127.0.0.1 0scan.com

 

127.0.0.1 www.1000gratisproben.com

 

127.0.0.1 1000gratisproben.com

 

127.0.0.1 1001namen.com

 

127.0.0.1 www.1001namen.com

 

127.0.0.1 100888290cs.com

 

127.0.0.1 www.100888290cs.com

 

127.0.0.1 www.100sexlinks.com

 

[...]

 

 

¤¤¤ MBR Check: ¤¤¤

 

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ SCSI) Hitachi HDS721010CLA332 SCSI Disk Device +++++

--- User ---

[MBR] 14c32f5452331edd408d3f6e2370295c

[BSP] d03f456349a532bfe59954ae7fc77378 : Windows Vista/7/8 MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB

1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 941872 MB

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1929160704 | Size: 11700 MB

User = LL1 ... OK!

Error reading LL2 MBR! ([0x1] Incorrect function. )

 

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ SCSI) Seagate ST31000528AS SCSI Disk Device +++++

--- User ---

[MBR] 008430119447963b7a58c6b4a8bbe9ce

[BSP] 95feabfcb5fbd6f577cff53795e4973c : Windows XP MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 499999 MB

User = LL1 ... OK!

Error reading LL2 MBR! ([0x1] Incorrect function. )

 

+++++ PhysicalDrive2: (\\.\PHYSICALDRIVE2 @ SCSI) WDC WD15EARS-00Z5B1 SCSI Disk Device +++++

--- User ---

[MBR] d5c644933fea09b7c458aac4cf47c116

[BSP] f59f7262829a2ebc9d1c4aa873253090 : Windows XP MBR Code

Partition table:

0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 1430796 MB

User = LL1 ... OK!

Error reading LL2 MBR! ([0x1] Incorrect function. )

 

+++++ PhysicalDrive3: (\\.\PHYSICALDRIVE3 @ USB) Generic- SD/MMC USB Device +++++

Error reading User MBR! ([0x15] The device is not ready. )

User = LL1 ... OK!

Error reading LL2 MBR! ([0x32] The request is not supported. )

 

+++++ PhysicalDrive4: (\\.\PHYSICALDRIVE4 @ USB) Generic- Compact Flash USB Device +++++

Error reading User MBR! ([0x15] The device is not ready. )

User = LL1 ... OK!

Error reading LL2 MBR! ([0x32] The request is not supported. )

 

+++++ PhysicalDrive5: (\\.\PHYSICALDRIVE5 @ USB) Generic- SM/xD-Picture USB Device +++++

Error reading User MBR! ([0x15] The device is not ready. )

User = LL1 ... OK!

Error reading LL2 MBR! ([0x32] The request is not supported. )

 

+++++ PhysicalDrive6: (\\.\PHYSICALDRIVE6 @ USB) Generic- MS/MS-Pro USB Device +++++

Error reading User MBR! ([0x15] The device is not ready. )

User = LL1 ... OK!

Error reading LL2 MBR! ([0x32] The request is not supported. )

 

Finished : << RKreport[0]_D_05022014_123653.txt >>

RKreport[0]_S_05022014_121545.txt;RKreport[0]_S_05022014_123643.txt

 

 

TDSSKiller:

11:03:15.0054 0x14b8  TDSS rootkit removing tool 3.0.0.34 Apr 29 2014 18:20:10

11:03:15.0538 0x14b8  ============================================================

11:03:15.0538 0x14b8  Current date / time: 2014/05/02 11:03:15.0538

11:03:15.0538 0x14b8  SystemInfo:

11:03:15.0538 0x14b8  

11:03:15.0538 0x14b8  OS Version: 6.1.7601 ServicePack: 1.0

11:03:15.0538 0x14b8  Product type: Workstation

11:03:15.0538 0x14b8  ComputerName: VULCAN

11:03:15.0538 0x14b8  UserName: Union

11:03:15.0538 0x14b8  Windows directory: C:\Windows

11:03:15.0538 0x14b8  System windows directory: C:\Windows

11:03:15.0538 0x14b8  Running under WOW64

11:03:15.0538 0x14b8  Processor architecture: Intel x64

11:03:15.0538 0x14b8  Number of processors: 4

11:03:15.0538 0x14b8  Page size: 0x1000

11:03:15.0538 0x14b8  Boot type: Normal boot

11:03:15.0538 0x14b8  ============================================================

11:03:15.0538 0x14b8  BG loaded

11:03:15.0787 0x14b8  System UUID: {4A44F2BF-E0D4-3281-446A-30864C6C206B}

11:03:16.0645 0x14b8  Drive \Device\Harddisk0\DR0 - Size: 0xE8D4A50000 (931.32 Gb), SectorSize: 0x200, Cylinders: 0x1DAE8, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

11:03:16.0661 0x14b8  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

11:03:16.0661 0x14b8  Drive \Device\Harddisk2\DR2 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

11:03:16.0692 0x14b8  ============================================================

11:03:16.0692 0x14b8  \Device\Harddisk0\DR0:

11:03:16.0708 0x14b8  MBR partitions:

11:03:16.0708 0x14b8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

11:03:16.0708 0x14b8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x72F98000

11:03:16.0708 0x14b8  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x72FCA800, BlocksNum 0x16DA000

11:03:16.0708 0x14b8  \Device\Harddisk1\DR1:

11:03:16.0708 0x14b8  MBR partitions:

11:03:16.0708 0x14b8  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3D08FC7E

11:03:16.0708 0x14b8  \Device\Harddisk2\DR2:

11:03:16.0708 0x14b8  MBR partitions:

11:03:16.0708 0x14b8  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xAEA86702

11:03:16.0708 0x14b8  ============================================================

11:03:16.0817 0x14b8  C: <-> \Device\Harddisk0\DR0\Partition2

11:03:16.0817 0x14b8  G: <-> \Device\Harddisk1\DR1\Partition1

11:03:17.0285 0x14b8  E: <-> \Device\Harddisk2\DR2\Partition1

11:03:17.0472 0x14b8  D: <-> \Device\Harddisk0\DR0\Partition3

11:03:17.0472 0x14b8  ============================================================

11:03:17.0472 0x14b8  Initialize success

11:03:17.0472 0x14b8  ============================================================

11:03:28.0085 0x0644  ============================================================

11:03:28.0085 0x0644  Scan started

11:03:28.0085 0x0644  Mode: Manual; 

11:03:28.0085 0x0644  ============================================================

11:03:28.0085 0x0644  KSN ping started

11:03:30.0628 0x0644  KSN ping finished: true

11:04:50.0841 0x0644  ================ Scan system memory ========================

11:04:50.0842 0x0644  System memory - ok

11:04:50.0842 0x0644  ================ Scan services =============================

11:04:52.0298 0x0644  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

11:04:52.0306 0x0644  1394ohci - ok

11:04:52.0357 0x0644  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

11:04:52.0398 0x0644  ACPI - ok

11:04:52.0458 0x0644  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

11:04:52.0470 0x0644  AcpiPmi - ok

11:04:52.0560 0x0644  [ D0B11E40EA74A98A5E133DF1F5276240, BAD5885CD8CC271D59DFA95159EFC3AC36D2BA11B6DA593AAED0C45F1C2F280F ] acsock          C:\Windows\system32\DRIVERS\acsock64.sys

11:04:52.0570 0x0644  acsock - ok

11:04:52.0907 0x0644  [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

11:04:52.0912 0x0644  AdobeARMservice - ok

11:04:53.0453 0x0644  [ 7C7E868E1D8096ED08D80FF7712BB9D8, EB4438F3CC377728173E018A763F0D0A8D5BBA4A289F554036D06B24030D2D62 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

11:04:53.0489 0x0644  AdobeFlashPlayerUpdateSvc - ok

11:04:53.0586 0x0644  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

11:04:53.0604 0x0644  adp94xx - ok

11:04:53.0702 0x0644  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys

11:04:53.0728 0x0644  adpahci - ok

11:04:53.0758 0x0644  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

11:04:53.0767 0x0644  adpu320 - ok

11:04:53.0812 0x0644  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

11:04:53.0813 0x0644  AeLookupSvc - ok

11:04:53.0893 0x0644  [ 79059559E89D06E8B80CE2944BE20228, 6E041D2FED2D0C3D8E16E56CB61D3245F9144EA92F5BDC9A4AA30598D1C8E6EE ] AFD             C:\Windows\system32\drivers\afd.sys

11:04:53.0904 0x0644  AFD - ok

11:04:53.0938 0x0644  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

11:04:53.0942 0x0644  agp440 - ok

11:04:53.0975 0x0644  [ 9D31CBF550E490C947764E982D47E9C0, ADA17C0D4B3259823A67E6FB845BF8648B0CCB60659ECBA66CCFE70D6D0B641A ] ahcix64s        C:\Windows\system32\drivers\ahcix64s.sys

11:04:53.0981 0x0644  ahcix64s - ok

11:04:54.0016 0x0644  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

11:04:54.0020 0x0644  ALG - ok

11:04:54.0070 0x0644  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

11:04:54.0074 0x0644  aliide - ok

11:04:54.0130 0x0644  [ C9A5A02CB76B35A78404F6D4101163F9, 184C68FCDAB76862D39FD5D09FA0D53F600A657DE55DBECBE7B1EBA0DCAA496F ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

11:04:54.0135 0x0644  AMD External Events Utility - ok

11:04:54.0162 0x0644  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

11:04:54.0164 0x0644  amdide - ok

11:04:54.0186 0x0644  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

11:04:54.0189 0x0644  AmdK8 - ok

11:04:54.0636 0x0644  [ 5F62E6CFD4FEA8D19110BDEB423BF510, 68286E456A8295F988768C5FC3D9D719895FE191E112438DAD0ABF7377A05303 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

11:04:54.0838 0x0644  amdkmdag - ok

11:04:54.0955 0x0644  [ D93655EC3CA48FCBFFD9D4E6DF63737F, C56316AC4C990A0D391F8CFA0C4F0FF036FA37322BE9B13DFAACCAA6077EFE8C ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

11:04:54.0973 0x0644  amdkmdap - ok

11:04:55.0013 0x0644  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys

11:04:55.0015 0x0644  AmdPPM - ok

11:04:55.0044 0x0644  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

11:04:55.0049 0x0644  amdsata - ok

11:04:55.0085 0x0644  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

11:04:55.0092 0x0644  amdsbs - ok

11:04:55.0116 0x0644  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys

11:04:55.0121 0x0644  amdxata - ok

11:04:55.0162 0x0644  [ B9C95291F5EA1072CEC2BA690E07F29F, 1FC75E20B31680667A5FE4E0AB5ADD6CFE7016A3B9E975E92EAA192689684E54 ] AMD_RAIDXpert   C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe

11:04:55.0165 0x0644  AMD_RAIDXpert - ok

11:04:55.0246 0x0644  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID           C:\Windows\system32\drivers\appid.sys

11:04:55.0253 0x0644  AppID - ok

11:04:55.0319 0x0644  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

11:04:55.0329 0x0644  AppIDSvc - ok

11:04:55.0413 0x0644  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll

11:04:55.0415 0x0644  Appinfo - ok

11:04:55.0621 0x0644  [ 221564CC7BE37611FE15EACF443E1BF6, 381BDF17418C779D72332431BA174C2AD76CD9C7C1711FF5142EA9B05D5555E4 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

11:04:55.0623 0x0644  Apple Mobile Device - ok

11:04:55.0667 0x0644  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys

11:04:55.0699 0x0644  arc - ok

11:04:55.0727 0x0644  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys

11:04:55.0759 0x0644  arcsas - ok

11:04:55.0911 0x0644  [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

11:04:55.0952 0x0644  aspnet_state - ok

11:04:55.0989 0x0644  astcc - ok

11:04:56.0007 0x0644  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

11:04:56.0009 0x0644  AsyncMac - ok

11:04:56.0064 0x0644  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

11:04:56.0092 0x0644  atapi - ok

11:04:56.0172 0x0644  [ E02B26650ACC2F4901342D4A66774AD7, 632A88C5AE6E71BB86C5306566EA08C4678F3F949479C8D1BEB8B01DD6724B88 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

11:04:56.0174 0x0644  AtiHDAudioService - ok

11:04:56.0219 0x0644  [ E82E61F46D1336447F4DEFF8C074F13E, 9FC152B33F1D9F5684B687743E943AA26AC17A1093F4C31A43C7012E70BC302E ] AtiPcie         C:\Windows\system32\drivers\AtiPcie64.sys

11:04:56.0221 0x0644  AtiPcie - ok

11:04:56.0276 0x0644  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

11:04:56.0289 0x0644  AudioEndpointBuilder - ok

11:04:56.0310 0x0644  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

11:04:56.0322 0x0644  AudioSrv - ok

11:04:56.0429 0x0644  [ 2D5E8A35808FDA50274CFD22000DAB53, 3C11CCD0162DD5D036527D7DBEC8159CCB60E84C16F9ADA84773EC3302BEB4A5 ] Avgdiska        C:\Windows\system32\DRIVERS\avgdiska.sys

11:04:56.0440 0x0644  Avgdiska - ok

11:04:56.0621 0x0644  [ 792C8CDADE8C92629752E56A03F0FF1C, A39B6913402DB3A1CBD51E54C0C84434E14DC57B2F7E5CA7C58EBC2B21B7BBAB ] AVGIDSAgent     C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

11:04:56.0687 0x0644  AVGIDSAgent - ok

11:04:56.0751 0x0644  [ B7E17B7733C4266F140DD356817E5678, CBDD48476811C3B0D66528DD5A0E69A5F1D8070C68EBD8AA5170A8A2C4B22A8D ] AVGIDSDriver    C:\Windows\system32\DRIVERS\avgidsdrivera.sys

11:04:56.0756 0x0644  AVGIDSDriver - ok

11:04:56.0867 0x0644  [ F6CE2F1B6E890FB5EBC04A11A2E31DC1, 7F1442D6EDF18D089C7DBB00AF03BB4376A59006187D29D05402B2830E84F7E7 ] AVGIDSHA        C:\Windows\system32\DRIVERS\avgidsha.sys

11:04:56.0887 0x0644  AVGIDSHA - ok

11:04:56.0942 0x0644  [ B323DE78E0C75F3605C7A200F3CF350F, 1CBBB65E9E91E0C787530B6B21D89771083C20604E6F8447FAA9BC5FAE1CA895 ] Avgldx64        C:\Windows\system32\DRIVERS\avgldx64.sys

11:04:56.0954 0x0644  Avgldx64 - ok

11:04:57.0224 0x0644  [ 6E381AFF06BC6ABFAEF70405014D7A37, 887D6B766E27B18406BA30C02F46B5015A4BF9C9947462F75D87956BA4F61745 ] Avgloga         C:\Windows\system32\DRIVERS\avgloga.sys

11:04:57.0257 0x0644  Avgloga - ok

11:04:57.0301 0x0644  [ DBFB9BEAE2816FDB4B4EF8C89AFA3DF0, 840C5015960904090298D820F526A1A333A4E88C56FA932D1E80F10BF62040E4 ] Avgmfx64        C:\Windows\system32\DRIVERS\avgmfx64.sys

11:04:57.0306 0x0644  Avgmfx64 - ok

11:04:57.0347 0x0644  [ 9C6CD518AE78D532FB33240DE11C765D, 3532FB7D5434A5488C7513105B51734A27C1D95C8A7ADF1A5DE18A35FE8CE5A6 ] Avgrkx64        C:\Windows\system32\DRIVERS\avgrkx64.sys

11:04:57.0350 0x0644  Avgrkx64 - ok

11:04:57.0421 0x0644  [ F86A506DA0BF61402E19DB8AF0684C9A, A4AB8FE25B3A27E7351ABFF6A8B7120C722E797BE38708A1C5E38211672C6AE8 ] Avgtdia         C:\Windows\system32\DRIVERS\avgtdia.sys

11:04:57.0426 0x0644  Avgtdia - ok

11:04:57.0500 0x0644  [ 9FD4BC46784309176AEFA26AA8241DA1, 939F7503A6231E5FD5A3F46BDB97671D62D0CEC8B6EF82BD6B1090C45D9D6E1F ] avgtp           C:\Windows\system32\drivers\avgtpx64.sys

11:04:57.0502 0x0644  avgtp - ok

11:04:57.0566 0x0644  [ DBAEB3D23C653018629A76E53260E122, DF402D83206EDA77818D3B59456240E66C69D307FCC7419354BF363413BC7963 ] avgwd           C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

11:04:57.0571 0x0644  avgwd - ok

11:04:57.0598 0x0644  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

11:04:57.0602 0x0644  AxInstSV - ok

11:04:57.0642 0x0644  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

11:04:57.0654 0x0644  b06bdrv - ok

11:04:57.0695 0x0644  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

11:04:57.0702 0x0644  b57nd60a - ok

11:04:57.0994 0x0644  [ 6163664C7E9CD110AF70180C126C3FDC, 9A801295CDE2BDE4EE0E96C610E4C01F6915DBDA2104D0E8873AFF1BC34A0FA1 ] BcmSqlStartupSvc C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

11:04:58.0002 0x0644  BcmSqlStartupSvc - ok

11:04:58.0085 0x0644  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

11:04:58.0108 0x0644  BDESVC - ok

11:04:58.0143 0x0644  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

11:04:58.0143 0x0644  Beep - ok

11:04:58.0225 0x0644  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

11:04:58.0246 0x0644  BFE - ok

11:04:58.0362 0x0644  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

11:04:58.0379 0x0644  BITS - ok

11:04:58.0421 0x0644  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

11:04:58.0424 0x0644  blbdrive - ok

11:04:58.0760 0x0644  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

11:04:58.0776 0x0644  Bonjour Service - ok

11:04:58.0850 0x0644  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

11:04:58.0856 0x0644  bowser - ok

11:04:58.0958 0x0644  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

11:04:58.0998 0x0644  BrFiltLo - ok

11:04:59.0042 0x0644  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

11:04:59.0065 0x0644  BrFiltUp - ok

11:04:59.0142 0x0644  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

11:04:59.0152 0x0644  Browser - ok

11:04:59.0212 0x0644  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

11:04:59.0262 0x0644  Brserid - ok

11:04:59.0307 0x0644  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

11:04:59.0315 0x0644  BrSerWdm - ok

11:04:59.0384 0x0644  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

11:04:59.0405 0x0644  BrUsbMdm - ok

11:04:59.0447 0x0644  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

11:04:59.0478 0x0644  BrUsbSer - ok

11:04:59.0561 0x0644  [ B289FD1D275722878E5A13B692E648F7, 8254CE0EC38AADEF5C094D7201CE228E00F474717116A67F110579812497DF3C ] BSecACFltr      C:\Windows\system32\DRIVERS\BSecACFltr.sys

11:04:59.0564 0x0644  BSecACFltr - ok

11:04:59.0714 0x0644  [ B38B4FACF018415481897E2BC51AC4F2, 424338B48F542FD51D8CCE02176E4C07B370F47B65CA3A15E834FBA233B74CAE ] Bsecure         C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe

11:04:59.0719 0x0644  Bsecure - ok

11:04:59.0757 0x0644  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

11:04:59.0772 0x0644  BTHMODEM - ok

11:04:59.0814 0x0644  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

11:04:59.0825 0x0644  bthserv - ok

11:04:59.0938 0x0644  [ 555FA105C22B1616094EDAD1CBFB0551, 3DB8EB0F95589E8CC338AE033C314256296F0BF039B338CF023FE393CF80840C ] cbfs3           C:\Windows\system32\DRIVERS\cbfs3.sys

11:04:59.0955 0x0644  cbfs3 - ok

11:05:00.0000 0x0644  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

11:05:00.0034 0x0644  cdfs - ok

11:05:00.0136 0x0644  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

11:05:00.0146 0x0644  cdrom - ok

11:05:00.0236 0x0644  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

11:05:00.0256 0x0644  CertPropSvc - ok

11:05:00.0354 0x0644  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys

11:05:00.0380 0x0644  circlass - ok

11:05:00.0472 0x0644  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys

11:05:00.0522 0x0644  CLFS - ok

11:05:00.0771 0x0644  [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

11:05:00.0790 0x0644  clr_optimization_v2.0.50727_32 - ok

11:05:00.0890 0x0644  [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

11:05:00.0927 0x0644  clr_optimization_v2.0.50727_64 - ok

11:05:01.0297 0x0644  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

11:05:01.0592 0x0644  clr_optimization_v4.0.30319_32 - ok

11:05:01.0622 0x0644  [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

11:05:01.0781 0x0644  clr_optimization_v4.0.30319_64 - ok

11:05:01.0849 0x0644  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys

11:05:01.0854 0x0644  CmBatt - ok

11:05:01.0905 0x0644  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

11:05:01.0910 0x0644  cmdide - ok

11:05:02.0025 0x0644  [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG             C:\Windows\system32\Drivers\cng.sys

11:05:02.0053 0x0644  CNG - ok

11:05:02.0126 0x0644  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

11:05:02.0164 0x0644  Compbatt - ok

11:05:02.0206 0x0644  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

11:05:02.0210 0x0644  CompositeBus - ok

11:05:02.0226 0x0644  COMSysApp - ok

11:05:02.0258 0x0644  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

11:05:02.0265 0x0644  crcdisk - ok

11:05:02.0372 0x0644  [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc        C:\Windows\system32\cryptsvc.dll

11:05:02.0383 0x0644  CryptSvc - ok

11:05:02.0509 0x0644  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

11:05:02.0529 0x0644  DcomLaunch - ok

11:05:02.0563 0x0644  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

11:05:02.0590 0x0644  defragsvc - ok

11:05:02.0615 0x0644  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

11:05:02.0617 0x0644  DfsC - ok

11:05:02.0689 0x0644  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

11:05:02.0711 0x0644  Dhcp - ok

11:05:02.0742 0x0644  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

11:05:02.0744 0x0644  discache - ok

11:05:02.0843 0x0644  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys

11:05:02.0881 0x0644  Disk - ok

11:05:03.0085 0x0644  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

11:05:03.0099 0x0644  Dnscache - ok

11:05:03.0310 0x0644  [ 1C92CE85ED00554BDD118923E751A162, 8F91BF8ED73585FCA74320D783180C80FF4F420E5B30FCC085D5929FC1AD4373 ] Dokan           C:\Windows\system32\drivers\dokan.sys

11:05:03.0315 0x0644  Dokan - ok

11:05:03.0427 0x0644  [ CA41DFFFB8BA956FFE9729D0B3853A58, EDD138DAD37F03559D590FDF3D0DACD1BDC592054FBB2F8E4E811BB9C683D027 ] DokanMounter    C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe

11:05:03.0429 0x0644  DokanMounter - ok

11:05:03.0520 0x0644  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

11:05:03.0542 0x0644  dot3svc - ok

11:05:03.0606 0x0644  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

11:05:03.0612 0x0644  DPS - ok

11:05:03.0656 0x0644  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

11:05:03.0678 0x0644  drmkaud - ok

11:05:03.0824 0x0644  [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

11:05:03.0842 0x0644  DXGKrnl - ok

11:05:03.0900 0x0644  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

11:05:03.0910 0x0644  EapHost - ok

11:05:04.0281 0x0644  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys

11:05:04.0375 0x0644  ebdrv - ok

11:05:04.0452 0x0644  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] EFS             C:\Windows\System32\lsass.exe

11:05:04.0457 0x0644  EFS - ok

11:05:04.0576 0x0644  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

11:05:04.0616 0x0644  ehRecvr - ok

11:05:04.0652 0x0644  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

11:05:04.0674 0x0644  ehSched - ok

11:05:04.0823 0x0644  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

11:05:04.0850 0x0644  elxstor - ok

11:05:04.0897 0x0644  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

11:05:04.0915 0x0644  ErrDev - ok

11:05:05.0145 0x0644  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

11:05:05.0171 0x0644  EventSystem - ok

11:05:05.0283 0x0644  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

11:05:05.0316 0x0644  exfat - ok

11:05:05.0415 0x0644  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

11:05:05.0477 0x0644  fastfat - ok

11:05:05.0618 0x0644  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe

11:05:05.0649 0x0644  Fax - ok

11:05:05.0665 0x0644  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys

11:05:05.0696 0x0644  fdc - ok

11:05:05.0743 0x0644  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

11:05:05.0743 0x0644  fdPHost - ok

11:05:05.0774 0x0644  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

11:05:05.0774 0x0644  FDResPub - ok

11:05:05.0836 0x0644  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

11:05:05.0852 0x0644  FileInfo - ok

11:05:05.0852 0x0644  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

11:05:05.0852 0x0644  Filetrace - ok

11:05:05.0961 0x0644  [ F76D04F7413B07DAA029F6520B64B4E8, 3EB13C0EFE737880853FB8952381E7A57723F9472E0E4ED7CDA8A0D7DE8DC90D ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

11:05:05.0977 0x0644  FLEXnet Licensing Service - ok

11:05:06.0023 0x0644  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

11:05:06.0023 0x0644  flpydisk - ok

11:05:06.0117 0x0644  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

11:05:06.0133 0x0644  FltMgr - ok

11:05:06.0320 0x0644  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll

11:05:06.0351 0x0644  FontCache - ok

11:05:06.0413 0x0644  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

11:05:06.0413 0x0644  FontCache3.0.0.0 - ok

11:05:06.0476 0x0644  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

11:05:06.0491 0x0644  FsDepends - ok

11:05:06.0538 0x0644  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

11:05:06.0569 0x0644  Fs_Rec - ok

11:05:06.0663 0x0644  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

11:05:06.0694 0x0644  fvevol - ok

11:05:06.0772 0x0644  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

11:05:06.0788 0x0644  gagp30kx - ok

11:05:07.0115 0x0644  [ E6CE7A89183D1840F0FF63694292FFA2, 8907ADCF9967026CD1A9D545E2274569F840F1DFF0E407CC77B6A662267AAC4B ] GamesAppIntegrationService C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

11:05:07.0256 0x0644  GamesAppIntegrationService - ok

11:05:07.0381 0x0644  [ C403C5DB49A0F9AAF4F2128EDC0106D8, 3C6948B63278022D8182F773C5FA15784514F76C1546118DDBADBA322B962D12 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

11:05:07.0412 0x0644  GamesAppService - ok

11:05:07.0443 0x0644  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

11:05:07.0443 0x0644  GEARAspiWDM - ok

11:05:07.0583 0x0644  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

11:05:07.0599 0x0644  gpsvc - ok

11:05:07.0771 0x0644  [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

11:05:07.0786 0x0644  gupdate - ok

11:05:07.0833 0x0644  [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

11:05:07.0833 0x0644  gupdatem - ok

11:05:07.0927 0x0644  [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

11:05:07.0942 0x0644  gusvc - ok

11:05:08.0020 0x0644  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

11:05:08.0036 0x0644  hcw85cir - ok

11:05:08.0176 0x0644  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

11:05:08.0223 0x0644  HdAudAddService - ok

11:05:08.0285 0x0644  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

11:05:08.0285 0x0644  HDAudBus - ok

11:05:08.0332 0x0644  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

11:05:08.0363 0x0644  HidBatt - ok

11:05:08.0426 0x0644  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

11:05:08.0457 0x0644  HidBth - ok

11:05:08.0566 0x0644  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys

11:05:08.0582 0x0644  HidIr - ok

11:05:08.0629 0x0644  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll

11:05:08.0629 0x0644  hidserv - ok

11:05:08.0691 0x0644  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\drivers\hidusb.sys

11:05:08.0691 0x0644  HidUsb - ok

11:05:08.0738 0x0644  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

11:05:08.0753 0x0644  hkmsvc - ok

11:05:08.0847 0x0644  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

11:05:08.0863 0x0644  HomeGroupListener - ok

11:05:08.0878 0x0644  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

11:05:08.0894 0x0644  HomeGroupProvider - ok

11:05:09.0143 0x0644  [ 2A8B93A01621E100A578E83C768AFA2C, 6637D260AF180D1F200D219796FCE6D524FC6BF57C0CEEF9E1B3616E85865AD1 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

11:05:09.0143 0x0644  HP Support Assistant Service - ok

11:05:09.0331 0x0644  [ 7B8C1B09C11E8DB7C4480ABD7D17E821, 0E35FD439B24CEAD623A5D7319B865A6BCE6F1F3057671F62B4F844D8EC3D206 ] HPAuto          C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe

11:05:09.0346 0x0644  HPAuto - ok

11:05:09.0487 0x0644  [ 6A181452D4E240B8ECC7614B9A19BDE9, 3E458A737DA597DF007D278E9D81F2BF259AB4B97A4C188CEDAEA1F144B1074F ] HPClientSvc     C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

11:05:09.0502 0x0644  HPClientSvc - ok

11:05:09.0908 0x0644  [ D2946D9F020AE76E9CEF9B4A6DF838C0, C29CE594879385DA12B8EAA90B258905827B613839CCD820DE49215B68676995 ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

11:05:10.0048 0x0644  hpqwmiex - ok

11:05:10.0126 0x0644  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

11:05:10.0142 0x0644  HpSAMD - ok

11:05:10.0220 0x0644  [ F47CEC45FB85791D4AB237563AD0FA8F, 1035066D48BD179855BCA7F62EFA1B951E6E839D2E29E15A31844E18A126DD41 ] HTCAND64        C:\Windows\system32\Drivers\ANDROIDUSB.sys

11:05:10.0220 0x0644  HTCAND64 - ok

11:05:10.0313 0x0644  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

11:05:10.0345 0x0644  HTTP - ok

11:05:10.0376 0x0644  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

11:05:10.0391 0x0644  hwpolicy - ok

11:05:10.0454 0x0644  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

11:05:10.0485 0x0644  i8042prt - ok

11:05:10.0610 0x0644  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

11:05:10.0641 0x0644  iaStorV - ok

11:05:10.0844 0x0644  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

11:05:10.0875 0x0644  idsvc - ok

11:05:10.0984 0x0644  IEEtwCollectorService - ok

11:05:11.0624 0x0644  [ A87261EF1546325B559374F5689CF5BC, 8DE48A8A13A32AAAC54CDDF58F3F61BE3E2802C1D9CA1CA98E57EB0D65FB6002 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

11:05:11.0842 0x0644  igfx - ok

11:05:11.0889 0x0644  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

11:05:11.0905 0x0644  iirsp - ok

11:05:12.0045 0x0644  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

11:05:12.0107 0x0644  IKEEXT - ok

11:05:12.0326 0x0644  [ 589B94A9B73A0E819FF873743A480834, 49FA8EC38F1C78F38F818CC28F2734802739247F0B89A971D65FDAF3110041A8 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

11:05:12.0373 0x0644  IntcAzAudAddService - ok

11:05:12.0419 0x0644  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

11:05:12.0451 0x0644  intelide - ok

11:05:12.0529 0x0644  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\drivers\intelppm.sys

11:05:12.0544 0x0644  intelppm - ok

11:05:12.0575 0x0644  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

11:05:12.0607 0x0644  IPBusEnum - ok

11:05:12.0638 0x0644  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

11:05:12.0638 0x0644  IpFilterDriver - ok

11:05:12.0716 0x0644  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

11:05:12.0731 0x0644  iphlpsvc - ok

11:05:12.0763 0x0644  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

11:05:12.0778 0x0644  IPMIDRV - ok

11:05:12.0809 0x0644  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

11:05:12.0825 0x0644  IPNAT - ok

11:05:13.0028 0x0644  [ 842D1EDD0F2A6E0E6631BB96BAAA01DE, 9CDD0B99F2C5DAD573A9EA8D5AB2DBFD7A941454CBBA5BFE34E49F2D4EE96A90 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

11:05:13.0043 0x0644  iPod Service - ok

11:05:13.0106 0x0644  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

11:05:13.0121 0x0644  IRENUM - ok

11:05:13.0153 0x0644  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

11:05:13.0168 0x0644  isapnp - ok

11:05:13.0231 0x0644  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

11:05:13.0262 0x0644  iScsiPrt - ok

11:05:13.0309 0x0644  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

11:05:13.0309 0x0644  kbdclass - ok

11:05:13.0355 0x0644  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

11:05:13.0355 0x0644  kbdhid - ok

11:05:13.0449 0x0644  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] KeyIso          C:\Windows\system32\lsass.exe

11:05:13.0449 0x0644  KeyIso - ok

11:05:13.0511 0x0644  [ 8F489706472F7E9A06BAAA198703FA64, F020406690FB38EABD82D63B91D33039CC93ED52A5497AE12BAF475F22D0B08A ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

11:05:13.0527 0x0644  KSecDD - ok

11:05:13.0574 0x0644  [ 868A2CAAB12EFC7A021682BCA0EEC54C, 12C4925B5B3D6EA7B6410C01F33158C6EAB50CBD6AF445F8B04ED9899720C2DD ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

11:05:13.0605 0x0644  KSecPkg - ok

11:05:13.0621 0x0644  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

11:05:13.0636 0x0644  ksthunk - ok

11:05:13.0745 0x0644  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

11:05:13.0777 0x0644  KtmRm - ok

11:05:13.0886 0x0644  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll

11:05:13.0901 0x0644  LanmanServer - ok

11:05:13.0995 0x0644  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

11:05:14.0011 0x0644  LanmanWorkstation - ok

11:05:14.0089 0x0644  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

11:05:14.0089 0x0644  lltdio - ok

11:05:14.0151 0x0644  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

11:05:14.0167 0x0644  lltdsvc - ok

11:05:14.0182 0x0644  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

11:05:14.0198 0x0644  lmhosts - ok

11:05:14.0276 0x0644  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

11:05:14.0291 0x0644  LSI_FC - ok

11:05:14.0338 0x0644  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

11:05:14.0354 0x0644  LSI_SAS - ok

11:05:14.0369 0x0644  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

11:05:14.0385 0x0644  LSI_SAS2 - ok

11:05:14.0385 0x0644  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

11:05:14.0401 0x0644  LSI_SCSI - ok

11:05:14.0416 0x0644  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

11:05:14.0416 0x0644  luafv - ok

11:05:14.0525 0x0644  [ 1F02B554DDC4086D786537A3BF6488F1, 419B8FC4AD9542DEC61F5F689F715ECBB2A49B0D591292FDF31AFCDAB9AF4FD1 ] lxecCATSCustConnectService C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe

11:05:14.0557 0x0644  lxecCATSCustConnectService - ok

11:05:14.0588 0x0644  lxec_device - ok

11:05:14.0635 0x0644  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

11:05:14.0650 0x0644  Mcx2Svc - ok

11:05:14.0666 0x0644  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys

11:05:14.0681 0x0644  megasas - ok

11:05:14.0759 0x0644  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

11:05:14.0791 0x0644  MegaSR - ok

11:05:14.0853 0x0644  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

11:05:14.0869 0x0644  MMCSS - ok

11:05:14.0900 0x0644  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

11:05:14.0900 0x0644  Modem - ok

11:05:14.0962 0x0644  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

11:05:14.0962 0x0644  monitor - ok

11:05:14.0993 0x0644  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

11:05:15.0009 0x0644  mouclass - ok

11:05:15.0009 0x0644  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

11:05:15.0009 0x0644  mouhid - ok

11:05:15.0040 0x0644  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

11:05:15.0040 0x0644  mountmgr - ok

11:05:15.0212 0x0644  [ 731837CB3B49B738402CE32455B75CE2, 5490D418D96725410169BF7895DBE9A332CD859EBADD129FEACB02A195599335 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

11:05:15.0227 0x0644  MozillaMaintenance - ok

11:05:15.0259 0x0644  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

11:05:15.0290 0x0644  mpio - ok

11:05:15.0352 0x0644  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

11:05:15.0352 0x0644  mpsdrv - ok

11:05:15.0461 0x0644  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

11:05:15.0461 0x0644  MpsSvc - ok

11:05:15.0508 0x0644  [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

11:05:15.0508 0x0644  MRxDAV - ok

11:05:15.0555 0x0644  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

11:05:15.0571 0x0644  mrxsmb - ok

11:05:15.0649 0x0644  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

11:05:15.0649 0x0644  mrxsmb10 - ok

11:05:15.0680 0x0644  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

11:05:15.0680 0x0644  mrxsmb20 - ok

11:05:15.0727 0x0644  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

11:05:15.0727 0x0644  msahci - ok

11:05:15.0758 0x0644  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

11:05:15.0773 0x0644  msdsm - ok

11:05:15.0820 0x0644  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

11:05:15.0820 0x0644  MSDTC - ok

11:05:15.0867 0x0644  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

11:05:15.0867 0x0644  Msfs - ok

11:05:15.0898 0x0644  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

11:05:15.0898 0x0644  mshidkmdf - ok

11:05:15.0929 0x0644  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

11:05:15.0929 0x0644  msisadrv - ok

11:05:16.0039 0x0644  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

11:05:16.0070 0x0644  MSiSCSI - ok

11:05:16.0085 0x0644  msiserver - ok

11:05:16.0101 0x0644  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

11:05:16.0101 0x0644  MSKSSRV - ok

11:05:16.0101 0x0644  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

11:05:16.0132 0x0644  MSPCLOCK - ok

11:05:16.0148 0x0644  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

11:05:16.0163 0x0644  MSPQM - ok

11:05:16.0273 0x0644  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

11:05:16.0288 0x0644  MsRPC - ok

11:05:16.0319 0x0644  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

11:05:16.0319 0x0644  mssmbios - ok

11:05:16.0460 0x0644  MSSQL$MSSMLBIZ - ok

11:05:16.0585 0x0644  [ 1D89EB4E2A99CABD4E81225F4F4C4B25, B9C4D956E3F74CB463A1A14287F4B550381FBB3E4B2DF9418E041E02A159E31E ] MSSQLServerADHelper C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe

11:05:16.0616 0x0644  MSSQLServerADHelper - ok

11:05:16.0647 0x0644  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

11:05:16.0678 0x0644  MSTEE - ok

11:05:16.0725 0x0644  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

11:05:16.0725 0x0644  MTConfig - ok

11:05:16.0772 0x0644  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

11:05:16.0819 0x0644  Mup - ok

11:05:16.0990 0x0644  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

11:05:17.0006 0x0644  napagent - ok

11:05:17.0115 0x0644  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

11:05:17.0131 0x0644  NativeWifiP - ok

11:05:17.0427 0x0644  [ 7BE93DBB02B66E72872FF76D8A92E662, 5489E40BF1595D8EDC6C142E3F7FFE245E3502433D5E1903F403537796478A24 ] NAVENG          C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\ENG64.SYS

11:05:17.0443 0x0644  NAVENG - ok

11:05:17.0786 0x0644  [ BE99EDBBA322CA59B3F2FE17B9BF987A, CFBBEC938E6125842A049C31BA201001462F9CA7ECF9A211D281552C8AC76CA0 ] NAVEX15         C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\EX64.SYS

11:05:17.0864 0x0644  NAVEX15 - ok

11:05:18.0020 0x0644  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys

11:05:18.0067 0x0644  NDIS - ok

11:05:18.0176 0x0644  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

11:05:18.0191 0x0644  NdisCap - ok

11:05:18.0238 0x0644  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

11:05:18.0254 0x0644  NdisTapi - ok

11:05:18.0316 0x0644  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

11:05:18.0316 0x0644  Ndisuio - ok

11:05:18.0379 0x0644  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

11:05:18.0394 0x0644  NdisWan - ok

11:05:18.0425 0x0644  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

11:05:18.0425 0x0644  NDProxy - ok

11:05:18.0519 0x0644  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

11:05:18.0519 0x0644  NetBIOS - ok

11:05:18.0550 0x0644  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

11:05:18.0566 0x0644  NetBT - ok

11:05:18.0628 0x0644  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] Netlogon        C:\Windows\system32\lsass.exe

11:05:18.0644 0x0644  Netlogon - ok

11:05:18.0722 0x0644  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

11:05:18.0737 0x0644  Netman - ok

11:05:18.0831 0x0644  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:05:18.0862 0x0644  NetMsmqActivator - ok

11:05:18.0893 0x0644  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:05:18.0909 0x0644  NetPipeActivator - ok

11:05:19.0018 0x0644  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

11:05:19.0034 0x0644  netprofm - ok

11:05:19.0221 0x0644  [ 81B8D0C1CE44A7FDBD596B693783950C, 9F47ACECFE32E935FE03D0134018A9C03698D9E25E6FC9B8A525A4FE4A880642 ] netr7364        C:\Windows\system32\DRIVERS\netr7364.sys

11:05:19.0283 0x0644  netr7364 - ok

11:05:19.0299 0x0644  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:05:19.0315 0x0644  NetTcpActivator - ok

11:05:19.0330 0x0644  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:05:19.0330 0x0644  NetTcpPortSharing - ok

11:05:19.0393 0x0644  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

11:05:19.0408 0x0644  nfrd960 - ok

11:05:19.0627 0x0644  [ 436E7B2E6F42C2717C1D670220D03336, 5F2AD6D60531296EF4648D19E9EF9CF0ECBEDA0C8CE0EA96EBE66C9DB98A8780 ] NIS             C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe

11:05:19.0627 0x0644  NIS - ok

11:05:19.0720 0x0644  [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc          C:\Windows\System32\nlasvc.dll

11:05:19.0751 0x0644  NlaSvc - ok

11:05:20.0375 0x0644  [ B1EF4686961986DFFB7FE8F18E6FCB5B, 562F144DAA8C2D6E4D55C7ABEF1DB52FC67F1A09E03CD700E27DFC3A4920E271 ] nlsX86cc        C:\Windows\SysWOW64\nlssrv32.exe

11:05:20.0375 0x0644  nlsX86cc - ok

11:05:20.0750 0x0644  [ 5839A8027D6D324A7CD494051A96628C, 474F2D0BB463ABE68D7C4D2C630860AED4B722EC62C616C91EE00AA965378382 ] NOBU            C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

11:05:20.0797 0x0644  NOBU - ok

11:05:20.0843 0x0644  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

11:05:20.0843 0x0644  Npfs - ok

11:05:20.0953 0x0644  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

11:05:20.0968 0x0644  nsi - ok

11:05:20.0999 0x0644  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

11:05:20.0999 0x0644  nsiproxy - ok

11:05:21.0124 0x0644  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

11:05:21.0187 0x0644  Ntfs - ok

11:05:21.0233 0x0644  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

11:05:21.0249 0x0644  Null - ok

11:05:21.0358 0x0644  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

11:05:21.0389 0x0644  nvraid - ok

11:05:21.0452 0x0644  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

11:05:21.0499 0x0644  nvstor - ok

11:05:21.0577 0x0644  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

11:05:21.0608 0x0644  nv_agp - ok

11:05:21.0857 0x0644  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

11:05:21.0904 0x0644  odserv - ok

11:05:21.0951 0x0644  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

11:05:21.0967 0x0644  ohci1394 - ok

11:05:22.0060 0x0644  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

11:05:22.0076 0x0644  ose - ok

11:05:22.0185 0x0644  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

11:05:22.0216 0x0644  p2pimsvc - ok

11:05:22.0310 0x0644  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

11:05:22.0341 0x0644  p2psvc - ok

11:05:22.0435 0x0644  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys

11:05:22.0450 0x0644  Parport - ok

11:05:22.0513 0x0644  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

11:05:22.0544 0x0644  partmgr - ok

11:05:22.0637 0x0644  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll

11:05:22.0653 0x0644  PcaSvc - ok

11:05:22.0731 0x0644  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

11:05:22.0762 0x0644  pci - ok

11:05:22.0809 0x0644  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

11:05:22.0840 0x0644  pciide - ok

11:05:22.0918 0x0644  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

11:05:22.0981 0x0644  pcmcia - ok

11:05:23.0027 0x0644  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

11:05:23.0043 0x0644  pcw - ok

11:05:23.0152 0x0644  pdfcDispatcher - ok

11:05:23.0339 0x0644  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

11:05:23.0355 0x0644  PEAUTH - ok

11:05:23.0386 0x0644  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

11:05:23.0402 0x0644  PerfHost - ok

11:05:23.0745 0x0644  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

11:05:23.0807 0x0644  pla - ok

11:05:23.0995 0x0644  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

11:05:24.0026 0x0644  PlugPlay - ok

11:05:24.0088 0x0644  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

11:05:24.0104 0x0644  PNRPAutoReg - ok

11:05:24.0229 0x0644  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

11:05:24.0260 0x0644  PNRPsvc - ok

11:05:24.0385 0x0644  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

11:05:24.0385 0x0644  PolicyAgent - ok

11:05:24.0463 0x0644  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

11:05:24.0478 0x0644  Power - ok

11:05:24.0572 0x0644  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

11:05:24.0572 0x0644  PptpMiniport - ok

11:05:24.0634 0x0644  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys

11:05:24.0681 0x0644  Processor - ok

11:05:24.0759 0x0644  [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc         C:\Windows\system32\profsvc.dll

11:05:24.0775 0x0644  ProfSvc - ok

11:05:24.0806 0x0644  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] ProtectedStorage C:\Windows\system32\lsass.exe

11:05:24.0806 0x0644  ProtectedStorage - ok

11:05:24.0931 0x0644  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

11:05:24.0931 0x0644  Psched - ok

11:05:25.0009 0x0644  [ 87B04878A6D59D6C79251DC960C674C1, 3EB8DB0624E646F0A65D0381408D35CF9FDC5ABFC30DF6431F4070A8EB68447C ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys

11:05:25.0024 0x0644  PxHlpa64 - ok

11:05:25.0321 0x0644  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

11:05:25.0367 0x0644  ql2300 - ok

11:05:25.0461 0x0644  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

11:05:25.0477 0x0644  ql40xx - ok

11:05:25.0617 0x0644  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

11:05:25.0633 0x0644  QWAVE - ok

11:05:25.0711 0x0644  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

11:05:25.0726 0x0644  QWAVEdrv - ok

11:05:25.0757 0x0644  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

11:05:25.0773 0x0644  RasAcd - ok

11:05:25.0882 0x0644  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

11:05:25.0882 0x0644  RasAgileVpn - ok

11:05:25.0945 0x0644  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

11:05:25.0960 0x0644  RasAuto - ok

11:05:26.0023 0x0644  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

11:05:26.0038 0x0644  Rasl2tp - ok

11:05:26.0101 0x0644  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

11:05:26.0116 0x0644  RasMan - ok

11:05:26.0132 0x0644  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

11:05:26.0132 0x0644  RasPppoe - ok

11:05:26.0194 0x0644  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

11:05:26.0194 0x0644  RasSstp - ok

11:05:26.0272 0x0644  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

11:05:26.0303 0x0644  rdbss - ok

11:05:26.0350 0x0644  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys

11:05:26.0366 0x0644  rdpbus - ok

11:05:26.0397 0x0644  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

11:05:26.0397 0x0644  RDPCDD - ok

11:05:26.0428 0x0644  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

11:05:26.0428 0x0644  RDPENCDD - ok

11:05:26.0491 0x0644  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

11:05:26.0491 0x0644  RDPREFMP - ok

11:05:26.0569 0x0644  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

11:05:26.0584 0x0644  RdpVideoMiniport - ok

11:05:26.0647 0x0644  [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

11:05:26.0678 0x0644  RDPWD - ok

11:05:26.0740 0x0644  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

11:05:26.0771 0x0644  rdyboost - ok

11:05:26.0818 0x0644  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

11:05:26.0818 0x0644  RemoteAccess - ok

11:05:26.0896 0x0644  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

11:05:26.0927 0x0644  RemoteRegistry - ok

11:05:27.0052 0x0644  [ 085D18C71AB2611A3D61528132B6501E, 2AD2DD88EBD8C498E3043CDAA37E83C69F7FE2FD6B65524F631527555B80C112 ] RoxioNow Service C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe

11:05:27.0068 0x0644  RoxioNow Service - ok

11:05:27.0115 0x0644  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

11:05:27.0115 0x0644  RpcEptMapper - ok

11:05:27.0146 0x0644  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

11:05:27.0161 0x0644  RpcLocator - ok

11:05:27.0224 0x0644  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

11:05:27.0239 0x0644  RpcSs - ok

11:05:27.0271 0x0644  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

11:05:27.0271 0x0644  rspndr - ok

11:05:27.0333 0x0644  [ AFC12DFA4C7B089673AD67402CA19EDB, 9CA430E8DFAE9B7A245FCD766CB60245418C80CEBCD2E9FACA9DE62E3E60ADDF ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

11:05:27.0349 0x0644  RTL8167 - ok

11:05:27.0364 0x0644  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] SamSs           C:\Windows\system32\lsass.exe

11:05:27.0364 0x0644  SamSs - ok

11:05:27.0411 0x0644  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

11:05:27.0411 0x0644  sbp2port - ok

11:05:27.0583 0x0644  [ 794D4B48DFB6E999537C7C3947863463, 93DA8AA20D6B02A3360E7F56150F126E75266E9372E6409D42B89DA588EF49C3 ] SBSDWSCService  C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

11:05:27.0614 0x0644  SBSDWSCService - ok

11:05:27.0692 0x0644  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

11:05:27.0739 0x0644  SCardSvr - ok

11:05:27.0770 0x0644  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

11:05:27.0770 0x0644  scfilter - ok

11:05:27.0817 0x0644  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll

11:05:27.0832 0x0644  Schedule - ok

11:05:27.0895 0x0644  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

11:05:27.0895 0x0644  SCPolicySvc - ok

11:05:27.0973 0x0644  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

11:05:27.0988 0x0644  SDRSVC - ok

11:05:28.0051 0x0644  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] SecDrv          C:\Windows\system32\drivers\SECDRV.SYS

11:05:28.0051 0x0644  SecDrv - ok

11:05:28.0066 0x0644  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

11:05:28.0082 0x0644  seclogon - ok

11:05:28.0113 0x0644  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll

11:05:28.0113 0x0644  SENS - ok

11:05:28.0144 0x0644  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

11:05:28.0144 0x0644  SensrSvc - ok

11:05:28.0175 0x0644  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\drivers\serenum.sys

11:05:28.0175 0x0644  Serenum - ok

11:05:28.0207 0x0644  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys

11:05:28.0207 0x0644  Serial - ok

11:05:28.0222 0x0644  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys

11:05:28.0222 0x0644  sermouse - ok

11:05:28.0253 0x0644  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

11:05:28.0253 0x0644  SessionEnv - ok

11:05:28.0269 0x0644  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

11:05:28.0269 0x0644  sffdisk - ok

11:05:28.0285 0x0644  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

11:05:28.0285 0x0644  sffp_mmc - ok

11:05:28.0300 0x0644  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

11:05:28.0300 0x0644  sffp_sd - ok

11:05:28.0300 0x0644  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

11:05:28.0316 0x0644  sfloppy - ok

11:05:28.0347 0x0644  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

11:05:28.0347 0x0644  SharedAccess - ok

11:05:28.0378 0x0644  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

11:05:28.0394 0x0644  ShellHWDetection - ok

11:05:28.0441 0x0644  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

11:05:28.0441 0x0644  SiSRaid2 - ok

11:05:28.0456 0x0644  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

11:05:28.0456 0x0644  SiSRaid4 - ok

11:05:28.0472 0x0644  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

11:05:28.0472 0x0644  Smb - ok

11:05:28.0503 0x0644  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

11:05:28.0503 0x0644  SNMPTRAP - ok

11:05:28.0519 0x0644  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

11:05:28.0519 0x0644  spldr - ok

11:05:28.0628 0x0644  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe

11:05:28.0628 0x0644  Spooler - ok

11:05:28.0846 0x0644  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

11:05:28.0909 0x0644  sppsvc - ok

11:05:28.0955 0x0644  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

11:05:28.0971 0x0644  sppuinotify - ok

11:05:29.0018 0x0644  [ 86EBD8B1F23E743AAD21F4D5B4D40985, 8FA4DFDAE15712266B878C364FEFDB63CB30A3DCC25F83CDFE8C8AB3AE864BE6 ] SQLBrowser      C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

11:05:29.0018 0x0644  SQLBrowser - ok

11:05:29.0096 0x0644  [ 3C432A96363097870995E2A3C8B66ABD, AA0AE0935FC5317FE93D7D3C3B9A6B2E026915D07704AF3E36F14FEA8595F4A6 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

11:05:29.0096 0x0644  SQLWriter - ok

11:05:29.0189 0x0644  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

11:05:29.0205 0x0644  srv - ok

11:05:29.0267 0x0644  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

11:05:29.0267 0x0644  srv2 - ok

11:05:29.0330 0x0644  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

11:05:29.0345 0x0644  srvnet - ok

11:05:29.0361 0x0644  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

11:05:29.0361 0x0644  SSDPSRV - ok

11:05:29.0408 0x0644  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

11:05:29.0408 0x0644  SstpSvc - ok

11:05:29.0423 0x0644  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys

11:05:29.0439 0x0644  stexstor - ok

11:05:29.0486 0x0644  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

11:05:29.0501 0x0644  stisvc - ok

11:05:29.0517 0x0644  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys

11:05:29.0517 0x0644  swenum - ok

11:05:29.0720 0x0644  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

11:05:29.0720 0x0644  SwitchBoard - ok

11:05:29.0829 0x0644  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

11:05:29.0876 0x0644  swprv - ok

11:05:29.0985 0x0644  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll

11:05:30.0016 0x0644  SysMain - ok

11:05:30.0047 0x0644  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

11:05:30.0063 0x0644  TabletInputService - ok

11:05:30.0094 0x0644  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

11:05:30.0110 0x0644  TapiSrv - ok

11:05:30.0125 0x0644  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

11:05:30.0125 0x0644  TBS - ok

11:05:30.0437 0x0644  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

11:05:30.0531 0x0644  Tcpip - ok

11:05:30.0609 0x0644  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

11:05:30.0640 0x0644  TCPIP6 - ok

11:05:30.0687 0x0644  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

11:05:30.0687 0x0644  tcpipreg - ok

11:05:30.0750 0x0644  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

11:05:30.0781 0x0644  TDPIPE - ok

11:05:30.0843 0x0644  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

11:05:30.0843 0x0644  TDTCP - ok

11:05:30.0890 0x0644  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

11:05:30.0890 0x0644  tdx - ok

11:05:30.0906 0x0644  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys

11:05:30.0906 0x0644  TermDD - ok

11:05:30.0952 0x0644  [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService     C:\Windows\System32\termsrv.dll

11:05:30.0968 0x0644  TermService - ok

11:05:30.0984 0x0644  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

11:05:30.0999 0x0644  Themes - ok

11:05:31.0030 0x0644  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

11:05:31.0046 0x0644  THREADORDER - ok

11:05:31.0062 0x0644  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

11:05:31.0062 0x0644  TrkWks - ok

11:05:31.0186 0x0644  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

11:05:31.0202 0x0644  TrustedInstaller - ok

11:05:31.0249 0x0644  [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

11:05:31.0249 0x0644  tssecsrv - ok

11:05:31.0311 0x0644  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

11:05:31.0327 0x0644  TsUsbFlt - ok

11:05:31.0358 0x0644  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

11:05:31.0358 0x0644  TsUsbGD - ok

11:05:31.0389 0x0644  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

11:05:31.0389 0x0644  tunnel - ok

11:05:31.0452 0x0644  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

11:05:31.0452 0x0644  uagp35 - ok

11:05:31.0483 0x0644  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

11:05:31.0498 0x0644  udfs - ok

11:05:31.0530 0x0644  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

11:05:31.0545 0x0644  UI0Detect - ok

11:05:31.0576 0x0644  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

11:05:31.0576 0x0644  uliagpkx - ok

11:05:31.0592 0x0644  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

11:05:31.0608 0x0644  umbus - ok

11:05:31.0608 0x0644  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys

11:05:31.0608 0x0644  UmPass - ok

11:05:31.0639 0x0644  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

11:05:31.0639 0x0644  upnphost - ok

11:05:31.0701 0x0644  [ C9E9D59C0099A9FF51697E9306A44240, 78D9A7A5E5742962B6978F475BF06CB32262F1D214699D3D40538476A58012A1 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys

11:05:31.0701 0x0644  USBAAPL64 - ok

11:05:31.0779 0x0644  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys

11:05:31.0779 0x0644  usbaudio - ok

11:05:31.0826 0x0644  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

11:05:31.0826 0x0644  usbccgp - ok

11:05:31.0857 0x0644  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

11:05:31.0857 0x0644  usbcir - ok

11:05:31.0904 0x0644  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

11:05:31.0920 0x0644  usbehci - ok

11:05:31.0982 0x0644  [ 2C780746DC44A28FE67004DC58173F05, 9E0596CE35C7430A31A7E77B4D12A1F521B9ED8EB0614E6FB38403AC614C3EE3 ] usbfilter       C:\Windows\system32\drivers\usbfilter.sys

11:05:31.0982 0x0644  usbfilter - ok

11:05:32.0044 0x0644  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

11:05:32.0060 0x0644  usbhub - ok

11:05:32.0091 0x0644  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

11:05:32.0091 0x0644  usbohci - ok

11:05:32.0154 0x0644  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys

11:05:32.0154 0x0644  usbprint - ok

11:05:32.0200 0x0644  [ AAA2513C8AED8B54B189FD0C6B1634C0, 02FEE0B756AA559C29477A19861AC16D5A3152DC3C897C7D466423438B6A5E42 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

11:05:32.0216 0x0644  usbscan - ok

11:05:32.0247 0x0644  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

11:05:32.0247 0x0644  USBSTOR - ok

11:05:32.0263 0x0644  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

11:05:32.0263 0x0644  usbuhci - ok

11:05:32.0278 0x0644  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

11:05:32.0294 0x0644  UxSms - ok

11:05:32.0294 0x0644  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] VaultSvc        C:\Windows\system32\lsass.exe

11:05:32.0310 0x0644  VaultSvc - ok

11:05:32.0325 0x0644  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

11:05:32.0325 0x0644  vdrvroot - ok

11:05:32.0356 0x0644  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

11:05:32.0372 0x0644  vds - ok

11:05:32.0388 0x0644  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

11:05:32.0388 0x0644  vga - ok

11:05:32.0403 0x0644  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

11:05:32.0403 0x0644  VgaSave - ok

11:05:32.0419 0x0644  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

11:05:32.0419 0x0644  vhdmp - ok

11:05:32.0481 0x0644  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

11:05:32.0481 0x0644  viaide - ok

11:05:32.0512 0x0644  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

11:05:32.0512 0x0644  volmgr - ok

11:05:32.0528 0x0644  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

11:05:32.0544 0x0644  volmgrx - ok

11:05:32.0559 0x0644  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys

11:05:32.0575 0x0644  volsnap - ok

11:05:32.0778 0x0644  [ 86C96C079293E2E06708E146A011F4C4, 10F8DBA78B76B304525FC72C83990F10133936010E26D2F9AEB2FB747F8B75C2 ] vpnagent        C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

11:05:32.0793 0x0644  vpnagent - ok

11:05:32.0840 0x0644  [ 5932B2999AEF21C4599A792599F28D89, 78B2842BA71F9DAB5BB64BA4AB97BD19DEEFB075F83D735244906D046E78B2DC ] vpnva           C:\Windows\system32\DRIVERS\vpnva64-6.sys

11:05:32.0887 0x0644  vpnva - ok

11:05:32.0918 0x0644  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

11:05:32.0934 0x0644  vsmraid - ok

11:05:32.0996 0x0644  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

11:05:33.0043 0x0644  VSS - ok

11:05:33.0402 0x0644  [ CE72E4E7D8436161F278CD99F4F17D2A, 9A0251359520D7A249E558899A30E0A224A5BD010EF9CAA87162CEE20E8FE150 ] vToolbarUpdater18.1.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe

11:05:33.0433 0x0644  vToolbarUpdater18.1.0 - ok

11:05:33.0495 0x0644  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

11:05:33.0526 0x0644  vwifibus - ok

11:05:33.0542 0x0644  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

11:05:33.0558 0x0644  vwififlt - ok

11:05:33.0604 0x0644  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

11:05:33.0620 0x0644  W32Time - ok

11:05:33.0651 0x0644  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

11:05:33.0651 0x0644  WacomPen - ok

11:05:33.0682 0x0644  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

11:05:33.0682 0x0644  WANARP - ok

11:05:33.0698 0x0644  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

11:05:33.0698 0x0644  Wanarpv6 - ok

11:05:33.0792 0x0644  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

11:05:33.0823 0x0644  WatAdminSvc - ok

11:05:34.0010 0x0644  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

11:05:34.0072 0x0644  wbengine - ok

11:05:34.0119 0x0644  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

11:05:34.0119 0x0644  WbioSrvc - ok

11:05:34.0166 0x0644  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

11:05:34.0182 0x0644  wcncsvc - ok

11:05:34.0197 0x0644  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

11:05:34.0197 0x0644  WcsPlugInService - ok

11:05:34.0228 0x0644  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys

11:05:34.0228 0x0644  Wd - ok

11:05:34.0244 0x0644  [ A3D04EBF5227886029B4532F20D026F7, D90F7B9C176008675DA0B5FD7E4973CBC2A04172CEDF8FB7D3B3B4F27B5440D7 ] WDC_SAM         C:\Windows\system32\DRIVERS\wdcsam64.sys

11:05:34.0260 0x0644  WDC_SAM - ok

11:05:34.0431 0x0644  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

11:05:34.0478 0x0644  Wdf01000 - ok

11:05:34.0478 0x0644  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll

11:05:34.0494 0x0644  WdiServiceHost - ok

11:05:34.0494 0x0644  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll

11:05:34.0494 0x0644  WdiSystemHost - ok

11:05:34.0509 0x0644  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll

11:05:34.0540 0x0644  WebClient - ok

11:05:34.0587 0x0644  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

11:05:34.0603 0x0644  Wecsvc - ok

11:05:34.0634 0x0644  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

11:05:34.0634 0x0644  wercplsupport - ok

11:05:34.0665 0x0644  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

11:05:34.0665 0x0644  WerSvc - ok

11:05:34.0696 0x0644  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

11:05:34.0696 0x0644  WfpLwf - ok

11:05:34.0712 0x0644  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

11:05:34.0712 0x0644  WIMMount - ok

11:05:34.0743 0x0644  WinDefend - ok

11:05:34.0759 0x0644  WinHttpAutoProxySvc - ok

11:05:34.0899 0x0644  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

11:05:34.0915 0x0644  Winmgmt - ok

11:05:35.0086 0x0644  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll

11:05:35.0180 0x0644  WinRM - ok

11:05:35.0258 0x0644  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

11:05:35.0258 0x0644  WinUsb - ok

11:05:35.0305 0x0644  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

11:05:35.0336 0x0644  Wlansvc - ok

11:05:35.0445 0x0644  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

11:05:35.0445 0x0644  wlcrasvc - ok

11:05:35.0539 0x0644  [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

11:05:35.0586 0x0644  wlidsvc - ok

11:05:35.0617 0x0644  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

11:05:35.0617 0x0644  WmiAcpi - ok

11:05:35.0632 0x0644  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

11:05:35.0648 0x0644  wmiApSrv - ok

11:05:35.0664 0x0644  WMPNetworkSvc - ok

11:05:35.0695 0x0644  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

11:05:35.0695 0x0644  WPCSvc - ok

11:05:35.0726 0x0644  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

11:05:35.0742 0x0644  WPDBusEnum - ok

11:05:35.0773 0x0644  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

11:05:35.0773 0x0644  ws2ifsl - ok

11:05:35.0788 0x0644  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll

11:05:35.0788 0x0644  wscsvc - ok

11:05:35.0788 0x0644  WSearch - ok

11:05:36.0085 0x0644  [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv        C:\Windows\system32\wuaueng.dll

11:05:36.0116 0x0644  wuauserv - ok

11:05:36.0178 0x0644  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

11:05:36.0178 0x0644  WudfPf - ok

11:05:36.0225 0x0644  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

11:05:36.0225 0x0644  WUDFRd - ok

11:05:36.0241 0x0644  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

11:05:36.0241 0x0644  wudfsvc - ok

11:05:36.0350 0x0644  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll

11:05:36.0397 0x0644  WwanSvc - ok

11:05:36.0428 0x0644  ================ Scan global ===============================

11:05:36.0444 0x0644  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll

11:05:36.0490 0x0644  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

11:05:36.0522 0x0644  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

11:05:36.0568 0x0644  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

11:05:36.0631 0x0644  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe

11:05:36.0646 0x0644  [ Global ] - ok

11:05:36.0646 0x0644  ================ Scan MBR ==================================

11:05:36.0678 0x0644  [ 6C7374B44B99ED7CB70389041ECB26C8 ] \Device\Harddisk0\DR0

11:05:37.0192 0x0644  \Device\Harddisk0\DR0 - ok

11:05:37.0208 0x0644  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1

11:05:37.0286 0x0644  \Device\Harddisk1\DR1 - ok

11:05:37.0286 0x0644  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2

11:05:37.0302 0x0644  \Device\Harddisk2\DR2 - ok

11:05:37.0302 0x0644  ================ Scan VBR ==================================

11:05:37.0317 0x0644  [ 4853DB8DC39F76A1DB4F8B8C676775B2 ] \Device\Harddisk0\DR0\Partition1

11:05:37.0380 0x0644  \Device\Harddisk0\DR0\Partition1 - ok

11:05:37.0411 0x0644  [ 7F5FEBC6A4B2D54D12213A011548E610 ] \Device\Harddisk0\DR0\Partition2

11:05:37.0458 0x0644  \Device\Harddisk0\DR0\Partition2 - ok

11:05:37.0473 0x0644  [ D1B9EC14FE3D09AD7F84BE7CA4B77A97 ] \Device\Harddisk0\DR0\Partition3

11:05:37.0489 0x0644  \Device\Harddisk0\DR0\Partition3 - ok

11:05:37.0489 0x0644  [ FEACAEF5B257B292DBBAB416E2BCB932 ] \Device\Harddisk1\DR1\Partition1

11:05:37.0520 0x0644  \Device\Harddisk1\DR1\Partition1 - ok

11:05:37.0536 0x0644  [ A9DD4B8A3CAFD21F3E13E18BA72C0F7E ] \Device\Harddisk2\DR2\Partition1

11:05:38.0066 0x0644  \Device\Harddisk2\DR2\Partition1 - ok

11:05:38.0066 0x0644  Waiting for KSN requests completion. In queue: 76

11:05:39.0080 0x0644  Waiting for KSN requests completion. In queue: 76

11:05:40.0094 0x0644  Waiting for KSN requests completion. In queue: 76

11:05:41.0202 0x0644  AV detected via SS2: AVG AntiVirus Free Edition 2014, C:\Program Files (x86)\AVG\AVG2014\avgwsc.exe ( 14.0.0.4563 ), 0x41000 ( enabled : updated )

11:05:41.0202 0x0644  AV detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\WSCStub.exe ( 18.0.0.0 ), 0x50000 ( disabled : updated )

11:05:41.0202 0x0644  FW detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\WSCStub.exe ( 18.0.0.0 ), 0x50010 ( disabled )

11:05:41.0217 0x0644  Win FW state via NFP2: enabled

11:05:43.0760 0x0644  ============================================================

11:05:43.0760 0x0644  Scan finished

11:05:43.0760 0x0644  ============================================================

11:05:43.0760 0x0988  Detected object count: 0

11:05:43.0760 0x0988  Actual detected object count: 0

11:05:50.0546 0x1d04  ============================================================

11:05:50.0546 0x1d04  Scan started

11:05:50.0546 0x1d04  Mode: Manual; SigCheck; TDLFS; 

11:05:50.0546 0x1d04  ============================================================

11:05:50.0546 0x1d04  KSN ping started

11:05:53.0073 0x1d04  KSN ping finished: true

11:05:53.0448 0x1d04  ================ Scan system memory ========================

11:05:53.0448 0x1d04  System memory - ok

11:05:53.0448 0x1d04  ================ Scan services =============================

11:05:53.0650 0x1d04  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

11:05:53.0822 0x1d04  1394ohci - ok

11:05:53.0900 0x1d04  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

11:05:53.0931 0x1d04  ACPI - ok

11:05:53.0947 0x1d04  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

11:05:54.0025 0x1d04  AcpiPmi - ok

11:05:54.0072 0x1d04  [ D0B11E40EA74A98A5E133DF1F5276240, BAD5885CD8CC271D59DFA95159EFC3AC36D2BA11B6DA593AAED0C45F1C2F280F ] acsock          C:\Windows\system32\DRIVERS\acsock64.sys

11:05:54.0103 0x1d04  acsock - ok

11:05:54.0259 0x1d04  [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

11:05:54.0290 0x1d04  AdobeARMservice - ok

11:05:54.0555 0x1d04  [ 7C7E868E1D8096ED08D80FF7712BB9D8, EB4438F3CC377728173E018A763F0D0A8D5BBA4A289F554036D06B24030D2D62 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

11:05:54.0586 0x1d04  AdobeFlashPlayerUpdateSvc - ok

11:05:54.0758 0x1d04  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

11:05:54.0789 0x1d04  adp94xx - ok

11:05:54.0805 0x1d04  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys

11:05:54.0820 0x1d04  adpahci - ok

11:05:54.0852 0x1d04  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

11:05:54.0867 0x1d04  adpu320 - ok

11:05:54.0898 0x1d04  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

11:05:54.0976 0x1d04  AeLookupSvc - ok

11:05:55.0148 0x1d04  [ 79059559E89D06E8B80CE2944BE20228, 6E041D2FED2D0C3D8E16E56CB61D3245F9144EA92F5BDC9A4AA30598D1C8E6EE ] AFD             C:\Windows\system32\drivers\afd.sys

11:05:55.0195 0x1d04  AFD - ok

11:05:55.0226 0x1d04  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

11:05:55.0242 0x1d04  agp440 - ok

11:05:55.0288 0x1d04  [ 9D31CBF550E490C947764E982D47E9C0, ADA17C0D4B3259823A67E6FB845BF8648B0CCB60659ECBA66CCFE70D6D0B641A ] ahcix64s        C:\Windows\system32\drivers\ahcix64s.sys

11:05:55.0304 0x1d04  ahcix64s - ok

11:05:55.0351 0x1d04  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

11:05:55.0366 0x1d04  ALG - ok

11:05:55.0429 0x1d04  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

11:05:55.0460 0x1d04  aliide - ok

11:05:55.0522 0x1d04  [ C9A5A02CB76B35A78404F6D4101163F9, 184C68FCDAB76862D39FD5D09FA0D53F600A657DE55DBECBE7B1EBA0DCAA496F ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

11:05:55.0554 0x1d04  AMD External Events Utility - ok

11:05:55.0569 0x1d04  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

11:05:55.0585 0x1d04  amdide - ok

11:05:55.0600 0x1d04  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

11:05:55.0616 0x1d04  AmdK8 - ok

11:05:56.0022 0x1d04  [ 5F62E6CFD4FEA8D19110BDEB423BF510, 68286E456A8295F988768C5FC3D9D719895FE191E112438DAD0ABF7377A05303 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

11:05:56.0302 0x1d04  amdkmdag - ok

11:05:56.0427 0x1d04  [ D93655EC3CA48FCBFFD9D4E6DF63737F, C56316AC4C990A0D391F8CFA0C4F0FF036FA37322BE9B13DFAACCAA6077EFE8C ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

11:05:56.0474 0x1d04  amdkmdap - ok

11:05:56.0490 0x1d04  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys

11:05:56.0521 0x1d04  AmdPPM - ok

11:05:56.0552 0x1d04  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

11:05:56.0568 0x1d04  amdsata - ok

11:05:56.0583 0x1d04  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

11:05:56.0599 0x1d04  amdsbs - ok

11:05:56.0614 0x1d04  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys

11:05:56.0614 0x1d04  amdxata - ok

11:05:56.0646 0x1d04  [ B9C95291F5EA1072CEC2BA690E07F29F, 1FC75E20B31680667A5FE4E0AB5ADD6CFE7016A3B9E975E92EAA192689684E54 ] AMD_RAIDXpert   C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe

11:05:56.0646 0x1d04  AMD_RAIDXpert - detected UnsignedFile.Multi.Generic ( 1 )

11:05:56.0646 0x1d04  Detect skipped due to KSN trusted

11:05:56.0646 0x1d04  AMD_RAIDXpert - ok

11:05:56.0661 0x1d04  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID           C:\Windows\system32\drivers\appid.sys

11:05:56.0708 0x1d04  AppID - ok

11:05:56.0755 0x1d04  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

11:05:56.0833 0x1d04  AppIDSvc - ok

11:05:56.0864 0x1d04  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll

11:05:56.0895 0x1d04  Appinfo - ok

11:05:57.0036 0x1d04  [ 221564CC7BE37611FE15EACF443E1BF6, 381BDF17418C779D72332431BA174C2AD76CD9C7C1711FF5142EA9B05D5555E4 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

11:05:57.0051 0x1d04  Apple Mobile Device - ok

11:05:57.0067 0x1d04  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys

11:05:57.0098 0x1d04  arc - ok

11:05:57.0114 0x1d04  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys

11:05:57.0145 0x1d04  arcsas - ok

11:05:57.0223 0x1d04  [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

11:05:57.0254 0x1d04  aspnet_state - ok

11:05:57.0270 0x1d04  astcc - ok

11:05:57.0285 0x1d04  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

11:05:57.0348 0x1d04  AsyncMac - ok

11:05:57.0394 0x1d04  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

11:05:57.0410 0x1d04  atapi - ok

11:05:57.0426 0x1d04  [ E02B26650ACC2F4901342D4A66774AD7, 632A88C5AE6E71BB86C5306566EA08C4678F3F949479C8D1BEB8B01DD6724B88 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

11:05:57.0441 0x1d04  AtiHDAudioService - ok

11:05:57.0457 0x1d04  [ E82E61F46D1336447F4DEFF8C074F13E, 9FC152B33F1D9F5684B687743E943AA26AC17A1093F4C31A43C7012E70BC302E ] AtiPcie         C:\Windows\system32\drivers\AtiPcie64.sys

11:05:57.0472 0x1d04  AtiPcie - ok

11:05:57.0504 0x1d04  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

11:05:57.0550 0x1d04  AudioEndpointBuilder - ok

11:05:57.0566 0x1d04  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

11:05:57.0613 0x1d04  AudioSrv - ok

11:05:57.0660 0x1d04  [ 2D5E8A35808FDA50274CFD22000DAB53, 3C11CCD0162DD5D036527D7DBEC8159CCB60E84C16F9ADA84773EC3302BEB4A5 ] Avgdiska        C:\Windows\system32\DRIVERS\avgdiska.sys

11:05:57.0660 0x1d04  Avgdiska - ok

11:05:57.0878 0x1d04  [ 792C8CDADE8C92629752E56A03F0FF1C, A39B6913402DB3A1CBD51E54C0C84434E14DC57B2F7E5CA7C58EBC2B21B7BBAB ] AVGIDSAgent     C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

11:05:57.0956 0x1d04  AVGIDSAgent - ok

11:05:58.0018 0x1d04  [ B7E17B7733C4266F140DD356817E5678, CBDD48476811C3B0D66528DD5A0E69A5F1D8070C68EBD8AA5170A8A2C4B22A8D ] AVGIDSDriver    C:\Windows\system32\DRIVERS\avgidsdrivera.sys

11:05:58.0050 0x1d04  AVGIDSDriver - ok

11:05:58.0128 0x1d04  [ F6CE2F1B6E890FB5EBC04A11A2E31DC1, 7F1442D6EDF18D089C7DBB00AF03BB4376A59006187D29D05402B2830E84F7E7 ] AVGIDSHA        C:\Windows\system32\DRIVERS\avgidsha.sys

11:05:58.0159 0x1d04  AVGIDSHA - ok

11:05:58.0190 0x1d04  [ B323DE78E0C75F3605C7A200F3CF350F, 1CBBB65E9E91E0C787530B6B21D89771083C20604E6F8447FAA9BC5FAE1CA895 ] Avgldx64        C:\Windows\system32\DRIVERS\avgldx64.sys

11:05:58.0206 0x1d04  Avgldx64 - ok

11:05:58.0252 0x1d04  [ 6E381AFF06BC6ABFAEF70405014D7A37, 887D6B766E27B18406BA30C02F46B5015A4BF9C9947462F75D87956BA4F61745 ] Avgloga         C:\Windows\system32\DRIVERS\avgloga.sys

11:05:58.0268 0x1d04  Avgloga - ok

11:05:58.0299 0x1d04  [ DBFB9BEAE2816FDB4B4EF8C89AFA3DF0, 840C5015960904090298D820F526A1A333A4E88C56FA932D1E80F10BF62040E4 ] Avgmfx64        C:\Windows\system32\DRIVERS\avgmfx64.sys

11:05:58.0315 0x1d04  Avgmfx64 - ok

11:05:58.0315 0x1d04  [ 9C6CD518AE78D532FB33240DE11C765D, 3532FB7D5434A5488C7513105B51734A27C1D95C8A7ADF1A5DE18A35FE8CE5A6 ] Avgrkx64        C:\Windows\system32\DRIVERS\avgrkx64.sys

11:05:58.0330 0x1d04  Avgrkx64 - ok

11:05:58.0393 0x1d04  [ F86A506DA0BF61402E19DB8AF0684C9A, A4AB8FE25B3A27E7351ABFF6A8B7120C722E797BE38708A1C5E38211672C6AE8 ] Avgtdia         C:\Windows\system32\DRIVERS\avgtdia.sys

11:05:58.0424 0x1d04  Avgtdia - ok

11:05:58.0455 0x1d04  [ 9FD4BC46784309176AEFA26AA8241DA1, 939F7503A6231E5FD5A3F46BDB97671D62D0CEC8B6EF82BD6B1090C45D9D6E1F ] avgtp           C:\Windows\system32\drivers\avgtpx64.sys

11:05:58.0486 0x1d04  avgtp - ok

11:05:58.0580 0x1d04  [ DBAEB3D23C653018629A76E53260E122, DF402D83206EDA77818D3B59456240E66C69D307FCC7419354BF363413BC7963 ] avgwd           C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

11:05:58.0611 0x1d04  avgwd - ok

11:05:58.0674 0x1d04  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

11:05:58.0876 0x1d04  AxInstSV - ok

11:05:58.0908 0x1d04  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

11:05:58.0986 0x1d04  b06bdrv - ok

11:05:59.0017 0x1d04  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

11:05:59.0048 0x1d04  b57nd60a - ok

11:05:59.0235 0x1d04  [ 6163664C7E9CD110AF70180C126C3FDC, 9A801295CDE2BDE4EE0E96C610E4C01F6915DBDA2104D0E8873AFF1BC34A0FA1 ] BcmSqlStartupSvc C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

11:05:59.0266 0x1d04  BcmSqlStartupSvc - ok

11:05:59.0313 0x1d04  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

11:05:59.0376 0x1d04  BDESVC - ok

11:05:59.0438 0x1d04  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

11:05:59.0532 0x1d04  Beep - ok

11:05:59.0625 0x1d04  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

11:05:59.0703 0x1d04  BFE - ok

11:05:59.0844 0x1d04  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

11:05:59.0922 0x1d04  BITS - ok

11:05:59.0937 0x1d04  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

11:06:00.0000 0x1d04  blbdrive - ok

11:06:00.0218 0x1d04  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

11:06:00.0249 0x1d04  Bonjour Service - ok

11:06:00.0265 0x1d04  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

11:06:00.0296 0x1d04  bowser - ok

11:06:00.0343 0x1d04  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

11:06:00.0405 0x1d04  BrFiltLo - ok

11:06:00.0436 0x1d04  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

11:06:00.0499 0x1d04  BrFiltUp - ok

11:06:00.0561 0x1d04  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

11:06:00.0655 0x1d04  Browser - ok

11:06:00.0717 0x1d04  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

11:06:00.0780 0x1d04  Brserid - ok

11:06:00.0826 0x1d04  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

11:06:00.0873 0x1d04  BrSerWdm - ok

11:06:00.0936 0x1d04  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

11:06:00.0998 0x1d04  BrUsbMdm - ok

11:06:01.0014 0x1d04  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

11:06:01.0045 0x1d04  BrUsbSer - ok

11:06:01.0076 0x1d04  [ B289FD1D275722878E5A13B692E648F7, 8254CE0EC38AADEF5C094D7201CE228E00F474717116A67F110579812497DF3C ] BSecACFltr      C:\Windows\system32\DRIVERS\BSecACFltr.sys

11:06:01.0138 0x1d04  BSecACFltr - detected UnsignedFile.Multi.Generic ( 1 )

11:06:01.0138 0x1d04  Detect skipped due to KSN trusted

11:06:01.0138 0x1d04  BSecACFltr - ok

11:06:01.0201 0x1d04  [ B38B4FACF018415481897E2BC51AC4F2, 424338B48F542FD51D8CCE02176E4C07B370F47B65CA3A15E834FBA233B74CAE ] Bsecure         C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe

11:06:01.0232 0x1d04  Bsecure - ok

11:06:01.0263 0x1d04  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

11:06:01.0294 0x1d04  BTHMODEM - ok

11:06:01.0341 0x1d04  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

11:06:01.0404 0x1d04  bthserv - ok

11:06:01.0482 0x1d04  [ 555FA105C22B1616094EDAD1CBFB0551, 3DB8EB0F95589E8CC338AE033C314256296F0BF039B338CF023FE393CF80840C ] cbfs3           C:\Windows\system32\DRIVERS\cbfs3.sys

11:06:01.0513 0x1d04  cbfs3 - ok

11:06:01.0544 0x1d04  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

11:06:01.0606 0x1d04  cdfs - ok

11:06:01.0638 0x1d04  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

11:06:01.0684 0x1d04  cdrom - ok

11:06:01.0716 0x1d04  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

11:06:01.0762 0x1d04  CertPropSvc - ok

11:06:01.0778 0x1d04  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys

11:06:01.0809 0x1d04  circlass - ok

11:06:01.0872 0x1d04  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys

11:06:01.0887 0x1d04  CLFS - ok

11:06:01.0934 0x1d04  [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

11:06:01.0965 0x1d04  clr_optimization_v2.0.50727_32 - ok

11:06:02.0012 0x1d04  [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

11:06:02.0012 0x1d04  clr_optimization_v2.0.50727_64 - ok

11:06:02.0106 0x1d04  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

11:06:02.0121 0x1d04  clr_optimization_v4.0.30319_32 - ok

11:06:02.0137 0x1d04  [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

11:06:02.0152 0x1d04  clr_optimization_v4.0.30319_64 - ok

11:06:02.0168 0x1d04  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys

11:06:02.0215 0x1d04  CmBatt - ok

11:06:02.0262 0x1d04  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

11:06:02.0293 0x1d04  cmdide - ok

11:06:02.0355 0x1d04  [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG             C:\Windows\system32\Drivers\cng.sys

11:06:02.0402 0x1d04  CNG - ok

11:06:02.0433 0x1d04  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

11:06:02.0449 0x1d04  Compbatt - ok

11:06:02.0449 0x1d04  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

11:06:02.0480 0x1d04  CompositeBus - ok

11:06:02.0480 0x1d04  COMSysApp - ok

11:06:02.0496 0x1d04  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

11:06:02.0511 0x1d04  crcdisk - ok

11:06:02.0558 0x1d04  [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc        C:\Windows\system32\cryptsvc.dll

11:06:02.0605 0x1d04  CryptSvc - ok

11:06:02.0636 0x1d04  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

11:06:02.0683 0x1d04  DcomLaunch - ok

11:06:02.0714 0x1d04  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

11:06:02.0745 0x1d04  defragsvc - ok

11:06:02.0761 0x1d04  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

11:06:02.0776 0x1d04  DfsC - ok

11:06:02.0823 0x1d04  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

11:06:02.0886 0x1d04  Dhcp - ok

11:06:02.0901 0x1d04  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

11:06:02.0964 0x1d04  discache - ok

11:06:02.0979 0x1d04  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys

11:06:02.0979 0x1d04  Disk - ok

11:06:03.0010 0x1d04  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

11:06:03.0042 0x1d04  Dnscache - ok

11:06:03.0104 0x1d04  [ 1C92CE85ED00554BDD118923E751A162, 8F91BF8ED73585FCA74320D783180C80FF4F420E5B30FCC085D5929FC1AD4373 ] Dokan           C:\Windows\system32\drivers\dokan.sys

11:06:03.0135 0x1d04  Dokan - ok

11:06:03.0198 0x1d04  [ CA41DFFFB8BA956FFE9729D0B3853A58, EDD138DAD37F03559D590FDF3D0DACD1BDC592054FBB2F8E4E811BB9C683D027 ] DokanMounter    C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe

11:06:03.0244 0x1d04  DokanMounter - detected UnsignedFile.Multi.Generic ( 1 )

11:06:03.0244 0x1d04  Detect skipped due to KSN trusted

11:06:03.0244 0x1d04  DokanMounter - ok

11:06:03.0291 0x1d04  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

11:06:03.0354 0x1d04  dot3svc - ok

11:06:03.0369 0x1d04  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

11:06:03.0416 0x1d04  DPS - ok

11:06:03.0478 0x1d04  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

11:06:03.0556 0x1d04  drmkaud - ok

11:06:03.0634 0x1d04  [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

11:06:03.0666 0x1d04  DXGKrnl - ok

11:06:03.0697 0x1d04  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

11:06:03.0806 0x1d04  EapHost - ok

11:06:04.0056 0x1d04  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys

11:06:04.0134 0x1d04  ebdrv - ok

11:06:04.0196 0x1d04  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] EFS             C:\Windows\System32\lsass.exe

11:06:04.0243 0x1d04  EFS - ok

11:06:04.0368 0x1d04  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

11:06:04.0446 0x1d04  ehRecvr - ok

11:06:04.0508 0x1d04  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

11:06:04.0539 0x1d04  ehSched - ok

11:06:04.0617 0x1d04  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

11:06:04.0648 0x1d04  elxstor - ok

11:06:04.0664 0x1d04  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

11:06:04.0711 0x1d04  ErrDev - ok

11:06:04.0867 0x1d04  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

11:06:04.0914 0x1d04  EventSystem - ok

11:06:04.0945 0x1d04  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

11:06:04.0976 0x1d04  exfat - ok

11:06:05.0023 0x1d04  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

11:06:05.0101 0x1d04  fastfat - ok

11:06:05.0132 0x1d04  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe

11:06:05.0163 0x1d04  Fax - ok

11:06:05.0179 0x1d04  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys

11:06:05.0210 0x1d04  fdc - ok

11:06:05.0241 0x1d04  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

11:06:05.0288 0x1d04  fdPHost - ok

11:06:05.0304 0x1d04  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

11:06:05.0335 0x1d04  FDResPub - ok

11:06:05.0366 0x1d04  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

11:06:05.0382 0x1d04  FileInfo - ok

11:06:05.0382 0x1d04  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

11:06:05.0413 0x1d04  Filetrace - ok

11:06:05.0584 0x1d04  [ F76D04F7413B07DAA029F6520B64B4E8, 3EB13C0EFE737880853FB8952381E7A57723F9472E0E4ED7CDA8A0D7DE8DC90D ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

11:06:05.0647 0x1d04  FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )

11:06:05.0647 0x1d04  Detect skipped due to KSN trusted

11:06:05.0647 0x1d04  FLEXnet Licensing Service - ok

11:06:05.0694 0x1d04  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

11:06:05.0756 0x1d04  flpydisk - ok

11:06:05.0787 0x1d04  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

11:06:05.0818 0x1d04  FltMgr - ok

11:06:05.0912 0x1d04  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll

11:06:05.0974 0x1d04  FontCache - ok

11:06:06.0068 0x1d04  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

11:06:06.0099 0x1d04  FontCache3.0.0.0 - ok

11:06:06.0177 0x1d04  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

11:06:06.0208 0x1d04  FsDepends - ok

11:06:06.0255 0x1d04  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

11:06:06.0286 0x1d04  Fs_Rec - ok

11:06:06.0333 0x1d04  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

11:06:06.0349 0x1d04  fvevol - ok

11:06:06.0380 0x1d04  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

11:06:06.0396 0x1d04  gagp30kx - ok

11:06:06.0474 0x1d04  [ E6CE7A89183D1840F0FF63694292FFA2, 8907ADCF9967026CD1A9D545E2274569F840F1DFF0E407CC77B6A662267AAC4B ] GamesAppIntegrationService C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

11:06:06.0505 0x1d04  GamesAppIntegrationService - ok

11:06:06.0583 0x1d04  [ C403C5DB49A0F9AAF4F2128EDC0106D8, 3C6948B63278022D8182F773C5FA15784514F76C1546118DDBADBA322B962D12 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

11:06:06.0598 0x1d04  GamesAppService - ok

11:06:06.0630 0x1d04  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

11:06:06.0630 0x1d04  GEARAspiWDM - ok

11:06:06.0770 0x1d04  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

11:06:06.0848 0x1d04  gpsvc - ok

11:06:06.0957 0x1d04  [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

11:06:07.0004 0x1d04  gupdate - ok

11:06:07.0004 0x1d04  [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

11:06:07.0020 0x1d04  gupdatem - ok

11:06:07.0066 0x1d04  [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

11:06:07.0082 0x1d04  gusvc - ok

11:06:07.0113 0x1d04  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

11:06:07.0191 0x1d04  hcw85cir - ok

11:06:07.0238 0x1d04  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

11:06:07.0285 0x1d04  HdAudAddService - ok

11:06:07.0316 0x1d04  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

11:06:07.0347 0x1d04  HDAudBus - ok

11:06:07.0378 0x1d04  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

11:06:07.0441 0x1d04  HidBatt - ok

11:06:07.0456 0x1d04  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

11:06:07.0503 0x1d04  HidBth - ok

11:06:07.0550 0x1d04  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys

11:06:07.0612 0x1d04  HidIr - ok

11:06:07.0644 0x1d04  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll

11:06:07.0722 0x1d04  hidserv - ok

11:06:07.0753 0x1d04  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\drivers\hidusb.sys

11:06:07.0800 0x1d04  HidUsb - ok

11:06:07.0831 0x1d04  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

11:06:07.0878 0x1d04  hkmsvc - ok

11:06:07.0893 0x1d04  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

11:06:07.0924 0x1d04  HomeGroupListener - ok

11:06:07.0971 0x1d04  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

11:06:08.0018 0x1d04  HomeGroupProvider - ok

11:06:08.0065 0x1d04  [ 2A8B93A01621E100A578E83C768AFA2C, 6637D260AF180D1F200D219796FCE6D524FC6BF57C0CEEF9E1B3616E85865AD1 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

11:06:08.0096 0x1d04  HP Support Assistant Service - detected UnsignedFile.Multi.Generic ( 1 )

11:06:08.0096 0x1d04  Detect skipped due to KSN trusted

11:06:08.0096 0x1d04  HP Support Assistant Service - ok

11:06:08.0205 0x1d04  [ 7B8C1B09C11E8DB7C4480ABD7D17E821, 0E35FD439B24CEAD623A5D7319B865A6BCE6F1F3057671F62B4F844D8EC3D206 ] HPAuto          C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe

11:06:08.0221 0x1d04  HPAuto - ok

11:06:08.0252 0x1d04  [ 6A181452D4E240B8ECC7614B9A19BDE9, 3E458A737DA597DF007D278E9D81F2BF259AB4B97A4C188CEDAEA1F144B1074F ] HPClientSvc     C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

11:06:08.0268 0x1d04  HPClientSvc - ok

11:06:08.0346 0x1d04  [ D2946D9F020AE76E9CEF9B4A6DF838C0, C29CE594879385DA12B8EAA90B258905827B613839CCD820DE49215B68676995 ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

11:06:08.0361 0x1d04  hpqwmiex - ok

11:06:08.0408 0x1d04  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

11:06:08.0408 0x1d04  HpSAMD - ok

11:06:08.0455 0x1d04  [ F47CEC45FB85791D4AB237563AD0FA8F, 1035066D48BD179855BCA7F62EFA1B951E6E839D2E29E15A31844E18A126DD41 ] HTCAND64        C:\Windows\system32\Drivers\ANDROIDUSB.sys

11:06:08.0533 0x1d04  HTCAND64 - ok

11:06:08.0564 0x1d04  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

11:06:08.0626 0x1d04  HTTP - ok

11:06:08.0658 0x1d04  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

11:06:08.0658 0x1d04  hwpolicy - ok

11:06:08.0704 0x1d04  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

11:06:08.0751 0x1d04  i8042prt - ok

11:06:08.0782 0x1d04  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

11:06:08.0814 0x1d04  iaStorV - ok

11:06:08.0907 0x1d04  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

11:06:08.0938 0x1d04  idsvc - ok

11:06:08.0938 0x1d04  IEEtwCollectorService - ok

11:06:09.0126 0x1d04  [ A87261EF1546325B559374F5689CF5BC, 8DE48A8A13A32AAAC54CDDF58F3F61BE3E2802C1D9CA1CA98E57EB0D65FB6002 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

11:06:09.0282 0x1d04  igfx - ok

11:06:09.0313 0x1d04  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

11:06:09.0313 0x1d04  iirsp - ok

11:06:09.0406 0x1d04  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

11:06:09.0453 0x1d04  IKEEXT - ok

11:06:09.0547 0x1d04  [ 589B94A9B73A0E819FF873743A480834, 49FA8EC38F1C78F38F818CC28F2734802739247F0B89A971D65FDAF3110041A8 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

11:06:09.0609 0x1d04  IntcAzAudAddService - ok

11:06:09.0672 0x1d04  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

11:06:09.0703 0x1d04  intelide - ok

11:06:09.0734 0x1d04  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\drivers\intelppm.sys

11:06:09.0750 0x1d04  intelppm - ok

11:06:09.0781 0x1d04  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

11:06:09.0828 0x1d04  IPBusEnum - ok

11:06:09.0828 0x1d04  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

11:06:09.0890 0x1d04  IpFilterDriver - ok

11:06:09.0937 0x1d04  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

11:06:09.0984 0x1d04  iphlpsvc - ok

11:06:09.0999 0x1d04  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

11:06:10.0030 0x1d04  IPMIDRV - ok

11:06:10.0062 0x1d04  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

11:06:10.0093 0x1d04  IPNAT - ok

11:06:10.0140 0x1d04  [ 842D1EDD0F2A6E0E6631BB96BAAA01DE, 9CDD0B99F2C5DAD573A9EA8D5AB2DBFD7A941454CBBA5BFE34E49F2D4EE96A90 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

11:06:10.0171 0x1d04  iPod Service - ok

11:06:10.0202 0x1d04  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

11:06:10.0249 0x1d04  IRENUM - ok

11:06:10.0264 0x1d04  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

11:06:10.0280 0x1d04  isapnp - ok

11:06:10.0327 0x1d04  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

11:06:10.0342 0x1d04  iScsiPrt - ok

11:06:10.0358 0x1d04  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

11:06:10.0358 0x1d04  kbdclass - ok

11:06:10.0374 0x1d04  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

11:06:10.0389 0x1d04  kbdhid - ok

11:06:10.0389 0x1d04  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] KeyIso          C:\Windows\system32\lsass.exe

11:06:10.0405 0x1d04  KeyIso - ok

11:06:10.0436 0x1d04  [ 8F489706472F7E9A06BAAA198703FA64, F020406690FB38EABD82D63B91D33039CC93ED52A5497AE12BAF475F22D0B08A ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

11:06:10.0452 0x1d04  KSecDD - ok

11:06:10.0467 0x1d04  [ 868A2CAAB12EFC7A021682BCA0EEC54C, 12C4925B5B3D6EA7B6410C01F33158C6EAB50CBD6AF445F8B04ED9899720C2DD ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

11:06:10.0467 0x1d04  KSecPkg - ok

11:06:10.0514 0x1d04  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

11:06:10.0576 0x1d04  ksthunk - ok

11:06:10.0592 0x1d04  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

11:06:10.0639 0x1d04  KtmRm - ok

11:06:10.0670 0x1d04  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll

11:06:10.0701 0x1d04  LanmanServer - ok

11:06:10.0717 0x1d04  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

11:06:10.0748 0x1d04  LanmanWorkstation - ok

11:06:10.0779 0x1d04  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

11:06:10.0842 0x1d04  lltdio - ok

11:06:10.0873 0x1d04  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

11:06:10.0935 0x1d04  lltdsvc - ok

11:06:10.0966 0x1d04  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

11:06:11.0029 0x1d04  lmhosts - ok

11:06:11.0060 0x1d04  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

11:06:11.0076 0x1d04  LSI_FC - ok

11:06:11.0076 0x1d04  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

11:06:11.0091 0x1d04  LSI_SAS - ok

11:06:11.0107 0x1d04  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

11:06:11.0122 0x1d04  LSI_SAS2 - ok

11:06:11.0138 0x1d04  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

11:06:11.0154 0x1d04  LSI_SCSI - ok

11:06:11.0185 0x1d04  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

11:06:11.0232 0x1d04  luafv - ok

11:06:11.0325 0x1d04  [ 1F02B554DDC4086D786537A3BF6488F1, 419B8FC4AD9542DEC61F5F689F715ECBB2A49B0D591292FDF31AFCDAB9AF4FD1 ] lxecCATSCustConnectService C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe

11:06:11.0356 0x1d04  lxecCATSCustConnectService - ok

11:06:11.0356 0x1d04  lxec_device - ok

11:06:11.0388 0x1d04  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

11:06:11.0403 0x1d04  Mcx2Svc - ok

11:06:11.0419 0x1d04  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys

11:06:11.0434 0x1d04  megasas - ok

11:06:11.0450 0x1d04  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

11:06:11.0466 0x1d04  MegaSR - ok

11:06:11.0481 0x1d04  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

11:06:11.0528 0x1d04  MMCSS - ok

11:06:11.0590 0x1d04  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

11:06:11.0637 0x1d04  Modem - ok

11:06:11.0668 0x1d04  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

11:06:11.0715 0x1d04  monitor - ok

11:06:11.0731 0x1d04  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

11:06:11.0731 0x1d04  mouclass - ok

11:06:11.0762 0x1d04  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

11:06:11.0778 0x1d04  mouhid - ok

11:06:11.0809 0x1d04  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

11:06:11.0809 0x1d04  mountmgr - ok

11:06:11.0871 0x1d04  [ 731837CB3B49B738402CE32455B75CE2, 5490D418D96725410169BF7895DBE9A332CD859EBADD129FEACB02A195599335 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

11:06:11.0887 0x1d04  MozillaMaintenance - ok

11:06:11.0902 0x1d04  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

11:06:11.0918 0x1d04  mpio - ok

11:06:11.0949 0x1d04  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

11:06:11.0996 0x1d04  mpsdrv - ok

11:06:12.0090 0x1d04  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

11:06:12.0230 0x1d04  MpsSvc - ok

11:06:12.0339 0x1d04  [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

11:06:12.0417 0x1d04  MRxDAV - ok

11:06:12.0448 0x1d04  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

11:06:12.0480 0x1d04  mrxsmb - ok

11:06:12.0511 0x1d04  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

11:06:12.0526 0x1d04  mrxsmb10 - ok

11:06:12.0542 0x1d04  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

11:06:12.0558 0x1d04  mrxsmb20 - ok

11:06:12.0604 0x1d04  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

11:06:12.0620 0x1d04  msahci - ok

11:06:12.0651 0x1d04  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

11:06:12.0667 0x1d04  msdsm - ok

11:06:12.0682 0x1d04  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

11:06:12.0698 0x1d04  MSDTC - ok

11:06:12.0729 0x1d04  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

11:06:12.0792 0x1d04  Msfs - ok

11:06:12.0807 0x1d04  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

11:06:12.0854 0x1d04  mshidkmdf - ok

11:06:12.0870 0x1d04  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

11:06:12.0885 0x1d04  msisadrv - ok

11:06:12.0916 0x1d04  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

11:06:12.0963 0x1d04  MSiSCSI - ok

11:06:12.0963 0x1d04  msiserver - ok

11:06:12.0979 0x1d04  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

11:06:13.0041 0x1d04  MSKSSRV - ok

11:06:13.0104 0x1d04  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

11:06:13.0135 0x1d04  MSPCLOCK - ok

11:06:13.0150 0x1d04  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

11:06:13.0213 0x1d04  MSPQM - ok

11:06:13.0260 0x1d04  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

11:06:13.0275 0x1d04  MsRPC - ok

11:06:13.0275 0x1d04  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

11:06:13.0291 0x1d04  mssmbios - ok

11:06:13.0400 0x1d04  MSSQL$MSSMLBIZ - ok

11:06:13.0416 0x1d04  [ 1D89EB4E2A99CABD4E81225F4F4C4B25, B9C4D956E3F74CB463A1A14287F4B550381FBB3E4B2DF9418E041E02A159E31E ] MSSQLServerADHelper C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe

11:06:13.0447 0x1d04  MSSQLServerADHelper - ok

11:06:13.0462 0x1d04  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

11:06:13.0509 0x1d04  MSTEE - ok

11:06:13.0525 0x1d04  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

11:06:13.0556 0x1d04  MTConfig - ok

11:06:13.0572 0x1d04  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

11:06:13.0587 0x1d04  Mup - ok

11:06:13.0728 0x1d04  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

11:06:13.0790 0x1d04  napagent - ok

11:06:13.0837 0x1d04  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

11:06:13.0868 0x1d04  NativeWifiP - ok

11:06:13.0993 0x1d04  [ 7BE93DBB02B66E72872FF76D8A92E662, 5489E40BF1595D8EDC6C142E3F7FFE245E3502433D5E1903F403537796478A24 ] NAVENG          C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\ENG64.SYS

11:06:14.0024 0x1d04  NAVENG - ok

11:06:14.0086 0x1d04  [ BE99EDBBA322CA59B3F2FE17B9BF987A, CFBBEC938E6125842A049C31BA201001462F9CA7ECF9A211D281552C8AC76CA0 ] NAVEX15         C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\EX64.SYS

11:06:14.0118 0x1d04  NAVEX15 - ok

11:06:14.0196 0x1d04  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys

11:06:14.0227 0x1d04  NDIS - ok

11:06:14.0274 0x1d04  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

11:06:14.0352 0x1d04  NdisCap - ok

11:06:14.0367 0x1d04  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

11:06:14.0414 0x1d04  NdisTapi - ok

11:06:14.0445 0x1d04  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

11:06:14.0476 0x1d04  Ndisuio - ok

11:06:14.0508 0x1d04  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

11:06:14.0539 0x1d04  NdisWan - ok

11:06:14.0570 0x1d04  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

11:06:14.0601 0x1d04  NDProxy - ok

11:06:14.0632 0x1d04  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

11:06:14.0710 0x1d04  NetBIOS - ok

11:06:14.0726 0x1d04  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

11:06:14.0773 0x1d04  NetBT - ok

11:06:14.0804 0x1d04  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] Netlogon        C:\Windows\system32\lsass.exe

11:06:14.0820 0x1d04  Netlogon - ok

11:06:14.0851 0x1d04  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

11:06:14.0898 0x1d04  Netman - ok

11:06:14.0944 0x1d04  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:14.0960 0x1d04  NetMsmqActivator - ok

11:06:14.0991 0x1d04  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:14.0991 0x1d04  NetPipeActivator - ok

11:06:15.0038 0x1d04  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

11:06:15.0085 0x1d04  netprofm - ok

11:06:15.0163 0x1d04  [ 81B8D0C1CE44A7FDBD596B693783950C, 9F47ACECFE32E935FE03D0134018A9C03698D9E25E6FC9B8A525A4FE4A880642 ] netr7364        C:\Windows\system32\DRIVERS\netr7364.sys

11:06:15.0210 0x1d04  netr7364 - ok

11:06:15.0210 0x1d04  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:15.0225 0x1d04  NetTcpActivator - ok

11:06:15.0241 0x1d04  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:06:15.0256 0x1d04  NetTcpPortSharing - ok

11:06:15.0272 0x1d04  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

11:06:15.0288 0x1d04  nfrd960 - ok

11:06:15.0334 0x1d04  [ 436E7B2E6F42C2717C1D670220D03336, 5F2AD6D60531296EF4648D19E9EF9CF0ECBEDA0C8CE0EA96EBE66C9DB98A8780 ] NIS             C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe

11:06:15.0350 0x1d04  NIS - ok

11:06:15.0397 0x1d04  [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc          C:\Windows\System32\nlasvc.dll

11:06:15.0428 0x1d04  NlaSvc - ok

11:06:15.0584 0x1d04  [ B1EF4686961986DFFB7FE8F18E6FCB5B, 562F144DAA8C2D6E4D55C7ABEF1DB52FC67F1A09E03CD700E27DFC3A4920E271 ] nlsX86cc        C:\Windows\SysWOW64\nlssrv32.exe

11:06:15.0600 0x1d04  nlsX86cc - detected UnsignedFile.Multi.Generic ( 1 )

11:06:15.0600 0x1d04  Detect skipped due to KSN trusted

11:06:15.0600 0x1d04  nlsX86cc - ok

11:06:15.0771 0x1d04  [ 5839A8027D6D324A7CD494051A96628C, 474F2D0BB463ABE68D7C4D2C630860AED4B722EC62C616C91EE00AA965378382 ] NOBU            C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

11:06:15.0834 0x1d04  NOBU - ok

11:06:15.0865 0x1d04  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

11:06:15.0896 0x1d04  Npfs - ok

11:06:15.0927 0x1d04  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

11:06:15.0958 0x1d04  nsi - ok

11:06:15.0990 0x1d04  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

11:06:16.0036 0x1d04  nsiproxy - ok

11:06:16.0255 0x1d04  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

11:06:16.0302 0x1d04  Ntfs - ok

11:06:16.0317 0x1d04  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

11:06:16.0364 0x1d04  Null - ok

11:06:16.0395 0x1d04  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

11:06:16.0411 0x1d04  nvraid - ok

11:06:16.0426 0x1d04  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

11:06:16.0442 0x1d04  nvstor - ok

11:06:16.0473 0x1d04  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

11:06:16.0473 0x1d04  nv_agp - ok

11:06:16.0614 0x1d04  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

11:06:16.0629 0x1d04  odserv - ok

11:06:16.0645 0x1d04  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

11:06:16.0660 0x1d04  ohci1394 - ok

11:06:16.0676 0x1d04  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

11:06:16.0692 0x1d04  ose - ok

11:06:16.0723 0x1d04  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

11:06:16.0754 0x1d04  p2pimsvc - ok

11:06:16.0832 0x1d04  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

11:06:16.0879 0x1d04  p2psvc - ok

11:06:16.0910 0x1d04  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys

11:06:16.0926 0x1d04  Parport - ok

11:06:16.0972 0x1d04  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

11:06:17.0004 0x1d04  partmgr - ok

11:06:17.0035 0x1d04  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll

11:06:17.0082 0x1d04  PcaSvc - ok

11:06:17.0113 0x1d04  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

11:06:17.0128 0x1d04  pci - ok

11:06:17.0175 0x1d04  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

11:06:17.0175 0x1d04  pciide - ok

11:06:17.0206 0x1d04  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

11:06:17.0222 0x1d04  pcmcia - ok

11:06:17.0222 0x1d04  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

11:06:17.0238 0x1d04  pcw - ok

11:06:17.0253 0x1d04  pdfcDispatcher - ok

11:06:17.0284 0x1d04  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

11:06:17.0347 0x1d04  PEAUTH - ok

11:06:17.0394 0x1d04  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

11:06:17.0456 0x1d04  PerfHost - ok

11:06:17.0565 0x1d04  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

11:06:17.0659 0x1d04  pla - ok

11:06:17.0737 0x1d04  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

11:06:17.0799 0x1d04  PlugPlay - ok

11:06:17.0815 0x1d04  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

11:06:17.0846 0x1d04  PNRPAutoReg - ok

11:06:17.0877 0x1d04  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

11:06:17.0893 0x1d04  PNRPsvc - ok

11:06:17.0924 0x1d04  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

11:06:17.0971 0x1d04  PolicyAgent - ok

11:06:18.0002 0x1d04  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

11:06:18.0049 0x1d04  Power - ok

11:06:18.0080 0x1d04  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

11:06:18.0127 0x1d04  PptpMiniport - ok

11:06:18.0142 0x1d04  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys

11:06:18.0189 0x1d04  Processor - ok

11:06:18.0267 0x1d04  [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc         C:\Windows\system32\profsvc.dll

11:06:18.0345 0x1d04  ProfSvc - ok

11:06:18.0361 0x1d04  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] ProtectedStorage C:\Windows\system32\lsass.exe

11:06:18.0376 0x1d04  ProtectedStorage - ok

11:06:18.0392 0x1d04  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

11:06:18.0439 0x1d04  Psched - ok

11:06:18.0470 0x1d04  [ 87B04878A6D59D6C79251DC960C674C1, 3EB8DB0624E646F0A65D0381408D35CF9FDC5ABFC30DF6431F4070A8EB68447C ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys

11:06:18.0486 0x1d04  PxHlpa64 - ok

11:06:18.0751 0x1d04  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

11:06:18.0782 0x1d04  ql2300 - ok

11:06:18.0813 0x1d04  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

11:06:18.0829 0x1d04  ql40xx - ok

11:06:18.0844 0x1d04  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

11:06:18.0876 0x1d04  QWAVE - ok

11:06:18.0907 0x1d04  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

11:06:18.0938 0x1d04  QWAVEdrv - ok

11:06:18.0954 0x1d04  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

11:06:19.0000 0x1d04  RasAcd - ok

11:06:19.0016 0x1d04  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

11:06:19.0063 0x1d04  RasAgileVpn - ok

11:06:19.0078 0x1d04  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

11:06:19.0110 0x1d04  RasAuto - ok

11:06:19.0141 0x1d04  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

11:06:19.0172 0x1d04  Rasl2tp - ok

11:06:19.0266 0x1d04  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

11:06:19.0312 0x1d04  RasMan - ok

11:06:19.0312 0x1d04  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

11:06:19.0344 0x1d04  RasPppoe - ok

11:06:19.0359 0x1d04  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

11:06:19.0406 0x1d04  RasSstp - ok

11:06:19.0422 0x1d04  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

11:06:19.0468 0x1d04  rdbss - ok

11:06:19.0515 0x1d04  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys

11:06:19.0578 0x1d04  rdpbus - ok

11:06:19.0609 0x1d04  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

11:06:19.0671 0x1d04  RDPCDD - ok

11:06:19.0687 0x1d04  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

11:06:19.0780 0x1d04  RDPENCDD - ok

11:06:19.0796 0x1d04  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

11:06:19.0827 0x1d04  RDPREFMP - ok

11:06:19.0890 0x1d04  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

11:06:19.0936 0x1d04  RdpVideoMiniport - ok

11:06:19.0999 0x1d04  [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

11:06:20.0046 0x1d04  RDPWD - ok

11:06:20.0077 0x1d04  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

11:06:20.0108 0x1d04  rdyboost - ok

11:06:20.0124 0x1d04  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

11:06:20.0170 0x1d04  RemoteAccess - ok

11:06:20.0217 0x1d04  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

11:06:20.0264 0x1d04  RemoteRegistry - ok

11:06:20.0326 0x1d04  [ 085D18C71AB2611A3D61528132B6501E, 2AD2DD88EBD8C498E3043CDAA37E83C69F7FE2FD6B65524F631527555B80C112 ] RoxioNow Service C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe

11:06:20.0342 0x1d04  RoxioNow Service - ok

11:06:20.0358 0x1d04  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

11:06:20.0404 0x1d04  RpcEptMapper - ok

11:06:20.0420 0x1d04  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

11:06:20.0451 0x1d04  RpcLocator - ok

11:06:20.0482 0x1d04  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

11:06:20.0529 0x1d04  RpcSs - ok

11:06:20.0560 0x1d04  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

11:06:20.0592 0x1d04  rspndr - ok

11:06:20.0623 0x1d04  [ AFC12DFA4C7B089673AD67402CA19EDB, 9CA430E8DFAE9B7A245FCD766CB60245418C80CEBCD2E9FACA9DE62E3E60ADDF ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

11:06:20.0638 0x1d04  RTL8167 - ok

11:06:20.0654 0x1d04  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] SamSs           C:\Windows\system32\lsass.exe

11:06:20.0654 0x1d04  SamSs - ok

11:06:20.0670 0x1d04  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

11:06:20.0685 0x1d04  sbp2port - ok

11:06:20.0826 0x1d04  [ 794D4B48DFB6E999537C7C3947863463, 93DA8AA20D6B02A3360E7F56150F126E75266E9372E6409D42B89DA588EF49C3 ] SBSDWSCService  C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

11:06:20.0857 0x1d04  SBSDWSCService - ok

11:06:20.0919 0x1d04  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

11:06:20.0966 0x1d04  SCardSvr - ok

11:06:20.0982 0x1d04  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

11:06:21.0028 0x1d04  scfilter - ok

11:06:21.0075 0x1d04  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll

11:06:21.0169 0x1d04  Schedule - ok

11:06:21.0216 0x1d04  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

11:06:21.0247 0x1d04  SCPolicySvc - ok

11:06:21.0278 0x1d04  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

11:06:21.0325 0x1d04  SDRSVC - ok

11:06:21.0340 0x1d04  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] SecDrv          C:\Windows\system32\drivers\SECDRV.SYS

11:06:21.0372 0x1d04  SecDrv - ok

11:06:21.0403 0x1d04  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

11:06:21.0450 0x1d04  seclogon - ok

11:06:21.0465 0x1d04  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll

11:06:21.0496 0x1d04  SENS - ok

11:06:21.0496 0x1d04  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

11:06:21.0528 0x1d04  SensrSvc - ok

11:06:21.0543 0x1d04  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\drivers\serenum.sys

11:06:21.0559 0x1d04  Serenum - ok

11:06:21.0590 0x1d04  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys

11:06:21.0621 0x1d04  Serial - ok

11:06:21.0637 0x1d04  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys

11:06:21.0652 0x1d04  sermouse - ok

11:06:21.0715 0x1d04  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

11:06:21.0793 0x1d04  SessionEnv - ok

11:06:21.0808 0x1d04  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

11:06:21.0840 0x1d04  sffdisk - ok

11:06:21.0855 0x1d04  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

11:06:21.0871 0x1d04  sffp_mmc - ok

11:06:21.0871 0x1d04  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

11:06:21.0886 0x1d04  sffp_sd - ok

11:06:21.0902 0x1d04  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

11:06:21.0933 0x1d04  sfloppy - ok

11:06:22.0027 0x1d04  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

11:06:22.0089 0x1d04  SharedAccess - ok

11:06:22.0105 0x1d04  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

11:06:22.0136 0x1d04  ShellHWDetection - ok

11:06:22.0152 0x1d04  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

11:06:22.0167 0x1d04  SiSRaid2 - ok

11:06:22.0198 0x1d04  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

11:06:22.0198 0x1d04  SiSRaid4 - ok

11:06:22.0276 0x1d04  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

11:06:22.0339 0x1d04  Smb - ok

11:06:22.0354 0x1d04  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

11:06:22.0386 0x1d04  SNMPTRAP - ok

11:06:22.0401 0x1d04  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

11:06:22.0417 0x1d04  spldr - ok

11:06:22.0495 0x1d04  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe

11:06:22.0526 0x1d04  Spooler - ok

11:06:22.0729 0x1d04  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

11:06:22.0838 0x1d04  sppsvc - ok

11:06:22.0869 0x1d04  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

11:06:22.0900 0x1d04  sppuinotify - ok

11:06:22.0947 0x1d04  [ 86EBD8B1F23E743AAD21F4D5B4D40985, 8FA4DFDAE15712266B878C364FEFDB63CB30A3DCC25F83CDFE8C8AB3AE864BE6 ] SQLBrowser      C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

11:06:22.0963 0x1d04  SQLBrowser - ok

11:06:23.0072 0x1d04  [ 3C432A96363097870995E2A3C8B66ABD, AA0AE0935FC5317FE93D7D3C3B9A6B2E026915D07704AF3E36F14FEA8595F4A6 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

11:06:23.0072 0x1d04  SQLWriter - ok

11:06:23.0181 0x1d04  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

11:06:23.0228 0x1d04  srv - ok

11:06:23.0259 0x1d04  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

11:06:23.0290 0x1d04  srv2 - ok

11:06:23.0306 0x1d04  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

11:06:23.0337 0x1d04  srvnet - ok

11:06:23.0353 0x1d04  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

11:06:23.0415 0x1d04  SSDPSRV - ok

11:06:23.0431 0x1d04  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

11:06:23.0524 0x1d04  SstpSvc - ok

11:06:23.0556 0x1d04  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys

11:06:23.0556 0x1d04  stexstor - ok

11:06:23.0587 0x1d04  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

11:06:23.0618 0x1d04  stisvc - ok

11:06:23.0649 0x1d04  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys

11:06:23.0649 0x1d04  swenum - ok

11:06:23.0852 0x1d04  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

11:06:23.0899 0x1d04  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )

11:06:23.0899 0x1d04  Detect skipped due to KSN trusted

11:06:23.0899 0x1d04  SwitchBoard - ok

11:06:23.0930 0x1d04  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

11:06:23.0977 0x1d04  swprv - ok

11:06:24.0102 0x1d04  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll

11:06:24.0164 0x1d04  SysMain - ok

11:06:24.0180 0x1d04  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

11:06:24.0211 0x1d04  TabletInputService - ok

11:06:24.0242 0x1d04  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

11:06:24.0336 0x1d04  TapiSrv - ok

11:06:24.0351 0x1d04  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

11:06:24.0414 0x1d04  TBS - ok

11:06:24.0570 0x1d04  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

11:06:24.0616 0x1d04  Tcpip - ok

11:06:24.0679 0x1d04  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

11:06:24.0726 0x1d04  TCPIP6 - ok

11:06:24.0772 0x1d04  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

11:06:24.0804 0x1d04  tcpipreg - ok

11:06:24.0882 0x1d04  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

11:06:24.0928 0x1d04  TDPIPE - ok

11:06:24.0960 0x1d04  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

11:06:24.0991 0x1d04  TDTCP - ok

11:06:25.0022 0x1d04  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

11:06:25.0069 0x1d04  tdx - ok

11:06:25.0100 0x1d04  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys

11:06:25.0100 0x1d04  TermDD - ok

11:06:25.0147 0x1d04  [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService     C:\Windows\System32\termsrv.dll

11:06:25.0178 0x1d04  TermService - ok

11:06:25.0209 0x1d04  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

11:06:25.0225 0x1d04  Themes - ok

11:06:25.0272 0x1d04  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

11:06:25.0318 0x1d04  THREADORDER - ok

11:06:25.0350 0x1d04  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

11:06:25.0412 0x1d04  TrkWks - ok

11:06:25.0459 0x1d04  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

11:06:25.0537 0x1d04  TrustedInstaller - ok

11:06:25.0568 0x1d04  [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

11:06:25.0615 0x1d04  tssecsrv - ok

11:06:25.0662 0x1d04  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

11:06:25.0724 0x1d04  TsUsbFlt - ok

11:06:25.0740 0x1d04  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

11:06:25.0755 0x1d04  TsUsbGD - ok

11:06:25.0786 0x1d04  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

11:06:25.0818 0x1d04  tunnel - ok

11:06:25.0833 0x1d04  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

11:06:25.0849 0x1d04  uagp35 - ok

11:06:25.0864 0x1d04  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

11:06:25.0927 0x1d04  udfs - ok

11:06:25.0958 0x1d04  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

11:06:25.0974 0x1d04  UI0Detect - ok

11:06:25.0989 0x1d04  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

11:06:26.0005 0x1d04  uliagpkx - ok

11:06:26.0020 0x1d04  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

11:06:26.0020 0x1d04  umbus - ok

11:06:26.0067 0x1d04  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys

11:06:26.0098 0x1d04  UmPass - ok

11:06:26.0176 0x1d04  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

11:06:26.0239 0x1d04  upnphost - ok

11:06:26.0270 0x1d04  [ C9E9D59C0099A9FF51697E9306A44240, 78D9A7A5E5742962B6978F475BF06CB32262F1D214699D3D40538476A58012A1 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys

11:06:26.0286 0x1d04  USBAAPL64 - ok

11:06:26.0332 0x1d04  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys

11:06:26.0379 0x1d04  usbaudio - ok

11:06:26.0426 0x1d04  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

11:06:26.0457 0x1d04  usbccgp - ok

11:06:26.0488 0x1d04  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

11:06:26.0582 0x1d04  usbcir - ok

11:06:26.0629 0x1d04  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

11:06:26.0676 0x1d04  usbehci - ok

11:06:26.0722 0x1d04  [ 2C780746DC44A28FE67004DC58173F05, 9E0596CE35C7430A31A7E77B4D12A1F521B9ED8EB0614E6FB38403AC614C3EE3 ] usbfilter       C:\Windows\system32\drivers\usbfilter.sys

11:06:26.0754 0x1d04  usbfilter - ok

11:06:26.0832 0x1d04  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

11:06:26.0878 0x1d04  usbhub - ok

11:06:26.0910 0x1d04  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

11:06:26.0925 0x1d04  usbohci - ok

11:06:26.0941 0x1d04  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys

11:06:26.0956 0x1d04  usbprint - ok

11:06:27.0003 0x1d04  [ AAA2513C8AED8B54B189FD0C6B1634C0, 02FEE0B756AA559C29477A19861AC16D5A3152DC3C897C7D466423438B6A5E42 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

11:06:27.0019 0x1d04  usbscan - ok

11:06:27.0034 0x1d04  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

11:06:27.0050 0x1d04  USBSTOR - ok

11:06:27.0066 0x1d04  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

11:06:27.0097 0x1d04  usbuhci - ok

11:06:27.0128 0x1d04  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

11:06:27.0159 0x1d04  UxSms - ok

11:06:27.0190 0x1d04  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] VaultSvc        C:\Windows\system32\lsass.exe

11:06:27.0206 0x1d04  VaultSvc - ok

11:06:27.0206 0x1d04  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

11:06:27.0222 0x1d04  vdrvroot - ok

11:06:27.0268 0x1d04  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

11:06:27.0315 0x1d04  vds - ok

11:06:27.0346 0x1d04  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

11:06:27.0362 0x1d04  vga - ok

11:06:27.0393 0x1d04  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

11:06:27.0440 0x1d04  VgaSave - ok

11:06:27.0456 0x1d04  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

11:06:27.0471 0x1d04  vhdmp - ok

11:06:27.0534 0x1d04  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

11:06:27.0565 0x1d04  viaide - ok

11:06:27.0596 0x1d04  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

11:06:27.0596 0x1d04  volmgr - ok

11:06:27.0658 0x1d04  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

11:06:27.0690 0x1d04  volmgrx - ok

11:06:27.0705 0x1d04  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys

11:06:27.0721 0x1d04  volsnap - ok

11:06:27.0846 0x1d04  [ 86C96C079293E2E06708E146A011F4C4, 10F8DBA78B76B304525FC72C83990F10133936010E26D2F9AEB2FB747F8B75C2 ] vpnagent        C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

11:06:27.0877 0x1d04  vpnagent - ok

11:06:27.0955 0x1d04  [ 5932B2999AEF21C4599A792599F28D89, 78B2842BA71F9DAB5BB64BA4AB97BD19DEEFB075F83D735244906D046E78B2DC ] vpnva           C:\Windows\system32\DRIVERS\vpnva64-6.sys

11:06:27.0986 0x1d04  vpnva - ok

11:06:28.0017 0x1d04  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

11:06:28.0017 0x1d04  vsmraid - ok

11:06:28.0095 0x1d04  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

11:06:28.0158 0x1d04  VSS - ok

11:06:28.0360 0x1d04  [ CE72E4E7D8436161F278CD99F4F17D2A, 9A0251359520D7A249E558899A30E0A224A5BD010EF9CAA87162CEE20E8FE150 ] vToolbarUpdater18.1.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe

11:06:28.0407 0x1d04  vToolbarUpdater18.1.0 - ok

11:06:28.0438 0x1d04  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

11:06:28.0485 0x1d04  vwifibus - ok

11:06:28.0501 0x1d04  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

11:06:28.0532 0x1d04  vwififlt - ok

11:06:28.0563 0x1d04  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

11:06:28.0626 0x1d04  W32Time - ok

11:06:28.0657 0x1d04  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

11:06:28.0657 0x1d04  WacomPen - ok

11:06:28.0672 0x1d04  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

11:06:28.0782 0x1d04  WANARP - ok

11:06:28.0782 0x1d04  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

11:06:28.0813 0x1d04  Wanarpv6 - ok

11:06:28.0891 0x1d04  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

11:06:28.0922 0x1d04  WatAdminSvc - ok

11:06:28.0984 0x1d04  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

11:06:29.0047 0x1d04  wbengine - ok

11:06:29.0062 0x1d04  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

11:06:29.0094 0x1d04  WbioSrvc - ok

11:06:29.0140 0x1d04  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

11:06:29.0172 0x1d04  wcncsvc - ok

11:06:29.0187 0x1d04  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

11:06:29.0218 0x1d04  WcsPlugInService - ok

11:06:29.0250 0x1d04  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys

11:06:29.0250 0x1d04  Wd - ok

11:06:29.0281 0x1d04  [ A3D04EBF5227886029B4532F20D026F7, D90F7B9C176008675DA0B5FD7E4973CBC2A04172CEDF8FB7D3B3B4F27B5440D7 ] WDC_SAM         C:\Windows\system32\DRIVERS\wdcsam64.sys

11:06:29.0328 0x1d04  WDC_SAM - ok

11:06:29.0468 0x1d04  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

11:06:29.0515 0x1d04  Wdf01000 - ok

11:06:29.0546 0x1d04  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll

11:06:29.0593 0x1d04  WdiServiceHost - ok

11:06:29.0593 0x1d04  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll

11:06:29.0624 0x1d04  WdiSystemHost - ok

11:06:29.0671 0x1d04  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll

11:06:29.0686 0x1d04  WebClient - ok

11:06:29.0702 0x1d04  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

11:06:29.0733 0x1d04  Wecsvc - ok

11:06:29.0749 0x1d04  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

11:06:29.0780 0x1d04  wercplsupport - ok

11:06:29.0796 0x1d04  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

11:06:29.0858 0x1d04  WerSvc - ok

11:06:29.0889 0x1d04  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

11:06:29.0920 0x1d04  WfpLwf - ok

11:06:29.0920 0x1d04  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

11:06:29.0936 0x1d04  WIMMount - ok

11:06:29.0967 0x1d04  WinDefend - ok

11:06:29.0967 0x1d04  WinHttpAutoProxySvc - ok

11:06:30.0076 0x1d04  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

11:06:30.0139 0x1d04  Winmgmt - ok

11:06:30.0217 0x1d04  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll

11:06:30.0295 0x1d04  WinRM - ok

11:06:30.0342 0x1d04  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

11:06:30.0373 0x1d04  WinUsb - ok

11:06:30.0404 0x1d04  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

11:06:30.0451 0x1d04  Wlansvc - ok

11:06:30.0529 0x1d04  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

11:06:30.0560 0x1d04  wlcrasvc - ok

11:06:30.0685 0x1d04  [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

11:06:30.0732 0x1d04  wlidsvc - ok

11:06:30.0810 0x1d04  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

11:06:30.0856 0x1d04  WmiAcpi - ok

11:06:30.0888 0x1d04  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

11:06:30.0934 0x1d04  wmiApSrv - ok

11:06:30.0950 0x1d04  WMPNetworkSvc - ok

11:06:31.0012 0x1d04  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

11:06:31.0059 0x1d04  WPCSvc - ok

11:06:31.0090 0x1d04  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

11:06:31.0106 0x1d04  WPDBusEnum - ok

11:06:31.0122 0x1d04  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

11:06:31.0168 0x1d04  ws2ifsl - ok

11:06:31.0168 0x1d04  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll

11:06:31.0184 0x1d04  wscsvc - ok

11:06:31.0200 0x1d04  WSearch - ok

11:06:31.0340 0x1d04  [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv        C:\Windows\system32\wuaueng.dll

11:06:31.0387 0x1d04  wuauserv - ok

11:06:31.0496 0x1d04  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

11:06:31.0527 0x1d04  WudfPf - ok

11:06:31.0543 0x1d04  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

11:06:31.0558 0x1d04  WUDFRd - ok

11:06:31.0605 0x1d04  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

11:06:31.0621 0x1d04  wudfsvc - ok

11:06:31.0714 0x1d04  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll

11:06:31.0761 0x1d04  WwanSvc - ok

11:06:31.0792 0x1d04  ================ Scan global ===============================

11:06:31.0808 0x1d04  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll

11:06:31.0870 0x1d04  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

11:06:31.0886 0x1d04  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

11:06:31.0917 0x1d04  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

11:06:31.0933 0x1d04  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe

11:06:31.0948 0x1d04  [ Global ] - ok

11:06:31.0948 0x1d04  ================ Scan MBR ==================================

11:06:31.0948 0x1d04  [ 6C7374B44B99ED7CB70389041ECB26C8 ] \Device\Harddisk0\DR0

11:06:32.0557 0x1d04  \Device\Harddisk0\DR0 - ok

11:06:32.0557 0x1d04  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1

11:06:32.0838 0x1d04  \Device\Harddisk1\DR1 - ok

11:06:32.0838 0x1d04  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2

11:06:33.0399 0x1d04  \Device\Harddisk2\DR2 - ok

11:06:33.0399 0x1d04  ================ Scan VBR ==================================

11:06:33.0415 0x1d04  [ 4853DB8DC39F76A1DB4F8B8C676775B2 ] \Device\Harddisk0\DR0\Partition1

11:06:33.0493 0x1d04  \Device\Harddisk0\DR0\Partition1 - ok

11:06:33.0540 0x1d04  [ 7F5FEBC6A4B2D54D12213A011548E610 ] \Device\Harddisk0\DR0\Partition2

11:06:33.0633 0x1d04  \Device\Harddisk0\DR0\Partition2 - ok

11:06:33.0696 0x1d04  [ D1B9EC14FE3D09AD7F84BE7CA4B77A97 ] \Device\Harddisk0\DR0\Partition3

11:06:33.0711 0x1d04  \Device\Harddisk0\DR0\Partition3 - ok

11:06:33.0711 0x1d04  [ FEACAEF5B257B292DBBAB416E2BCB932 ] \Device\Harddisk1\DR1\Partition1

11:06:33.0711 0x1d04  \Device\Harddisk1\DR1\Partition1 - ok

11:06:33.0727 0x1d04  [ A9DD4B8A3CAFD21F3E13E18BA72C0F7E ] \Device\Harddisk2\DR2\Partition1

11:06:33.0727 0x1d04  \Device\Harddisk2\DR2\Partition1 - ok

11:06:33.0742 0x1d04  AV detected via SS2: AVG AntiVirus Free Edition 2014, C:\Program Files (x86)\AVG\AVG2014\avgwsc.exe ( 14.0.0.4563 ), 0x41000 ( enabled : updated )

11:06:33.0742 0x1d04  AV detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\WSCStub.exe ( 18.0.0.0 ), 0x50000 ( disabled : updated )

11:06:33.0742 0x1d04  FW detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\WSCStub.exe ( 18.0.0.0 ), 0x50010 ( disabled )

11:06:33.0742 0x1d04  Win FW state via NFP2: enabled

11:06:36.0270 0x1d04  ============================================================

11:06:36.0270 0x1d04  Scan finished

11:06:36.0270 0x1d04  ============================================================

11:06:36.0285 0x1cfc  Detected object count: 0

11:06:36.0285 0x1cfc  Actual detected object count: 0

11:06:38.0937 0x1498  Deinitialize success

 

 

Will now follow your steps, starting with OTL.

[Machiavelli]

Will now follow your steps, starting with OTL.

Well done so far.

[kuratowa2]

Avast is still running, but here are the OTL and Extra log files.

 

OTL.txt:

 

OTL logfile created on: 5/2/2014 2:52:42 PM - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Union\Downloads

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17041)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

 

5.99 Gb Total Physical Memory | 5.25 Gb Available Physical Memory | 87.62% Memory free

11.98 Gb Paging File | 11.28 Gb Available in Paging File | 94.12% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 919.80 Gb Total Space | 406.11 Gb Free Space | 44.15% Space Free | Partition Type: NTFS

Drive D: | 11.43 Gb Total Space | 1.40 Gb Free Space | 12.22% Space Free | Partition Type: NTFS

Drive E: | 1397.26 Gb Total Space | 1021.91 Gb Free Space | 73.14% Space Free | Partition Type: NTFS

Drive G: | 488.28 Gb Total Space | 446.21 Gb Free Space | 91.38% Space Free | Partition Type: NTFS

Drive H: | 61.29 Mb Total Space | 60.83 Mb Free Space | 99.25% Space Free | Partition Type: FAT

 

Computer Name: VULCAN | User Name: Union | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2014/05/02 14:48:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Union\Downloads\OTL.exe

PRC - [2011/12/07 11:19:13 | 000,021,320 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG Family Safety\BsecAMX.exe

PRC - [2011/12/07 11:19:02 | 000,066,376 | ---- | M] (Bsecure Technologies, Inc.) -- C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe

 

 

========== Modules (No Company Name) ==========

 

MOD - [2011/12/07 11:19:13 | 000,021,320 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG Family Safety\BsecAMX.exe

 

 

========== Services (SafeList) ==========

 

SRV:64bit: - [2014/03/06 04:29:14 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2012/04/26 04:50:18 | 000,237,056 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2011/02/17 01:47:28 | 000,682,040 | ---- | M] (Hewlett-Packard) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe -- (HPAuto)

SRV:64bit: - [2010/10/11 05:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)

SRV:64bit: - [2010/09/22 21:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV:64bit: - [2010/04/14 16:08:30 | 001,052,328 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\SysNative\lxeccoms.exe -- (lxec_device)

SRV:64bit: - [2010/04/14 16:08:23 | 000,045,736 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxecserv.exe -- (lxecCATSCustConnectService)

SRV - [2014/04/29 16:10:21 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2014/04/29 10:07:25 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2014/04/27 14:49:12 | 001,801,240 | ---- | M] (AVG Secure Search) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe -- (vToolbarUpdater18.1.0)

SRV - [2014/04/18 15:18:48 | 003,645,456 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)

SRV - [2014/03/27 22:10:20 | 000,291,912 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)

SRV - [2014/02/15 12:53:58 | 000,227,904 | ---- | M] (WildTangent) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService)

SRV - [2013/12/18 14:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2013/11/04 19:31:56 | 000,092,160 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)

SRV - [2013/10/10 17:47:40 | 000,558,480 | ---- | M] (Cisco Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe -- (vpnagent)

SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2012/03/28 23:47:48 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\SysWOW64\nlssrv32.exe -- (nlsX86cc)

SRV - [2011/12/07 11:19:02 | 000,066,376 | ---- | M] (Bsecure Technologies, Inc.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe -- (Bsecure)

SRV - [2011/10/15 14:05:04 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2011/02/01 04:49:44 | 001,127,448 | ---- | M] (PDF Complete Inc) [Auto | Stopped] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)

SRV - [2010/11/26 10:09:12 | 000,399,344 | ---- | M] (Roxio) [Auto | Stopped] -- C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe -- (RoxioNow Service)

SRV - [2010/10/12 13:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)

SRV - [2010/07/05 08:37:08 | 000,011,776 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)

SRV - [2010/06/01 18:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)

SRV - [2010/05/23 01:39:05 | 000,126,904 | R--- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe -- (NIS)

SRV - [2010/04/14 16:08:23 | 000,045,736 | ---- | M] () [Auto | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe -- (lxecCATSCustConnectService)

SRV - [2010/04/14 16:08:12 | 000,598,696 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\SysWOW64\lxeccoms.exe -- (lxec_device)

SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)

SRV - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] (AMD) [Auto | Stopped] -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe -- (AMD_RAIDXpert)

SRV - [2009/07/22 12:58:18 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\SysWOW64\ASTSRV.EXE -- (astcc)

SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009/02/20 09:46:52 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)

 

 

========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2014/05/02 11:23:38 | 000,036,680 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon)

DRV:64bit: - [2014/04/27 14:49:14 | 000,050,464 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)

DRV:64bit: - [2014/04/18 15:01:30 | 000,237,336 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)

DRV:64bit: - [2014/03/31 16:20:54 | 000,274,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)

DRV:64bit: - [2014/03/31 16:06:26 | 000,130,840 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)

DRV:64bit: - [2014/03/27 22:14:26 | 000,192,792 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)

DRV:64bit: - [2014/03/27 22:14:24 | 000,153,368 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)

DRV:64bit: - [2014/03/27 22:07:10 | 000,236,824 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)

DRV:64bit: - [2014/03/27 22:05:02 | 000,324,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)

DRV:64bit: - [2014/03/27 22:03:16 | 000,032,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)

DRV:64bit: - [2013/10/10 17:31:36 | 000,052,080 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpnva64-6.sys -- (vpnva)

DRV:64bit: - [2013/10/10 17:29:28 | 000,112,496 | R--- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acsock64.sys -- (acsock)

DRV:64bit: - [2013/10/01 22:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2012/08/23 10:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012/08/23 10:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012/04/26 06:47:20 | 011,172,864 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2012/04/26 03:32:46 | 000,339,456 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2012/04/09 16:27:34 | 000,352,144 | ---- | M] (EldoS Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cbfs3.sys -- (cbfs3)

DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/11/28 22:28:28 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2011/06/14 17:17:24 | 000,022,832 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BSecACFltr.sys -- (BSecACFltr)

DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011/01/11 08:08:46 | 000,280,144 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)

DRV:64bit: - [2010/12/28 15:45:54 | 000,412,776 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/09/24 11:46:32 | 000,116,752 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2010/07/05 21:29:12 | 000,106,888 | ---- | M] (Windows ® Win 7 DDK provider) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan)

DRV:64bit: - [2010/03/10 11:33:52 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie)

DRV:64bit: - [2009/12/22 05:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:64bit: - [2009/11/02 10:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)

DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/06/10 16:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2009/06/10 16:35:38 | 000,707,072 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)

DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)

DRV - [2013/12/21 11:34:19 | 000,011,973 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\SECDRV.SYS -- (SecDrv)

DRV - [2011/06/14 17:17:24 | 000,021,624 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\BSecACFltr.sys -- (BSecACFltr)

DRV - [2011/03/04 04:00:00 | 001,791,096 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\ex64.sys -- (NAVEX15)

DRV - [2011/03/04 04:00:00 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\eng64.sys -- (NAVENG)

DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPDTDF

IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPDTDF

IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}

IE:64bit: - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

IE:64bit: - HKLM\..\SearchScopes\{E1220177-581E-49F3-8F8A-B710C631AAE3}: "URL" = http://www.amazon.co...s={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPDTDF

IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPDTDF

IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}

IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

IE - HKLM\..\SearchScopes\{E1220177-581E-49F3-8F8A-B710C631AAE3}: "URL" = http://www.amazon.co...s={searchTerms}

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

 

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mysearch.avg....uard&sg=&sap=hp

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPDTDF

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg.com/search?cid={C9139132-C11E-4AC6-B49D-761F7B5751F7}&mid=0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-03-25 08:46:53&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPDTDF

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{E1220177-581E-49F3-8F8A-B710C631AAE3}: "URL" = http://www.amazon.co...s={searchTerms}

IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.startup.homepage: "about:home"

FF - prefs.js..keyword.URL: "http://mysearch.avg....6:53&sap=ku&q="

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll File not found

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\10\NP_wtapp.dll ()

FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll File not found

FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll ()

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Union\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Union\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Union\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011/10/15 12:15:11 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443 [2014/04/27 14:51:12 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2014/04/29 16:10:14 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2014/04/29 16:10:18 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files (x86)\AVG\AVG2012\Thunderbird\

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2014/04/29 16:10:14 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2014/04/29 16:10:18 | 000,000,000 | ---D | M]

 

[2012/03/19 03:31:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Extensions

[2012/03/19 03:31:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Extensions\[email protected]

[2014/05/02 13:15:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Firefox\Profiles\6ofm14l9.default\extensions

[2013/10/12 23:14:42 | 000,001,028 | ---- | M] () -- C:\Users\Union\AppData\Roaming\Mozilla\Firefox\Profiles\6ofm14l9.default\searchplugins\dvdvideosofttb-customized-web-search.xml

[2014/05/02 13:17:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

[2011/10/17 22:14:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}

[2011/10/23 20:52:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

[2014/04/27 14:51:12 | 000,003,743 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\safeguard-secure-search.xml

 

========== Chrome  ==========

 

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - homepage: http://mysearch.avg.com?cid={C9139132-C11E-4AC6-B49D-761F7B5751F7}&mid=0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-03-25 08:46:53&v=17.3.1.91&pid=safeguard&sg=&sap=hp

CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Union\AppData\Local\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Users\Union\AppData\Local\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Union\AppData\Local\Google\Chrome\Application\34.0.1847.131\pdf.dll

CHR - plugin: 20-20 3D Viewer for IKEA (Enabled) = C:\Users\Union\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\NP_2020Player_IKEA.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll

CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Union\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll

CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Union\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll

CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\Union\AppData\Roaming\Mozilla\plugins\npo1d.dll

CHR - plugin: AdobeExManDetect (Enabled) = C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll

CHR - plugin: AdobeAAMDetect (Enabled) = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

CHR - plugin: WildTangent Games App V2 Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\7\NP_wtapp.dll

CHR - plugin: Windows Live™ Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

CHR - plugin: Hulu Desktop (Enabled) = C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll

CHR - Extension: MindMap = C:\Users\Union\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdaeohpmcenmffofpikllphdhlkkocfa\6.8.16_0\

CHR - Extension: AVG Secure Search = C:\Users\Union\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\1.0.0.8_0\

 

O1 HOSTS File: ([2013/10/19 22:50:45 | 000,462,232 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 www.007guard.com

O1 - Hosts: 127.0.0.1 007guard.com

O1 - Hosts: 127.0.0.1 008i.com

O1 - Hosts: 127.0.0.1 www.008k.com

O1 - Hosts: 127.0.0.1 008k.com

O1 - Hosts: 127.0.0.1 www.00hq.com

O1 - Hosts: 127.0.0.1 00hq.com

O1 - Hosts: 127.0.0.1 010402.com

O1 - Hosts: 127.0.0.1 www.032439.com

O1 - Hosts: 127.0.0.1 032439.com

O1 - Hosts: 127.0.0.1 www.0scan.com

O1 - Hosts: 127.0.0.1 0scan.com

O1 - Hosts: 127.0.0.1 www.1000gratisproben.com

O1 - Hosts: 127.0.0.1 1000gratisproben.com

O1 - Hosts: 127.0.0.1 1001namen.com

O1 - Hosts: 127.0.0.1 www.1001namen.com

O1 - Hosts: 127.0.0.1 100888290cs.com

O1 - Hosts: 127.0.0.1 www.100888290cs.com

O1 - Hosts: 127.0.0.1 www.100sexlinks.com

O1 - Hosts: 127.0.0.1 100sexlinks.com

O1 - Hosts: 127.0.0.1 www.10sek.com

O1 - Hosts: 127.0.0.1 10sek.com

O1 - Hosts: 127.0.0.1 www.1-2005-search.com

O1 - Hosts: 127.0.0.1 1-2005-search.com

O1 - Hosts: 127.0.0.1 www.123fporn.info

O1 - Hosts: 30677 more lines...

O2:64bit: - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll File not found

O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll File not found

O2:64bit: - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)

O2 - BHO: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()

O2 - BHO: (no name) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - No CLSID value found.

O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll File not found

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)

O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O3 - HKLM\..\Toolbar: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()

O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)

O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)

O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)

O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe (AimerSoft)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [AVG Family Safety] C:\Program Files (x86)\AVG\AVG Family Safety\BsecTray.exe (Bsecure Technologies, Inc.)

O4 - HKLM..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" File not found

O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [BrowserPlugInHelper] C:\Program Files (x86)\Aimersoft\Video Converter Ultimate\BrowserPlugInHelper.exe File not found

O4 - HKLM..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Cisco Systems, Inc.)

O4 - HKLM..\Run: [DropBoxUtility] C:\Program Files (x86)\DropBox\DropBox\DropBox.exe (DropShots)

O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)

O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc)

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()

O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-3164183197-2720610983-350624195-1000..\Run: [AdobeBridge]  File not found

O4 - HKU\S-1-5-21-3164183197-2720610983-350624195-1000..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)

O4 - HKU\S-1-5-21-3164183197-2720610983-350624195-1000..\Run: [googletalk] C:\Users\Union\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)

O4 - HKU\S-1-5-21-3164183197-2720610983-350624195-1000..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)

O4 - HKU\S-1-5-21-3164183197-2720610983-350624195-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)

O4:64bit: - HKLM..\RunOnce: [NCPluginUpdater] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe (Hewlett-Packard)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - Startup: C:\Users\Union\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Union\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 1

O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found

O8:64bit: - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Union\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Union\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found

O9:64bit: - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll File not found

O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000021 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave...ploader_v10.cab (PopCapLoader Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4F54A693-CF82-41C7-824A-5EF19095F5C9}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B270742B-D3AC-4234-B5A1-E76E6B2A34DA}: DhcpNameServer = 192.168.3.1

O18:64bit: - Protocol\Handler\belarc - No CLSID value found

O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll File not found

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found

O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)

O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll File not found

O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (AVG Secure Search)

O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20 - HKLM Winlogon: UserInit - (userinit.exe) -  File not found

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O21:64bit: - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O22:64bit: - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)

O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

O29:64bit: - HKLM SecurityProviders - (credssp.dll) -  File not found

O29 - HKLM SecurityProviders - (credssp.dll) -  File not found

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010/12/29 12:47:21 | 000,000,090 | ---- | M] () - E:\AUTORUN.INF -- [ NTFS ]

O32 - AutoRun File - [2011/05/31 15:41:00 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{355d6298-f622-11e0-ac07-78e7d1c86704}\Shell - "" = AutoRun

O33 - MountPoints2\{355d6298-f622-11e0-ac07-78e7d1c86704}\Shell\AutoRun\command - "" = "L:\WD SmartWare.exe" autoplay=true

O33 - MountPoints2\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\Shell - "" = AutoRun

O33 - MountPoints2\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\Shell\AutoRun\command - "" = L:\TL-Bootstrap.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

 

CREATERESTOREPOINT

Unable to start System Restore Service. Error code 1084

 

========== Files/Folders - Created Within 30 Days ==========

 

[2014/05/02 12:45:34 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro

[2014/05/02 12:12:36 | 000,000,000 | ---D | C] -- C:\Users\Union\Desktop\RK_Quarantine

[2014/05/02 11:00:11 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine

[2014/05/02 02:46:47 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel

[2014/05/02 02:45:50 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll

[2014/05/02 02:45:50 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll

[2014/04/29 16:10:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird

[2014/04/28 18:48:54 | 000,000,000 | -HSD | C] -- C:\Users\Union\AppData\Local\EmieUserList

[2014/04/28 18:48:54 | 000,000,000 | -HSD | C] -- C:\Users\Union\AppData\Local\EmieSiteList

[2014/04/28 01:18:34 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2014/04/28 01:18:33 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2014/04/28 01:18:30 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll

[2014/04/28 01:18:15 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe

[2014/04/28 01:18:15 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll

[2014/04/28 01:18:14 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll

[2014/04/28 01:18:14 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll

[2014/04/28 01:18:11 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll

[2014/04/28 01:18:11 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll

[2014/04/28 01:18:10 | 000,628,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll

[2014/04/28 01:18:10 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll

[2014/04/28 01:18:10 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll

[2014/04/28 01:18:10 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll

[2014/04/28 01:18:08 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe

[2014/04/28 01:18:08 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2014/04/28 01:18:08 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll

[2014/04/28 01:18:08 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll

[2014/04/28 01:18:08 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll

[2014/04/28 01:18:07 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll

[2014/04/28 01:18:04 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll

[2014/04/28 01:18:04 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll

[2014/04/28 01:18:04 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll

[2014/04/28 01:18:04 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll

[2014/04/28 01:18:04 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll

[2014/04/28 01:18:03 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe

[2014/04/28 01:18:03 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe

[2014/04/28 01:18:00 | 001,967,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2014/04/28 01:17:59 | 002,043,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl

[2014/04/28 01:17:56 | 005,784,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2014/04/27 14:50:39 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search

[2014/04/27 08:52:58 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe

[2014/04/27 08:52:44 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe

[2014/04/27 08:52:44 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe

[2014/04/27 08:52:44 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

[2014/04/27 08:52:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2014/04/23 16:33:56 | 000,000,000 | -H-D | C] -- C:\Users\Union\Documents\My Media

[2014/04/23 16:33:56 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Roaming\OverDrive

[2014/04/23 16:33:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OverDrive Media Console

[2014/04/23 16:33:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OverDrive Media Console

[2014/04/18 16:32:50 | 000,000,000 | -H-D | C] -- C:\Users\Union\Documents\Aimersoft Video Converter Ultimate

[2014/04/18 16:32:49 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}

[2014/04/18 16:32:34 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Local\Aimersoft

[2014/04/18 16:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Aimersoft

[2014/04/18 16:31:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Aimersoft Video Converter Ultimate

[2014/04/18 16:31:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Aimersoft

[2014/04/18 16:30:09 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Aimersoft

[2014/04/18 16:23:14 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Local\{3C052A19-6E83-4F2A-A99E-9025811AA5E4}

[2014/04/18 15:01:30 | 000,237,336 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys

[2014/04/08 18:39:47 | 000,190,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys

[2014/04/08 18:39:47 | 000,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys

[2014/04/08 18:39:47 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iologmsg.dll

[2014/04/08 18:39:47 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iologmsg.dll

[2014/04/08 18:39:44 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll

[2014/04/08 18:39:44 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll

[2014/04/08 18:39:44 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll

[2014/04/08 18:39:44 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe

[2014/04/08 18:39:43 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll

[2014/04/08 18:39:43 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll

[2014/04/08 18:39:43 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll

[2014/04/08 18:39:42 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe

[2014/04/08 18:39:42 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll

[2014/04/08 18:39:42 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2014/05/02 14:37:18 | 000,848,970 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2014/05/02 14:37:18 | 000,709,498 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2014/05/02 14:37:18 | 000,140,180 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2014/05/02 14:30:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/05/02 14:30:19 | 530,493,439 | -HS- | M] () -- C:\hiberfil.sys

[2014/05/02 14:23:52 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/05/02 13:41:55 | 000,000,171 | ---- | M] () -- C:\Windows\wininit.ini

[2014/05/02 12:45:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/05/02 12:34:19 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014/05/02 12:34:19 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014/05/02 12:06:05 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/05/02 11:48:30 | 000,000,332 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForUnion.job

[2014/05/02 11:23:38 | 000,036,680 | ---- | M] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/05/02 10:57:00 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3164183197-2720610983-350624195-1000UA.job

[2014/05/02 10:43:26 | 000,000,861 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog

[2014/05/01 17:54:37 | 005,479,652 | ---- | M] () -- C:\Users\Union\Desktop\GRACE.zip

[2014/05/01 14:04:06 | 000,415,840 | ---- | M] () -- C:\Users\Union\Desktop\amazing-grace-ending.PDF

[2014/05/01 13:57:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3164183197-2720610983-350624195-1000Core.job

[2014/05/01 02:06:26 | 000,000,967 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/04/29 20:55:09 | 000,002,112 | ---- | M] () -- C:\Users\Union\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk

[2014/04/29 10:07:24 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe

[2014/04/29 10:07:24 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

[2014/04/27 14:49:14 | 000,050,464 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys

[2014/04/24 11:51:05 | 000,569,157 | -H-- | M] () -- C:\Users\Union\Documents\District-Assembly-delegates.PDF

[2014/04/24 09:45:40 | 000,001,456 | ---- | M] () -- C:\Users\Union\AppData\Local\Adobe Save for Web 12.0 Prefs

[2014/04/24 09:11:36 | 000,039,918 | ---- | M] () -- C:\Users\Union\Desktop\FLD_Delegate_Information_2014.pdf

[2014/04/24 07:47:54 | 000,033,620 | ---- | M] () -- C:\Users\Union\Desktop\lotus-flower.jpg

[2014/04/24 07:45:23 | 000,029,144 | ---- | M] () -- C:\Users\Union\Desktop\lotus.jpg

[2014/04/23 16:33:39 | 000,002,525 | ---- | M] () -- C:\Users\Public\Desktop\OverDrive Media Console.lnk

[2014/04/23 01:04:34 | 000,001,051 | ---- | M] () -- C:\Users\Union\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

[2014/04/18 15:01:30 | 000,237,336 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys

[2014/04/14 20:13:43 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

[2014/04/14 20:05:11 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe

[2014/04/14 20:05:06 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe

[2014/04/14 20:04:29 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe

[2014/04/13 22:24:46 | 000,465,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll

[2014/04/13 22:19:37 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll

[2014/04/12 21:21:01 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForVULCAN$.job

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2014/05/02 13:34:42 | 000,000,171 | ---- | C] () -- C:\Windows\wininit.ini

[2014/05/02 11:23:38 | 000,036,680 | ---- | C] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/05/02 10:43:25 | 000,000,861 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog

[2014/05/01 17:54:36 | 005,479,652 | ---- | C] () -- C:\Users\Union\Desktop\GRACE.zip

[2014/05/01 14:04:06 | 000,415,840 | ---- | C] () -- C:\Users\Union\Desktop\amazing-grace-ending.PDF

[2014/05/01 02:06:26 | 000,000,967 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/04/24 11:51:05 | 000,569,157 | -H-- | C] () -- C:\Users\Union\Documents\District-Assembly-delegates.PDF

[2014/04/24 09:06:26 | 000,039,918 | ---- | C] () -- C:\Users\Union\Desktop\FLD_Delegate_Information_2014.pdf

[2014/04/24 07:47:54 | 000,033,620 | ---- | C] () -- C:\Users\Union\Desktop\lotus-flower.jpg

[2014/04/24 07:45:22 | 000,029,144 | ---- | C] () -- C:\Users\Union\Desktop\lotus.jpg

[2014/04/23 16:33:39 | 000,002,525 | ---- | C] () -- C:\Users\Public\Desktop\OverDrive Media Console.lnk

[2014/02/23 19:18:45 | 000,021,624 | ---- | C] () -- C:\Windows\SysWow64\drivers\BSecACFltr.sys

[2012/06/09 23:17:50 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll

[2012/06/09 23:17:50 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll

[2012/06/09 23:17:50 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll

[2012/05/15 22:52:13 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll

[2012/05/15 22:52:13 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll

[2012/05/15 22:52:13 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll

[2012/05/15 22:52:12 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll

[2012/01/18 04:02:07 | 000,000,132 | ---- | C] () -- C:\Users\Union\AppData\Roaming\Adobe PNG Format CS5 Prefs

[2011/11/30 00:08:25 | 000,000,218 | ---- | C] () -- C:\Users\Union\.recently-used.xbel

[2011/11/29 23:25:13 | 000,038,367 | ---- | C] () -- C:\Users\Union\descend_chart.pdf

[2011/11/29 23:24:41 | 000,005,592 | ---- | C] () -- C:\Users\Union\descend_chart.odt

[2011/10/18 02:37:25 | 000,001,456 | ---- | C] () -- C:\Users\Union\AppData\Local\Adobe Save for Web 12.0 Prefs

 

========== ZeroAccess Check ==========

 

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 22:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 21:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 23:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 

========== LOP Check ==========

 

[2013/01/11 02:09:13 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software

[2013/01/11 02:09:13 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software

[2012/07/28 16:55:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Amazon

[2014/04/28 20:36:30 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Audacity

[2013/09/23 08:57:26 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\AVG2014

[2012/02/15 15:49:02 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Barnes & Noble

[2012/02/15 15:47:08 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Blio

[2011/10/18 11:12:13 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

[2012/09/03 22:34:17 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

[2014/05/02 14:25:59 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Dropbox

[2014/03/28 08:33:49 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\DropboxMaster

[2012/10/21 22:13:05 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\DVDVideoSoft

[2012/03/19 03:31:30 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Flickr

[2011/11/29 23:24:41 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\gramps

[2012/10/13 13:35:44 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\iFunbox_UserCache

[2014/03/17 15:19:29 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Leawo

[2011/11/01 13:01:17 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\MusE

[2012/06/14 01:49:26 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Namco

[2013/06/10 12:08:27 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\onOne Software

[2012/10/21 22:08:13 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\OpenCandy

[2013/11/01 01:33:42 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Oracle

[2014/04/23 16:33:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\OverDrive

[2011/11/04 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PACE Anti-Piracy

[2012/09/04 00:20:48 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PDAppFlex

[2012/10/13 13:00:19 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PhoneBrowse

[2011/11/04 21:25:58 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

[2011/10/15 01:22:37 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Thunderbird

[2012/12/11 07:38:00 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\TuneUp Software

[2014/02/18 22:34:23 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Unity

[2012/06/14 01:47:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\WildTangent

[2011/11/05 11:55:59 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\WinBatch

[2011/10/15 15:06:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\YouSendIt

[2012/02/15 15:49:06 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1

[2014/04/18 16:32:49 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}

 

========== Purity Check ==========

 

 

 

========== Custom Scans ==========

 

========== Base Services ==========

SRV:64bit: - [2009/07/13 21:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)

SRV:64bit: - [2013/02/27 01:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)

SRV:64bit: - [2009/07/13 21:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)

SRV:64bit: - [2010/11/20 23:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\qmgr.dll -- (BITS)

SRV:64bit: - [2010/11/20 23:24:00 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)

SRV:64bit: - [2013/09/24 21:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)

SRV:64bit: - [2009/07/13 21:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\es.dll -- (EventSystem)

SRV - [2009/07/13 21:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)

SRV:64bit: - [2012/07/04 18:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\browser.dll -- (Browser)

SRV:64bit: - [2013/07/09 01:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)

SRV - [2013/07/09 00:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)

SRV:64bit: - [2010/11/20 23:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)

SRV:64bit: - [2010/11/20 23:24:00 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)

SRV - [2010/11/20 23:24:09 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)

SRV:64bit: - [2011/03/03 02:24:16 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)

SRV:64bit: - [2009/07/13 21:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)

SRV:64bit: - [2009/07/13 21:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)

SRV - [2009/07/13 21:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)

SRV:64bit: - [2009/07/13 21:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)

SRV:64bit: - [2010/11/20 23:23:48 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)

No service found with a name of MsMpSvc

No service found with a name of NisSrv

SRV:64bit: - [2009/07/13 21:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)

SRV:64bit: - [2009/07/13 21:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)

SRV:64bit: - [2009/07/13 21:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)

SRV:64bit: - [2009/07/13 21:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)

SRV - [2009/07/13 21:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)

SRV:64bit: - [2012/10/03 13:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)

SRV:64bit: - [2009/07/13 21:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)

SRV:64bit: - [2011/05/24 07:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)

SRV:64bit: - [2012/02/11 02:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)

SRV:64bit: - [2013/09/24 21:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)

No service found with a name of EMDMgmt

SRV:64bit: - [2009/07/13 21:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)

SRV:64bit: - [2010/11/20 23:24:17 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)

SRV:64bit: - [2010/11/20 23:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)

SRV:64bit: - [2010/11/20 23:24:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)

SRV:64bit: - [2013/09/24 21:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\lsass.exe -- (SamSs)

SRV:64bit: - [2009/07/13 21:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)

SRV:64bit: - [2010/11/20 23:23:48 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)

SRV:64bit: - [2010/11/20 23:23:55 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)

SRV - [2010/11/20 23:24:03 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)

No service found with a name of slsvc

SRV:64bit: - [2010/11/20 23:24:16 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)

SRV:64bit: - [2010/11/20 23:24:32 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)

SRV - [2010/11/20 23:24:00 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)

SRV:64bit: - [2009/07/13 21:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\themeservice.dll -- (Themes)

SRV:64bit: - [2012/05/01 01:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)

SRV:64bit: - [2010/11/20 23:23:55 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)

SRV:64bit: - [2010/11/20 23:24:32 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)

SRV:64bit: - [2010/11/20 23:24:32 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)

SRV:64bit: - [2010/11/20 23:25:06 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)

SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2010/11/20 23:23:55 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)

SRV:64bit: - [2010/11/20 23:24:28 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)

SRV:64bit: - [2010/11/20 23:24:48 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)

SRV:64bit: - [2010/11/20 23:24:15 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)

SRV - [2010/11/20 23:24:28 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)

SRV:64bit: - [2009/07/13 21:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)

SRV:64bit: - [2012/06/02 18:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)

SRV:64bit: - [2010/11/20 23:24:09 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)

SRV:64bit: - [2009/07/13 21:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)

SRV:64bit: - [2010/11/20 23:24:32 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)

 

< %SYSTEMDRIVE%\*.exe >

 

< MD5 for: EXPLORER.EXE  >

[2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe

[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe

[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe

[2011/02/26 02:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe

[2010/11/20 23:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe

[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe

[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe

[2010/11/20 23:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

 

< MD5 for: MPSVC.DLL  >

[2013/05/27 01:26:41 | 001,011,712 | ---- | M] (Microsoft Corporation) MD5=7B6CD2C784B13D63481B6BF49605C026 -- C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.22341_none_b648c5e888076cca\MpSvc.dll

[2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) MD5=7CBB1D4D13DC62D7F529D87151FD3CD3 -- C:\Program Files\Windows Defender\MpSvc.dll

[2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) MD5=7CBB1D4D13DC62D7F529D87151FD3CD3 -- C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.18170_none_b59db7296f030a55\MpSvc.dll

[2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) MD5=CF318F60A84F15AF352439465A8D05F4 -- C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.17514_none_b5e2b6396ecea306\MpSvc.dll

 

< MD5 for: QMGR.DLL  >

[2010/11/20 23:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\SysNative\qmgr.dll

[2010/11/20 23:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\winsxs\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_81b6ca5c101195cd\qmgr.dll

 

< MD5 for: RPCSS.DLL  >

[2010/11/20 23:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=5C627D1B1138676C0A7AB2C2C190D123 -- C:\Windows\SysNative\rpcss.dll

[2010/11/20 23:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=5C627D1B1138676C0A7AB2C2C190D123 -- C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d\rpcss.dll

 

< MD5 for: SERVICES  >

[2009/06/10 17:00:26 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services

 

< MD5 for: SERVICES.AIP  >

[2010/04/07 20:47:20 | 000,132,544 | ---- | M] (Adobe Systems Incorporated) MD5=3E69B3D98D1B184EA96CFBC18CE07CA5 -- C:\Program Files (x86)\Adobe\Adobe Illustrator CS5\Plug-ins\Extensions\Services.aip

 

< MD5 for: SERVICES.CFG  >

[2013/12/18 14:42:40 | 000,558,851 | ---- | M] () MD5=A044715A48D8FADB9366D554F20D3331 -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg

[2011/06/06 12:55:30 | 000,584,045 | R--- | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\services.cfg

 

< MD5 for: SERVICES.CSS  >

[2013/02/21 19:01:24 | 000,000,093 | ---- | M] () MD5=F15FB82C578490B209442B8C1D5076CC -- C:\ProgramData\Intuit\Quicken\Inet\Common\Localweb\Services\Services.css

[2013/02/21 19:01:24 | 000,000,093 | ---- | M] () MD5=F15FB82C578490B209442B8C1D5076CC -- C:\Users\All Users\Intuit\Quicken\Inet\Common\Localweb\Services\Services.css

 

< MD5 for: SERVICES.EXE  >

[2009/07/13 21:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe

[2009/07/13 21:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

 

< MD5 for: SERVICES.EXE.MUI  >

[2010/11/21 03:06:16 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\SysNative\en-US\services.exe.mui

[2010/11/21 03:06:16 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui

 

< MD5 for: SERVICES.INI  >

[2013/02/21 19:01:24 | 000,000,012 | ---- | M] () MD5=810C4D394B59FF7116A0CD6052286C41 -- C:\ProgramData\Intuit\Quicken\Inet\Common\Localweb\Services\Services.ini

[2013/02/21 19:01:24 | 000,000,012 | ---- | M] () MD5=810C4D394B59FF7116A0CD6052286C41 -- C:\Users\All Users\Intuit\Quicken\Inet\Common\Localweb\Services\Services.ini

 

< MD5 for: SERVICES.JS  >

[2011/09/23 11:44:16 | 000,018,691 | ---- | M] () MD5=9358495E94D1710E6BC4EC57E602F2EE -- C:\Program Files (x86)\Barnes & Noble\BNDesktopReader\HTML\js\services.js

 

< MD5 for: SERVICES.LNK  >

[2009/07/14 00:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

[2009/07/14 00:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

 

< MD5 for: SERVICES.MOF  >

[2009/06/10 16:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof

[2009/06/10 16:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof

 

< MD5 for: SERVICES.MSC  >

[2010/11/21 03:06:14 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\en-US\services.msc

[2009/06/10 16:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\services.msc

[2010/11/21 03:06:17 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\en-US\services.msc

[2009/06/10 17:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\services.msc

[2010/11/21 03:06:14 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc

[2009/06/10 16:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc

[2010/11/21 03:06:17 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc

[2009/06/10 17:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

 

< MD5 for: SERVICES.PTXML  >

[2009/07/13 16:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml

[2009/07/13 16:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml

 

< MD5 for: SERVICES.SBS  >

[2013/07/16 12:21:30 | 000,034,818 | ---- | M] () MD5=E2ACBC77020C8D5CE97CA61D0D859A44 -- C:\Program Files (x86)\Spybot - Search & Destroy\Includes\Services.sbs

 

< MD5 for: SVCHOST.EXE  >

[2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe

[2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe

[2014/05/02 11:23:18 | 000,218,184 | ---- | M] () MD5=B6381489F9C8612AFFD4A2765ABD341C -- C:\Users\Union\Downloads\mbam-chameleon-1.62.1.1000\svchost.exe

[2009/07/13 21:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe

[2009/07/13 21:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

 

< MD5 for: USERINIT.EXE  >

[2010/11/20 23:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe

[2010/11/20 23:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[2010/11/20 23:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe

[2010/11/20 23:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

 

< MD5 for: WINLOGON.EXE  >

[2010/11/20 23:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe

[2010/11/20 23:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

[2014/05/02 11:23:18 | 000,218,184 | ---- | M] () MD5=B6381489F9C8612AFFD4A2765ABD341C -- C:\Users\Union\Downloads\mbam-chameleon-1.62.1.1000\winlogon.exe

 

< dir "%systemdrive%\*" /S /A:L /C >

 Volume in drive C is OS

 Volume Serial Number is 1E24-9573

 Directory of C:\

07/14/2009  01:08 AM    <JUNCTION>     Documents and Settings [C:\Users]

               0 File(s)              0 bytes

 Directory of C:\ProgramData

07/14/2009  01:08 AM    <JUNCTION>     Application Data [C:\ProgramData]

07/14/2009  01:08 AM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]

07/14/2009  01:08 AM    <JUNCTION>     Documents [C:\Users\Public\Documents]

07/14/2009  01:08 AM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]

07/14/2009  01:08 AM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]

07/14/2009  01:08 AM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]

               0 File(s)              0 bytes

 Directory of C:\Users

07/14/2009  01:08 AM    <SYMLINKD>     All Users [C:\ProgramData]

07/14/2009  01:08 AM    <JUNCTION>     Default User [C:\Users\Default]

               0 File(s)              0 bytes

 Directory of C:\Users\All Users

07/14/2009  01:08 AM    <JUNCTION>     Application Data [C:\ProgramData]

07/14/2009  01:08 AM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]

07/14/2009  01:08 AM    <JUNCTION>     Documents [C:\Users\Public\Documents]

07/14/2009  01:08 AM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]

07/14/2009  01:08 AM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]

07/14/2009  01:08 AM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]

               0 File(s)              0 bytes

 Directory of C:\Users\Default

07/14/2009  01:08 AM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Roaming]

07/14/2009  01:08 AM    <JUNCTION>     Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]

07/14/2009  01:08 AM    <JUNCTION>     Local Settings [C:\Users\Default\AppData\Local]

07/14/2009  01:08 AM    <JUNCTION>     My Documents [C:\Users\Default\Documents]

07/14/2009  01:08 AM    <JUNCTION>     NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]

07/14/2009  01:08 AM    <JUNCTION>     PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]

07/14/2009  01:08 AM    <JUNCTION>     Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]

07/14/2009  01:08 AM    <JUNCTION>     SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]

07/14/2009  01:08 AM    <JUNCTION>     Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]

07/14/2009  01:08 AM    <JUNCTION>     Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]

               0 File(s)              0 bytes

 Directory of C:\Users\Default\AppData\Local

07/14/2009  01:08 AM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]

07/14/2009  01:08 AM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]

07/14/2009  01:08 AM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]

               0 File(s)              0 bytes

 Directory of C:\Users\Default\Documents

07/14/2009  01:08 AM    <JUNCTION>     My Music [C:\Users\Default\Music]

07/14/2009  01:08 AM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]

07/14/2009  01:08 AM    <JUNCTION>     My Videos [C:\Users\Default\Videos]

               0 File(s)              0 bytes

 Directory of C:\Users\Public\Documents

07/14/2009  01:08 AM    <JUNCTION>     My Music [C:\Users\Public\Music]

07/14/2009  01:08 AM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]

07/14/2009  01:08 AM    <JUNCTION>     My Videos [C:\Users\Public\Videos]

               0 File(s)              0 bytes

 Directory of C:\Users\Union

10/14/2011  01:15 AM    <JUNCTION>     Application Data [C:\Users\Union\AppData\Roaming]

10/14/2011  01:15 AM    <JUNCTION>     Cookies [C:\Users\Union\AppData\Roaming\Microsoft\Windows\Cookies]

10/14/2011  01:15 AM    <JUNCTION>     Local Settings [C:\Users\Union\AppData\Local]

10/14/2011  01:15 AM    <JUNCTION>     My Documents [C:\Users\Union\Documents]

10/14/2011  01:15 AM    <JUNCTION>     NetHood [C:\Users\Union\AppData\Roaming\Microsoft\Windows\Network Shortcuts]

10/14/2011  01:15 AM    <JUNCTION>     PrintHood [C:\Users\Union\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]

10/14/2011  01:15 AM    <JUNCTION>     Recent [C:\Users\Union\AppData\Roaming\Microsoft\Windows\Recent]

10/14/2011  01:15 AM    <JUNCTION>     SendTo [C:\Users\Union\AppData\Roaming\Microsoft\Windows\SendTo]

10/14/2011  01:15 AM    <JUNCTION>     Start Menu [C:\Users\Union\AppData\Roaming\Microsoft\Windows\Start Menu]

10/14/2011  01:15 AM    <JUNCTION>     Templates [C:\Users\Union\AppData\Roaming\Microsoft\Windows\Templates]

               0 File(s)              0 bytes

 Directory of C:\Users\Union\AppData\Local

10/14/2011  01:15 AM    <JUNCTION>     Application Data [C:\Users\Union\AppData\Local]

10/14/2011  01:15 AM    <JUNCTION>     History [C:\Users\Union\AppData\Local\Microsoft\Windows\History]

10/14/2011  01:15 AM    <JUNCTION>     Temporary Internet Files [C:\Users\Union\AppData\Local\Microsoft\Windows\Temporary Internet Files]

               0 File(s)              0 bytes

 Directory of C:\Users\Union\Documents

10/14/2011  01:15 AM    <JUNCTION>     My Music [C:\Users\Union\Music]

10/14/2011  01:15 AM    <JUNCTION>     My Pictures [C:\Users\Union\Pictures]

10/14/2011  01:15 AM    <JUNCTION>     My Videos [C:\Users\Union\Videos]

               0 File(s)              0 bytes

     Total Files Listed:

               0 File(s)              0 bytes

              50 Dir(s)  436,039,634,944 bytes free

 

========== Alternate Data Streams ==========

 

@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences

 

< End of report >

 

 

Extra.txt:

 

OTL Extras logfile created on: 5/2/2014 2:52:42 PM - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Union\Downloads

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17041)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

 

5.99 Gb Total Physical Memory | 5.25 Gb Available Physical Memory | 87.62% Memory free

11.98 Gb Paging File | 11.28 Gb Available in Paging File | 94.12% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 919.80 Gb Total Space | 406.11 Gb Free Space | 44.15% Space Free | Partition Type: NTFS

Drive D: | 11.43 Gb Total Space | 1.40 Gb Free Space | 12.22% Space Free | Partition Type: NTFS

Drive E: | 1397.26 Gb Total Space | 1021.91 Gb Free Space | 73.14% Space Free | Partition Type: NTFS

Drive G: | 488.28 Gb Total Space | 446.21 Gb Free Space | 91.38% Space Free | Partition Type: NTFS

Drive H: | 61.29 Mb Total Space | 60.83 Mb Free Space | 99.25% Space Free | Partition Type: FAT

 

Computer Name: VULCAN | User Name: Union | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Extra Registry (SafeList) ==========

 

 

========== File Associations ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

.reg [@ = regfile] -- regedit.exe "%1"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.reg [@ = regfile] -- regedit.exe "%1"

 

========== Shell Spawning ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [open] -- regedit.exe "%1"

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V"

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [open] -- regedit.exe "%1"

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V"

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

 

========== Security Center Settings ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 

========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

========== Authorized Applications List ==========

 

 

========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{131381C8-7398-44AB-A142-7F333DDD1BC6}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{1744F788-C111-4283-ABE4-BE0E6355AE6B}" = lport=139 | protocol=6 | dir=in | app=system | 

"{174B8613-8539-4C68-986B-59C6AF43F2F1}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{251DB297-9D8C-4667-B896-5375298A5358}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{2949E17E-A4AB-4053-95BE-3CBB3A5AF466}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{3B89CB00-0C8D-426E-A0F5-5D352C4A4AFD}" = lport=445 | protocol=6 | dir=in | app=system | 

"{44FC8250-00D1-4407-A70B-A3F569E1169D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{5D769000-7C2F-44F4-B414-512D1EBE5D54}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{6B21B3C6-F482-4B4F-B3B6-CA09394D5B33}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{6D50B7B9-0809-4237-BDDF-11A1BCF096E1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{7E9E3D1C-C8C0-4E78-BF68-D7C2C8D2BFE7}" = lport=138 | protocol=17 | dir=in | app=system | 

"{7EE05B10-F54B-4E7F-B5E1-2E17B059F2C7}" = rport=139 | protocol=6 | dir=out | app=system | 

"{8EFE7E6E-B821-46D8-9EB1-328CE862C365}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{98F8393E-93F3-47B5-B3BC-C4858AAFC28D}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{9B77A420-8147-4689-8E5F-30EDCBCCC665}" = rport=138 | protocol=17 | dir=out | app=system | 

"{9EC05E47-9D03-478A-AD6D-122104156B57}" = rport=137 | protocol=17 | dir=out | app=system | 

"{AAC509DD-B48B-419E-AD44-182EE91BC10F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{B17AB2F5-097A-48D5-8154-3310A77897F8}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{B3285455-7F0F-4710-89A2-0485D7C14B80}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | 

"{B7065840-BDE4-4A93-9FBB-2D836197C3A4}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{C20F8CD8-6776-4FA1-A7C5-F1617FA945B0}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 

"{CB9104D8-DF8B-4F94-8F16-84727B3E1916}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{D67578DA-4659-4FC2-934E-622DCF6E81CD}" = lport=137 | protocol=17 | dir=in | app=system | 

"{DE2BEB53-FFF5-4A71-BA4A-2607153E663E}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe | 

"{E0F25E23-A29A-4333-A9C6-8A08E41296F3}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 

"{ED827F20-9E47-4B0B-AF52-D25F550942EA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 | 

"{FD8CF0EF-4336-4735-8AB8-798572A99659}" = rport=445 | protocol=6 | dir=out | app=system | 

 

========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{035D2B72-6BE0-483E-8DD1-F9EB5F5170E9}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{037B8105-224E-4F99-B274-DDD754475627}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 

"{0622BE79-94FF-4454-B424-5F9458B7234F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{0643FE1B-D60E-4306-88CF-6A3D13AF2482}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgnsa.exe | 

"{0FEB0F4B-9B9B-4D9E-ACC4-5976E5078D03}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe | 

"{15B2E33B-9E9C-4B05-B789-21467F7AB187}" = dir=in | app=c:\windows\system32\lxeccoms.exe | 

"{2043C588-B627-4C45-9C9E-4100B74CE24D}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe | 

"{275DFE2F-0615-464F-B2BB-6A2B2BA0FD9A}" = protocol=17 | dir=out | app=c:\program files (x86)\hewlett-packard\hp linkup\hp linkup viewer.exe | 

"{2C1EDA18-EE9D-41EF-B31C-20663A4A0A5C}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe | 

"{2D8B26B0-5EB3-4839-92F8-68B8094F0B2E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{2DDA06F6-2B9B-4FF5-8C03-469576C8A704}" = dir=in | app=c:\windows\system32\lxeccoms.exe | 

"{2F50DBBA-89F3-4EC8-B362-8E82C2FC507C}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe | 

"{340BB71A-D0B9-467D-92B7-28E0B87707D0}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | 

"{34619275-F8A4-46A8-8BF7-04882F953F38}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg family safety\inetctrl.exe | 

"{36081ED5-BEDE-4444-A112-D19EFADE9B5B}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe | 

"{498D3791-5BBA-4048-A564-1BEDA55F4A67}" = protocol=6 | dir=in | app=c:\program files (x86)\roxio\roxionow player\rnowshell.exe | 

"{4AC171A3-E506-4885-8921-4D147ED3486C}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | 

"{4D84269C-F29C-4190-B418-3569D369231C}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgnsa.exe | 

"{504B9CE3-B552-47D8-B69E-E35E0B0403FC}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe | 

"{50A473CB-E250-4A0F-A776-6834A8D7D386}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{57F23A81-47E5-4064-9A3C-ACAF21494E4A}" = dir=in | app=c:\windows\system32\lxeccoms.exe | 

"{58B6B057-D6E6-425D-9FB2-A2A2C36A625B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{58FAF6F4-89E4-4EC7-B83D-880327919EE3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{669D0179-FFDB-4C4C-87AC-99D890E6D684}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe | 

"{6B863D41-3E34-4710-9672-3A87755800BD}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgdiagex.exe | 

"{6E70AF86-FB9E-40CF-9CA2-7C09C0501626}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe | 

"{6F1B02AA-C228-4DCA-B7DF-C1BE9D6387F8}" = protocol=6 | dir=out | app=c:\program files (x86)\hewlett-packard\remote graphics receiver\rgreceiver.exe | 

"{6F2338BB-05CB-47B4-A5AC-3B01811DB0AA}" = protocol=17 | dir=in | app=c:\program files (x86)\hewlett-packard\hp linkup\hp linkup viewer.exe | 

"{7190864B-DB23-4E2E-9729-C2AF4A343749}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 

"{72C1DB58-ADCD-4DA5-945F-44764D95691F}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe | 

"{7E81F9FD-E4B2-407A-ACE2-4C2B9717FC29}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{7EE7BFB7-2291-4657-9F65-E4D6E1950957}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{7FA3D03E-26C4-44DC-B92C-E26D5344D76B}" = protocol=6 | dir=in | app=c:\program files (x86)\abbyy finereader 6.0 sprint\scan\scanman6.exe | 

"{82D47A47-E3A8-488B-8AB7-9FEC00148D67}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgemca.exe | 

"{874E79B8-3B6F-4674-851A-BD5E8C336789}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 

"{87FA5D9F-0032-428C-9CEA-8C288221F22E}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{8A90585B-0C55-455A-8459-A7E762DD539E}" = dir=in | app=c:\program files (x86)\hewlett-packard\hp support framework\resources\hpwarrantycheck\hpdevicedetection3.exe | 

"{8DEEBB84-7E82-4CC1-8B2E-0ECE299C6945}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 

"{8F076577-D732-4CC9-8E1C-16CD9A454014}" = protocol=6 | dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\roxionow\rnow.exe | 

"{9682B9C4-2C4B-43A7-93E9-AF277FADB1DE}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 

"{99EBB13B-70B7-4FC5-BE9D-1F994E600E9E}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | 

"{9D626969-9938-4D68-B847-74CCD11D73C1}" = protocol=6 | dir=in | app=c:\program files (x86)\hewlett-packard\remote graphics receiver\rgreceiver.exe | 

"{9FFBCC35-69DF-46D1-B2F5-3E79E3AC8E81}" = dir=in | app=c:\windows\system32\lxeccoms.exe | 

"{A51549C6-8343-43B1-8B59-5A9E1B2480D1}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{A53F462D-FE14-48E4-BCF5-B5483ACC52A0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{A937991F-6E26-4D24-A9D2-CFD4BDBFC7EC}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe | 

"{AF5EDC01-87BA-4F6A-B86B-55B03D58CC6C}" = protocol=1 | dir=in | [email protected],-28543 | 

"{B12D4412-248D-4687-89C1-A37E2BDED5C5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{B2678778-E7E2-4B30-B48A-5AA99B2ED673}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 

"{B6F788A3-52F1-4867-A114-6EF3A39C54CC}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe | 

"{B83D4298-F942-41E5-8746-45CB090317A3}" = protocol=17 | dir=in | app=c:\program files (x86)\roxio\roxionow player\rnowshell.exe | 

"{BA6214B0-008B-4B75-9185-8A090F5A9CEC}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe | 

"{BC313CB0-D362-471E-854A-C17B86ECAF7E}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe | 

"{BD19BC56-7152-44C0-99C2-3B62B59C15D2}" = protocol=6 | dir=out | app=system | 

"{C14421B8-2513-4E66-AA58-CDF85EBB9D5B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{C1710451-E113-403E-8F12-0B08AF9D7FE0}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 

"{C1D9CBEB-0390-4155-A3E9-E06C5CA1B7DB}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe | 

"{C26265A3-77BF-40C9-A1D3-EC7581AD41C7}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft games\age of empires ii\empires2.icd | 

"{C47FE5ED-ACAC-40FE-AF1B-4E235062B212}" = protocol=17 | dir=in | app=c:\program files (x86)\frostwire 5\frostwire.exe | 

"{C4A1DD18-65B3-49C5-8F00-737E7B361478}" = protocol=17 | dir=in | app=c:\users\union\appdata\roaming\dropbox\bin\dropbox.exe | 

"{C681FC73-2D45-4F12-A74E-60398B8F1A4C}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgdiagex.exe | 

"{CCCE852C-BDCA-4C81-85F1-1E4A88C1012C}" = protocol=58 | dir=in | [email protected],-28545 | 

"{D27B5EE8-AD2E-4DB1-878D-2F7EC02B8C8B}" = protocol=17 | dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\roxionow\rnow.exe | 

"{D2B42C29-29EF-4FA7-9011-2FBF17026948}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{D2DADC84-2D04-4120-A3B6-642E9BA06303}" = protocol=6 | dir=in | app=c:\users\union\appdata\roaming\dropbox\bin\dropbox.exe | 

"{D627D3D4-B1D8-4931-A0EE-EA7D50AC5B09}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft games\age of empires ii\empires2.icd | 

"{D780E9FC-4F72-4058-94E6-FCC654CBE96E}" = protocol=58 | dir=out | [email protected],-28546 | 

"{DEDB9FCB-48B0-4DC2-9052-F28E2C37C623}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{E08993AD-A860-411E-A9AB-A8D37698B400}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 

"{E87E5E61-4DB0-4756-9E8A-8E2FA2538AAE}" = protocol=17 | dir=in | app=c:\program files (x86)\abbyy finereader 6.0 sprint\scan\scanman6.exe | 

"{F0C229B0-CA1A-4714-8E44-4F74D2459816}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgemca.exe | 

"{F32E70AA-4522-4D33-9D39-181B65A303EA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{F3588205-FA7F-454F-A934-0A2943AB3D41}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg family safety\inetctrl.exe | 

"{F4E1078B-31C9-43E0-9049-9EECEF76FE29}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | 

"{F9FB9529-5D93-4177-ACA7-689D13C64E9A}" = protocol=6 | dir=in | app=c:\program files (x86)\frostwire 5\frostwire.exe | 

"{FA8664C4-B4AE-4FC7-960B-E600FF51D21C}" = protocol=1 | dir=out | [email protected],-28544 | 

"TCP Query User{00914425-7BE7-4B90-A3E6-950F164459A4}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft games\age of empires ii\empires2.icd | 

"TCP Query User{22E0C2DB-A629-4B9F-B401-7BBDDCBDF404}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 

"TCP Query User{37AAE1EB-5C29-40A2-8EAE-30563DD81D94}C:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe | 

"TCP Query User{3A1EAEDB-DD50-43DC-ACDC-EE907FEF6E3F}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 

"TCP Query User{4544C0B7-D6E7-48E9-B2D9-43FDE8BBA1A9}C:\users\union\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\union\appdata\roaming\spotify\spotify.exe | 

"TCP Query User{C4DC6B5C-72C3-4F5B-A1FA-FB44709900ED}C:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe | 

"UDP Query User{152F3F7F-FD36-45DD-B76C-680F38DB1EE2}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft games\age of empires ii\empires2.icd | 

"UDP Query User{7202272B-A4A6-429C-B81E-3D7B0C7412B0}C:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe | 

"UDP Query User{825F4F77-E66B-43FC-AAF8-535DC59A9219}C:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe dreamweaver cs5\dreamweaver.exe | 

"UDP Query User{8C75C479-6A18-42F3-86D8-C5F1380FC83D}C:\users\union\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\union\appdata\roaming\spotify\spotify.exe | 

"UDP Query User{8CBBCD30-76D1-4C88-9B33-DA39217E31D5}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 

"UDP Query User{F0810863-575C-454F-8369-4EBDD93D8AE1}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant

"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219

"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64

"{21B133D6-5979-47F0-BE1C-F6A6B304693F}" = Visual Studio 2010 x64 Redistributables

"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services

"{3001791D-2CA6-6FE3-BE0F-8EA7522B32D4}" = ATI Catalyst Install Manager

"{3184267F-B0D9-0657-D705-0C700B481A18}" = ccc-utility64

"{41B19F41-8A6F-4422-AD69-CF3B408F382C}" = AVG 2012

"{42B40185-E134-43FD-9381-69F92B317417}" = AVG 2012

"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{4FFA2088-8317-3B14-93CD-4C699DB37843}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{65510247-DAA8-4161-9898-42C78EAF1BC5}" = AVG 2012

"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources

"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour

"{787136D2-F0F8-4625-AA3F-72D7795AC842}" = Apple Mobile Device Support

"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1

"{80C27FE9-C6C4-F5C8-EAD3-09E7E0102E78}" = ATI Stream SDK v2 Developer

"{81E20D41-C277-4526-934D-F2380AF91B78}" = iCloud

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources

"{854E96CC-266C-4873-A50F-CDF5367EE848}" = AVG 2014

"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64

"{88381CA0-AB27-45B5-8BB8-E68987822AF8}" = AVG 2012

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables

"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007

"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007

"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007

"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64

"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64

"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1

"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting

"{99C50216-026B-47A9-96C7-4DF6C1988EB9}" = YouSendIt Desktop App

"{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}" = Microsoft SQL Server Native Client

"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64

"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{B636C9B9-A3F2-4DCE-ADCC-72E095018385}" = Microsoft SQL Server VSS Writer

"{B639AFD8-48E9-49BC-88DF-C5C55A471D94}" = AVG 2012

"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053

"{B8BA155B-1E75-405F-9CB4-8A99615D09DC}" = iTunes

"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64

"{BEC69493-1732-4F85-B559-CC99CB30665C}" = AVG 2012

"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64

"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto

"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector

"{D79A02E9-6713-4335-9668-AAC7474C0C0E}" = HP Vision Hardware Diagnostics

"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter

"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client

"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service

"{E061C7AF-1185-48E1-882A-68BA513CB244}" = AVG 2014

"AVG" = AVG 2014

"Lexmark Pro800-Pro900 Series" = Lexmark Pro800-Pro900 Series

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule

"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86

"{034DD4BB-F0D6-4ECF-B064-8E39E3EF7076}" = Quicken 2013

"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements

"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86

"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer

"{0E59637F-DA32-E400-92F6-3E84DB1DFB8D}" = CCC Help Portuguese

"{0EDEB615-1A60-425E-8306-0E10519C7B55}" = RoxioNow Player

"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86

"{1017A80C-6F09-4548-A84D-EDD6AC9525F0}" = Lexmark Toolbar

"{10812DE7-2E57-4740-B226-6B3BE34AF9D7}" = Lexmark Tools for Office

"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1

"{111EE7DF-FC45-40C7-98A7-753AC46B12FB}" = QuickTime 7

"{120262A6-7A4B-4889-AE85-F5E5688D3683}" = HP MovieStore

"{13FED2DC-8185-351F-72B2-C1CAB3A8860B}" = CCC Help Turkish

"{14DC0059-00F1-4F62-BD1A-AB23CD51A95E}" = Adobe AIR

"{16FC3056-90C0-4757-8A68-64D8DA846ADA}" = Remote Graphics Receiver

"{1826A2E3-22EE-ACC6-BB3A-80EEFF23167A}" = CCC Help Danish

"{18A8E78B-9EF2-496E-B310-BCD8E4C1DAB3}" = iSEEK AnswerWorks English Runtime

"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker

"{1A66A9AD-7BC1-8E9C-25EE-A5C2B07FA59E}" = CCC Help Finnish

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update

"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions

"{210A03F5-B2ED-4947-B27E-516F50CBB292}" = HP Setup

"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 55

"{28CD5009-54CA-ED14-6A17-47803585FF5F}" = Catalyst Control Center Localization All

"{28D1AF2F-9574-DABC-BA08-72F3356960D2}" = CCC Help Polish

"{28E7B64D-150F-4A9E-B7A3-5A6AC8C2F822}" = ebgcSDK

"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections

"{2A41AD80-C9C8-3CD0-2BEA-05731A9483DF}" = ccc-core-static

"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)

"{2C9CA30C-E2B7-0D3A-291D-4808973E6F8C}" = CCC Help Italian

"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update

"{2F2A04E0-2CF1-423A-9BB7-29264335FCD6}}_is1" = PhoneBrowse 1.3.1

"{2F4C493B-28D8-5054-13E9-91F05903887B}" = CCC Help Dutch

"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App

"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery

"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery

"{353D20CC-719B-4A60-AD33-D03F88C10330}" = Microsoft Office Accounting PayPal Addin

"{38069E07-617C-8074-4F67-BAFFFBB7E7FA}" = CCC Help Spanish

"{39B1BD87-561E-4762-AED9-7C5213B06C24}" = ebgcInfra

"{3A326F76-D29D-4DD6-ADC6-9CB4CFF3AD1E}" = OneClickdigital Media Manager

"{3B0F52AC-EF5C-4831-B221-06C782E41280}" = Quicken 2008

"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

"{3D4C2961-3353-4C56-B0B8-82AC1923695F}" = Catalyst Control Center - Branding

"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup

"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go

"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager

"{465210C4-595A-BD80-44E8-E0457D9D8432}" = Zinio Reader 4

"{46614A49-222A-48EF-87A9-BFD603E608E1}" = Microsoft Office Accounting Fixed Asset Manager

"{483A865C-A74A-12BF-1276-D0111A488F50}" = Adobe® Content Viewer

"{49DA021B-1C01-36D0-ABDF-3B9BED567EED}" = CCC Help Chinese Traditional

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4BDC0530-445B-47F2-36A0-758DE8903B44}" = CCC Help German

"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace

"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth

"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies

"{5208F7DB-9DAA-E5CA-EEC3-1B004D66A8EB}" = CCC Help Chinese Standard

"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)

"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack

"{58F095F8-3F66-528A-0BF6-DF1A7B304EC0}" = CCC Help Korean

"{5E38ABC5-71C2-04D8-62F0-C44B53E7DED8}" = Catalyst Control Center Graphics Previews Vista

"{5FA793A6-0071-42C1-9355-8F69A428C44F}" = Microsoft Office Accounting ADP Payroll Addin

"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer

"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86

"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE

"{6CE282C3-78BE-463F-A3C1-8C9F98E61CCE}" = ebgcRes

"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.2.2.3

"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App for HP

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{7326DA0C-C09B-491C-81FF-6DA12B2256BB}" = OverDrive Media Console

"{751D221F-7C37-C83F-1973-A1F92A0F4DF6}" = HydraVision

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{7CB5F68B-B031-4B99-B43A-24D240876EAA}" = Cisco AnyConnect Start Before Login Module

"{7F2A11F4-EAE8-4325-83EC-E3E99F85169E}" = HP Support Information

"{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1" = iExplorer 3.0.1.9

"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger

"{809E9D11-335A-4186-8767-CB8C6F3D7810}" = DropBox

"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable

"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform

"{86CE1746-9EFF-3C9C-8755-81EA8903AC34}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

"{8B76B8E9-F773-4B75-A08C-120079EB765E}" = RAIDXpert

"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime

"{8C711818-076E-475C-B95B-DF11CD9D8DBE}" = Microsoft Office Accounting Equifax Addin

"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT

"{8EC376A3-F279-47D7-97AA-7BA2A2EB006E}" = Cisco AnyConnect Secure Mobility Client

"{9008D736-35CA-40DB-A2BE-5F32D954E5AA}" = HP MovieStore

"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007

"{90120000-0015-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007

"{90120000-0016-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007

"{90120000-0018-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007

"{90120000-0019-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007

"{90120000-001A-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007

"{90120000-001B-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_PROR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_PROR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007

"{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-002A-0000-1000-0000000FF1CE}_PROR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-002A-0409-1000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007

"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007

"{90120000-006E-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007

"{90120000-0115-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0116-0409-1000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007

"{90120000-0117-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In

"{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components

"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007

"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{912CED74-88D3-4C5B-ACB0-132318649765}" = PressReader

"{913E7600-FA3A-B125-1EA6-391D59C258F6}" = CCC Help Czech

"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86

"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker

"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195

"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010

"{959DFE5E-B55F-4A0A-9E71-2970C98C3164}" = CCC Help Russian

"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9AEDD629-A40E-5EB1-2E70-E84DDE915C16}" = CCC Help Norwegian

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail

"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh

"{A50DE037-B5C0-4C8A-8049-B0C576B313D1}" = Google+ Auto Backup

"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer

"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components

"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common

"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer

"{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}" = Apple Application Support

"{AAF4238F-7C29-451D-9925-C753271A5728}" = Microsoft Visual C++ Run Time  Lib Setup

"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer

"{AC76BA86-1033-F400-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Français, Deutsch

"{AC76BA86-1033-F400-7760-000000000004}_955" = Adobe Acrobat 9.5.5 - CPSID_83708

"{AC76BA86-1033-F400-7760-000000000004}{AC76BA86-1033-F400-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Français, Deutsch

"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.9)

"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint

"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager

"{AEDA8713-5521-4600-9AC2-81674A9EDC4F}" = Blio

"{AEDDD2D4-0BE7-71D9-2091-9F8AA4A4806D}" = Catalyst Control Center InstallProxy

"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager

"{B0717D5A-1976-482B-9ADF-F19631A541A4}" = Microsoft Office Accounting 2007

"{B31D9B68-A844-191A-C652-4EA715A8CD92}" = CCC Help French

"{B32C4059-6E7A-41EF-AD20-56DF1872B923}" = Business Contact Manager for Outlook 2007 SP2

"{B3435D6A-B061-D8E5-C9AD-2D63C823C50C}" = CCC Help Swedish

"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy

"{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer

"{BB760C1D-98F4-4E38-8CC4-3B67329AA981}" = HP MediaSmart/TouchSmart Netflix

"{BE05B1E6-3C47-32DC-113B-7DB85FD6BE75}" = CCC Help Hungarian

"{C1AD9241-3ADD-483F-914D-071F3E50855A}" = HP LinkUp

"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint

"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail

"{C6FD5FE2-3635-0C15-6D3C-95FCAA51A3CE}" = CCC Help Greek

"{C9F06F5D-D521-43D5-AEB7-79176DC6CCDE}_is1" = Phone Disk 1.2.1.1

"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86

"{CE334F47-862D-4AD4-BAA8-92F215399675}" = Cisco AnyConnect Diagnostics and Reporting Tool

"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform

"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64

"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86

"{D2C5E510-BE6D-42CC-9F61-E4F939078474}" = Lexmark Printable Web

"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common

"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform

"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86

"{D9742D19-38EE-B2BE-5902-44130C4008FA}" = CCC Help Japanese

"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime

"{DBF625A1-9F84-1533-E08E-D1EBBE5001DD}" = Catalyst Control Center Graphics Previews Common

"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources

"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player

"{DE6E96CA-AD23-BBD7-4304-B6D4EA0F1933}" = CCC Help Thai

"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh

"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10

"{E141B1E0-BA8A-750F-4106-FC6AAB8950E0}" = CCC Help English

"{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}" = HP Support Assistant

"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime

"{E9AE9A91-AB45-4321-87BD-AD34855D944F}" = Chessmaster 10th Edition

"{EA5F34F3-3911-B4DB-63CA-1E44B2AB13A1}" = Adobe Download Assistant

"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{FBB02B04-C034-4382-A3F6-57416E2752C4}" = Adobe Creative Suite 5 Master Collection

"{FCADA4FF-142C-42A8-B73C-0A54A7F83345}" = Genuine Fractals 6.0.2 Professional Edition

"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables

"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 13 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 13 Plugin

"Age of Empires" = Microsoft Age of Empires

"Age of Empires 2.0" = Microsoft Age of Empires II

"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.15

"Audacity_is1" = Audacity 2.0.3

"AVG Family Safety" = AVG Family Safety

"AVG SafeGuard toolbar" = AVG SafeGuard toolbar

"Belarc Advisor" = Belarc Advisor 8.2

"BN_DesktopReader" = NOOK for PC

"Business Contact Manager" = Business Contact Manager for Outlook 2007 SP2

"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager

"Cisco AnyConnect Secure Mobility Client" = Cisco AnyConnect Secure Mobility Client 

"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player

"com.adobe.dmp.contentviewer" = Adobe® Content Viewer

"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant

"Digital Editions" = Adobe Digital Editions

"DokanLibrary" = Dokan Library 0.5.3

"Flickr Uploadr" = Flickr Uploadr 3.2.1

"GrampsAIO" = GrampsAIO

"iFunbox_is1" = iFunbox (v2.0.2103.725), iFunbox DevTeam

"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go

"InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}" = RAIDXpert

"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint

"InstallShield_{E9AE9A91-AB45-4321-87BD-AD34855D944F}" = Chessmaster 10th Edition

"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 8.7.0

"Kobo" = Kobo

"LAME_is1" = LAME v3.99.3 (for Windows)

"Luxor: Amun Rising" = Luxor: Amun Rising

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300

"Microsoft Office Accounting 2007" = Microsoft Office Accounting 2007

"Microsoft Office Accounting Equifax Addin" = Microsoft Office Accounting Equifax Addin

"Microsoft Office Accounting PayPal Addin" = Microsoft Office Accounting PayPal Addin

"Microsoft SQL Server 2005" = Microsoft SQL Server 2005

"Mozilla Thunderbird 24.5.0 (x86 en-US)" = Mozilla Thunderbird 24.5.0 (x86 en-US)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"MuseScore" = MuseScore 1.1 MuseScore score typesetter

"NIS" = Norton Internet Security

"PDF Complete" = PDF Complete Special Edition

"Picasa 3" = Picasa 3

"PROR" = Microsoft Office Professional 2007

"Super Collapse! 3" = Super Collapse! 3

"WildTangent hp Master Uninstall" = HP Games

"WinLiveSuite" = Windows Live Essentials

"WT087328" = Blackhawk Striker 2

"WT087330" = Bounce Symphony

"WT087335" = Build-a-lot 2

"WT087343" = Dora's World Adventure

"WT087393" = Mah Jong Medley

"WT087394" = Penguins!

"WT087395" = Poker Superstars III

"WT087396" = Polar Bowler

"WT087397" = Polar Golfer

"WT087415" = Wheel of Fortune 2

"WT087536" = Diner Dash 2 Restaurant Rescue

"WT089307" = Virtual Villagers 4 - The Tree of Life

"WT089308" = Blasterball 3

"WT089328" = Farm Frenzy

"WT089359" = Cake Mania

"WT089362" = Agatha Christie - Peril at End House

"WT089453" = Bejeweled 2 Deluxe

"WT089454" = Chuzzle Deluxe

"WT089455" = Zuma Deluxe

"WT089457" = Slingo Supreme

"WT089458" = Plants vs. Zombies - Game of the Year

"WT089470" = FATE - The Traitor Soul

"WT089484" = Namco All-Stars PAC-MAN

"WT089496" = Mystery P.I. - Stolen in San Francisco

"WT089498" = Bejeweled 3

"ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1" = Zinio Reader 4

 

========== HKEY_USERS Uninstall List ==========

 

[HKEY_USERS\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)

"Amazon Kindle" = Amazon Kindle

"Dropbox" = Dropbox

"Google Chrome" = Google Chrome

"Google+ Auto Backup" = Google+ Auto Backup

"HuluDesktop" = Hulu Desktop

"UnityWebPlayer" = Unity Web Player

 

========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 5/2/2014 1:18:56 PM | Computer Name = Vulcan | Source = SideBySide | ID = 16842832

Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat

 9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line 

.  A component version required by the application conflicts with another component

 version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error - 5/2/2014 1:18:56 PM | Computer Name = Vulcan | Source = SideBySide | ID = 16842832

Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat

 9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line 

.  A component version required by the application conflicts with another component

 version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error - 5/2/2014 2:23:59 PM | Computer Name = Vulcan | Source = WinMgmt | ID = 10

Description = 

 

Error - 5/2/2014 2:24:04 PM | Computer Name = Vulcan | Source = Application Error | ID = 1000

Description = Faulting application name: HPAuto.exe, version: 1.0.12935.3667, time

 stamp: 0x4d5cc461  Faulting module name: HPAuto.exe, version: 1.0.12935.3667, time

 stamp: 0x4d5cc461  Exception code: 0xc0000005  Fault offset: 0x0000000000007be2  Faulting

 process id: 0xff0  Faulting application start time: 0x01cf6633ad6f64bc  Faulting application

 path: C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe  Faulting module path: 

C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe  Report Id: f0ab667f-d226-11e3-96d5-78e7d1c86704

 

Error - 5/2/2014 2:24:09 PM | Computer Name = Vulcan | Source = MSSQL$MSSMLBIZ | ID = 9003

Description = The log scan number (135:320:1) passed to log scan in database 'msdb'

 is not valid. This error may indicate data corruption or that the log file (.ldf)

 does not match the data file (.mdf). If this error occurred during replication,

 re-create the publication. Otherwise, restore from backup if the problem results

 in a failure during startup. 

 

Error - 5/2/2014 2:24:10 PM | Computer Name = Vulcan | Source = MSSQL$MSSMLBIZ | ID = 3414

Description = An error occurred during recovery, preventing the database 'msdb' 

(database ID 4) from restarting. Diagnose the recovery errors and fix them, or restore

 from a known good backup. If errors are not corrected or expected, contact Technical

 Support.

 

Error - 5/2/2014 2:24:10 PM | Computer Name = Vulcan | Source = MSSQL$MSSMLBIZ | ID = 8355

Description = Server-level event notifications can not be delivered. Either Service

 Broker is disabled in msdb, or msdsb failed to start. Event notifications in other

 databases could be affected as well. Bring msdb online, or enable Service Broker.

 

 

Error - 5/2/2014 2:32:06 PM | Computer Name = Vulcan | Source = WinMgmt | ID = 10

Description = 

 

Error - 5/2/2014 2:34:51 PM | Computer Name = Vulcan | Source = SideBySide | ID = 16842832

Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat

 9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line 

.  A component version required by the application conflicts with another component

 version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error - 5/2/2014 2:34:51 PM | Computer Name = Vulcan | Source = SideBySide | ID = 16842832

Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat

 9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line 

.  A component version required by the application conflicts with another component

 version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

[ Cisco AnyConnect Secure Mobility Client Events ]

Error - 5/2/2014 2:23:50 PM | Computer Name = Vulcan | Source = acvpnagent | ID = 67108866

Description = Function: CThread::invokeRun File: .\Utility\Thread.cpp Line: 435 Invoked

 Function: IRunnable::Run Return Code: -32112629 (0xFE16000B) Description: BROWSERPROXY_ERROR_NO_PROXY_FILE

 

 

Error - 5/2/2014 2:24:36 PM | Computer Name = Vulcan | Source = acvpnui | ID = 67108866

Description = Function: MSSaxErrorHandlerImpl::fatalError File: .\Xml\MSSaxErrorHandlerImpl.cpp

Line:

 41 Invoked Function: ISAXXMLReader::parse Return Code: -1072897499 (0xC00CE225) Description:

 WINDOWS_ERROR_CODE XML Parser fatal error: Validate failed.  

 

Error - 5/2/2014 2:24:36 PM | Computer Name = Vulcan | Source = acvpnui | ID = 67108866

Description = Function: ProfileMgr::loadProfile File: .\ProfileMgr.cpp Line: 508 Invoked

 Function: ProfileMgr::loadProfile Return Code: -33554423 (0xFE000009) Description:

 GLOBAL_ERROR_UNEXPECTED Duplicate host <GatorLink VPN> found in the profile <C:\ProgramData\Cisco\Cisco

 AnyConnect Secure Mobility Client\Profile\tunnel-group-default.xml>. Host discarded.

 

Error - 5/2/2014 2:24:36 PM | Computer Name = Vulcan | Source = acvpnui | ID = 67108866

Description = Function: XmlPrefMgr::endElement File: .\xml\XmlPrefMgr.cpp Line: 142

Invoked

 Function: UserPreferences::endElement Return Code: -33554423 (0xFE000009) Description:

 GLOBAL_ERROR_UNEXPECTED Attempt to set undefined preference <DefaultDomain>.

 

Error - 5/2/2014 2:24:38 PM | Computer Name = Vulcan | Source = acvpnui | ID = 67108865

Description = Function: ConnectMgr::activateConnectEvent File: .\ConnectMgr.cpp Line:

 1352 NULL object. Cannot establish a connection at this time.

 

Error - 5/2/2014 2:25:36 PM | Computer Name = Vulcan | Source = acvpnplap | ID = 67108866

Description = Function: MSSaxErrorHandlerImpl::fatalError File: ..\Common\Xml\MSSaxErrorHandlerImpl.cpp

Line:

 31 Invoked Function: CVCMSSaxParser Return Code: -1072897499 (0xC00CE225) Description:

 WINDOWS_ERROR_CODE XML Parser fatal error: Validate failed.  

 

Error - 5/2/2014 2:25:36 PM | Computer Name = Vulcan | Source = acvpnplap | ID = 67108866

Description = Function: HostInitSettings::setAttribute File: ..\Api\HostInitSettings.cpp

Line:

 287 Invoked Function: HostInitSettings::setAttribute Return Code: -33554423 (0xFE000009)

Description:

 GLOBAL_ERROR_UNEXPECTED Attempt to allow user control on ProxySettings

 

Error - 5/2/2014 2:25:36 PM | Computer Name = Vulcan | Source = acvpnplap | ID = 67108866

Description = Function: ProfileMgr::loadProfile File: ..\Api\ProfileMgr.cpp Line: 

518 Invoked Function: ProfileMgr::loadProfile Return Code: -33554423 (0xFE000009) Description:

 GLOBAL_ERROR_UNEXPECTED Duplicate host <GatorLink VPN> found in the profile <C:\ProgramData\Cisco\Cisco

 AnyConnect Secure Mobility Client\Profile\tunnel-group-default.xml>. Host discarded.

 

Error - 5/2/2014 2:25:36 PM | Computer Name = Vulcan | Source = acvpnplap | ID = 67108866

Description = Function: XmlPrefMgr::endElement File: ..\Api\xml\XmlPrefMgr.cpp Line:

 135 Invoked Function: UserPreferences::endElement Return Code: -33554423 (0xFE000009)

Description:

 GLOBAL_ERROR_UNEXPECTED Attempt to set undefined preference <DefaultHostName>.

 

Error - 5/2/2014 2:25:36 PM | Computer Name = Vulcan | Source = acvpnplap | ID = 67108866

Description = Function: XmlPrefMgr::endElement File: ..\Api\xml\XmlPrefMgr.cpp Line:

 135 Invoked Function: UserPreferences::endElement Return Code: -33554423 (0xFE000009)

Description:

 GLOBAL_ERROR_UNEXPECTED Attempt to set undefined preference <DefaultHostAddress>.

 

[ Hewlett-Packard Events ]

Error - 8/6/2012 3:13:19 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:18 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:19 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:19 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:19 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:19 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:19 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:21 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:22 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

Error - 8/6/2012 3:13:24 AM | Computer Name = Vulcan | Source = HPSF.exe | ID = 4000

Description = HP Error ID: -2147467261HPSF.exe   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Message: Object

 reference not set to an instance of an object.  StackTrace:   at HP.SupportFramework.Communicator.MessengerComm.MessengerPublisher.closeConnection()

 

   at HP.SupportAssistant.UI.MessengerCommunication.initializeCommunication()     

at HP.SupportAssistant.UI.MessengerCommunication.sendTimerUpdate()  Source: HP.SupportFramework.Communicator

 

Name:

 HPSF.exe  Version: 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support

 Framework\HPSF.exe  Format: en-US  RAM: 6135  Ram Utilization: 80  TargetSite: Void closeConnection()

 

 

[ OSession Events ]

Error - 7/20/2012 8:55:27 PM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:

 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2492

 seconds with 0 seconds of active time.  This session ended with a crash.

 

Error - 11/19/2012 11:21:58 PM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:

 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 595

 seconds with 0 seconds of active time.  This session ended with a crash.

 

Error - 3/8/2013 10:14:35 PM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:

 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1639

 seconds with 60 seconds of active time.  This session ended with a crash.

 

Error - 4/18/2013 10:51:49 AM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 0, Application Name: Microsoft Office Word, Application Version:

 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7765

 seconds with 1680 seconds of active time.  This session ended with a crash.

 

Error - 5/1/2013 5:20:31 PM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 0, Application Name: Microsoft Office Word, Application Version:

 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7933

 seconds with 5580 seconds of active time.  This session ended with a crash.

 

Error - 5/2/2013 12:54:20 PM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:

 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 4163

 seconds with 120 seconds of active time.  This session ended with a crash.

 

Error - 6/19/2013 12:20:37 PM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:

 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 86851

 seconds with 3180 seconds of active time.  This session ended with a crash.

 

Error - 12/10/2013 12:31:13 AM | Computer Name = Vulcan | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 0, Application Name: Microsoft Office Word, Application Version:

 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 54263

 seconds with 5100 seconds of active time.  This session ended with a crash.

 

[ System Events ]

Error - 5/2/2014 2:51:53 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 2:53:59 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 2:53:59 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 2:53:59 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 2:58:59 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 2:58:59 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 2:58:59 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 3:01:07 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 3:01:07 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

Error - 5/2/2014 3:01:07 PM | Computer Name = Vulcan | Source = Service Control Manager | ID = 7001

Description = The Computer Browser service depends on the Server service which failed

 to start because of the following error:   %%1068

 

 

< End of report >

 

[kuratowa2]

aswMBR.txt:

 

aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software

Run date: 2014-05-02 15:11:08

-----------------------------

15:11:08.923    OS Version: Windows x64 6.1.7601 Service Pack 1

15:11:08.923    Number of processors: 4 586 0xA00

15:11:08.923    ComputerName: VULCAN  UserName: Union

15:11:11.559    Initialize success

15:14:35.966    AVAST engine defs: 14050201

15:14:41.738    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000061

15:14:41.738    Disk 0 Vendor: Hitachi JP4OA3GH Size: 953674MB BusType: 8

15:14:41.738    Disk 1  \Device\Harddisk1\DR1 -> \Device\00000063

15:14:41.738    Disk 1 Vendor: Seagate CC3E____ Size: 953869MB BusType: 8

15:14:41.754    Disk 2  \Device\Harddisk2\DR2 -> \Device\00000064

15:14:41.754    Disk 2 Vendor: WDC____ 80.00A80 Size: 1430799MB BusType: 8

15:14:41.847    Disk 0 MBR read successfully

15:14:41.847    Disk 0 MBR scan

15:14:41.847    Disk 0 unknown MBR code

15:14:41.863    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048

15:14:41.863    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       941872 MB offset 206848

15:14:41.910    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS        11700 MB offset 1929160704

15:14:41.956    Disk 0 scanning C:\Windows\system32\drivers

15:14:50.443    Service scanning

15:15:12.408    Modules scanning

15:15:12.408    Disk 0 trace - called modules:

15:15:12.423    ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll ahcix64s.sys 

15:15:12.423    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006ddc060]

15:15:12.423    3 CLASSPNP.SYS[fffff8800108743f] -> nt!IofCallDriver -> \Device\00000061[0xfffffa8005cc79c0]

15:15:14.529    AVAST engine scan C:\Windows

15:15:17.587    AVAST engine scan C:\Windows\system32

15:17:50.857    AVAST engine scan C:\Windows\system32\drivers

15:18:02.011    AVAST engine scan C:\Users\Union

15:47:15.641    AVAST engine scan C:\ProgramData

15:54:21.522    Scan finished successfully

15:54:45.983    Disk 0 MBR has been saved successfully to "C:\Users\Union\Downloads\MBR.dat"

15:54:45.999    The log file has been saved successfully to "C:\Users\Union\Downloads\aswMBR.txt"

15:54:54.220    Disk 0 MBR has been saved successfully to "H:\MBR.dat"

15:54:54.298    The log file has been saved successfully to "H:\aswMBR.txt"

 

 

[Machiavelli]

Hiya,
please don't post in Quote Boxes next time. There are a couple of things we must look at. First we remove the Adware, and then check for other things.

You said before that TDSSKILLER found something. The Log you have posted me was clean. Are there other log located under your root drive? If yes please post all of them!

Please move the OTL.exe to your Desktop. It is currently located under your Downloads Folder (C:\Users\Union\Downloads).

 

Step 1: SideBar Advice


In your logs I see that Windows SideBar is running! At the moment Windows SideBar has a security vulnerability and so I recommend you to disable it for a while. More information is here so far I noticed.

To disable Windows SideBar please follow the instructions below:

• Download the FixIt from here to your Desktop
• Double click on MicrosoftFixit50906.msi and follow the prompts to disable Windows SideBar and gadgets. Once finished, reboot your computer if not advised to do so.

Step 2: Uninstalls

• Click on the Start button and select Control Panel
• Click on Programs then click on Uninstall a program
• You will now see a list of your installed software, double click on the following one by one to uninstall them:
  • AVG SafeGuard toolbar
    
    
• Once you have done this, reboot your computer

Step 3: Google Homepage

Please visit this site here and change the homepage to whatever you want. I recommend changing it to Google.com.

Step 4: Google Chrome Extensions

Run Chrome and please enter this into the address bar: chrome:extensions
This will display a page of all installed extensions. Please remove the extensions in the list below by clicking the trash can icon beside each one.

Extensions to be removed:

• AVG Secure Search

Step 5: OTL Fix

• Run OTL (If you have Windows Vista / Windows 7 / Windows 8 please do a Right click on the OTL icon and select Run as Administrator).
• Copy (Ctrl+C) and Paste (Ctrl+V) all of the following text into the Custom Scans/Fixes box:
  
  
  

  :Commands
  [CREATERESTOREPOINT]
  
  :OTL
  SRV - [2014/04/27 14:49:12 | 001,801,240 | ---- | M] (AVG Secure Search) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe -- (vToolbarUpdater18.1.0)
  IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPDTDF
  IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPDTDF
  IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPDTDF
  IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPDTDF
  IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mysearch.avg....uard&sg=&sap=hp
  IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found
  IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPDTDF
  IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg.com/search?cid={C9139132-C11E-4AC6-B49D-761F7B5751F7}&mid=0d5a1684285d47d18fbda9ae972c8ef7-dd40a49232d8a66d3eb13b4dcc6666cee055c8e4&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-03-25 08:46:53&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}
  IE - HKU\S-1-5-21-3164183197-2720610983-350624195-1000\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPDTDF
  FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
  FF - prefs.js..keyword.URL: "http://mysearch.avg....6:53&sap=ku&q="
  FF - user.js - File not found
  FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll File not found
  FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
  FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll File not found
  FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll File not found
  FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443 [2014/04/27 14:51:12 | 000,000,000 | ---D | M]
  [2013/10/12 23:14:42 | 000,001,028 | ---- | M] () -- C:\Users\Union\AppData\Roaming\Mozilla\Firefox\Profiles\6ofm14l9.default\searchplugins\dvdvideosofttb-customized-web-search.xml
  [2014/04/27 14:51:12 | 000,003,743 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\safeguard-secure-search.xml
  O2:64bit: - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll File not found
  O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll File not found
  O2 - BHO: (no name) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - No CLSID value found.
  O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll File not found
  O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
  O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
  O4 - HKLM..\Run: []  File not found
  O4 - HKLM..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" File not found
  O4 - HKLM..\Run: [BrowserPlugInHelper] C:\Program Files (x86)\Aimersoft\Video Converter Ultimate\BrowserPlugInHelper.exe File not found
  O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()
  O4 - HKU\S-1-5-21-3164183197-2720610983-350624195-1000..\Run: [AdobeBridge]  File not found
  O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Union\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll File not found
  O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll File not found
  O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (AVG Secure Search)
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O33 - MountPoints2\{355d6298-f622-11e0-ac07-78e7d1c86704}\Shell - "" = AutoRun
  O33 - MountPoints2\{355d6298-f622-11e0-ac07-78e7d1c86704}\Shell\AutoRun\command - "" = "L:\WD SmartWare.exe" autoplay=true
  O33 - MountPoints2\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\Shell - "" = AutoRun
  O33 - MountPoints2\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\Shell\AutoRun\command - "" = L:\TL-Bootstrap.exe
  [2014/04/27 14:50:39 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
  [2014/04/18 16:32:49 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
  [2014/04/18 16:23:14 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Local\{3C052A19-6E83-4F2A-A99E-9025811AA5E4}
  [2012/10/21 22:13:05 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\DVDVideoSoft
  [2012/10/21 22:08:13 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\OpenCandy
  [2014/04/18 16:32:49 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
  
  
  :Commands
  [RESETHOSTS]
  [EMPTYTEMP]
  

• Click the Run Fix button.
• After your computer has rebooted, post the Fixlog into your next reply

Step 6: Adwarecleaner

Please download AdwCleaner (by Xplode) from the link below and save it to your Desktop:

Download Mirror #1

• Right-click on AdwCleaner.exe and select Run as administrator. (If you have Windows XP the just run it)
• Click Scan and let the scan run.
• When it finishes, click Clean, following the on screen prompts
• After your computer reboots, a log will open. Please Copy (Ctrl+C) and Paste (Ctrl+V) this into your next post.

Note: The log can also be found in here: C:\AdwCleaner\

Step 7: Junkware Removal Tool

 Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

Step 8: OTL Quickscan

• Run OTL by double-clicking on it. (If you have Windows Vista / Windows 7 / Windows 8 please do a Right click on OTL.exe and select Run as Administrator)
• Click Quick Scan to start OTL.
• When OTL finishes scanning, a logs, OTL.txt will open.
• Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this log into your next post please.

Step 9: Question

How is your PC running?

[kuratowa2]

1. Rebooted computer in normal mode (was in safe mode with networking).

 

Ran the MicrosoftFixit50906.msi; is my assumption that this is specific to the Windows SideBar correct, because it did not ask me what I wanted to disable.

 

Rebooted in normal mode; computer crashed (windows explorer shut down, and nothing was able to be opened; had to manually turn off and back on) when opening Google Chrome to return to this website (am using second computer right now).

 

 

2. Rebooted in normal mode, got to control panel, as I asked it to uninstall the AVGSafeGuard Toolbar, it crashed, giving this error "c:\windows\system32\cert\CredProvider.dll   is either not designed to run on Windows or it contains an error."

 

Rebooted in safe mode with networking,never finished loading.  Rebooted in normal mode, it suggested doing a diskcheck.  I skipped that and finished rebooting.  It crashed again (as before), and I'm trying to reboot now in safe mode with no luck.   Instead, it rebooted in normal mode, and then everything shut down except for my background image.

 

 

Cannot get Windows to stay open long enough to get into Control Panel.  Help?

[kuratowa2]

Finally was able to get into Control Panel to remove AVG SafeGuard Toolbar.

 

Reassigned homepage to Google.com rather than the tabs.

 

The Chrome Extensions did not show the AVG Secure Search extension.

 

Ran OTL; it rebooted and seemed successful.  Computer crashed when trying to save the txt file in a second location.

 

Here is the file:

 

��All processes killed

 

========== COMMANDS ==========

 

Unable to start System Restore Service. Error code 1084

 

========== OTL ==========

 

Service vToolbarUpdater18.1.0 stopped successfully!

 

Service vToolbarUpdater18.1.0 deleted successfully!

 

C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe moved successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.

 

HKU\S-1-5-21-3164183197-2720610983-350624195-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!

 

Registry value HKEY_USERS\S-1-5-21-3164183197-2720610983-350624195-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.

 

Registry key HKEY_USERS\S-1-5-21-3164183197-2720610983-350624195-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.

 

Registry key HKEY_USERS\S-1-5-21-3164183197-2720610983-350624195-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.

 

Registry key HKEY_USERS\S-1-5-21-3164183197-2720610983-350624195-1000\Software\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.

 

Prefs.js: "AVG Secure Search" removed from browser.search.defaultenginename

 

Prefs.js: "http://mysearch.avg.....6:53&sap=ku&q=" removed from keyword.URL

 

64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\adobe.com/AdobeExManDetect\ deleted successfully.

 

Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar not found.

 

File C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443 not found.

 

C:\Users\Union\AppData\Roaming\Mozilla\Firefox\Profiles\6ofm14l9.default\searchplugins\dvdvideosofttb-customized-web-search.xml moved successfully.

 

C:\Program Files (x86)\Mozilla Firefox\searchplugins\safeguard-secure-search.xml moved successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.

 

C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll moved successfully.

 

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.

 

File C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll not found.

 

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.

 

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AVG_TRAY deleted successfully.

 

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BrowserPlugInHelper deleted successfully.

 

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\vProt deleted successfully.

 

C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe moved successfully.

 

Registry value HKEY_USERS\S-1-5-21-3164183197-2720610983-350624195-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.

 

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Free YouTube to MP3 Converter\ deleted successfully.

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner\ deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}\ deleted successfully.

 

File {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll File not found not found.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner\ not found.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}\ deleted successfully.

 

File {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll File not found not found.

 

C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll moved successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol\ deleted successfully.

 

Invalid CLSID key: C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll

 

File C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll not found.

 

64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.

 

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.

 

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{355d6298-f622-11e0-ac07-78e7d1c86704}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{355d6298-f622-11e0-ac07-78e7d1c86704}\ not found.

 

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{355d6298-f622-11e0-ac07-78e7d1c86704}\ not found.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{355d6298-f622-11e0-ac07-78e7d1c86704}\ not found.

 

File "L:\WD SmartWare.exe" autoplay=true not found.

 

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\ deleted successfully.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\ not found.

 

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\ not found.

 

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66cc06fd-d903-11e2-8eb3-78e7d1c86704}\ not found.

 

File L:\TL-Bootstrap.exe not found.

 

C:\ProgramData\AVG Secure Search\Logger folder moved successfully.

 

C:\ProgramData\AVG Secure Search folder moved successfully.

 

C:\Users\Union\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} folder moved successfully.

 

C:\Users\Union\AppData\Local\{3C052A19-6E83-4F2A-A99E-9025811AA5E4} folder moved successfully.

 

C:\Users\Union\AppData\Roaming\DVDVideoSoft\logs folder moved successfully.

 

C:\Users\Union\AppData\Roaming\DVDVideoSoft\backup\FreeYouTubeToMP3Converter folder moved successfully.

 

C:\Users\Union\AppData\Roaming\DVDVideoSoft\backup folder moved successfully.

 

C:\Users\Union\AppData\Roaming\DVDVideoSoft folder moved successfully.

 

C:\Users\Union\AppData\Roaming\OpenCandy\2D98EFB7461C440E8F89BD6B1D749F95 folder moved successfully.

 

C:\Users\Union\AppData\Roaming\OpenCandy folder moved successfully.

 

Folder C:\Users\Union\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}\ not found.

 

========== COMMANDS ==========

 

C:\Windows\System32\drivers\etc\Hosts moved successfully.

 

HOSTS file reset successfully

 

 

 

[EMPTYTEMP]

 

 

 

User: All Users

 

 

 

User: Default

 

->Temp folder emptied: 0 bytes

 

->Temporary Internet Files folder emptied: 33170 bytes

 

->Flash cache emptied: 56504 bytes

 

 

 

User: Default User

 

->Temp folder emptied: 0 bytes

 

->Temporary Internet Files folder emptied: 0 bytes

 

->Flash cache emptied: 0 bytes

 

 

 

User: Public

 

 

 

User: Union

 

->Temp folder emptied: 148759885 bytes

 

->Temporary Internet Files folder emptied: 117218261 bytes

 

->Java cache emptied: 4996151 bytes

 

->FireFox cache emptied: 75263426 bytes

 

->Google Chrome cache emptied: 9941382 bytes

 

->Flash cache emptied: 177868 bytes

 

 

 

%systemdrive% .tmp files removed: 0 bytes

 

%systemroot% .tmp files removed: 0 bytes

 

%systemroot%\System32 .tmp files removed: 0 bytes

 

%systemroot%\System32 (64bit) .tmp files removed: 107552 bytes

 

%systemroot%\System32\drivers .tmp files removed: 0 bytes

 

Windows Temp folder emptied: 8118950 bytes

 

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50461 bytes

 

RecycleBin emptied: 12162707 bytes

 

 

 

Total Files Cleaned = 359.00 mb

 

 

 

 

 

OTL by OldTimer - Version 3.2.69.0 log created on 05022014_202241

 

 

 

Files\Folders moved on Reboot...

 

C:\Users\Union\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

 

 

 

PendingFileRenameOperations files...

 

 

 

Registry entries deleted on Reboot...

[kuratowa2]

Adware cleaner log:

 

# AdwCleaner v3.205 - Report created 02/05/2014 at 20:36:57

# Updated 28/04/2014 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : Union - VULCAN

# Running from : C:\Users\Union\Desktop\AdwCleaner.exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Deleted : C:\Program Files (x86)\AVG SafeGuard toolbar

Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search

Folder Deleted : C:\Users\Union\AppData\Local\AVG SafeGuard toolbar

Folder Deleted : C:\Users\Union\AppData\LocalLow\AVG SafeGuard toolbar

Folder Deleted : C:\Users\Union\AppData\LocalLow\Conduit

File Deleted : C:\Windows\Downloaded Program Files\popcaploader.inf

File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla

Key Deleted : HKCU\Software\Google\Chrome\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo

Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI

Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1

Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj

Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1

Key Deleted : HKLM\SOFTWARE\Classes\driverscanner

Key Deleted : HKLM\Software\Classes\popcaploader.popcaploaderctrl2

Key Deleted : HKLM\Software\Classes\popcaploader.popcaploaderctrl2.1

Key Deleted : HKLM\SOFTWARE\Classes\S

Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASMANCS

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2269050

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E4E3E0F8-CD30-4380-8CE9-B96904BDEFCA}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE8A736F-4124-4D9C-B4B1-3B12381EFABE}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C9C5DEAF-0A1F-4660-8279-9EDFAD6FEFE1}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E4E3E0F8-CD30-4380-8CE9-B96904BDEFCA}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FE8A736F-4124-4D9C-B4B1-3B12381EFABE}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKCU\Software\AVG SafeGuard toolbar

Key Deleted : HKCU\Software\Conduit

Key Deleted : HKCU\Software\AppDataLow\Software\Conduit

Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar

Key Deleted : HKLM\Software\AVG SafeGuard toolbar

Key Deleted : HKLM\Software\AVG Security Toolbar

Key Deleted : HKLM\Software\Conduit

Key Deleted : HKLM\Software\Uniblue

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v11.0.9600.17041

 

 

-\\ Mozilla Firefox v

 

[ File : C:\Users\Union\AppData\Roaming\Mozilla\Firefox\Profiles\6ofm14l9.default\prefs.js ]

 

 

-\\ Google Chrome v

 

[ File : C:\Users\Union\AppData\Local\Google\Chrome\User Data\Default\preferences ]

 

Deleted [Search Provider] : hxxp://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF

Deleted [Search Provider] : hxxp://search.aol.com/aol/search?query={searchTerms}

Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

Deleted [Search Provider] : hxxp://movies.netflix.com/WiSearch?raw_query=&ac_category_type=none&ac_rel_posn=-1&ac_abs_posn=-1&v1={searchTerms}&search_submit=

Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321897&octid=EB_ORIGINAL_CTID&ISID=MB06A7DF2-2380-4D37-86A8-4A27662F915B&SearchSource=58&CUI=&UM=5&UP=SP5EF44340-ECE8-4AB1-AF1F-F8F61FBD1620&q={searchTerms}&SSPV=

Deleted [Extension] : plmlpkfpkijnlijgalnjaacllnjmoamo

 

*************************

 

AdwCleaner[R0].txt - [8948 octets] - [02/05/2014 20:35:10]

AdwCleaner[S0].txt - [8773 octets] - [02/05/2014 20:36:57]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8833 octets] ##########

[kuratowa2]

Junkware Removal Tool:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Home Premium x64

Ran by Union on Fri 05/02/2014 at 21:03:18.17

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E1220177-581E-49F3-8F8A-B710C631AAE3}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{E1220177-581E-49F3-8F8A-B710C631AAE3}

 

 

 

~~~ Files

 

 

 

~~~ Folders

 

Successfully deleted: [Empty Folder] C:\Users\Union\appdata\local\{05AE9C56-249E-4424-9C00-2D97FADE6090}

Successfully deleted: [Empty Folder] C:\Users\Union\appdata\local\{05C16910-31FE-444B-B670-0CF2A3BA6025}

Successfully deleted: [Empty Folder] C:\Users\Union\appdata\local\{5D990D9C-4797-4F37-AEC6-48F04BC696AE}

Successfully deleted: [Empty Folder] C:\Users\Union\appdata\local\{62CC3FD4-3EE9-494A-A9EC-90E98A8572E4}

Successfully deleted: [Empty Folder] C:\Users\Union\appdata\local\{670DA30E-7B2C-4104-A0B4-B6F26435F53D}

 

 

 

~~~ Event Viewer Logs were cleared

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Fri 05/02/2014 at 21:11:08.49

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

OTL Quick Scan:

OTL logfile created on: 5/2/2014 9:12:36 PM - Run 2

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Union\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17041)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

 

5.99 Gb Total Physical Memory | 4.18 Gb Available Physical Memory | 69.84% Memory free

11.98 Gb Paging File | 9.96 Gb Available in Paging File | 83.11% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 919.80 Gb Total Space | 405.51 Gb Free Space | 44.09% Space Free | Partition Type: NTFS

Drive D: | 11.43 Gb Total Space | 1.40 Gb Free Space | 12.22% Space Free | Partition Type: NTFS

Drive E: | 1397.26 Gb Total Space | 1021.91 Gb Free Space | 73.14% Space Free | Partition Type: NTFS

Drive G: | 488.28 Gb Total Space | 446.21 Gb Free Space | 91.38% Space Free | Partition Type: NTFS

 

Computer Name: VULCAN | User Name: Union | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2014/05/02 14:48:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Union\Desktop\OTL.exe

PRC - [2014/04/18 14:50:52 | 033,604,728 | ---- | M] (Dropbox, Inc.) -- C:\Users\Union\AppData\Roaming\Dropbox\bin\Dropbox.exe

PRC - [2014/04/06 21:21:36 | 005,180,432 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe

PRC - [2014/03/27 22:10:20 | 000,291,912 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

PRC - [2013/12/18 14:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2013/11/20 16:43:26 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

PRC - [2013/11/20 16:43:14 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

PRC - [2013/10/10 17:47:56 | 000,707,984 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe

PRC - [2013/10/10 17:47:40 | 000,558,480 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

PRC - [2013/09/14 03:27:52 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe

PRC - [2013/05/29 15:50:52 | 001,734,144 | ---- | M] (AimerSoft) -- C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe

PRC - [2013/05/08 03:17:22 | 000,642,664 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe

PRC - [2012/03/28 23:47:48 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\nlssrv32.exe

PRC - [2011/12/07 11:19:13 | 000,021,320 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG Family Safety\BsecAMX.exe

PRC - [2011/12/07 11:19:02 | 000,066,376 | ---- | M] (Bsecure Technologies, Inc.) -- C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe

PRC - [2011/07/14 01:17:39 | 000,779,984 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\8BACC656\18.0.0.128\InstStub.exe

PRC - [2011/02/01 04:49:44 | 001,127,448 | ---- | M] (PDF Complete Inc) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe

PRC - [2010/11/26 10:09:12 | 000,399,344 | ---- | M] (Roxio) -- C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe

PRC - [2010/07/05 08:37:08 | 000,011,776 | ---- | M] () -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe

PRC - [2010/05/23 01:39:05 | 000,126,904 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe

PRC - [2009/12/15 20:41:00 | 000,139,264 | ---- | M] () -- C:\Windows\SysWOW64\WinMsgBalloonClient.exe

PRC - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] (AMD) -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe

PRC - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] () -- C:\Windows\SysWOW64\WinMsgBalloonServer.exe

PRC - [2009/12/15 20:40:00 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe

PRC - [2009/07/22 12:58:18 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\ASTSRV.EXE

PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

PRC - [2009/02/20 09:46:52 | 000,030,312 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

PRC - [2008/02/09 20:53:46 | 000,405,504 | ---- | M] (DropShots) -- C:\Program Files (x86)\DropBox\DropBox\DropBox.exe

PRC - [2007/01/01 17:22:02 | 003,739,648 | ---- | M] (Google) -- C:\Users\Union\AppData\Roaming\Google\Google Talk\googletalk.exe

 

 

========== Modules (No Company Name) ==========

 

MOD - [2014/05/02 21:01:11 | 000,041,984 | ---- | M] () -- c:\Users\Union\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprie5vo.dll

MOD - [2014/01/20 14:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

MOD - [2014/01/20 14:16:38 | 001,044,808 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

MOD - [2014/01/02 23:42:50 | 003,610,624 | ---- | M] () -- C:\Users\Union\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll

MOD - [2013/10/18 19:55:02 | 025,100,288 | ---- | M] () -- C:\Users\Union\AppData\Roaming\Dropbox\bin\libcef.dll

MOD - [2013/10/10 17:48:40 | 000,063,376 | ---- | M] () -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll

MOD - [2013/09/14 01:51:02 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll

MOD - [2013/09/14 01:50:36 | 001,242,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll

MOD - [2011/12/07 11:19:13 | 000,021,320 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG Family Safety\BsecAMX.exe

 

 

========== Services (SafeList) ==========

 

SRV:64bit: - [2014/03/06 04:29:14 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2012/04/26 04:50:18 | 000,237,056 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2011/02/17 01:47:28 | 000,682,040 | ---- | M] (Hewlett-Packard) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe -- (HPAuto)

SRV:64bit: - [2010/10/11 05:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)

SRV:64bit: - [2010/09/22 21:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV:64bit: - [2010/04/14 16:08:30 | 001,052,328 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\lxeccoms.exe -- (lxec_device)

SRV:64bit: - [2010/04/14 16:08:23 | 000,045,736 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxecserv.exe -- (lxecCATSCustConnectService)

SRV - [2014/04/29 16:10:21 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2014/04/29 10:07:25 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2014/04/18 15:18:48 | 003,645,456 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)

SRV - [2014/03/27 22:10:20 | 000,291,912 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)

SRV - [2014/02/15 12:53:58 | 000,227,904 | ---- | M] (WildTangent) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService)

SRV - [2013/12/18 14:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2013/11/04 19:31:56 | 000,092,160 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)

SRV - [2013/10/10 17:47:40 | 000,558,480 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe -- (vpnagent)

SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2012/03/28 23:47:48 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\nlssrv32.exe -- (nlsX86cc)

SRV - [2011/12/07 11:19:02 | 000,066,376 | ---- | M] (Bsecure Technologies, Inc.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe -- (Bsecure)

SRV - [2011/10/15 14:05:04 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2011/02/01 04:49:44 | 001,127,448 | ---- | M] (PDF Complete Inc) [Auto | Running] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)

SRV - [2010/11/26 10:09:12 | 000,399,344 | ---- | M] (Roxio) [Auto | Running] -- C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe -- (RoxioNow Service)

SRV - [2010/10/12 13:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)

SRV - [2010/07/05 08:37:08 | 000,011,776 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)

SRV - [2010/06/01 18:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)

SRV - [2010/05/23 01:39:05 | 000,126,904 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe -- (NIS)

SRV - [2010/04/14 16:08:23 | 000,045,736 | ---- | M] () [Auto | Running] -- C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe -- (lxecCATSCustConnectService)

SRV - [2010/04/14 16:08:12 | 000,598,696 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWOW64\lxeccoms.exe -- (lxec_device)

SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)

SRV - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] (AMD) [Auto | Running] -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe -- (AMD_RAIDXpert)

SRV - [2009/07/22 12:58:18 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\ASTSRV.EXE -- (astcc)

SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009/02/20 09:46:52 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)

 

 

========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2014/05/02 11:23:38 | 000,036,680 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon)

DRV:64bit: - [2014/04/27 14:49:14 | 000,050,464 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)

DRV:64bit: - [2014/04/18 15:01:30 | 000,237,336 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)

DRV:64bit: - [2014/03/31 16:20:54 | 000,274,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)

DRV:64bit: - [2014/03/31 16:06:26 | 000,130,840 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)

DRV:64bit: - [2014/03/27 22:14:26 | 000,192,792 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)

DRV:64bit: - [2014/03/27 22:14:24 | 000,153,368 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)

DRV:64bit: - [2014/03/27 22:07:10 | 000,236,824 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)

DRV:64bit: - [2014/03/27 22:05:02 | 000,324,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)

DRV:64bit: - [2014/03/27 22:03:16 | 000,032,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)

DRV:64bit: - [2013/10/10 17:31:36 | 000,052,080 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpnva64-6.sys -- (vpnva)

DRV:64bit: - [2013/10/10 17:29:28 | 000,112,496 | R--- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acsock64.sys -- (acsock)

DRV:64bit: - [2013/10/01 22:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2012/08/23 10:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012/08/23 10:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012/04/26 06:47:20 | 011,172,864 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2012/04/26 03:32:46 | 000,339,456 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2012/04/09 16:27:34 | 000,352,144 | ---- | M] (EldoS Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cbfs3.sys -- (cbfs3)

DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/11/28 22:28:28 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2011/06/14 17:17:24 | 000,022,832 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\BSecACFltr.sys -- (BSecACFltr)

DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011/01/11 08:08:46 | 000,280,144 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)

DRV:64bit: - [2010/12/28 15:45:54 | 000,412,776 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/09/24 11:46:32 | 000,116,752 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2010/07/05 21:29:12 | 000,106,888 | ---- | M] (Windows ® Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan)

DRV:64bit: - [2010/03/10 11:33:52 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie)

DRV:64bit: - [2009/12/22 05:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:64bit: - [2009/11/02 10:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)

DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/06/10 16:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2009/06/10 16:35:38 | 000,707,072 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)

DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)

DRV - [2013/12/21 11:34:19 | 000,011,973 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\SECDRV.SYS -- (SecDrv)

DRV - [2011/06/14 17:17:24 | 000,021,624 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\BSecACFltr.sys -- (BSecACFltr)

DRV - [2011/03/04 04:00:00 | 001,791,096 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\ex64.sys -- (NAVEX15)

DRV - [2011/03/04 04:00:00 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\eng64.sys -- (NAVENG)

DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE:64bit: - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

IE:64bit: - HKLM\..\SearchScopes\{E1220177-581E-49F3-8F8A-B710C631AAE3}: "URL" = http://www.amazon.co...s={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\..\SearchScopes,DefaultScope = 

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7

IE - HKCU\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

========== FireFox ==========

 

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\10\NP_wtapp.dll ()

FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll ()

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Union\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Union\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Union\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011/10/15 12:15:11 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2014/04/29 16:10:14 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2014/04/29 16:10:18 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files (x86)\AVG\AVG2012\Thunderbird\

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2014/04/29 16:10:14 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2014/04/29 16:10:18 | 000,000,000 | ---D | M]

 

[2012/03/19 03:31:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Extensions

[2012/03/19 03:31:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Extensions\[email protected]

[2014/05/02 13:15:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Firefox\Profiles\6ofm14l9.default\extensions

[2014/05/02 13:17:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

[2011/10/17 22:14:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}

[2011/10/23 20:52:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

 

========== Chrome  ==========

 

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - homepage: 

CHR - plugin: Error reading preferences file

CHR - Extension: Google Wallet = C:\Users\Union\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

 

O1 HOSTS File: ([2014/05/02 20:22:45 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1       localhost

O2:64bit: - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)

O2 - BHO: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()

O2 - BHO: (no name) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - No CLSID value found.

O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O3 - HKLM\..\Toolbar: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()

O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)

O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)

O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe (AimerSoft)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [AVG Family Safety] C:\Program Files (x86)\AVG\AVG Family Safety\BsecTray.exe (Bsecure Technologies, Inc.)

O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Cisco Systems, Inc.)

O4 - HKLM..\Run: [DropBoxUtility] C:\Program Files (x86)\DropBox\DropBox\DropBox.exe (DropShots)

O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)

O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc)

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)

O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)

O4 - HKCU..\Run: [googletalk] C:\Users\Union\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)

O4 - HKCU..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)

O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)

O4:64bit: - HKLM..\RunOnce: [NCPluginUpdater] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe (Hewlett-Packard)

O4 - Startup: C:\Users\Union\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Union\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 1

O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found

O8:64bit: - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - Reg Error: Value error. File not found

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Free YouTube to MP3 Converter - Reg Error: Value error. File not found

O9:64bit: - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll File not found

O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000021 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O1364bit: - gopher Prefix: missing

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave...ploader_v10.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4F54A693-CF82-41C7-824A-5EF19095F5C9}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B270742B-D3AC-4234-B5A1-E76E6B2A34DA}: DhcpNameServer = 192.168.3.1

O18:64bit: - Protocol\Handler\belarc - No CLSID value found

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:64bit: - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)

O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O22:64bit: - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)

O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010/12/29 12:47:21 | 000,000,090 | ---- | M] () - E:\AUTORUN.INF -- [ NTFS ]

O32 - AutoRun File - [2011/05/31 15:41:00 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2014/05/02 20:56:22 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2014/05/02 20:55:27 | 001,016,261 | ---- | C] (Thisisu) -- C:\Users\Union\Desktop\JRT.exe

[2014/05/02 20:52:53 | 000,000,000 | ---D | C] -- C:\Users\Union\Desktop\desktop sort

[2014/05/02 20:35:33 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll

[2014/05/02 20:35:03 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2014/05/02 20:22:41 | 000,000,000 | ---D | C] -- C:\_OTL

[2014/05/02 19:36:33 | 000,000,000 | -HSD | C] -- C:\found.000

[2014/05/02 18:42:25 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Union\Desktop\OTL.exe

[2014/05/02 12:45:34 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro

[2014/05/02 12:12:36 | 000,000,000 | ---D | C] -- C:\Users\Union\Desktop\RK_Quarantine

[2014/05/02 11:00:11 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine

[2014/05/02 02:46:47 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel

[2014/04/29 16:10:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird

[2014/04/28 18:48:54 | 000,000,000 | -HSD | C] -- C:\Users\Union\AppData\Local\EmieUserList

[2014/04/28 18:48:54 | 000,000,000 | -HSD | C] -- C:\Users\Union\AppData\Local\EmieSiteList

[2014/04/27 08:52:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2014/04/23 16:33:56 | 000,000,000 | -H-D | C] -- C:\Users\Union\Documents\My Media

[2014/04/23 16:33:56 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Roaming\OverDrive

[2014/04/23 16:33:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OverDrive Media Console

[2014/04/23 16:33:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OverDrive Media Console

[2014/04/18 16:32:50 | 000,000,000 | -H-D | C] -- C:\Users\Union\Documents\Aimersoft Video Converter Ultimate

[2014/04/18 16:32:34 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Local\Aimersoft

[2014/04/18 16:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Aimersoft

[2014/04/18 16:31:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Aimersoft Video Converter Ultimate

[2014/04/18 16:31:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Aimersoft

[2014/04/18 16:30:09 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Aimersoft

[2014/04/18 15:01:30 | 000,237,336 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2014/05/02 21:15:40 | 000,848,970 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2014/05/02 21:15:40 | 000,709,498 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2014/05/02 21:15:40 | 000,140,180 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2014/05/02 21:08:48 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014/05/02 21:08:48 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014/05/02 21:06:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/05/02 21:00:19 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/05/02 20:59:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/05/02 20:58:55 | 530,493,439 | -HS- | M] () -- C:\hiberfil.sys

[2014/05/02 20:55:16 | 001,016,261 | ---- | M] (Thisisu) -- C:\Users\Union\Desktop\JRT.exe

[2014/05/02 20:34:25 | 001,310,621 | ---- | M] () -- C:\Users\Union\Desktop\AdwCleaner.exe

[2014/05/02 20:22:45 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts

[2014/05/02 19:50:30 | 000,003,392 | ---- | M] () -- C:\bootsqm.dat

[2014/05/02 19:00:13 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3164183197-2720610983-350624195-1000UA.job

[2014/05/02 18:44:19 | 000,984,576 | ---- | M] () -- C:\Users\Union\Desktop\MicrosoftFixit50906.msi

[2014/05/02 14:48:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Union\Desktop\OTL.exe

[2014/05/02 13:41:55 | 000,000,171 | ---- | M] () -- C:\Windows\wininit.ini

[2014/05/02 12:45:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/05/02 11:48:30 | 000,000,332 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForUnion.job

[2014/05/02 11:23:38 | 000,036,680 | ---- | M] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/05/02 10:43:26 | 000,000,861 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog

[2014/05/01 13:57:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3164183197-2720610983-350624195-1000Core.job

[2014/05/01 02:06:26 | 000,000,967 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/04/29 20:55:09 | 000,002,112 | ---- | M] () -- C:\Users\Union\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk

[2014/04/27 14:49:14 | 000,050,464 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys

[2014/04/24 11:51:05 | 000,569,157 | -H-- | M] () -- C:\Users\Union\Documents\District-Assembly-delegates.PDF

[2014/04/24 09:45:40 | 000,001,456 | ---- | M] () -- C:\Users\Union\AppData\Local\Adobe Save for Web 12.0 Prefs

[2014/04/23 16:33:39 | 000,002,525 | ---- | M] () -- C:\Users\Public\Desktop\OverDrive Media Console.lnk

[2014/04/23 01:04:34 | 000,001,051 | ---- | M] () -- C:\Users\Union\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

[2014/04/18 15:01:30 | 000,237,336 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys

[2014/04/12 21:21:01 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForVULCAN$.job

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2014/05/02 20:34:40 | 001,310,621 | ---- | C] () -- C:\Users\Union\Desktop\AdwCleaner.exe

[2014/05/02 19:50:30 | 000,003,392 | ---- | C] () -- C:\bootsqm.dat

[2014/05/02 18:44:32 | 000,984,576 | ---- | C] () -- C:\Users\Union\Desktop\MicrosoftFixit50906.msi

[2014/05/02 13:34:42 | 000,000,171 | ---- | C] () -- C:\Windows\wininit.ini

[2014/05/02 11:23:38 | 000,036,680 | ---- | C] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/05/02 10:43:25 | 000,000,861 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog

[2014/05/01 02:06:26 | 000,000,967 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/04/24 11:51:05 | 000,569,157 | -H-- | C] () -- C:\Users\Union\Documents\District-Assembly-delegates.PDF

[2014/04/23 16:33:39 | 000,002,525 | ---- | C] () -- C:\Users\Public\Desktop\OverDrive Media Console.lnk

[2014/02/23 19:18:45 | 000,021,624 | ---- | C] () -- C:\Windows\SysWow64\drivers\BSecACFltr.sys

[2012/06/09 23:17:50 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll

[2012/06/09 23:17:50 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll

[2012/06/09 23:17:50 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll

[2012/05/15 22:52:13 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll

[2012/05/15 22:52:13 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll

[2012/05/15 22:52:13 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll

[2012/05/15 22:52:12 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll

[2012/01/18 04:02:07 | 000,000,132 | ---- | C] () -- C:\Users\Union\AppData\Roaming\Adobe PNG Format CS5 Prefs

[2011/11/30 00:08:25 | 000,000,218 | ---- | C] () -- C:\Users\Union\.recently-used.xbel

[2011/11/29 23:25:13 | 000,038,367 | ---- | C] () -- C:\Users\Union\descend_chart.pdf

[2011/11/29 23:24:41 | 000,005,592 | ---- | C] () -- C:\Users\Union\descend_chart.odt

[2011/10/18 02:37:25 | 000,001,456 | ---- | C] () -- C:\Users\Union\AppData\Local\Adobe Save for Web 12.0 Prefs

 

========== ZeroAccess Check ==========

 

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 22:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 21:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 23:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 

========== LOP Check ==========

 

[2012/07/28 16:55:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Amazon

[2014/04/28 20:36:30 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Audacity

[2013/09/23 08:57:26 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\AVG2014

[2012/02/15 15:49:02 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Barnes & Noble

[2012/02/15 15:47:08 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Blio

[2011/10/18 11:12:13 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

[2012/09/03 22:34:17 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

[2014/05/02 21:02:57 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Dropbox

[2014/03/28 08:33:49 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\DropboxMaster

[2012/03/19 03:31:30 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Flickr

[2011/11/29 23:24:41 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\gramps

[2012/10/13 13:35:44 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\iFunbox_UserCache

[2014/03/17 15:19:29 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Leawo

[2011/11/01 13:01:17 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\MusE

[2012/06/14 01:49:26 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Namco

[2013/06/10 12:08:27 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\onOne Software

[2013/11/01 01:33:42 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Oracle

[2014/04/23 16:33:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\OverDrive

[2011/11/04 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PACE Anti-Piracy

[2012/09/04 00:20:48 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PDAppFlex

[2012/10/13 13:00:19 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PhoneBrowse

[2011/11/04 21:25:58 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

[2011/10/15 01:22:37 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Thunderbird

[2012/12/11 07:38:00 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\TuneUp Software

[2014/02/18 22:34:23 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Unity

[2012/06/14 01:47:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\WildTangent

[2011/11/05 11:55:59 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\WinBatch

[2011/10/15 15:06:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\YouSendIt

[2012/02/15 15:49:06 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1

 

========== Purity Check ==========

 

 

 

========== Alternate Data Streams ==========

 

@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences

 

< End of report >

 

 

How computer is doing?  The computer keeps rebooting, whether I've logged in or not — but no blue screens.

Edited by kuratowa2, 02 May 2014 - 10:09 PM.

[Machiavelli]

Hey,

Sounds like a hardware issue being honest. We will remove some minor things - then we are running System File Checker. We can not run MBAM/ESET since your PC is still crashing.

You didn't answered that:
 

You said before that TDSSKILLER found something. The Log you have posted me was clean. Are there other log located under your root drive? If yes please post all of them!

 


Step 1: OTL Fix

• Run OTL (If you have Windows Vista / Windows 7 / Windows 8 please do a Right click on the OTL icon and select Run as Administrator).
• Copy (Ctrl+C) and Paste (Ctrl+V) all of the following text into the Custom Scans/Fixes box:
  
  
  

  :Commands
  [CREATERESTOREPOINT]
  
  :OTL
  O2 - BHO: (no name) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - No CLSID value found.
  O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
  O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - Reg Error: Value error. File not found
  O8 - Extra context menu item: Free YouTube to MP3 Converter - Reg Error: Value error. File not found
  O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll File not found
  O1364bit: - gopher Prefix: missing
  O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave...ploader_v10.cab (Reg Error: Key error.)
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  
  
  :Commands
  [EMPTYTEMP]
  

• Click the Run Fix button.
• After your computer has rebooted, run OTL and click Quick Scan.
• Copy and paste the contents of the log that it produces into your next post.

Step 2: System File Checker (SFC)

• Click on the Start button and in the search box, type Command Prompt
• When you see Command Prompt on the list, right-click on it and select Run as administrator
• When command prompt opens, copy and paste the following commands into it, press enter after each
  
  sfc /scannow
  
  Wait for this to finish before you continue
  
  copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
• This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

[kuratowa2]

Every time I've tried to paste in the text from the first TDSSKiller log we have, it won't post; I've even tried editing a previous post to add it in.  Not sure why.

 

Ran the OTL (log below), and when I went to the Command Prompt and tried to run the sfc /scannow it states that 'sfc' is not recognized as an internal or external command, operable program or batch file.

 

OTL log:

 

OTL logfile created on: 5/3/2014 10:39:52 AM - Run 3

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Union\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17041)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

 

5.99 Gb Total Physical Memory | 5.30 Gb Available Physical Memory | 88.53% Memory free

11.98 Gb Paging File | 11.32 Gb Available in Paging File | 94.44% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 919.80 Gb Total Space | 405.48 Gb Free Space | 44.08% Space Free | Partition Type: NTFS

Drive D: | 11.43 Gb Total Space | 1.40 Gb Free Space | 12.22% Space Free | Partition Type: NTFS

Drive E: | 1397.26 Gb Total Space | 1021.91 Gb Free Space | 73.14% Space Free | Partition Type: NTFS

Drive G: | 488.28 Gb Total Space | 446.21 Gb Free Space | 91.38% Space Free | Partition Type: NTFS

Drive H: | 61.29 Mb Total Space | 59.74 Mb Free Space | 97.47% Space Free | Partition Type: FAT

 

Computer Name: VULCAN | User Name: Union | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2014/05/02 14:48:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Union\Desktop\OTL.exe

PRC - [2011/12/07 11:19:13 | 000,021,320 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG Family Safety\BsecAMX.exe

PRC - [2011/12/07 11:19:02 | 000,066,376 | ---- | M] (Bsecure Technologies, Inc.) -- C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe

 

 

========== Modules (No Company Name) ==========

 

MOD - [2011/12/07 11:19:13 | 000,021,320 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG Family Safety\BsecAMX.exe

 

 

========== Services (SafeList) ==========

 

SRV:64bit: - [2014/03/06 04:29:14 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2012/04/26 04:50:18 | 000,237,056 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2011/02/17 01:47:28 | 000,682,040 | ---- | M] (Hewlett-Packard) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe -- (HPAuto)

SRV:64bit: - [2010/10/11 05:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)

SRV:64bit: - [2010/09/22 21:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV:64bit: - [2010/04/14 16:08:30 | 001,052,328 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\SysNative\lxeccoms.exe -- (lxec_device)

SRV:64bit: - [2010/04/14 16:08:23 | 000,045,736 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxecserv.exe -- (lxecCATSCustConnectService)

SRV - [2014/04/29 16:10:21 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2014/04/29 10:07:25 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2014/04/18 15:18:48 | 003,645,456 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)

SRV - [2014/03/27 22:10:20 | 000,291,912 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)

SRV - [2014/02/15 12:53:58 | 000,227,904 | ---- | M] (WildTangent) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService)

SRV - [2013/12/18 14:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2013/11/04 19:31:56 | 000,092,160 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)

SRV - [2013/10/10 17:47:40 | 000,558,480 | ---- | M] (Cisco Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe -- (vpnagent)

SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2012/03/28 23:47:48 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\SysWOW64\nlssrv32.exe -- (nlsX86cc)

SRV - [2011/12/07 11:19:02 | 000,066,376 | ---- | M] (Bsecure Technologies, Inc.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl.exe -- (Bsecure)

SRV - [2011/10/15 14:05:04 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2011/02/01 04:49:44 | 001,127,448 | ---- | M] (PDF Complete Inc) [Auto | Stopped] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)

SRV - [2010/11/26 10:09:12 | 000,399,344 | ---- | M] (Roxio) [Auto | Stopped] -- C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe -- (RoxioNow Service)

SRV - [2010/10/12 13:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)

SRV - [2010/07/05 08:37:08 | 000,011,776 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)

SRV - [2010/06/01 18:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)

SRV - [2010/05/23 01:39:05 | 000,126,904 | R--- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe -- (NIS)

SRV - [2010/04/14 16:08:23 | 000,045,736 | ---- | M] () [Auto | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe -- (lxecCATSCustConnectService)

SRV - [2010/04/14 16:08:12 | 000,598,696 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\SysWOW64\lxeccoms.exe -- (lxec_device)

SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)

SRV - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] (AMD) [Auto | Stopped] -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe -- (AMD_RAIDXpert)

SRV - [2009/07/22 12:58:18 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\SysWOW64\ASTSRV.EXE -- (astcc)

SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009/02/20 09:46:52 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)

 

 

========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2014/05/02 11:23:38 | 000,036,680 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon)

DRV:64bit: - [2014/04/27 14:49:14 | 000,050,464 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)

DRV:64bit: - [2014/04/18 15:01:30 | 000,237,336 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)

DRV:64bit: - [2014/03/31 16:20:54 | 000,274,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)

DRV:64bit: - [2014/03/31 16:06:26 | 000,130,840 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)

DRV:64bit: - [2014/03/27 22:14:26 | 000,192,792 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)

DRV:64bit: - [2014/03/27 22:14:24 | 000,153,368 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)

DRV:64bit: - [2014/03/27 22:07:10 | 000,236,824 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)

DRV:64bit: - [2014/03/27 22:05:02 | 000,324,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)

DRV:64bit: - [2014/03/27 22:03:16 | 000,032,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)

DRV:64bit: - [2013/10/10 17:31:36 | 000,052,080 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpnva64-6.sys -- (vpnva)

DRV:64bit: - [2013/10/10 17:29:28 | 000,112,496 | R--- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acsock64.sys -- (acsock)

DRV:64bit: - [2013/10/01 22:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2012/08/23 10:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012/08/23 10:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012/04/26 06:47:20 | 011,172,864 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2012/04/26 03:32:46 | 000,339,456 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2012/04/09 16:27:34 | 000,352,144 | ---- | M] (EldoS Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cbfs3.sys -- (cbfs3)

DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/11/28 22:28:28 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2011/06/14 17:17:24 | 000,022,832 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BSecACFltr.sys -- (BSecACFltr)

DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011/01/11 08:08:46 | 000,280,144 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)

DRV:64bit: - [2010/12/28 15:45:54 | 000,412,776 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/09/24 11:46:32 | 000,116,752 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2010/07/05 21:29:12 | 000,106,888 | ---- | M] (Windows ® Win 7 DDK provider) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan)

DRV:64bit: - [2010/03/10 11:33:52 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie)

DRV:64bit: - [2009/12/22 05:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:64bit: - [2009/11/02 10:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)

DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/06/10 16:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2009/06/10 16:35:38 | 000,707,072 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)

DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)

DRV - [2013/12/21 11:34:19 | 000,011,973 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\SECDRV.SYS -- (SecDrv)

DRV - [2011/06/14 17:17:24 | 000,021,624 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\BSecACFltr.sys -- (BSecACFltr)

DRV - [2011/03/04 04:00:00 | 001,791,096 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\ex64.sys -- (NAVEX15)

DRV - [2011/03/04 04:00:00 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110304.002\eng64.sys -- (NAVENG)

DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE:64bit: - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

IE:64bit: - HKLM\..\SearchScopes\{E1220177-581E-49F3-8F8A-B710C631AAE3}: "URL" = http://www.amazon.co...s={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\..\SearchScopes,DefaultScope = 

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7

IE - HKCU\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.co...w={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

========== FireFox ==========

 

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\10\NP_wtapp.dll ()

FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll ()

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Union\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Union\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Union\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011/10/15 12:15:11 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2014/04/29 16:10:14 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2014/04/29 16:10:18 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files (x86)\AVG\AVG2012\Thunderbird\

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2014/04/29 16:10:14 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2014/04/29 16:10:18 | 000,000,000 | ---D | M]

 

[2012/03/19 03:31:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Extensions

[2012/03/19 03:31:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Extensions\[email protected]

[2014/05/02 13:15:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Union\AppData\Roaming\Mozilla\Firefox\Profiles\6ofm14l9.default\extensions

[2014/05/02 13:17:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

[2011/10/17 22:14:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}

[2011/10/23 20:52:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

 

========== Chrome  ==========

 

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - homepage: 

CHR - plugin: Error reading preferences file

CHR - Extension: Google Wallet = C:\Users\Union\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

 

O1 HOSTS File: ([2014/05/02 20:22:45 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1       localhost

O2:64bit: - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)

O2 - BHO: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O3 - HKLM\..\Toolbar: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()

O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)

O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)

O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe (AimerSoft)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [AVG Family Safety] C:\Program Files (x86)\AVG\AVG Family Safety\BsecTray.exe (Bsecure Technologies, Inc.)

O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Cisco Systems, Inc.)

O4 - HKLM..\Run: [DropBoxUtility] C:\Program Files (x86)\DropBox\DropBox\DropBox.exe (DropShots)

O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)

O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc)

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)

O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)

O4 - HKCU..\Run: [googletalk] C:\Users\Union\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)

O4 - HKCU..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)

O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)

O4:64bit: - HKLM..\RunOnce: [NCPluginUpdater] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe (Hewlett-Packard)

O4 - Startup: C:\Users\Union\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Union\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 1

O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found

O8:64bit: - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

O9:64bit: - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000021 - C:\Program Files\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files (x86)\AVG\AVG Family Safety\InetCtrl67.dll (Bsecure Technologies, Inc.)

O1364bit: - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4F54A693-CF82-41C7-824A-5EF19095F5C9}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B270742B-D3AC-4234-B5A1-E76E6B2A34DA}: DhcpNameServer = 192.168.3.1

O18:64bit: - Protocol\Handler\belarc - No CLSID value found

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)

O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20 - HKLM Winlogon: UserInit - (userinit.exe) -  File not found

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O21:64bit: - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)

O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

O22:64bit: - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)

O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

O29:64bit: - HKLM SecurityProviders - (credssp.dll) -  File not found

O29 - HKLM SecurityProviders - (credssp.dll) -  File not found

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010/12/29 12:47:21 | 000,000,090 | ---- | M] () - E:\AUTORUN.INF -- [ NTFS ]

O32 - AutoRun File - [2011/05/31 15:41:00 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O34 - HKLM BootExecute: (/sync /restart)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2014/05/02 20:56:22 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2014/05/02 20:55:27 | 001,016,261 | ---- | C] (Thisisu) -- C:\Users\Union\Desktop\JRT.exe

[2014/05/02 20:52:53 | 000,000,000 | ---D | C] -- C:\Users\Union\Desktop\desktop sort

[2014/05/02 20:35:33 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll

[2014/05/02 20:35:03 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2014/05/02 20:22:41 | 000,000,000 | ---D | C] -- C:\_OTL

[2014/05/02 19:36:33 | 000,000,000 | -HSD | C] -- C:\found.000

[2014/05/02 18:42:25 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Union\Desktop\OTL.exe

[2014/05/02 12:45:34 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro

[2014/05/02 12:12:36 | 000,000,000 | ---D | C] -- C:\Users\Union\Desktop\RK_Quarantine

[2014/05/02 11:00:11 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine

[2014/05/02 02:46:47 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel

[2014/04/29 16:10:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird

[2014/04/28 18:48:54 | 000,000,000 | -HSD | C] -- C:\Users\Union\AppData\Local\EmieUserList

[2014/04/28 18:48:54 | 000,000,000 | -HSD | C] -- C:\Users\Union\AppData\Local\EmieSiteList

[2014/04/27 08:52:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2014/04/23 16:33:56 | 000,000,000 | -H-D | C] -- C:\Users\Union\Documents\My Media

[2014/04/23 16:33:56 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Roaming\OverDrive

[2014/04/23 16:33:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OverDrive Media Console

[2014/04/23 16:33:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OverDrive Media Console

[2014/04/18 16:32:50 | 000,000,000 | -H-D | C] -- C:\Users\Union\Documents\Aimersoft Video Converter Ultimate

[2014/04/18 16:32:34 | 000,000,000 | ---D | C] -- C:\Users\Union\AppData\Local\Aimersoft

[2014/04/18 16:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Aimersoft

[2014/04/18 16:31:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Aimersoft Video Converter Ultimate

[2014/04/18 16:31:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Aimersoft

[2014/04/18 16:30:09 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Aimersoft

[2014/04/18 15:01:30 | 000,237,336 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2014/05/03 10:38:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/05/03 10:38:35 | 530,493,439 | -HS- | M] () -- C:\hiberfil.sys

[2014/05/03 10:32:48 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/05/02 23:57:00 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3164183197-2720610983-350624195-1000UA.job

[2014/05/02 23:06:07 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/05/02 23:02:15 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/05/02 21:15:40 | 000,848,970 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2014/05/02 21:15:40 | 000,709,498 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2014/05/02 21:15:40 | 000,140,180 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2014/05/02 21:08:48 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014/05/02 21:08:48 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014/05/02 20:55:16 | 001,016,261 | ---- | M] (Thisisu) -- C:\Users\Union\Desktop\JRT.exe

[2014/05/02 20:34:25 | 001,310,621 | ---- | M] () -- C:\Users\Union\Desktop\AdwCleaner.exe

[2014/05/02 20:22:45 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts

[2014/05/02 18:44:19 | 000,984,576 | ---- | M] () -- C:\Users\Union\Desktop\MicrosoftFixit50906.msi

[2014/05/02 14:48:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Union\Desktop\OTL.exe

[2014/05/02 13:41:55 | 000,000,171 | ---- | M] () -- C:\Windows\wininit.ini

[2014/05/02 11:48:30 | 000,000,332 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForUnion.job

[2014/05/02 11:23:38 | 000,036,680 | ---- | M] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/05/02 10:43:26 | 000,000,861 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog

[2014/05/01 13:57:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3164183197-2720610983-350624195-1000Core.job

[2014/05/01 02:06:26 | 000,000,967 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/04/29 20:55:09 | 000,002,112 | ---- | M] () -- C:\Users\Union\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk

[2014/04/27 14:49:14 | 000,050,464 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys

[2014/04/24 11:51:05 | 000,569,157 | -H-- | M] () -- C:\Users\Union\Documents\District-Assembly-delegates.PDF

[2014/04/24 09:45:40 | 000,001,456 | ---- | M] () -- C:\Users\Union\AppData\Local\Adobe Save for Web 12.0 Prefs

[2014/04/23 16:33:39 | 000,002,525 | ---- | M] () -- C:\Users\Public\Desktop\OverDrive Media Console.lnk

[2014/04/23 01:04:34 | 000,001,051 | ---- | M] () -- C:\Users\Union\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

[2014/04/18 15:01:30 | 000,237,336 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys

[2014/04/12 21:21:01 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForVULCAN$.job

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2014/05/02 20:34:40 | 001,310,621 | ---- | C] () -- C:\Users\Union\Desktop\AdwCleaner.exe

[2014/05/02 18:44:32 | 000,984,576 | ---- | C] () -- C:\Users\Union\Desktop\MicrosoftFixit50906.msi

[2014/05/02 13:34:42 | 000,000,171 | ---- | C] () -- C:\Windows\wininit.ini

[2014/05/02 11:23:38 | 000,036,680 | ---- | C] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/05/02 10:43:25 | 000,000,861 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog

[2014/05/01 02:06:26 | 000,000,967 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/04/24 11:51:05 | 000,569,157 | -H-- | C] () -- C:\Users\Union\Documents\District-Assembly-delegates.PDF

[2014/04/23 16:33:39 | 000,002,525 | ---- | C] () -- C:\Users\Public\Desktop\OverDrive Media Console.lnk

[2014/02/23 19:18:45 | 000,021,624 | ---- | C] () -- C:\Windows\SysWow64\drivers\BSecACFltr.sys

[2012/06/09 23:17:50 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll

[2012/06/09 23:17:50 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll

[2012/06/09 23:17:50 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll

[2012/05/15 22:52:13 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll

[2012/05/15 22:52:13 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll

[2012/05/15 22:52:13 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll

[2012/05/15 22:52:12 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll

[2012/01/18 04:02:07 | 000,000,132 | ---- | C] () -- C:\Users\Union\AppData\Roaming\Adobe PNG Format CS5 Prefs

[2011/11/30 00:08:25 | 000,000,218 | ---- | C] () -- C:\Users\Union\.recently-used.xbel

[2011/11/29 23:25:13 | 000,038,367 | ---- | C] () -- C:\Users\Union\descend_chart.pdf

[2011/11/29 23:24:41 | 000,005,592 | ---- | C] () -- C:\Users\Union\descend_chart.odt

[2011/10/18 02:37:25 | 000,001,456 | ---- | C] () -- C:\Users\Union\AppData\Local\Adobe Save for Web 12.0 Prefs

 

========== ZeroAccess Check ==========

 

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 22:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 21:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 23:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 

========== LOP Check ==========

 

[2012/07/28 16:55:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Amazon

[2014/04/28 20:36:30 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Audacity

[2013/09/23 08:57:26 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\AVG2014

[2012/02/15 15:49:02 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Barnes & Noble

[2012/02/15 15:47:08 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Blio

[2011/10/18 11:12:13 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

[2012/09/03 22:34:17 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

[2014/05/03 10:35:21 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Dropbox

[2014/03/28 08:33:49 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\DropboxMaster

[2012/03/19 03:31:30 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Flickr

[2011/11/29 23:24:41 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\gramps

[2012/10/13 13:35:44 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\iFunbox_UserCache

[2014/03/17 15:19:29 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Leawo

[2011/11/01 13:01:17 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\MusE

[2012/06/14 01:49:26 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Namco

[2013/06/10 12:08:27 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\onOne Software

[2013/11/01 01:33:42 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Oracle

[2014/04/23 16:33:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\OverDrive

[2011/11/04 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PACE Anti-Piracy

[2012/09/04 00:20:48 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PDAppFlex

[2012/10/13 13:00:19 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\PhoneBrowse

[2011/11/04 21:25:58 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

[2011/10/15 01:22:37 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Thunderbird

[2012/12/11 07:38:00 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\TuneUp Software

[2014/02/18 22:34:23 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\Unity

[2012/06/14 01:47:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\WildTangent

[2011/11/05 11:55:59 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\WinBatch

[2011/10/15 15:06:56 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\YouSendIt

[2012/02/15 15:49:06 | 000,000,000 | ---D | M] -- C:\Users\Union\AppData\Roaming\ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1

 

========== Purity Check ==========

 

 

 

========== Alternate Data Streams ==========

 

@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences

 

< End of report >

[Machiavelli]

Hi,
 

Every time I've tried to paste in the text from the first TDSSKiller log we have, it won't post; I've even tried editing a previous post to add it in. Not sure why.

It needs time because it is a big file. But if it doesn't work and you waited some time please attach it here (Go to More Reply Options >> Under Attach Files click on Choose Files and then select the correct log).

Tell me if this worked.

Thanks, well done so far, kuratowa2.

Bye,
Machiavelli

[kuratowa2]

TDSSKiller txt file must be too big, so I'll try to attach — didn't know that was an option, sorry!

 

Thanks for all of your help, Machiavelli!

 

BTW, computer is currently up in Safe Mode with Networking and not crashing.  When it has reloaded in normal mode, it shuts down.  Weird.

Attached Files

•  TDSSKiller.3.0.0.34_02.05.2014_10.55.49_log.txt   612.49KB   208 downloads