Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Help with FBI windowlock encrypt ransomware $300 virus


  • Please log in to reply

#1
wharriss

wharriss

    Member

  • Member
  • PipPipPip
  • 105 posts

I am running windows 7 home premium      64bit HP Pavillionelite        AMD Phenom 2.9 GHz    8.00 GB RAM   Norton 360 antivirus  Mozilla Foxfire browser

 

I got the FBI virus either upon opening a website or trying to upgrade Adobe flash player as the offer to upgrade flash  happened at the same time exactly as I clicked on the website. I got this virus about 08:30 am Tuesday 2/10/15.

 

I have tried to remove the virus by making a Kaspersky rescue disk version 10 and running it doing the window unlock feature and the full scan which took nearly 8 hours. (I have 160 GB on a 918 GB harddrive 750 GB free) The Kaspersky scan did not show any threats in the report, but it got me to where I could boot normally to my desktop.

 

I had a paid subscription to MBAM on my desktop which I ran. MBAM did not show any threats.

I also had a free copy of Hitman pro which I ran and it did not show any problems either.

I ran rkill which found no threats

I ran ADW cleaner

I ran bitdefender online scan which found no threat

I ran eset online scanner which showed no threats.

 

I don't know what bad files are still on the computer, but the virus still has some control of my firefox browser, not letting me set and keep my homepage. I noticed that it moved the virus programs rkill.txt and roguekiller.exe from my download folder to my download folder.

 

I ran the Kaspersky rescue again today and also MBAM and Hitman Pro. Nothing was found. I use this computer for banking, stock trades. I have not been into any of these sites since the virus. Afraid they might get passwords, etc. My passwords are stored in Norton Vault.

 

I am able to use the computer, but I know it is not completely clean and I would greatly appreciate help in cleaning everything if possible.

 

Thank you

 

OTL logfile created on: 2/12/2015 6:38:12 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Rich\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16736)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
7.99 Gb Total Physical Memory | 5.18 Gb Available Physical Memory | 64.85% Memory free
15.98 Gb Paging File | 12.77 Gb Available in Paging File | 79.91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 918.55 Gb Total Space | 758.56 Gb Free Space | 82.58% Space Free | Partition Type: NTFS
Drive D: | 12.67 Gb Total Space | 0.71 Gb Free Space | 5.58% Space Free | Partition Type: NTFS
 
Computer Name: PAVILIONELITE | User Name: Rich | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2015/02/12 18:36:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Rich\Desktop\OTL.exe
PRC - [2015/01/27 09:26:56 | 000,338,032 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014/12/19 08:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014/11/21 13:20:52 | 000,043,816 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
PRC - [2014/11/21 13:20:38 | 000,043,816 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
PRC - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014/11/21 06:12:46 | 007,229,752 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014/10/31 16:41:18 | 002,066,432 | ---- | M] (iSkySoft) -- C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
PRC - [2014/10/11 13:05:40 | 000,060,712 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
PRC - [2014/09/21 05:17:47 | 000,265,040 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\n360.exe
PRC - [2014/02/20 21:40:42 | 001,994,752 | ---- | M] (Wondershare) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
PRC - [2013/11/08 15:14:26 | 000,250,712 | ---- | M] (Garmin Ltd or its subsidiaries) -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
PRC - [2013/06/28 16:48:04 | 000,014,624 | ---- | M] (Intuit Inc.) -- C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2013/03/17 09:47:01 | 000,132,504 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe
PRC - [2012/12/06 09:09:54 | 007,375,360 | ---- | M] () -- C:\Program Files (x86)\Content Manager\CmTray.exe
PRC - [2012/12/04 20:40:03 | 000,143,928 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccsvchst.exe
PRC - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2012/05/19 08:01:32 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2011/11/07 14:37:20 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe
PRC - [2011/05/06 13:07:18 | 000,460,144 | ---- | M] () -- C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
PRC - [2011/05/06 12:58:52 | 001,085,440 | ---- | M] () -- C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe
PRC - [2011/02/25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2010/06/12 21:06:08 | 000,400,368 | ---- | M] (CinemaNow, Inc.) -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
PRC - [2010/01/18 13:21:08 | 000,568,888 | ---- | M] () -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
PRC - [2009/12/15 20:41:00 | 000,139,264 | ---- | M] () -- C:\Windows\SysWOW64\WinMsgBalloonClient.exe
PRC - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] (AMD) -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
PRC - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] () -- C:\Windows\SysWOW64\WinMsgBalloonServer.exe
PRC - [2009/12/15 20:40:00 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
PRC - [2009/10/14 18:53:20 | 000,635,416 | ---- | M] (PDF Complete Inc) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe
PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/11/20 13:47:28 | 000,062,768 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2015/01/27 09:26:55 | 003,925,104 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2014/10/31 16:40:40 | 001,498,112 | ---- | M] () -- C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll
MOD - [2014/10/11 13:05:58 | 001,044,776 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2014/05/19 17:19:02 | 000,137,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll
MOD - [2014/02/15 11:48:22 | 000,295,936 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
MOD - [2014/01/20 13:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013/07/24 09:24:52 | 000,137,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
MOD - [2012/12/06 09:09:54 | 007,375,360 | ---- | M] () -- C:\Program Files (x86)\Content Manager\CmTray.exe
MOD - [2012/01/06 13:53:38 | 002,556,416 | ---- | M] () -- C:\Program Files (x86)\Content Manager\QtCore4.dll
MOD - [2011/09/02 00:48:50 | 000,478,720 | ---- | M] () -- C:\Program Files (x86)\Content Manager\Plugins\sqldrivers\qsqlite4.dll
MOD - [2011/09/01 21:23:34 | 009,933,824 | ---- | M] () -- C:\Program Files (x86)\Content Manager\QtGui4.dll
MOD - [2011/09/01 20:53:42 | 000,271,872 | ---- | M] () -- C:\Program Files (x86)\Content Manager\QtSql4.dll
MOD - [2011/09/01 20:53:06 | 001,215,488 | ---- | M] () -- C:\Program Files (x86)\Content Manager\QtNetwork4.dll
MOD - [2011/09/01 20:49:28 | 000,399,360 | ---- | M] () -- C:\Program Files (x86)\Content Manager\QtXml4.dll
MOD - [2011/03/04 12:02:54 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
MOD - [2011/03/04 12:02:52 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2011/03/04 12:02:50 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
MOD - [2010/01/18 13:21:08 | 000,568,888 | ---- | M] () -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
MOD - [2009/06/23 01:42:42 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\Content Manager\libgcc_s_dw2-1.dll
MOD - [2009/01/10 17:32:40 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\Content Manager\mingwm10.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2015/02/10 09:43:36 | 000,127,752 | ---- | M] (SurfRight B.V.) [Auto | Running] -- C:\Program Files\HitmanPro\hmpsched.exe -- (HitmanProScheduler)
SRV:64bit: - [2014/08/12 16:56:32 | 000,172,344 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:64bit: - [2013/05/27 00:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010/05/17 08:03:54 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2015/02/04 15:00:14 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/01/27 09:26:55 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/12/19 08:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/09/21 05:17:47 | 000,265,040 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe -- (N360)
SRV - [2014/04/11 23:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2014/03/20 17:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013/11/08 15:14:26 | 000,250,712 | ---- | M] (Garmin Ltd or its subsidiaries) [Auto | Running] -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe -- (Garmin Core Update Service)
SRV - [2013/11/04 18:31:56 | 000,092,160 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
SRV - [2013/06/28 16:48:04 | 000,014,624 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe -- (IntuitUpdateServiceV4)
SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2013/03/17 09:47:01 | 000,132,504 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe -- (Norton PC Checkup Application Launcher)
SRV - [2012/12/04 20:40:03 | 000,143,928 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe -- (MCLIENT)
SRV - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011/11/07 14:37:20 | 000,126,392 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe -- (PCCUJobMgr)
SRV - [2011/05/06 13:07:18 | 000,460,144 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe -- (FlipShare Service)
SRV - [2011/05/06 12:58:52 | 001,085,440 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe -- (FlipShareServer)
SRV - [2011/02/28 17:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010/10/22 13:08:18 | 001,039,360 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\Hp\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2010/06/12 21:06:08 | 000,400,368 | ---- | M] (CinemaNow, Inc.) [Auto | Running] -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe -- (CinemaNow Service)
SRV - [2010/06/01 18:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)
SRV - [2010/04/03 18:01:24 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2010/02/24 16:42:56 | 000,386,424 | ---- | M] (SupportSoft, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\supportsoft\bin\ssrc.exe -- (SupportSoft RemoteAssist)
SRV - [2009/12/15 20:40:00 | 000,122,880 | ---- | M] (AMD) [Auto | Running] -- C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe -- (AMD_RAIDXpert)
SRV - [2009/10/14 18:53:20 | 000,635,416 | ---- | M] (PDF Complete Inc) [Auto | Running] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2015/02/12 18:02:09 | 000,129,752 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:64bit: - [2015/02/11 18:12:45 | 000,035,064 | ---- | M] () [Kernel | On_Demand | Unknown] -- C:\Windows\SysNative\drivers\TrueSight.sys -- (TrueSight)
DRV:64bit: - [2014/11/21 06:14:22 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:64bit: - [2014/11/21 06:14:08 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2014/08/25 21:20:22 | 000,876,248 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2014/08/25 21:20:22 | 000,037,592 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2014/08/06 14:48:16 | 000,266,968 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\ironx64.sys -- (SymIRON)
DRV:64bit: - [2014/03/03 23:18:12 | 001,148,120 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\symefa64.sys -- (SymEFA)
DRV:64bit: - [2014/02/17 20:32:41 | 000,593,112 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\symnets.sys -- (SymNetS)
DRV:64bit: - [2013/11/12 20:48:19 | 000,177,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2013/09/25 21:50:25 | 000,162,392 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\ccsetx64.sys -- (ccSet_N360)
DRV:64bit: - [2013/09/09 21:47:43 | 000,078,936 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SymIMV.sys -- (SymIM)
DRV:64bit: - [2013/09/09 21:47:26 | 000,493,656 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\symds64.sys -- (SymDS)
DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2012/10/03 20:19:14 | 000,168,096 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\MCLIENTx64\0302020.00C\ccsetx64.sys -- (ccSet_MCLIENT)
DRV:64bit: - [2012/07/26 00:32:22 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/07/22 11:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV:64bit: - [2011/07/12 16:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 05:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010/05/17 08:35:30 | 006,853,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2010/05/17 07:30:28 | 000,263,680 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010/04/07 18:12:02 | 000,124,944 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2010/03/10 10:33:52 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie)
DRV:64bit: - [2010/03/04 09:43:00 | 000,346,144 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/03/02 19:45:24 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009/10/06 17:49:14 | 000,230,456 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 19:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/07/13 19:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/07/13 19:06:43 | 000,060,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\61883.sys -- (61883)
DRV:64bit: - [2009/07/13 19:06:43 | 000,048,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avc.sys -- (Avc)
DRV:64bit: - [2009/07/13 19:06:42 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msdv.sys -- (MSDV)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:64bit: - [2003/09/23 09:42:34 | 000,007,296 | ---- | M] (GARMIN Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\grmnusb.sys -- (grmnusb)
DRV - [2015/02/05 21:51:13 | 000,669,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSviA64.sys -- (IDSVia64)
DRV - [2015/02/02 21:53:32 | 001,622,744 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2015/01/27 22:32:14 | 002,137,304 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\ex64.sys -- (NAVEX15)
DRV - [2015/01/27 22:32:14 | 000,129,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\eng64.sys -- (NAVENG)
DRV - [2014/12/11 09:13:53 | 000,487,216 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2014/12/11 09:13:53 | 000,142,640 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5}: "URL" = http://en.wikipedia....h={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE:64bit: - HKLM\..\SearchScopes\{6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE}: "URL" = http://search.yahoo....psg&type=HPDTDF
IE:64bit: - HKLM\..\SearchScopes\{7B7852DA-35F5-4A59-BF84-F2A65817A8CE}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{E7190224-F19B-4F52-A26D-F7259C9C0A65}: "URL" = http://www.ask.com/w...}&l=dis&o=ushpd
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\..\SearchScopes\{6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE}: "URL" = http://search.yahoo....psg&type=HPDTDF
IE - HKLM\..\SearchScopes\{7B7852DA-35F5-4A59-BF84-F2A65817A8CE}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{E7190224-F19B-4F52-A26D-F7259C9C0A65}: "URL" = http://www.ask.com/w...}&l=dis&o=ushpd
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://finance.yahoo.com/
IE - HKCU\..\SearchScopes,DefaultScope = {7B7852DA-35F5-4A59-BF84-F2A65817A8CE}
IE - HKCU\..\SearchScopes\{15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKCU\..\SearchScopes\{6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE}: "URL" = http://search.yahoo....psg&type=HPDTDF
IE - HKCU\..\SearchScopes\{7B7852DA-35F5-4A59-BF84-F2A65817A8CE}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://nortonsafe.se...t=kwd&qsrc=2869
IE - HKCU\..\SearchScopes\{E7190224-F19B-4F52-A26D-F7259C9C0A65}: "URL" = http://www.ask.com/w...}&l=dis&o=ushpd
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Norton Safe Search"
FF - prefs.js..browser.search.hiddenOneOffs: "Amazon,DuckDuckGo,eBay,Twitter,Wikipedia (en)"
FF - prefs.js..browser.search.highlightCount: 0
FF - prefs.js..browser.search.isUS: true
FF - prefs.js..browser.startup.homepage: "about:sessionrestore|http://nortonsafe.se...nce.yahoo.com/"
FF - prefs.js..extensions.enabledAddons: %7B195A3098-0BD5-4e90-AE22-BA1C540AFD1E%7D:4.1.0
FF - prefs.js..extensions.enabledAddons: %7Bab91efd4-6975-4081-8552-1b3922ed79e2%7D:1.0.28.1
FF - prefs.js..extensions.enabledAddons: antmark%40ant.com:1.1.5
FF - prefs.js..extensions.enabledAddons: foxmarks%40kei.com:4.3.6
FF - prefs.js..extensions.enabledAddons: anttoolbar%40ant.com:2.4.7.27
FF - prefs.js..extensions.enabledAddons: %7B2D3F3651-74B9-4795-BDEC-6DA2F431CB62%7D:2014.7.10.16
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0.1
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Rich\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll ()
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/09/03 14:55:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/12/30 20:47:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ [2015/02/12 17:57:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\ProgramData\iSkysoft\Video Converter Ultimate\[email protected]\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2015/01/27 09:26:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2015/01/27 09:26:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2015/01/14 01:37:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/12/30 20:47:42 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2015/01/27 09:26:53 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2015/01/27 09:26:54 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 31.4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2015/01/14 01:37:50 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 31.4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
 
[2011/01/25 11:40:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rich\AppData\Roaming\Mozilla\Extensions
[2015/02/12 18:22:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions
[2013/11/21 17:41:58 | 000,000,000 | ---D | M] (Garmin Communicator) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2013/09/04 07:28:40 | 000,000,000 | ---D | M] (Webroot) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\{8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}_deleted
[2013/10/15 12:29:52 | 000,000,000 | ---D | M] (HP Detect) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}
[2015/01/16 10:43:04 | 000,000,000 | ---D | M] (Ant Video Downloader) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\[email protected]
[2014/11/30 22:10:31 | 000,000,000 | ---D | M] ("Xmarks") -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\[email protected]
[2014/11/23 08:40:42 | 000,152,927 | ---- | M] () (No name found) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\[email protected]
[2015/02/12 18:22:43 | 000,736,879 | ---- | M] () (No name found) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi
[2015/01/14 15:50:57 | 000,985,112 | ---- | M] () (No name found) -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012/01/26 22:53:35 | 000,002,281 | ---- | M] () -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\searchplugins\s-amazon.xml
[2013/11/13 19:29:13 | 000,002,531 | ---- | M] () -- C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\searchplugins\safesearch.xml
[2015/01/27 09:26:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/01/27 09:26:56 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/02/12 17:57:58 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\COFFPLGN
[2012/05/19 08:01:34 | 000,129,144 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
 
========== Chrome  ==========
 
CHR - Extension: No name found = C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: No name found = C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: No name found = C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: No name found = C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: No name found = C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: No name found = C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.2.1.36_0\
CHR - Extension: No name found = C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2013/01/27 12:45:04 | 000,445,399 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1    www.007guard.com
O1 - Hosts: 127.0.0.1    007guard.com
O1 - Hosts: 127.0.0.1    008i.com
O1 - Hosts: 127.0.0.1    www.008k.com
O1 - Hosts: 127.0.0.1    008k.com
O1 - Hosts: 127.0.0.1    www.00hq.com
O1 - Hosts: 127.0.0.1    00hq.com
O1 - Hosts: 127.0.0.1    010402.com
O1 - Hosts: 127.0.0.1    www.032439.com
O1 - Hosts: 127.0.0.1    032439.com
O1 - Hosts: 127.0.0.1    www.0scan.com
O1 - Hosts: 127.0.0.1    0scan.com
O1 - Hosts: 127.0.0.1    www.1000gratisproben.com
O1 - Hosts: 127.0.0.1    1000gratisproben.com
O1 - Hosts: 127.0.0.1    1001namen.com
O1 - Hosts: 127.0.0.1    www.1001namen.com
O1 - Hosts: 127.0.0.1    100888290cs.com
O1 - Hosts: 127.0.0.1    www.100888290cs.com
O1 - Hosts: 127.0.0.1    www.100sexlinks.com
O1 - Hosts: 127.0.0.1    100sexlinks.com
O1 - Hosts: 127.0.0.1    www.10sek.com
O1 - Hosts: 127.0.0.1    10sek.com
O1 - Hosts: 127.0.0.1    www.1-2005-search.com
O1 - Hosts: 127.0.0.1    1-2005-search.com
O1 - Hosts: 127.0.0.1    www.123fporn.info
O1 - Hosts: 15295 more lines...
O2:64bit: - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coieplg.dll (Symantec Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Ant.com browser helper (video detector)) - {346FDE31-DFF9-418A-90C8-BA31DC9FF2EF} - C:\Program Files (x86)\Ant.com\IE add-on\Download.dll (Ant.com)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Ant.com Video Downloader toolbar) - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:\Program Files (x86)\Ant.com\IE add-on\AntToolbar.dll (Ant.com)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ant.com Video Downloader toolbar) - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:\Program Files (x86)\Ant.com\IE add-on\AntToolbar.dll (Ant.com)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [DelaypluginInstall] C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe File not found
O4 - HKLM..\Run: [iSkysoft Helper Compact.exe] C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe (iSkySoft)
O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKCU..\Run: [CmTray] C:\Program Files (x86)\Content Manager\launchCM.exe ()
O4 - HKCU..\Run: [GarminExpressTrayApp] C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe (Garmin Ltd or its subsidiaries)
O4 - HKCU..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware)
O4:64bit: - HKLM..\RunOnce: [NCPluginUpdater] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe (Hewlett-Packard)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9:64bit: - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: Download videos by Ant.com - {70AF6C9F-0818-4cf7-924A-BBDBB24211D3} - C:\Program Files (x86)\Ant.com\IE add-on\Download.dll (Ant.com)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} http://quickscan.bit...m/qsax/qsax.cab (Bitdefender QuickScan Control)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab (OnlineScanner Control)
O16 - DPF: {C6B95BE9-4373-4BF8-9D18-9FCEAE5563F0} https://col0-sec.mai...spx?n=895340653 (Mail Migration)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CC5363D6-EB73-421B-8FA1-964D42B88A3B}: DhcpNameServer = 209.18.47.61 209.18.47.62 192.168.1.1
O18:64bit: - Protocol\Handler\WSISVCUchrome - No CLSID value found
O18 - Protocol\Handler\WSISVCUchrome - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{e48b86ee-3933-11e2-9b19-643150227862}\Shell - "" = AutoRun
O33 - MountPoints2\{e48b86ee-3933-11e2-9b19-643150227862}\Shell\AutoRun\command - "" = "J:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2015/02/12 18:34:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Rich\Desktop\OTL.exe
[2015/02/11 23:30:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2015/02/11 22:16:18 | 000,000,000 | ---D | C] -- C:\Users\Rich\AppData\Roaming\QuickScan
[2015/02/11 19:39:02 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2015/02/11 18:12:43 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2015/02/10 22:25:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Recovery
[2015/02/10 14:48:59 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
[2015/02/10 12:52:34 | 000,000,000 | ---D | C] -- C:\ProgramData\SMR430
[2015/01/27 09:26:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/01/20 12:24:05 | 000,000,000 | ---D | C] -- C:\Users\Rich\AppData\Local\Citrix
[2015/01/14 01:37:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2013/09/04 07:28:33 | 009,842,040 | ---- | C] (Webroot Software, Inc.) -- C:\Program Files (x86)\Common Files\wruninstall.exe
[1 C:\Users\Rich\Documents\*.tmp files -> C:\Users\Rich\Documents\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2015/02/12 18:36:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Rich\Desktop\OTL.exe
[2015/02/12 18:17:45 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/02/12 18:06:03 | 000,018,736 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/02/12 18:06:03 | 000,018,736 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/02/12 18:02:09 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/02/12 18:00:01 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/02/12 17:58:21 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/02/12 17:57:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/02/12 17:57:20 | 2141,106,175 | -HS- | M] () -- C:\hiberfil.sys
[2015/02/12 01:44:06 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForRich.job
[2015/02/11 18:12:45 | 000,035,064 | ---- | M] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/02/11 18:11:26 | 015,431,256 | ---- | M] () -- C:\Users\Rich\Desktop\RogueKiller.exe
[2015/02/11 10:59:45 | 000,000,072 | ---- | M] () -- C:\Users\Rich\AppData\Local\.directory
[2015/02/10 19:27:46 | 000,285,088 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015/02/10 12:09:49 | 000,002,046 | ---- | M] () -- C:\Users\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2015/02/01 15:15:27 | 000,783,464 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/02/01 15:15:27 | 000,662,852 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/02/01 15:15:27 | 000,122,462 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/01/26 03:04:29 | 000,775,586 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2015/01/24 13:14:41 | 000,028,672 | ---- | M] () -- C:\Users\Rich\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/01/20 12:50:35 | 000,000,408 | ---- | M] () -- C:\Users\Rich\Documents\emailDocument.rtf
[2015/01/14 09:46:51 | 000,002,112 | ---- | M] () -- C:\Users\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk
[1 C:\Users\Rich\Documents\*.tmp files -> C:\Users\Rich\Documents\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2015/02/11 18:12:45 | 000,035,064 | ---- | C] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/02/11 18:08:40 | 015,431,256 | ---- | C] () -- C:\Users\Rich\Desktop\RogueKiller.exe
[2015/02/11 10:59:45 | 000,000,072 | ---- | C] () -- C:\Users\Rich\AppData\Local\.directory
[2015/01/20 12:50:35 | 000,000,408 | ---- | C] () -- C:\Users\Rich\Documents\emailDocument.rtf
[2014/12/29 00:11:40 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2014/12/29 00:11:40 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2014/12/29 00:11:33 | 000,557,056 | ---- | C] ( ) -- C:\Windows\SysWow64\raac.dll
[2014/12/29 00:11:33 | 000,548,919 | ---- | C] ( ) -- C:\Windows\SysWow64\colorcvt.dll
[2014/12/29 00:11:33 | 000,286,720 | ---- | C] ( ) -- C:\Windows\SysWow64\drvc.dll
[2014/12/29 00:11:33 | 000,180,224 | ---- | C] ( ) -- C:\Windows\SysWow64\drv2.dll
[2014/12/29 00:11:33 | 000,139,264 | ---- | C] ( ) -- C:\Windows\SysWow64\sipr.dll
[2014/12/29 00:11:33 | 000,090,112 | ---- | C] ( ) -- C:\Windows\SysWow64\atrc.dll
[2014/12/29 00:11:33 | 000,065,602 | ---- | C] ( ) -- C:\Windows\SysWow64\cook.dll
[2014/12/29 00:11:33 | 000,057,344 | ---- | C] ( ) -- C:\Windows\SysWow64\rv20.dll
[2014/12/29 00:11:33 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\rv30.dll
[2014/12/29 00:11:33 | 000,049,152 | ---- | C] ( ) -- C:\Windows\SysWow64\rv40.dll
[2014/12/27 18:25:21 | 000,721,263 | ---- | C] () -- C:\Windows\SysWow64\ISCM64.dll
[2014/12/11 22:32:21 | 000,007,609 | ---- | C] () -- C:\Users\Rich\AppData\Local\Resmon.ResmonCfg
[2013/04/02 09:37:28 | 000,001,843 | ---- | C] () -- C:\Windows\hpwmdl23.dat.temp
[2012/03/12 21:55:30 | 000,000,935 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
[2012/03/03 21:18:57 | 000,028,672 | ---- | C] () -- C:\Users\Rich\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2013/01/05 19:11:32 | 000,572,694 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-4215829332-950673753-2765580295-1001\$R9RTWN3.201_x32\CCE\database\vendor.n
[2013/01/05 19:30:49 | 000,000,002 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-4215829332-950673753-2765580295-1001\$RH1SY7E\Data\CCE\database\submit.n
[2013/01/05 19:30:49 | 000,570,794 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-4215829332-950673753-2765580295-1001\$RH1SY7E\database\vendor.n
[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/06/24 21:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 20:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2014/12/30 01:45:42 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\Anvsoft
[2012/04/24 20:10:18 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\ContentMgr_backup
[2014/12/29 12:29:08 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\Digiarty
[2014/07/03 21:29:39 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\EuroTalk
[2012/03/03 21:18:30 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\Flip Video
[2013/08/26 07:48:20 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\Garmin
[2014/12/30 01:17:14 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\ImgBurn
[2012/09/18 09:28:42 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\PCCUStubInstaller
[2015/02/11 22:16:22 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\QuickScan
[2014/11/23 08:37:44 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\SoftGrid Client
[2012/12/06 09:19:08 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\SupportSoft
[2013/01/03 14:00:46 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\Thunderbird
[2011/03/07 16:21:42 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\TP
[2011/01/26 15:49:27 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\WinBatch
[2011/08/29 18:30:22 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\Windows Live Writer
[2014/12/27 18:26:05 | 000,000,000 | ---D | M] -- C:\Users\Rich\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
 
========== Purity Check ==========
 
 
 
========== Files - Unicode (All) ==========
[2015/02/11 22:37:09 | 000,000,215 | ---- | M] ()(C:\Users\Rich\Desktop\Nasdaq?.URL) -- C:\Users\Rich\Desktop\Nasdaq.URL
[2015/02/11 22:37:09 | 000,000,215 | ---- | C] ()(C:\Users\Rich\Desktop\Nasdaq?.URL) -- C:\Users\Rich\Desktop\Nasdaq.URL
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:FB1B13D8

< End of report >
 

 

 

 

 


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,031 posts
  • MVP
Disable Spybot's TeaTimer to make sure it won't interfere with fixes. You can re-enable it when you're clean again:
 
    * Run Spybot-S&D in Advanced Mode
    * If it is not already set to do this, go to the Mode menu
      select
      Advanced Mode
    * On the left hand side, click on Tools
    * Then click on the Resident icon in the list
    * Uncheck
      Resident TeaTimer
      and OK any prompts.
    * Restart your computer
 

 
Please download Farbar Recovery Scan Tool and save it to your Desktop. 
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. 
 
  •  
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer. 
  • Press Scan button. 
  • It will produce a log called FRST.txt in the same directory the tool is run from.  
  • Please copy and paste log back here. 
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply. 
  •  
     

    ComboFix
     
    :!: It must be saved to your desktop, do not run it from your browser:!:
     
    :!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well.  See: http://www.bleepingc...opic114351.html
     
    :!: Turn off your screen saver so you can see what is going on
     
    Download and Save this file --  to your Desktop -- from either of these two sources:
     
    Rightclick on ComboFix and select Run As Administrator to start the program.  
     
     
     
        * :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.
        
        
        * A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix.  
     
    Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.
    You should get a log when it finishes.  If not this may mean you have the new version of Zero Access malware so run Combofix a second time.
    If you still don't get a log search for Combofix.txt.  It is usually at => C:\Combofix\Combofix.txt. I'll need to see that in your reply.
    If you get an error about a registry value when you try to run a program, then just reboot to clear it.
     
    Download TDSSKiller:
    Save it to your desktop then run it by right clicking and Run As Admin.
     
     
    If TDSSKiller alerts you that the system needs to reboot, please consent.
     
    Run TDSSKiller again but this time:
    before you hit the Scan  hit  Change Parameters and check the two items under Additional Options. OK then Scan.
    In this mode it is prone to false positives so do not change the SKIP option to DELETE unless it says TDSS.
    When done, a log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.
     
     

    • 0

    #3
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    I downloaded latest Spybot and ran. It did not have a "tools" icon and I didn't find a choice to stop teatimer. I'm not sure this version has teatimer. Spybot found about 30 items to clean, but I don't know how threatening they were.

     

    I downloaded Farber Recovery Scan Tool. My Norton antivirus scanned the file and deleted it saying it wasn't safe. I turned off Norton, downloaded and ran the scan. Here are the two txt files

     

    1st file

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
    Ran by Rich (administrator) on PAVILIONELITE on 12-02-2015 22:17:36
    Running from C:\Users\Rich\Desktop
    Loaded Profiles: Rich (Available profiles: Rich & norton & Guest)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 10 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AMD) C:\Windows\System32\atiesrxx.exe
    (SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    (AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
    () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (CinemaNow, Inc.) C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
    () C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
    () C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe
    (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccsvchst.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\n360.exe
    (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe
    (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
    (Microsoft Corporation) C:\Windows\System32\alg.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccsvchst.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\n360.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
    () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
    (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
    (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
    (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
    (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
    (iSkySoft) C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
    (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    () C:\Program Files (x86)\Content Manager\CmTray.exe
    (Microsoft Corporation) C:\Windows\System32\wisptis.exe
    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
    (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqste08.exe
    (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqbam08.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqgpc01.exe
    () C:\Windows\SysWOW64\WinMsgBalloonServer.exe
    () C:\Windows\SysWOW64\WinMsgBalloonClient.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
    (Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
    (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
    HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [568888 2010-01-18] ()
    HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [563736 2009-10-14] (PDF Complete Inc)
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-17] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1994752 2014-02-20] (Wondershare)
    HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296056 2012-05-19] (RealNetworks, Inc.)
    HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2066432 2014-10-31] (iSkySoft)
    HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe
    HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
    HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2015-02-03] (Hewlett-Packard)
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2741616 2011-03-04] (Hewlett-Packard Company)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7780120 2015-01-28] (SUPERAntiSpyware)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1095000 2013-11-08] (Garmin Ltd or its subsidiaries)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [CmTray] => C:\Program Files (x86)\Content Manager\launchCM.exe [94208 2011-12-28] ()
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-11-21] (Apple Inc.)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\MountPoints2: {e48b86ee-3933-11e2-9b19-643150227862} - "J:\WD SmartWare.exe" autoplay=true
    HKU\S-1-5-18\...\Run: [Norton Download Manager{N360P203122-SHPD-FSD33017}] => C:\Program Files (x86)\Norton One\Engine\3.2.0.19\ccSvcHst.exe /m
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
    ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
    ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
    ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
    ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
    BootExecute: autocheck autochk * sdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://finance.yahoo.com/
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM -> {15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5} URL = http://en.wikipedia....h={searchTerms}
    SearchScopes: HKLM -> {6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE} URL = http://search.yahoo....psg&type=HPDTDF
    SearchScopes: HKLM -> {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKLM -> {E7190224-F19B-4F52-A26D-F7259C9C0A65} URL = http://www.ask.com/w...}&l=dis&o=ushpd
    SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> {15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5} URL = http://en.wikipedia....h={searchTerms}
    SearchScopes: HKLM-x32 -> {6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE} URL = http://search.yahoo....psg&type=HPDTDF
    SearchScopes: HKLM-x32 -> {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKLM-x32 -> {E7190224-F19B-4F52-A26D-F7259C9C0A65} URL = http://www.ask.com/w...}&l=dis&o=ushpd
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> DefaultScope {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5} URL = http://en.wikipedia....h={searchTerms}
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE} URL = http://search.yahoo....psg&type=HPDTDF
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.se...t=kwd&qsrc=2869
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {E7190224-F19B-4F52-A26D-F7259C9C0A65} URL = http://www.ask.com/w...}&l=dis&o=ushpd
    BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
    BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
    BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
    BHO-x32: Ant.com browser helper (video detector) -> {346FDE31-DFF9-418A-90C8-BA31DC9FF2EF} -> C:\Program Files (x86)\Ant.com\IE add-on\Download.dll (Ant.com)
    BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
    BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
    BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
    Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
    Toolbar: HKLM-x32 - Ant.com Video Downloader toolbar - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:\Program Files (x86)\Ant.com\IE add-on\AntToolbar.dll (Ant.com)
    Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    Toolbar: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    Toolbar: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    Toolbar: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> No Name - {2E924F4F-67F0-4BD8-9560-49F468E843D2} -  No File
    DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} http://quickscan.bit...m/qsax/qsax.cab
    DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
    DPF: HKLM-x32 {C6B95BE9-4373-4BF8-9D18-9FCEAE5563F0} https://col0-sec.mai...spx?n=895340653
    Handler: WSISVCUchrome - No CLSID Value
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62 192.168.1.1

    FireFox:
    ========
    FF ProfilePath: C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default
    FF DefaultSearchEngine: Norton Safe Search
    FF Homepage: about:sessionrestore|hxxp://nortonsafe.search.ask.com/web?q=roguekiller&o=apn10505&prt=360&chn=retail&geo=us&ver=21&locale=en_us&tpr=111&gct=sb&qsrc=2869|hxxp://www.bleepingcomputer.com/download/roguekiller/dl/121/|hxxp://nortonsafe.search.ask.com/web?q=finance.yahoo.com&o=apn10505&prt=360&chn=retail&geo=us&ver=21&locale=en_us&tpr=111&gct=sb&qsrc=2869|hxxp://nortonsafe.search.ask.com/web?q=finance.yahoo.com&o=apn10505&prt=360&chn=retail&geo=us&ver=21&locale=en_us&tpr=111&gct=sb&qsrc=2869|hxxp://finance.yahoo.com/
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
    FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-4215829332-950673753-2765580295-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Rich\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
    FF Plugin HKU\S-1-5-21-4215829332-950673753-2765580295-1001: @hulu.com/Hulu Desktop -> C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll (Hulu LLC)
    FF user.js: detected! => C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\user.js
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
    FF SearchPlugin: C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\searchplugins\s-amazon.xml
    FF SearchPlugin: C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\searchplugins\safesearch.xml
    FF Extension: Ant Video Downloader - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\[email protected] [2015-01-16]
    FF Extension: Xmarks - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\[email protected] [2014-11-30]
    FF Extension: Garmin Communicator - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-21]
    FF Extension: Webroot - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}_deleted [2013-09-04]
    FF Extension: HP Detect - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2013-10-15]
    FF Extension: Antmark extensions - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\[email protected] [2014-05-13]
    FF Extension: Flagfox - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-03-08]
    FF Extension: Adblock Plus - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-01-24]
    FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
    FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-19]
    FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-12-30]
    FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn
    FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2015-02-12]
    FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\ProgramData\iSkysoft\Video Converter Ultimate\[email protected]
    FF HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

    Chrome:
    =======
    CHR Profile: C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Docs) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-01-23]
    CHR Extension: (Google Drive) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-01-23]
    CHR Extension: (YouTube) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-23]
    CHR Extension: (Google Search) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-23]
    CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-01-23]
    CHR Extension: (Norton Identity Protection) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2013-01-23]
    CHR Extension: (Gmail) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-23]
    CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
    CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]
    CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [Not Found]
    CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
    CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-05-19]
    CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-08-12] (SUPERAntiSpyware.com)
    R2 AMD_RAIDXpert; C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [122880 2009-12-15] (AMD) [File not signed]
    R2 FlipShare Service; C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe [460144 2011-05-06] ()
    R2 FlipShareServer; C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe [1085440 2011-05-06] () [File not signed]
    R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250712 2013-11-08] (Garmin Ltd or its subsidiaries)
    R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2015-02-10] (SurfRight B.V.)
    R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
    R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
    R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
    R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-03-04] (Hewlett-Packard Company) [File not signed]
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
    R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
    R2 MCLIENT; C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe [143928 2012-12-04] (Symantec Corporation)
    R2 N360; C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe [265040 2014-09-21] (Symantec Corporation)
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
    R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
    R2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [132504 2013-03-17] (Symantec Corporation)
    R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [126392 2011-11-07] (Symantec Corporation)
    R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-10-14] (PDF Complete Inc)
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
    R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
    R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
    S2 SupportSoft RemoteAssist; C:\Program Files (x86)\Common Files\supportsoft\bin\ssrc.exe [386424 2010-02-24] (SupportSoft, Inc.)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-13] (Microsoft Corporation)
    R1 BHDrvx64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys [1622744 2015-02-02] (Symantec Corporation)
    R1 ccSet_MCLIENT; C:\Windows\system32\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys [168096 2012-10-03] (Symantec Corporation)
    R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)
    R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-11] (Symantec Corporation)
    R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
    S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [7296 2003-09-23] (GARMIN Corp.) [File not signed]
    R1 IDSVia64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSvia64.sys [669400 2015-02-05] (Symantec Corporation)
    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
    R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-12] (Malwarebytes Corporation)
    R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
    R3 NAVENG; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\ENG64.SYS [129752 2015-01-27] (Symantec Corporation)
    R3 NAVEX15; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\EX64.SYS [2137304 2015-01-27] (Symantec Corporation)
    R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
    R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
    R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
    R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
    R0 SymDS; C:\Windows\System32\drivers\N360x64\1506000.020\SYMDS64.SYS [493656 2013-09-09] (Symantec Corporation)
    R0 SymEFA; C:\Windows\System32\drivers\N360x64\1506000.020\SYMEFA64.SYS [1148120 2014-03-03] (Symantec Corporation)
    R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-12] (Symantec Corporation)
    R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-09] (Symantec Corporation)
    R1 SymIRON; C:\Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
    R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS [593112 2014-02-17] (Symantec Corporation)
    U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-02-11] ()
    S0 wayuia; No ImagePath

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-02-12 22:17 - 2015-02-12 22:17 - 00034737 _____ () C:\Users\Rich\Desktop\FRST.txt
    2015-02-12 22:17 - 2015-02-12 22:17 - 00000000 ____D () C:\FRST
    2015-02-12 22:15 - 2015-02-12 22:15 - 02134016 _____ (Farbar) C:\Users\Rich\Desktop\FRST64.exe
    2015-02-12 21:06 - 2015-02-12 21:06 - 00000000 ____D () C:\Users\Rich\Documents\ProcAlyzer Dumps
    2015-02-12 20:53 - 2015-02-12 20:58 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
    2015-02-12 20:53 - 2015-02-12 20:53 - 00001432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2015-02-12 20:53 - 2015-02-12 20:53 - 00001420 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
    2015-02-12 20:53 - 2015-02-12 20:53 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
    2015-02-12 20:53 - 2015-02-12 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2015-02-12 20:53 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
    2015-02-12 20:44 - 2015-02-12 18:44 - 00124290 _____ () C:\Users\Rich\Documents\OTL.Txt
    2015-02-12 18:44 - 2015-02-12 18:44 - 00124290 _____ () C:\Users\Rich\Desktop\OTL.Txt
    2015-02-12 18:34 - 2015-02-12 18:36 - 00602112 _____ (OldTimer Tools) C:\Users\Rich\Desktop\OTL.exe
    2015-02-11 23:30 - 2015-02-11 23:30 - 00000000 ____D () C:\Program Files (x86)\ESET
    2015-02-11 22:37 - 2015-02-11 22:37 - 00000215 _____ () C:\Users\Rich\Desktop\Nasdaq.URL
    2015-02-11 22:16 - 2015-02-11 22:16 - 00000000 ____D () C:\Users\Rich\AppData\Roaming\QuickScan
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieUserList
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieSiteList
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieBrowserModeList
    2015-02-11 20:46 - 2015-02-11 20:47 - 55915216 _____ (Microsoft Corporation) C:\Users\norton\Downloads\IE11-Windows6.1-x64-en-us.exe
    2015-02-11 19:39 - 2015-02-11 20:10 - 00000000 ____D () C:\AdwCleaner
    2015-02-11 19:38 - 2015-02-11 19:38 - 02112512 _____ () C:\Users\norton\Downloads\AdwCleaner.exe
    2015-02-11 19:30 - 2015-02-11 19:31 - 00003928 _____ () C:\Users\Rich\Desktop\Rkill.txt
    2015-02-11 19:29 - 2015-02-11 19:29 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\norton\Downloads\rkill.exe
    2015-02-11 18:41 - 2015-02-11 18:41 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\norton\Downloads\tdsskiller.exe
    2015-02-11 18:12 - 2015-02-11 18:12 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
    2015-02-11 18:12 - 2015-02-11 18:12 - 00000000 ____D () C:\ProgramData\RogueKiller
    2015-02-11 18:08 - 2015-02-11 18:11 - 15431256 _____ () C:\Users\Rich\Desktop\RogueKiller.exe
    2015-02-11 10:59 - 2015-02-11 10:59 - 00000072 _____ () C:\Users\Rich\AppData\Local\.directory
    2015-02-10 22:25 - 2015-02-10 22:25 - 00000000 ____D () C:\ProgramData\Recovery
    2015-02-10 19:09 - 2015-02-03 22:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2015-02-10 19:09 - 2015-02-03 22:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2015-02-10 19:09 - 2015-01-27 18:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
    2015-02-10 19:09 - 2015-01-10 01:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2015-02-10 19:09 - 2015-01-10 01:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2015-02-10 19:08 - 2015-01-15 03:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2015-02-10 19:08 - 2015-01-15 03:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2015-02-10 19:08 - 2015-01-15 03:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2015-02-10 19:08 - 2015-01-15 03:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2015-02-10 19:08 - 2015-01-15 03:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2015-02-10 19:08 - 2015-01-15 03:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2015-02-10 19:08 - 2015-01-15 03:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2015-02-10 19:08 - 2015-01-15 03:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2015-02-10 19:08 - 2015-01-15 03:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2015-02-10 19:08 - 2015-01-15 03:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2015-02-10 19:08 - 2015-01-15 03:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2015-02-10 19:08 - 2015-01-15 02:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2015-02-10 19:08 - 2015-01-15 02:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2015-02-10 19:08 - 2015-01-15 02:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2015-02-10 19:08 - 2015-01-15 02:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2015-02-10 19:08 - 2015-01-15 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2015-02-10 19:08 - 2015-01-15 02:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2015-02-10 19:08 - 2015-01-14 23:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2015-02-10 19:08 - 2015-01-12 22:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2015-02-10 19:08 - 2015-01-12 21:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2015-02-10 19:08 - 2014-12-12 00:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2015-02-10 19:07 - 2015-01-14 01:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-02-10 19:07 - 2015-01-14 01:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2015-02-10 19:07 - 2015-01-14 01:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2015-02-10 19:07 - 2015-01-14 01:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2015-02-10 19:07 - 2015-01-14 00:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2015-02-10 19:07 - 2015-01-14 00:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2015-02-10 19:07 - 2015-01-14 00:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2015-02-10 19:07 - 2014-12-12 00:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
    2015-02-10 19:07 - 2014-12-07 22:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2015-02-10 19:07 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
    2015-02-10 19:07 - 2014-11-25 22:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2015-02-10 19:07 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2015-02-10 19:07 - 2014-10-03 21:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
    2015-02-10 19:07 - 2014-10-03 20:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
    2015-02-10 19:07 - 2014-10-03 20:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
    2015-02-10 19:06 - 2015-01-08 21:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2015-02-10 18:14 - 2015-02-10 18:14 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE(4).exe
    2015-02-10 14:52 - 2015-02-10 14:52 - 00000000 ____D () C:\Users\norton\AppData\Roaming\SUPERAntiSpyware.com
    2015-02-10 14:48 - 2015-02-12 12:55 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
    2015-02-10 13:24 - 2015-02-10 13:25 - 03060320 _____ (Symantec Corporation) C:\Users\norton\Downloads\NPE(3).exe
    2015-02-10 13:23 - 2015-02-10 13:23 - 00000000 ____D () C:\Users\norton\AppData\Local\Macromedia
    2015-02-10 12:52 - 2015-02-10 12:52 - 00000000 ____D () C:\ProgramData\SMR430
    2015-02-10 12:28 - 2015-02-10 12:28 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE(2).exe
    2015-02-10 11:14 - 2015-02-10 11:14 - 00065856 _____ () C:\Users\norton\AppData\Local\GDIPFONTCACHEV1.DAT
    2015-02-10 11:14 - 2015-02-10 11:14 - 00000000 ____D () C:\Users\norton\AppData\Roaming\ATI
    2015-02-10 11:14 - 2015-02-10 11:14 - 00000000 ____D () C:\Users\norton\AppData\Local\Hewlett-Packard
    2015-02-10 11:14 - 2015-02-10 11:14 - 00000000 ____D () C:\Users\norton\AppData\Local\ATI
    2015-02-10 11:13 - 2015-02-10 11:13 - 00001454 _____ () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Real
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Hewlett-Packard
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Apple Computer
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Adobe
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Local\Wondershare
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Local\PDFC
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Local\iSkysoft
    2015-02-10 11:12 - 2015-02-10 11:12 - 00000000 ____D () C:\Users\norton\AppData\Local\VirtualStore
    2015-02-10 11:04 - 2015-02-10 11:04 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE(1).exe
    2015-02-10 10:42 - 2015-02-10 10:42 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE.exe
    2015-02-10 10:40 - 2015-02-10 10:40 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Mozilla
    2015-02-10 10:40 - 2015-02-10 10:40 - 00000000 ____D () C:\Users\norton\AppData\Local\Mozilla
    2015-02-10 10:38 - 2015-02-10 11:12 - 00000000 ____D () C:\Users\norton
    2015-02-10 10:38 - 2015-02-10 10:38 - 00000020 ___SH () C:\Users\norton\ntuser.ini
    2015-02-10 10:38 - 2013-01-10 11:28 - 00002102 _____ () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
    2015-02-10 10:38 - 2011-01-06 17:01 - 00001974 _____ () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hulu Desktop.lnk
    2015-02-10 10:38 - 2011-01-06 17:01 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Macromedia
    2015-02-10 10:38 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-02-10 10:38 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    2015-01-27 09:26 - 2015-01-27 09:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2015-01-20 12:24 - 2015-01-22 10:48 - 00000000 ____D () C:\Users\Rich\AppData\Local\Citrix
    2015-01-14 01:37 - 2015-01-14 09:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
    2015-01-13 21:15 - 2014-12-18 22:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
    2015-01-13 21:15 - 2014-12-18 20:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2015-01-13 21:15 - 2014-12-11 12:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
    2015-01-13 21:15 - 2014-12-05 23:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
    2015-01-13 21:15 - 2014-12-05 22:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
    2015-01-13 21:15 - 2014-12-05 22:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-02-12 22:17 - 2011-11-16 22:21 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-02-12 22:07 - 2011-01-06 16:37 - 01568345 _____ () C:\Windows\WindowsUpdate.log
    2015-02-12 22:06 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-02-12 22:06 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-02-12 22:00 - 2014-10-07 07:44 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-02-12 22:00 - 2013-01-23 15:48 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
    2015-02-12 21:59 - 2014-05-17 15:11 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2015-02-12 21:59 - 2011-11-16 22:21 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-02-12 21:59 - 2011-01-30 19:59 - 00000440 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
    2015-02-12 21:58 - 2011-01-25 13:49 - 04075526 _____ () C:\Windows\PFRO.log
    2015-02-12 21:58 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-02-12 21:58 - 2009-07-13 23:51 - 00167114 _____ () C:\Windows\setupact.log
    2015-02-12 21:52 - 2013-01-27 12:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
    2015-02-12 20:51 - 2013-01-27 12:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
    2015-02-12 02:41 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
    2015-02-12 01:44 - 2015-01-07 01:32 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForRich
    2015-02-12 01:44 - 2015-01-07 01:32 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForRich.job
    2015-02-11 23:15 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
    2015-02-11 23:09 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
    2015-02-11 21:02 - 2011-01-25 11:02 - 00000000 ____D () C:\Users\Rich
    2015-02-11 20:48 - 2013-12-07 03:00 - 00018935 _____ () C:\Windows\IE11_main.log
    2015-02-10 19:27 - 2009-07-13 23:45 - 00285088 _____ () C:\Windows\system32\FNTCACHE.DAT
    2015-02-10 19:23 - 2014-12-10 03:23 - 00000000 ____D () C:\Windows\system32\appraiser
    2015-02-10 19:23 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2015-02-10 19:19 - 2013-08-26 02:01 - 00000000 ____D () C:\Windows\system32\MRT
    2015-02-10 19:14 - 2011-01-30 08:06 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2015-02-10 18:52 - 2013-01-10 05:53 - 00000000 ____D () C:\Users\Rich\AppData\Local\NPE
    2015-02-10 13:55 - 2014-05-17 15:10 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-02-10 00:07 - 2011-01-06 16:37 - 00000000 ____D () C:\ProgramData\PDFC
    2015-02-04 15:00 - 2014-10-07 07:44 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-02-04 15:00 - 2012-04-08 15:57 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-02-04 15:00 - 2011-05-22 20:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-02-04 01:44 - 2011-01-26 21:22 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
    2015-02-04 01:43 - 2011-11-09 09:59 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
    2015-02-03 20:12 - 2011-11-16 22:21 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-02-03 20:12 - 2011-11-16 22:21 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-02-01 15:15 - 2009-07-14 00:13 - 00783464 _____ () C:\Windows\system32\PerfStringBackup.INI
    2015-01-27 14:35 - 2012-04-26 12:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2015-01-26 03:25 - 2009-07-14 00:08 - 00032610 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
    2015-01-26 03:04 - 2011-03-07 16:21 - 00775586 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
    2015-01-25 22:56 - 2011-04-22 18:42 - 00000000 ____D () C:\Users\Rich\AppData\Local\CrashDumps
    2015-01-24 13:14 - 2012-03-03 21:18 - 00028672 _____ () C:\Users\Rich\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2015-01-20 18:55 - 2014-04-09 02:23 - 00000000 ____D () C:\Windows\Minidump
    2015-01-20 11:51 - 2013-04-02 20:41 - 00000000 ____D () C:\Users\Rich\Documents\My Scans

    ==================== Files in the root of some directories =======

    2013-09-04 07:28 - 2013-09-26 08:10 - 9842040 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
    2015-02-11 10:59 - 2015-02-11 10:59 - 0000072 _____ () C:\Users\Rich\AppData\Local\.directory
    2012-03-03 21:18 - 2015-01-24 13:14 - 0028672 _____ () C:\Users\Rich\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2014-12-11 22:32 - 2014-12-11 22:32 - 0007609 _____ () C:\Users\Rich\AppData\Local\Resmon.ResmonCfg
    2012-12-30 20:42 - 2013-12-05 16:45 - 0003339 _____ () C:\ProgramData\hpzinstall.log
    2012-03-12 21:55 - 2014-03-19 16:04 - 0000935 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-02-03 00:18

    ==================== End Of Log ============================

    additional txt

     

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2015
    Ran by Rich at 2015-02-12 22:18:06
    Running from C:\Users\Rich\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Norton 360 Premier Edition (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
    AS: Norton 360 Premier Edition (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
    FW: Norton 360 Premier Edition (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
    6500_E709_eDocs (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    6500_E709_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    6500_E709n (x32 Version: 50.0.165.000 - Hewlett-Packard) Hidden
    7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
    Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
    Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
    Amazon Kindle (HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Amazon Kindle) (Version:  - Amazon)
    Ant.com IE add-on (HKLM-x32\...\{B905CAA1-D6FF-4D21-8858-F8C610491C0B}) (Version: 2.2.4.1076 - Ant.com)
    Any DVD Converter Professional 5.7.6 (HKLM-x32\...\Any DVD Converter Professional_is1) (Version:  - Any-DVD-Converter.com)
    Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
    Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 8.0 - Atheros)
    ATI Catalyst Install Manager (HKLM\...\{422DAAC6-8E99-ED2E-CD46-0DEEE1A09EF8}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
    Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Bing Bar (HKLM-x32\...\{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}) (Version: 7.0.609.0 - Microsoft Corporation)
    Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
    bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
    BPDSoftware (x32 Version: 50.0.165.000 - Hewlett-Packard) Hidden
    BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
    Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    CaddieSync Express 1.1.13 (HKLM-x32\...\CaddieSync Express) (Version: 1.1.13 - SkyHawke Technologies)
    CanoScan Toolbox Ver4.1 (HKLM-x32\...\{BCE46757-7674-4416-BEDB-68205A60409E}) (Version:  - )
    ccc-core-static (x32 Version: 2010.0517.1742.29870 - ATI) Hidden
    Chinese Simplified Fonts Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-2447-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)
    Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
    CinemaNow Media Manager (HKLM-x32\...\{6C122441-1861-4CD7-B1C5-A163A6984E12}) (Version: 1.9.1.105 - CinemaNow, Inc.)
    Content Manager (HKLM-x32\...\{B64BC516-2406-43AE-A21A-1E387A2343B1}) (Version: 2.70 - Magellan)
    CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2823 - CyberLink Corp.)
    Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
    DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
    Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
    DocMgr (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
    Dora's Carnival Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
    DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4030 - Hewlett-Packard)
    DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden
    Elevated Installer (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) Hidden
    Escape Rosecliff Island (x32 Version: 2.2.0.95 - WildTangent) Hidden
    ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
    EuroTalk Talk Now! (HKLM-x32\...\{F26615EF-AF0A-486C-99C9-B65C8C401EBC}) (Version: 2.2.5.1 - EuroTalk Interactive)
    FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
    Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
    FlipShare (HKLM-x32\...\{97C658D2-61FB-027F-0D76-E9CDC84AFEC7}) (Version: 5.12.3.0 - Flip Video)
    FLV to MP4 Converter 2009.2.20 (HKLM-x32\...\{D98D2FD8-26FB-4B92-B2B8-75DE8FB28FC4}_is1) (Version:  - FLVtoMP4Converter.com)
    Garmin Communicator Plugin x64 (HKLM\...\{550331CC-C34B-494F-BCDA-37CE4EF6E924}) (Version: 4.0.3 - Garmin Ltd or its subsidiaries)
    Garmin Express (HKLM-x32\...\{6f60b921-2ae3-43fe-a6fb-ad849bd91451}) (Version: 2.3.16.0 - Garmin Ltd or its subsidiaries)
    Garmin Express (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) Hidden
    Garmin Express Tray (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) Hidden
    Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)
    Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
    Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
    Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
    GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Heroes of Hellas 2 - Olympia (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
    HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.236 - SurfRight B.V.)
    HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.12850.3526 - Hewlett-Packard)
    HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
    HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
    HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
    HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
    HP MediaSmart CinemaNow 2.0 (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard)
    HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 4.1.4229 - Hewlett-Packard)
    HP MediaSmart Music (HKLM-x32\...\InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}) (Version: 4.1.4301 - Hewlett-Packard)
    HP MediaSmart Photo (HKLM-x32\...\InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}) (Version: 4.1.4211 - Hewlett-Packard)
    HP MediaSmart SmartMenu (HKLM\...\{5B08AF35-B699-4A44-BB89-3E51E70611E8}) (Version: 3.1.1.12 - Hewlett-Packard)
    HP MediaSmart Video (HKLM-x32\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.1.4214 - Hewlett-Packard)
    HP MediaSmart/TouchSmart Netflix (HKLM-x32\...\{BDDA1E1E-204E-4368-B0C2-737F16B76307}) (Version: 1.0.3.0 - Hewlett-Packard)
    HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
    HP Officejet 6500 E709 Series (HKLM\...\{2E1B4B42-069F-4F53-9966-9B9B938D7FE5}) (Version: 13.0 - HP)
    HP Product Detection (HKLM-x32\...\{8A9FC225-75F6-4B5D-911C-0ED230565643}) (Version: 11.15.0009 - HP)
    HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
    HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
    HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
    HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
    HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
    HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.2.27173 - Hewlett-Packard)
    HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Hulu Desktop (HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\HuluDesktop) (Version: 0.9.13 - Hulu LLC)
    HydraVision (x32 Version: 4.2.166.0 - ATI Technologies Inc.) Hidden
    iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
    ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
    iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
    Jewel Quest 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Kobo (HKLM-x32\...\Kobo) (Version:  - )
    LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2823 - CyberLink Corp.)
    LabelPrint (x32 Version: 2.5.2823 - CyberLink Corp.) Hidden
    LightScribe System Software (HKLM-x32\...\{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}) (Version: 1.18.22.2 - LightScribe)
    Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
    MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
    Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
    Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
    Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
    Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
    Microsoft SkyDrive (HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.1.4030 - Hewlett-Packard)
    Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden
    Mozilla Firefox 35.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 en-US)) (Version: 35.0.1 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
    Mozilla Thunderbird 31.4.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 31.4.0 (x86 en-US)) (Version: 31.4.0 - Mozilla)
    MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    Nero BurningROM 12 (HKLM-x32\...\{C0CA68BF-2963-4139-8207-1E83038F86F8}) (Version: 12.0.00800 - Nero AG)
    Network64 (Version: 130.0.579.000 - Hewlett-Packard) Hidden
    Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
    Norton 360 (HKLM-x32\...\N360) (Version: 21.6.0.32 - Symantec Corporation)
    Norton Bootable Recovery Tool Wizard (HKLM-x32\...\NBRTWizard) (Version: 5.1.0.26 - Symantec Corporation)
    Norton One (HKLM-x32\...\MCLIENT) (Version: 3.2.2.12 - Symantec Corporation)
    Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
    Norton PC Checkup (HKLM-x32\...\Norton PC Checkup_is1) (Version: 3.0.2.122.0 - NortonLive Services)
    Norton PC Checkup (HKLM-x32\...\NortonPCCheckup) (Version: 2.0.17.20 - Symantec Corporation)
    OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
    PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 3.5.111 - PDF Complete, Inc)
    Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
    PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
    PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
    PIXELA ImageMixer (HKLM-x32\...\{13413C6C-C640-40B8-917E-CA3062826B18}) (Version:  - )
    Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
    PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
    Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4022 - CyberLink Corp.)
    Power2Go (x32 Version: 6.1.4022 - CyberLink Corp.) Hidden
    PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2906 - CyberLink Corp.)
    PowerDirector (x32 Version: 8.0.2906 - CyberLink Corp.) Hidden
    Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
    PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-13231864975D}) (Version: 5.10.621.0 -  NewspaperDirect Inc.)
    ProductContext (x32 Version: 50.0.165.000 - Hewlett-Packard) Hidden
    QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
    RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.2.1540.10 - AMD)
    RAIDXpert (x32 Version: 3.2.1540.10 - AMD) Hidden
    Real Alternative 2.0.2 (HKLM-x32\...\RealAlt_is1) (Version: 2.0.2 - )
    RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
    RealPlayer (HKLM-x32\...\RealPlayer 15.0) (Version: 15.0.4 - RealNetworks)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6132 - Realtek Semiconductor Corp.)
    RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
    Recovery Manager (x32 Version: 5.5.2926 - CyberLink Corp.) Hidden
    RZ DVD Creator (HKLM-x32\...\{3F32058A-343A-4C16-BD1B-BE35E9A42352}) (Version: 4.52 - RealZeal Soft)
    Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
    Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
    SkyCaddie Desktop (HKLM-x32\...\SkyCaddieDesktop) (Version:  - SkyHawke Technologies)
    SkyHawke CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - )
    SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
    SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
    Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
    Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
    SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1014 - SUPERAntiSpyware.com)
    SysTools DBX Converter (HKLM-x32\...\SysTools DBX Converter v3.2 DEMO Version_is1) (Version:  - )
    Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
    TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
    TurboTax 2011 (HKLM-x32\...\TurboTax 2011) (Version:  - Intuit, Inc)
    TurboTax 2012 (HKLM-x32\...\TurboTax 2012) (Version: 2012.0 - Intuit, Inc)
    TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)
    TWC Customer Controls (HKLM-x32\...\{A2E5F2AA-2996-41EA-BCCD-9FD0476A5326}) (Version: 11 - SupportSoft)
    Virtual Families (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
    VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
    WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
    Wheel of Fortune 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)
    Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
    Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
    WinX DVD Author 6.3.3 (HKLM-x32\...\WinX DVD Author_is1) (Version:  - DigiartySoft, Inc.)
    Wondershare DVD Creator(Build 3.2.0) (HKLM-x32\...\Wondershare DVD Creator_is1) (Version:  - Wondershare Software)
    Xvid MPEG-4 Video Codec (HKLM-x32\...\xvid) (Version:  - Xvid Development Team)
    Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)

    ==================== Restore Points  =========================

    22-01-2015 10:48:26 Removed Citrix Online Launcher
    26-01-2015 03:00:11 Windows Update
    02-02-2015 16:19:44 Checkpoint by HitmanPro
    10-02-2015 19:13:01 Windows Update
    11-02-2015 20:58:19 Windows Update
    11-02-2015 23:07:25 Windows Modules Installer

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 21:34 - 2013-01-27 12:45 - 00445399 ____N C:\Windows\system32\Drivers\etc\hosts
    127.0.0.1    www.007guard.com
    127.0.0.1    007guard.com
    127.0.0.1    008i.com
    127.0.0.1    www.008k.com
    127.0.0.1    008k.com
    127.0.0.1    www.00hq.com
    127.0.0.1    00hq.com
    127.0.0.1    010402.com
    127.0.0.1    www.032439.com
    127.0.0.1    032439.com
    127.0.0.1    www.0scan.com
    127.0.0.1    0scan.com
    127.0.0.1    www.1000gratisproben.com
    127.0.0.1    1000gratisproben.com
    127.0.0.1    1001namen.com
    127.0.0.1    www.1001namen.com
    127.0.0.1    100888290cs.com
    127.0.0.1    www.100888290cs.com
    127.0.0.1    www.100sexlinks.com
    127.0.0.1    100sexlinks.com
    127.0.0.1    www.10sek.com
    127.0.0.1    10sek.com
    127.0.0.1    www.1-2005-search.com
    127.0.0.1    1-2005-search.com
    127.0.0.1    www.123fporn.info
    127.0.0.1    123fporn.info
    127.0.0.1    123haustiereundmehr.com
    127.0.0.1    www.123haustiereundmehr.com
    127.0.0.1    123moviedownload.com

    There are 1000 more lines.


    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {0179AA91-5E79-49E0-B032-4C2D1DC4EA58} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
    Task: {048B6227-19BF-44FD-BD1C-552DBDE2FF92} - System32\Tasks\HPCeeScheduleForRich => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
    Task: {0E0D7FAB-FEFD-4B33-95E5-56E9AD4F60A6} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4215829332-950673753-2765580295-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
    Task: {18E7279F-5DE2-46B5-9528-CAF2CDA7F9B4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
    Task: {2B567E20-97CB-4682-930D-441EB060C743} - System32\Tasks\Norton One\Norton Error Processor => C:\Program Files (x86)\Norton One\Engine\3.2.2.12\SymErr.exe [2012-10-18] (Symantec Corporation)
    Task: {3C1690D3-E4F7-4BD9-8710-D5B1215B8303} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
    Task: {4790D0CC-C026-4598-91A4-4F57758778E0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
    Task: {4A96F90B-4153-4678-ADAA-F37D4F1AB701} - System32\Tasks\{335D1FAE-EED5-4D4D-B27C-4249ED1F60E0} => C:\Program Files (x86)\Wondershare\DVD Creator\DVDCreator.exe [2014-10-24] (Wondershare Software)
    Task: {64CA2BC6-2E66-48ED-9465-27A872ECAF96} - System32\Tasks\{864F9621-19DA-42F2-ABE0-4FF6297F34B9} => pcalua.exe -a C:\Users\Rich\Desktop\zip.exe -d C:\Users\Rich\Desktop
    Task: {7142CF78-F79F-405F-B818-F4A5814E0D1C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
    Task: {724B212D-AF80-4CDD-9D23-462730C90AD5} - System32\Tasks\{A4F3003B-AF2F-402F-B542-32083C18C215} => C:\Program Files (x86)\Wondershare\DVD Creator\DVDCreator.exe [2014-10-24] (Wondershare Software)
    Task: {86111AC7-64E6-46ED-AFB9-31BB5B3AB59C} - System32\Tasks\Norton One\Norton Error Analyzer => C:\Program Files (x86)\Norton One\Engine\3.2.2.12\SymErr.exe [2012-10-18] (Symantec Corporation)
    Task: {90A75E82-1D73-48F5-9EBE-7BB9427C6DF1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4215829332-950673753-2765580295-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
    Task: {91AB3876-AD27-449B-9B3E-F44687F1295C} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
    Task: {927FB1C1-E4BC-4B0E-A267-D00EDB294DB9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-01-21] (Hewlett-Packard)
    Task: {9615F422-3B18-4861-BC71-F3C07C63E71C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
    Task: {9F23648D-F3A4-452C-BFA1-5EF408260279} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
    Task: {A752B474-1750-45CF-961D-5D882A291864} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
    Task: {A82A3D0A-590B-466F-8BFD-7A8744B1B639} - System32\Tasks\{DAFD05DE-1E4F-44FE-B151-976F16156B59} => pcalua.exe -a E:\USB_Drivers.exe -d E:\
    Task: {CF4BF027-9ECE-436E-9702-1868FF58BDB4} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] ()
    Task: {D1AF1A37-7879-49C2-A9AD-FC500F922B7B} - System32\Tasks\{6E1A08FF-B4D1-4C23-8616-56A7F8865598} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
    Task: {D28C6E84-1024-4D52-B373-6611CFA7F3E0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-15] (Google Inc.)
    Task: {D35B727C-B0F8-46B2-A89B-79EA13B5F994} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-15] (Google Inc.)
    Task: {D61314E4-3F45-46C3-A1D5-531C5B447257} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
    Task: {E03B42E2-AB3E-4363-A163-C77E65934189} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
    Task: {E572B95E-F4B3-44C9-8545-F4B60B6589F5} - System32\Tasks\{C5096586-DDFD-4A6D-827E-5B1AE1ED65A4} => pcalua.exe -a C:\Users\Rich\Desktop\deldrvwin1250ejf.exe -d C:\Users\Rich\Desktop
    Task: {ECFAFBED-406E-4C69-8DC3-FF62152D2440} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] ()
    Task: {F22654EC-0CA3-4B1A-A188-0BA93114095E} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
    Task: {F3529C6B-3FFA-47B1-BC05-A67FD9107B47} - \VisualBeeRecovery No Task File <==== ATTENTION
    Task: {F9460B52-EB18-4834-8265-B3D3CA961409} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\HPCeeScheduleForRich.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

    ==================== Loaded Modules (whitelisted) ==============

    2009-12-15 20:40 - 2009-12-15 20:40 - 00065536 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
    2011-05-06 13:07 - 2011-05-06 13:07 - 00460144 _____ () C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
    2011-05-06 12:58 - 2011-05-06 12:58 - 01085440 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe
    2014-12-27 18:25 - 2014-10-24 14:16 - 00721263 _____ () C:\Windows\SysWOW64\ISCM64.dll
    2010-01-18 13:21 - 2010-01-18 13:21 - 00568888 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    2013-07-06 07:02 - 2012-12-06 09:09 - 07375360 _____ () C:\Program Files (x86)\Content Manager\CmTray.exe
    2009-12-15 20:40 - 2009-12-15 20:40 - 00122880 _____ () C:\Windows\SysWOW64\WinMsgBalloonServer.exe
    2009-12-15 20:41 - 2009-12-15 20:41 - 00139264 _____ () C:\Windows\SysWOW64\WinMsgBalloonClient.exe
    2010-05-18 20:25 - 2010-05-18 20:25 - 00098304 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
    2010-05-17 20:40 - 2010-05-17 20:40 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
    2009-12-16 02:44 - 2009-12-16 02:44 - 00516096 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\libxml2.dll
    2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
    2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
    2010-10-26 00:06 - 2010-10-26 00:06 - 02248704 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtCore4.dll
    2011-05-06 13:07 - 2011-05-06 13:07 - 04317184 _____ () C:\Program Files (x86)\Flip Video\FlipShare\Core.dll
    2011-05-06 13:02 - 2011-05-06 13:02 - 00737280 _____ () C:\Program Files (x86)\Flip Video\FlipShare\qca2.dll
    2010-10-26 00:23 - 2010-10-26 00:23 - 08351744 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtGui4.dll
    2010-10-26 00:08 - 2010-10-26 00:08 - 00983040 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtNetwork4.dll
    2010-10-26 00:23 - 2010-10-26 00:23 - 00204800 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtSql4.dll
    2010-10-26 00:06 - 2010-10-26 00:06 - 00364544 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtXml4.dll
    2010-10-26 08:34 - 2010-10-26 08:34 - 11853824 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtWebKit4.dll
    2010-10-26 00:37 - 2010-10-26 00:37 - 00258048 _____ () C:\Program Files (x86)\Flip Video\FlipShare\phonon4.dll
    2010-05-20 13:49 - 2010-05-20 13:49 - 00258048 _____ () C:\Program Files (x86)\Flip Video\FlipShare\boost_serialization-vc80-mt-1_43.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 01199104 _____ () C:\Program Files (x86)\Flip Video\FlipShare\PocoFoundation.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00642048 _____ () C:\Program Files (x86)\Flip Video\FlipShare\PocoNet.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00511488 _____ () C:\Program Files (x86)\Flip Video\FlipShare\PocoXML.dll
    2010-10-26 00:06 - 2010-10-26 00:06 - 02248704 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\QtCore4.dll
    2010-10-26 00:08 - 2010-10-26 00:08 - 00983040 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\QtNetwork4.dll
    2010-10-26 00:23 - 2010-10-26 00:23 - 00204800 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\QtSql4.dll
    2010-05-20 13:49 - 2010-05-20 13:49 - 00258048 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\boost_serialization-vc80-mt-1_43.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 01199104 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoFoundation.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00642048 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNet.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00175616 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNetSSL.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00291840 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoUtil.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00511488 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoXML.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00110592 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoCrypto.dll
    2015-02-12 20:53 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2015-02-12 20:53 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
    2015-02-12 20:53 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
    2015-02-12 20:53 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
    2015-02-12 20:53 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
    2011-03-04 12:02 - 2011-03-04 12:02 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
    2011-03-04 12:02 - 2011-03-04 12:02 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
    2011-03-04 12:02 - 2011-03-04 12:02 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
    2014-12-29 15:00 - 2013-07-24 09:24 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
    2014-12-29 15:00 - 2014-02-15 11:48 - 00295936 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
    2014-12-27 18:25 - 2014-10-31 16:40 - 01498112 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll
    2014-12-27 18:25 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll
    2013-07-06 07:02 - 2009-01-10 17:32 - 00011362 _____ () C:\Program Files (x86)\Content Manager\mingwm10.dll
    2013-07-06 07:02 - 2009-06-23 01:42 - 00043008 _____ () C:\Program Files (x86)\Content Manager\libgcc_s_dw2-1.dll
    2013-07-06 07:02 - 2012-01-06 13:53 - 02556416 _____ () C:\Program Files (x86)\Content Manager\QtCore4.dll
    2013-07-06 07:02 - 2011-09-01 21:23 - 09933824 _____ () C:\Program Files (x86)\Content Manager\QtGui4.dll
    2013-07-06 07:02 - 2011-09-01 20:53 - 01215488 _____ () C:\Program Files (x86)\Content Manager\QtNetwork4.dll
    2013-07-06 07:02 - 2011-09-01 20:53 - 00271872 _____ () C:\Program Files (x86)\Content Manager\QtSql4.dll
    2013-07-06 07:02 - 2011-09-01 20:49 - 00399360 _____ () C:\Program Files (x86)\Content Manager\QtXml4.dll
    2013-07-06 07:02 - 2011-09-02 00:48 - 00478720 _____ () C:\Program Files (x86)\Content Manager\Plugins\sqldrivers\qsqlite4.dll
    2015-01-27 09:26 - 2015-01-27 09:26 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\ProgramData\Temp:FB1B13D8

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR430 => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SprtListen => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SprtListenPush => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SupportSoft RemoteAssist => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

    ==================== EXE Association (whitelisted) ===============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Rich\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 209.18.47.61 - 209.18.47.62

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== Accounts: =============================

    Administrator (S-1-5-21-4215829332-950673753-2765580295-500 - Administrator - Disabled)
    Guest (S-1-5-21-4215829332-950673753-2765580295-501 - Limited - Enabled) => C:\Users\Guest
    HomeGroupUser$ (S-1-5-21-4215829332-950673753-2765580295-1003 - Limited - Enabled)
    norton (S-1-5-21-4215829332-950673753-2765580295-1004 - Limited - Enabled) => C:\Users\norton
    Rich (S-1-5-21-4215829332-950673753-2765580295-1001 - Administrator - Enabled) => C:\Users\Rich

    ==================== Faulty Device Manager Devices =============

    Name: Officejet 6500 E709n
    Description: Officejet 6500 E709n
    Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
    Manufacturer: HP
    Service: StillCam
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

    Name: Officejet 6500 E709n
    Description: Officejet 6500 E709n
    Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
    Manufacturer: HP
    Service:
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (02/11/2015 11:26:25 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16736, time stamp: 0x5258c4cc
    Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeaf722
    Exception code: 0xc000041d
    Fault offset: 0x000179ac
    Faulting process id: 0x16fc
    Faulting application start time: 0xIEXPLORE.EXE0
    Faulting application path: IEXPLORE.EXE1
    Faulting module path: IEXPLORE.EXE2
    Report Id: IEXPLORE.EXE3

    Error: (02/11/2015 11:25:17 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16736, time stamp: 0x5258c4cc
    Faulting module name: shlwapi.DLL, version: 6.1.7601.17514, time stamp: 0x4ce7b9e2
    Exception code: 0xc000041d
    Fault offset: 0x0001c4da
    Faulting process id: 0x1e30
    Faulting application start time: 0xIEXPLORE.EXE0
    Faulting application path: IEXPLORE.EXE1
    Faulting module path: IEXPLORE.EXE2
    Report Id: IEXPLORE.EXE3

    Error: (02/10/2015 05:35:11 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: plugin-container.exe, version: 35.0.1.5500, time stamp: 0x54c1f9f3
    Faulting module name: mozalloc.dll, version: 35.0.1.5500, time stamp: 0x54c1f224
    Exception code: 0x80000003
    Fault offset: 0x00001425
    Faulting process id: 0x6c0
    Faulting application start time: 0xplugin-container.exe0
    Faulting application path: plugin-container.exe1
    Faulting module path: plugin-container.exe2
    Report Id: plugin-container.exe3

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 3008) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    The client was unable to connect to an Application Virtualization Server (rc 00000729-00000020)

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    The Application Virtualization Client could not connect to stream URL 'http://c2r.microsoft...0.7113.5007.sft' (rc 00000729-00000020, original rc 00000729-00000020).

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second

    Error: (02/06/2015 01:23:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 12090

    Error: (02/06/2015 01:23:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 12090


    System errors:
    =============
    Error: (02/12/2015 10:17:53 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/12/2015 10:12:51 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/12/2015 10:09:31 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/12/2015 10:03:16 PM) (Source: ipnathlp) (EventID: 1233) (User: )
    Description:

    Error: (02/12/2015 10:03:03 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/12/2015 09:59:37 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/12/2015 09:59:34 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load:
    wayuia

    Error: (02/12/2015 09:30:12 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/12/2015 09:10:19 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/12/2015 09:01:57 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0


    Microsoft Office Sessions:
    =========================
    Error: (02/11/2015 11:26:25 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: IEXPLORE.EXE10.0.9200.167365258c4ccmsvcrt.dll7.0.7601.177444eeaf722c000041d000179ac16fc01d0467bf347edeeC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\syswow64\msvcrt.dll4e1416b4-b26f-11e4-9965-643150227862

    Error: (02/11/2015 11:25:17 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: IEXPLORE.EXE10.0.9200.167365258c4ccshlwapi.DLL6.1.7601.175144ce7b9e2c000041d0001c4da1e3001d0467b00f662b6C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\syswow64\shlwapi.DLL2520a274-b26f-11e4-9965-643150227862

    Error: (02/10/2015 05:35:11 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: plugin-container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f22480000003000014256c001d0458142d2deebC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll121f9a9a-b175-11e4-b873-643150227862

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 3008) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    00000729-00000020

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    http://c2r.microsoft...000729-00000020

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second

    Error: (02/06/2015 01:23:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 12090

    Error: (02/06/2015 01:23:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 12090


    CodeIntegrity Errors:
    ===================================
      Date: 2013-12-18 12:13:04.807
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 12:13:04.507
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:55:05.436
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:55:05.126
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:57.476
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:57.176
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:27.908
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:27.608
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 10:44:30.306
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 10:44:30.006
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


    ==================== Memory info ===========================

    Processor: AMD Phenom™ II X4 840T Processor
    Percentage of memory in use: 32%
    Total physical RAM: 8183.89 MB
    Available physical RAM: 5489.71 MB
    Total Pagefile: 16365.98 MB
    Available Pagefile: 13209.37 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.8 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:918.55 GB) (Free:757.89 GB) NTFS
    Drive d: (HP_RECOVERY) (Fixed) (Total:12.67 GB) (Free:0.68 GB) NTFS ==>[System with boot components (obtained from reading drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 931.3 GB) (Disk ID: B9726EF6)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=918.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=12.7 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================

     


    • 0

    #4
    RKinner

    RKinner

      Malware Expert

    • Expert
    • 20,031 posts
    • MVP

    OTL says TeaTimer is present:

     

    O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)

     

     

     

    I'm not seeing much in FRST except for some deadwood and one suspicious driver which apparently has no files so it could be Teatimer is not allowing changes to your browser.  Also you have let it "Immunize" your PC which places a ridiculously large list of bogus IP address in your hosts file.  This was a good idea with Win 2000 but it slows down a Win 7 system something awful so you should unimmunize it.  Best to just Uninstall Spybot for now.  

     

    When you get done with the other scans:

     

    Download the attached fixlist.txt to the same location as FRST
    Run FRST and press Fix
    A fix log will be generated please post that.  Run FRST again, check the Additions box and then Scan.  You will get two logs.  Post them both.
     

    • 0

    #5
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    Here is the Combofix txt

     

     

     

    ComboFix 15-02-09.01 - Rich 02/12/2015  23:05:46.1.4 - x64
    Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8184.5249 [GMT -5:00]
    Running from: c:\users\Rich\Desktop\ComboFix.exe
    AV: Norton 360 Premier Edition *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
    FW: Norton 360 Premier Edition *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
    SP: Norton 360 Premier Edition *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((((((((   Files Created from 2015-01-13 to 2015-02-13  )))))))))))))))))))))))))))))))
    .
    .
    2015-02-13 05:06 . 2015-02-13 05:06    --------    d-----w-    c:\users\Guest\AppData\Local\temp
    2015-02-13 05:06 . 2015-02-13 05:06    --------    d-----w-    c:\users\Default\AppData\Local\temp
    2015-02-13 03:17 . 2015-02-13 03:18    --------    d-----w-    C:\FRST
    2015-02-13 01:53 . 2015-02-13 03:55    --------    d-----w-    c:\program files (x86)\Spybot - Search & Destroy 2
    2015-02-12 04:30 . 2015-02-12 04:30    --------    d-----w-    c:\program files (x86)\ESET
    2015-02-12 03:16 . 2015-02-12 03:16    --------    d-----w-    c:\users\Rich\AppData\Roaming\QuickScan
    2015-02-12 00:39 . 2015-02-12 01:10    --------    d-----w-    C:\AdwCleaner
    2015-02-11 23:12 . 2015-02-11 23:12    35064    ----a-w-    c:\windows\system32\drivers\TrueSight.sys
    2015-02-11 23:12 . 2015-02-11 23:12    --------    d-----w-    c:\programdata\RogueKiller
    2015-02-11 03:25 . 2015-02-11 03:25    --------    d-----w-    c:\programdata\Recovery
    2015-02-11 00:09 . 2015-02-04 03:16    609280    ----a-w-    c:\windows\system32\generaltel.dll
    2015-02-11 00:09 . 2015-02-04 03:16    894976    ----a-w-    c:\windows\system32\appraiser.dll
    2015-02-11 00:09 . 2015-02-04 03:13    1098752    ----a-w-    c:\windows\system32\aeinv.dll
    2015-02-11 00:09 . 2015-02-04 03:16    762368    ----a-w-    c:\windows\system32\invagent.dll
    2015-02-11 00:09 . 2015-02-04 03:16    414720    ----a-w-    c:\windows\system32\devinv.dll
    2015-02-11 00:09 . 2015-02-04 03:16    227328    ----a-w-    c:\windows\system32\aepdu.dll
    2015-02-11 00:09 . 2015-02-04 03:16    192000    ----a-w-    c:\windows\system32\aepic.dll
    2015-02-11 00:09 . 2015-01-27 23:36    1239720    ----a-w-    c:\windows\system32\aitstatic.exe
    2015-02-11 00:09 . 2015-01-10 06:48    341504    ----a-w-    c:\windows\system32\schannel.dll
    2015-02-11 00:09 . 2015-01-10 06:27    248832    ----a-w-    c:\windows\SysWow64\schannel.dll
    2015-02-11 00:07 . 2014-12-12 05:07    1174528    ----a-w-    c:\windows\SysWow64\crypt32.dll
    2015-02-11 00:06 . 2015-01-09 02:03    3201536    ----a-w-    c:\windows\system32\win32k.sys
    2015-02-10 19:48 . 2015-02-12 17:55    --------    d---a-w-    C:\Kaspersky Rescue Disk 10.0
    2015-02-10 17:52 . 2015-02-10 17:52    --------    d-----w-    c:\programdata\SMR430
    2015-02-10 15:38 . 2015-02-10 16:12    --------    d-----w-    c:\users\norton
    2015-01-20 17:24 . 2015-01-22 15:48    --------    d-----w-    c:\users\Rich\AppData\Local\Citrix
    2015-01-14 06:37 . 2015-01-14 14:46    --------    d-----w-    c:\program files (x86)\Mozilla Thunderbird
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2015-02-13 03:55 . 2014-05-17 20:11    129752    ----a-w-    c:\windows\system32\drivers\MBAMSwissArmy.sys
    2015-02-11 00:14 . 2011-01-30 13:06    116773704    ----a-w-    c:\windows\system32\MRT.exe
    2015-02-04 20:00 . 2012-04-08 20:57    701616    ----a-w-    c:\windows\SysWow64\FlashPlayerApp.exe
    2015-02-04 20:00 . 2011-05-23 01:31    71344    ----a-w-    c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2014-12-19 03:06 . 2015-01-14 02:15    210432    ----a-w-    c:\windows\system32\profsvc.dll
    2014-12-19 01:46 . 2015-01-14 02:15    141312    ----a-w-    c:\windows\system32\drivers\mrxdav.sys
    2014-12-11 17:47 . 2015-01-14 02:15    52736    ----a-w-    c:\windows\system32\TSWbPrxy.exe
    2014-12-06 04:17 . 2015-01-14 02:15    303616    ----a-w-    c:\windows\system32\nlasvc.dll
    2014-12-06 03:50 . 2015-01-14 02:15    52224    ----a-w-    c:\windows\SysWow64\nlaapi.dll
    2014-12-06 03:50 . 2015-01-14 02:15    156672    ----a-w-    c:\windows\SysWow64\ncsi.dll
    2014-11-21 11:14 . 2014-05-17 20:10    63704    ----a-w-    c:\windows\system32\drivers\mwac.sys
    2014-11-21 11:14 . 2014-05-17 20:10    93400    ----a-w-    c:\windows\system32\drivers\mbamchameleon.sys
    2014-11-21 11:14 . 2013-09-03 20:12    25816    ----a-w-    c:\windows\system32\drivers\mbam.sys
    2013-09-26 13:10 . 2013-09-04 12:28    9842040    ----a-w-    c:\program files (x86)\Common Files\wruninstall.exe
    .
    .
    (((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
    @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
    [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
    2013-01-10 16:28    220632    ----a-w-    c:\users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
    @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
    [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
    2013-01-10 16:28    220632    ----a-w-    c:\users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
    @="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
    [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
    2013-01-10 16:28    220632    ----a-w-    c:\users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2011-03-04 2741616]
    "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2015-01-28 7780120]
    "GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2013-11-08 1095000]
    "CmTray"="c:\program files (x86)\Content Manager\launchCM.exe" [2011-12-28 94208]
    "ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816]
    "iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-11-21 43816]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2009-10-14 563736]
    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-05-18 98304]
    "Wondershare Helper Compact.exe"="c:\program files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" [2014-02-21 1994752]
    "TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2012-05-19 296056]
    "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712]
    "iSkysoft Helper Compact.exe"="c:\program files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe" [2014-10-31 2066432]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480]
    "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    HP Digital Imaging Monitor.lnk - c:\program files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe [2009-9-23 270336]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
    "aux2"=wdmaud.drv
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute    REG_MULTI_SZ       autocheck autochk *\0\0sdnclean64.exe
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
    @=""
    .
    R0 wayuia;wayuia; [x]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
    R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
    R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
    S0 ahcix64s;ahcix64s;c:\windows\system32\DRIVERS\ahcix64s.sys;c:\windows\SYSNATIVE\DRIVERS\ahcix64s.sys [x]
    S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1506000.020\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1506000.020\SYMDS64.SYS [x]
    S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1506000.020\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1506000.020\SYMEFA64.SYS [x]
    S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys;c:\program files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys [x]
    S1 ccSet_MCLIENT;Norton One Settings Manager;c:\windows\system32\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys [x]
    S1 ccSet_N360;N360 Settings Manager;c:\windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1506000.020\ccSetx64.sys [x]
    S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSvia64.sys;c:\program files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSvia64.sys [x]
    S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
    S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
    S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1506000.020\Ironx64.SYS [x]
    S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1506000.020\SYMNETS.SYS [x]
    S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
    S2 AMD_RAIDXpert;AMD RAIDXpert;c:\program files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe;c:\program files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [x]
    S2 CinemaNow Service;CinemaNow Service;c:\program files (x86)\CinemaNow\CinemaNow Media Manager\CinemanowSvc.exe;c:\program files (x86)\CinemaNow\CinemaNow Media Manager\CinemanowSvc.exe [x]
    S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
    S2 FlipShareServer;FlipShare Server;c:\program files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe;c:\program files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe [x]
    S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
    S2 HitmanProScheduler;HitmanPro Scheduler;c:\program files\HitmanPro\hmpsched.exe;c:\program files\HitmanPro\hmpsched.exe [x]
    S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
    S2 IntuitUpdateServiceV4;Intuit Update Service v4;c:\program files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe;c:\program files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe [x]
    S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
    S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
    S2 MCLIENT;Norton One;c:\program files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe;c:\program files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe [x]
    S2 N360;Norton 360;c:\program files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe;c:\program files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe [x]
    S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
    S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
    S2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe;c:\program files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [x]
    S2 PCCUJobMgr;Common Client Job Manager Service;c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe;c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [x]
    S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
    S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
    S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
    S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
    S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
    S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
    S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
    S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
    S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
    S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
    S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *NewlyCreated* - MBAMSWISSARMY
    *NewlyCreated* - WS2IFSL
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
    hpdevmgmt    REG_MULTI_SZ       hpqcxs08 hpqddsvc
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
    2011-03-04 17:29    451872    ----a-w-    c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2015-02-13 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 20:00]
    .
    2015-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-17 21:21]
    .
    2015-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-17 21:21]
    .
    2015-02-12 c:\windows\Tasks\HPCeeScheduleForRich.job
    - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 09:43]
    .
    .
    --------- X64 Entries -----------
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
    @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
    [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
    2013-01-10 16:28    244696    ----a-w-    c:\users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
    @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
    [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
    2013-01-10 16:28    244696    ----a-w-    c:\users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
    @="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
    [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
    2013-01-10 16:28    244696    ----a-w-    c:\users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
    "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2010-01-18 568888]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "NCPluginUpdater"="c:\program files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" [2015-02-04 21720]
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://finance.yahoo.com/
    uLocal Page = c:\windows\system32\blank.htm
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = *.local
    TCP: DhcpNameServer = 209.18.47.61 209.18.47.62 192.168.1.1
    DPF: {C6B95BE9-4373-4BF8-9D18-9FCEAE5563F0} - hxxps://col0-sec.mail.live.com/mail/MailMigrationCabFileHolder.aspx?n=895340653
    FF - ProfilePath - c:\users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\
    FF - prefs.js: browser.startup.homepage - about:sessionrestore|hxxp://nortonsafe.search.ask.com/web?q=roguekiller&o=apn10505&prt=360&chn=retail&geo=us&ver=21&locale=en_us&tpr=111&gct=sb&qsrc=2869|http://www.bleepingc...ance.yahoo.com/
    FF - ExtSQL: !HIDDEN! 2012-12-30 20:47; [email protected]; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF - user.js: yahoo.ytff.general.dontshowhpoffer - true);user_pref(browser.sessionstore.resume_session_once, true
    FF - user.js: extensions.incredibar_i.newTab - false
    FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6R8Rz2FYaW&loc=IB_TB&i=26&search=
    FF - user.js: extensions.incredibar_i.id - 5a0d9b2e0000000000001a659da7f5ba
    FF - user.js: extensions.incredibar_i.instlDay - 15722
    FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14
    FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14
    FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.1423:08
    FF - user.js: extensions.incredibar_i.prtnrId - Incredibar
    FF - user.js: extensions.incredibar_i.prdct - incredibar
    FF - user.js: extensions.incredibar_i.aflt - orgnl
    FF - user.js: extensions.incredibar_i.smplGrp - none
    FF - user.js: extensions.incredibar_i.tlbrId - base
    FF - user.js: extensions.incredibar_i.instlRef -
    FF - user.js: extensions.incredibar_i.dfltLng -
    FF - user.js: extensions.incredibar_i.excTlbr - false
    FF - user.js: extensions.incredibar_i.ms_url_id -
    FF - user.js: extensions.incredibar_i.upn2 - 6R8Rz2FYaW
    FF - user.js: extensions.incredibar_i.upn2n - 92825760307120974
    FF - user.js: extensions.incredibar_i.productid - 26
    FF - user.js: extensions.incredibar_i.installerproductid - 26
    FF - user.js: extensions.incredibar_i.did - 10687
    FF - user.js: extensions.incredibar_i.ppd - 116303
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    FF - user.js: browser.sessionstore.resume_session_once - true
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Wow6432Node-HKLM-Run-<NO NAME> - (no file)
    Wow6432Node-HKLM-Run-DelaypluginInstall - c:\programdata\iSkysoft\Video Converter Ultimate\DelayPluginI.exe
    Wow6432Node-HKU-Default-Run-Norton Download Manager{N360P203122-SHPD-FSD33017} - c:\program files (x86)\Norton One\Engine\3.2.0.19\ccSvcHst.exe
    HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
    AddRemove-SLABCOMM&10C4&EA60 - c:\windows\system32\Silabs\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60
    AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe
    .
    .
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MCLIENT]
    "ImagePath"="\"c:\program files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe\" /s \"MCLIENT\" /m \"c:\program files (x86)\Norton One\Engine\3.2.2.12\diMaster.dll\" /prefetch:1"
    --
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
    "ImagePath"="\"c:\program files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\diMaster.dll\" /prefetch:1"
    --
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCCUJobMgr]
    "ImagePath"="\"c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\diMaster.dll\" /prefetch:1"
    --
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
    "ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
    "ImagePath"="\SystemRoot\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS"
    "TrustedImagePaths"="c:\program files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32;c:\program files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32"
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
    @Denied: (2) (S-1-5-21-4215829332-950673753-2765580295-1001)
    @Denied: (2) (LocalSystem)
    "Progid"="ThunderbirdEML"
    .
    [HKEY_USERS\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
    @Denied: (2) (S-1-5-21-4215829332-950673753-2765580295-1001)
    @Denied: (2) (LocalSystem)
    "Progid"="WindowsLiveMail.VCard.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.16"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2015-02-13  00:09:11
    ComboFix-quarantined-files.txt  2015-02-13 05:09
    .
    Pre-Run: 828,116,783,104 bytes free
    Post-Run: 827,677,224,960 bytes free
    .
    - - End Of File - - D03A1CAACAF0EBBE2C02AD41106971B4
     


    • 0

    #6
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    Here is the TDSSKiller.txt

     

     

     

    00:23:47.0585 0x1dcc  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
    00:25:22.0845 0x1dcc  ============================================================
    00:25:22.0845 0x1dcc  Current date / time: 2015/02/13 00:25:22.0845
    00:25:22.0845 0x1dcc  SystemInfo:
    00:25:22.0845 0x1dcc  
    00:25:22.0845 0x1dcc  OS Version: 6.1.7601 ServicePack: 1.0
    00:25:22.0845 0x1dcc  Product type: Workstation
    00:25:22.0845 0x1dcc  ComputerName: PAVILIONELITE
    00:25:22.0845 0x1dcc  UserName: Rich
    00:25:22.0845 0x1dcc  Windows directory: C:\Windows
    00:25:22.0845 0x1dcc  System windows directory: C:\Windows
    00:25:22.0845 0x1dcc  Running under WOW64
    00:25:22.0845 0x1dcc  Processor architecture: Intel x64
    00:25:22.0845 0x1dcc  Number of processors: 4
    00:25:22.0845 0x1dcc  Page size: 0x1000
    00:25:22.0845 0x1dcc  Boot type: Normal boot
    00:25:22.0845 0x1dcc  ============================================================
    00:25:23.0025 0x1dcc  KLMD registered as C:\Windows\system32\drivers\61393218.sys
    00:25:23.0325 0x1dcc  System UUID: {C05544A9-E511-7F97-3EFC-8F437A619608}
    00:25:23.0815 0x1dcc  Drive \Device\Harddisk0\DR0 - Size: 0xE8D4A50000 ( 931.32 Gb ), SectorSize: 0x200, Cylinders: 0x1DAE8, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    00:25:23.0835 0x1dcc  ============================================================
    00:25:23.0835 0x1dcc  \Device\Harddisk0\DR0:
    00:25:23.0835 0x1dcc  MBR partitions:
    00:25:23.0835 0x1dcc  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
    00:25:23.0835 0x1dcc  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x72D1A800
    00:25:23.0835 0x1dcc  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x72D4D000, BlocksNum 0x1957800
    00:25:23.0835 0x1dcc  ============================================================
    00:25:23.0865 0x1dcc  C: <-> \Device\Harddisk0\DR0\Partition2
    00:25:23.0905 0x1dcc  D: <-> \Device\Harddisk0\DR0\Partition3
    00:25:23.0905 0x1dcc  ============================================================
    00:25:23.0905 0x1dcc  Initialize success
    00:25:23.0905 0x1dcc  ============================================================
    00:26:30.0971 0x1f30  ============================================================
    00:26:30.0971 0x1f30  Scan started
    00:26:30.0971 0x1f30  Mode: Manual;
    00:26:30.0971 0x1f30  ============================================================
    00:26:30.0971 0x1f30  KSN ping started
    00:26:34.0792 0x1f30  KSN ping finished: true
    00:26:35.0672 0x1f30  ================ Scan system memory ========================
    00:26:35.0672 0x1f30  System memory - ok
    00:26:35.0672 0x1f30  ================ Scan services =============================
    00:26:35.0772 0x1f30  [ 970C70F6B2953ED43822D3797855D84C, CB22723678B514277BC6E6DDDD206F3B2377CD889C9D473A47A7056BE597BC6B ] !SASCORE        C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    00:26:35.0772 0x1f30  !SASCORE - ok
    00:26:35.0952 0x1f30  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
    00:26:35.0962 0x1f30  1394ohci - ok
    00:26:36.0002 0x1f30  [ E0A8525A951ADDB4655BC2068566407D, 7C08B9DB7C281422FD64219DF81B7064CE16EA53CF00EB1FC33CB0741CE6605F ] 61883           C:\Windows\system32\DRIVERS\61883.sys
    00:26:36.0002 0x1f30  61883 - ok
    00:26:36.0022 0x1f30  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
    00:26:36.0032 0x1f30  ACPI - ok
    00:26:36.0042 0x1f30  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
    00:26:36.0042 0x1f30  AcpiPmi - ok
    00:26:36.0132 0x1f30  [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    00:26:36.0132 0x1f30  AdobeARMservice - ok
    00:26:36.0222 0x1f30  [ 080255CDCB878813B481B8C348D47D8E, 75808821FBC732D0504795B8F85852E4C01D3B412989A1E597E1295CFF7B7A45 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    00:26:36.0222 0x1f30  AdobeFlashPlayerUpdateSvc - ok
    00:26:36.0252 0x1f30  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
    00:26:36.0262 0x1f30  adp94xx - ok
    00:26:36.0292 0x1f30  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
    00:26:36.0302 0x1f30  adpahci - ok
    00:26:36.0312 0x1f30  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
    00:26:36.0322 0x1f30  adpu320 - ok
    00:26:36.0342 0x1f30  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
    00:26:36.0342 0x1f30  AeLookupSvc - ok
    00:26:36.0402 0x1f30  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
    00:26:36.0412 0x1f30  AFD - ok
    00:26:36.0422 0x1f30  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
    00:26:36.0422 0x1f30  agp440 - ok
    00:26:36.0452 0x1f30  [ AA3F73CCBF498BD56800F840D75E40E4, BBC52A9DD38ADCD071ABA1A5F0C6E5E38053D7ABC473ED153DEE49D6F2A00ABA ] ahcix64s        C:\Windows\system32\DRIVERS\ahcix64s.sys
    00:26:36.0462 0x1f30  ahcix64s - ok
    00:26:36.0472 0x1f30  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
    00:26:36.0472 0x1f30  ALG - ok
    00:26:36.0502 0x1f30  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
    00:26:36.0502 0x1f30  aliide - ok
    00:26:36.0532 0x1f30  [ F0E61CF2C0FDA5B011CD1CB2E2353C9A, B1CE3BB3ED8ED78468B11C7AFB64B0CD48C078C350F049EC9473B60F6130091E ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
    00:26:36.0532 0x1f30  AMD External Events Utility - ok
    00:26:36.0572 0x1f30  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
    00:26:36.0572 0x1f30  amdide - ok
    00:26:36.0592 0x1f30  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
    00:26:36.0592 0x1f30  AmdK8 - ok
    00:26:36.0812 0x1f30  [ CF3DB4D8B2CE0B282AB39C9D846ECA74, 1679FE9444057D8EFF1389C5EA9677B914DC269BBE447B2684A05FE4E438014A ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
    00:26:36.0922 0x1f30  amdkmdag - ok
    00:26:36.0942 0x1f30  [ 7D07DB26F6D3A16A6C8D34CE6C09FD01, 6ABE6D29ABA9F1E3A08A2FE7E5C1AF304093A8FE148340F5DA5A4F7C20F44753 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
    00:26:36.0952 0x1f30  amdkmdap - ok
    00:26:36.0962 0x1f30  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
    00:26:36.0962 0x1f30  AmdPPM - ok
    00:26:36.0992 0x1f30  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
    00:26:36.0992 0x1f30  amdsata - ok
    00:26:37.0002 0x1f30  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
    00:26:37.0012 0x1f30  amdsbs - ok
    00:26:37.0032 0x1f30  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
    00:26:37.0032 0x1f30  amdxata - ok
    00:26:37.0082 0x1f30  [ B9C95291F5EA1072CEC2BA690E07F29F, 1FC75E20B31680667A5FE4E0AB5ADD6CFE7016A3B9E975E92EAA192689684E54 ] AMD_RAIDXpert   C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
    00:26:37.0082 0x1f30  AMD_RAIDXpert - ok
    00:26:37.0132 0x1f30  [ 80B9412C4DE09147581FC935FB4C97AB, 0C9661F7B5EF7F9D61981790B7AB64E3375BD117962166619D0CC546A2D014D3 ] AppID           C:\Windows\system32\drivers\appid.sys
    00:26:37.0132 0x1f30  AppID - ok
    00:26:37.0142 0x1f30  [ F71CA01C24FC3798A717B5A6F682F9AD, 8CF1C209E7BBBAD02D6D087293C0B681CDA3170AF119CA2916C2708D8801E749 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
    00:26:37.0142 0x1f30  AppIDSvc - ok
    00:26:37.0172 0x1f30  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
    00:26:37.0172 0x1f30  Appinfo - ok
    00:26:37.0252 0x1f30  [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    00:26:37.0252 0x1f30  Apple Mobile Device - ok
    00:26:37.0302 0x1f30  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys
    00:26:37.0302 0x1f30  arc - ok
    00:26:37.0322 0x1f30  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
    00:26:37.0322 0x1f30  arcsas - ok
    00:26:37.0402 0x1f30  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
    00:26:37.0402 0x1f30  aspnet_state - ok
    00:26:37.0432 0x1f30  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
    00:26:37.0432 0x1f30  AsyncMac - ok
    00:26:37.0462 0x1f30  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
    00:26:37.0462 0x1f30  atapi - ok
    00:26:37.0532 0x1f30  [ F8633CDD09647A64EE8DB550630427FF, 565F32E6B1E8451B2DD866E4997336A47B8DC6669392BDAAF252C35C0383E8A3 ] athr            C:\Windows\system32\DRIVERS\athrx.sys
    00:26:37.0562 0x1f30  athr - ok
    00:26:37.0602 0x1f30  [ 637E0753BD6DEB8EA5314A5C357EC1A0, 2B479DBBF72A2AFB3DC65A3FDA30B628BC9FB21160EBD7E1BE44404C671B1D08 ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys
    00:26:37.0602 0x1f30  AtiHdmiService - ok
    00:26:37.0632 0x1f30  [ E82E61F46D1336447F4DEFF8C074F13E, 9FC152B33F1D9F5684B687743E943AA26AC17A1093F4C31A43C7012E70BC302E ] AtiPcie         C:\Windows\system32\DRIVERS\AtiPcie64.sys
    00:26:37.0632 0x1f30  AtiPcie - ok
    00:26:37.0692 0x1f30  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
    00:26:37.0702 0x1f30  AudioEndpointBuilder - ok
    00:26:37.0722 0x1f30  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv        C:\Windows\System32\Audiosrv.dll
    00:26:37.0732 0x1f30  AudioSrv - ok
    00:26:37.0772 0x1f30  [ 16FABE84916623D0607E4A975544032C, 9D960CAE27B1769ED5B024C0A3375912432521C73C1F59E21111596A7981BDC3 ] Avc             C:\Windows\system32\DRIVERS\avc.sys
    00:26:37.0772 0x1f30  Avc - ok
    00:26:37.0822 0x1f30  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
    00:26:37.0832 0x1f30  AxInstSV - ok
    00:26:37.0862 0x1f30  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
    00:26:37.0872 0x1f30  b06bdrv - ok
    00:26:37.0892 0x1f30  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
    00:26:37.0902 0x1f30  b57nd60a - ok
    00:26:37.0962 0x1f30  [ 825F81A6F7DD073509DB101F0BA6DC59, 25555D1DDB223DD10C328E4FC4A55698607004A9FA6C55DA3317AC2400897E94 ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
    00:26:37.0962 0x1f30  BBSvc - ok
    00:26:37.0992 0x1f30  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
    00:26:37.0992 0x1f30  BDESVC - ok
    00:26:38.0012 0x1f30  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
    00:26:38.0012 0x1f30  Beep - ok
    00:26:38.0072 0x1f30  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
    00:26:38.0082 0x1f30  BFE - ok
    00:26:38.0262 0x1f30  [ 99EE5EB9FCBAD85F1992C47C5BB68649, 604B618F0106B09207B262E22E70E152C4104FB2602C009F19EBEB342D0E9CE7 ] BHDrvx64        C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys
    00:26:38.0282 0x1f30  BHDrvx64 - ok
    00:26:38.0312 0x1f30  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\system32\qmgr.dll
    00:26:38.0332 0x1f30  BITS - ok
    00:26:38.0342 0x1f30  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
    00:26:38.0342 0x1f30  blbdrive - ok
    00:26:38.0402 0x1f30  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
    00:26:38.0412 0x1f30  Bonjour Service - ok
    00:26:38.0442 0x1f30  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
    00:26:38.0452 0x1f30  bowser - ok
    00:26:38.0472 0x1f30  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
    00:26:38.0472 0x1f30  BrFiltLo - ok
    00:26:38.0482 0x1f30  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
    00:26:38.0482 0x1f30  BrFiltUp - ok
    00:26:38.0512 0x1f30  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
    00:26:38.0512 0x1f30  BridgeMP - ok
    00:26:38.0552 0x1f30  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
    00:26:38.0552 0x1f30  Browser - ok
    00:26:38.0572 0x1f30  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
    00:26:38.0572 0x1f30  Brserid - ok
    00:26:38.0592 0x1f30  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
    00:26:38.0592 0x1f30  BrSerWdm - ok
    00:26:38.0612 0x1f30  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
    00:26:38.0612 0x1f30  BrUsbMdm - ok
    00:26:38.0622 0x1f30  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
    00:26:38.0622 0x1f30  BrUsbSer - ok
    00:26:38.0652 0x1f30  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
    00:26:38.0652 0x1f30  BTHMODEM - ok
    00:26:38.0692 0x1f30  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
    00:26:38.0692 0x1f30  bthserv - ok
    00:26:38.0742 0x1f30  [ 248C952C82DF1E23775432774CBB20F1, D04D382E7963B84E4856534A2FA209787FEBA2B6F21F579CA8F7C6BE4AA10072 ] ccSet_MCLIENT   C:\Windows\system32\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys
    00:26:38.0742 0x1f30  ccSet_MCLIENT - ok
    00:26:38.0802 0x1f30  [ 0510396A957E9FD7205BA62D3CAE4528, C80C39EB3A87C5111132E96E966CF74ACABA36DE7714B545A707027D35995792 ] ccSet_N360      C:\Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys
    00:26:38.0802 0x1f30  ccSet_N360 - ok
    00:26:38.0832 0x1f30  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
    00:26:38.0832 0x1f30  cdfs - ok
    00:26:38.0872 0x1f30  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
    00:26:38.0872 0x1f30  cdrom - ok
    00:26:38.0912 0x1f30  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
    00:26:38.0912 0x1f30  CertPropSvc - ok
    00:26:38.0952 0x1f30  [ EA3333DB9AB03106EEC0D6D9D487ED01, 4102A1D212221800CD83DCAFAF54BA55140AAB4A490F3779624F1EE832B04441 ] CinemaNow Service C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemanowSvc.exe
    00:26:38.0962 0x1f30  CinemaNow Service - ok
    00:26:38.0972 0x1f30  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
    00:26:38.0972 0x1f30  circlass - ok
    00:26:38.0992 0x1f30  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys
    00:26:39.0002 0x1f30  CLFS - ok
    00:26:39.0052 0x1f30  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    00:26:39.0052 0x1f30  clr_optimization_v2.0.50727_32 - ok
    00:26:39.0092 0x1f30  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    00:26:39.0102 0x1f30  clr_optimization_v2.0.50727_64 - ok
    00:26:39.0172 0x1f30  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    00:26:39.0172 0x1f30  clr_optimization_v4.0.30319_32 - ok
    00:26:39.0202 0x1f30  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    00:26:39.0202 0x1f30  clr_optimization_v4.0.30319_64 - ok
    00:26:39.0212 0x1f30  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
    00:26:39.0212 0x1f30  CmBatt - ok
    00:26:39.0252 0x1f30  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
    00:26:39.0252 0x1f30  cmdide - ok
    00:26:39.0282 0x1f30  [ E45CDE1C8340DFEDF1D6724263F39E5B, 8B8091D0A8FF08170F34DA01A4201DAE7C3D026226BC77B5C2EC67657C670168 ] CNG             C:\Windows\system32\Drivers\cng.sys
    00:26:39.0292 0x1f30  CNG - ok
    00:26:39.0312 0x1f30  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
    00:26:39.0312 0x1f30  Compbatt - ok
    00:26:39.0352 0x1f30  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
    00:26:39.0352 0x1f30  CompositeBus - ok
    00:26:39.0352 0x1f30  COMSysApp - ok
    00:26:39.0372 0x1f30  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
    00:26:39.0372 0x1f30  crcdisk - ok
    00:26:39.0432 0x1f30  [ 19D511CC455C19DE1ADF60E6C39C85B6, 2A05DD5EF3D0BEC2C9F4EA186E0E2D0F7BE0BF6A473D51194B09D33773AC7FAA ] CryptSvc        C:\Windows\system32\cryptsvc.dll
    00:26:39.0432 0x1f30  CryptSvc - ok
    00:26:39.0512 0x1f30  [ FD557A50A65E44041CD2FCEF4BEB04DB, 746D5958F7198895D35A23566D3736D993D57726BF59D91421D8091C48926A26 ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
    00:26:39.0522 0x1f30  cvhsvc - ok
    00:26:39.0572 0x1f30  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
    00:26:39.0582 0x1f30  DcomLaunch - ok
    00:26:39.0602 0x1f30  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
    00:26:39.0612 0x1f30  defragsvc - ok
    00:26:39.0642 0x1f30  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
    00:26:39.0652 0x1f30  DfsC - ok
    00:26:39.0702 0x1f30  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
    00:26:39.0702 0x1f30  Dhcp - ok
    00:26:39.0712 0x1f30  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
    00:26:39.0712 0x1f30  discache - ok
    00:26:39.0742 0x1f30  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
    00:26:39.0742 0x1f30  Disk - ok
    00:26:39.0782 0x1f30  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
    00:26:39.0782 0x1f30  Dnscache - ok
    00:26:39.0812 0x1f30  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
    00:26:39.0822 0x1f30  dot3svc - ok
    00:26:39.0862 0x1f30  [ B42ED0320C6E41102FDE0005154849BB, 4DB872E23AD049C3C9FDC0759FC58BFA60DA91B18BC82B611BFA300D26DDFC7A ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys
    00:26:39.0872 0x1f30  Dot4 - ok
    00:26:39.0912 0x1f30  [ E9F5969233C5D89F3C35E3A66A52A361, C4BD35795C78FB11E6022372CB25DEB570730EFDAD3DC1584368235FF622638C ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys
    00:26:39.0912 0x1f30  Dot4Print - ok
    00:26:39.0942 0x1f30  [ FD05A02B0370BC3000F402E543CA5814, 089B1113E640F495F470E8F57060B89546270481B309DC8ED3C3D13A849076A3 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys
    00:26:39.0942 0x1f30  dot4usb - ok
    00:26:39.0972 0x1f30  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
    00:26:39.0972 0x1f30  DPS - ok
    00:26:40.0002 0x1f30  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
    00:26:40.0002 0x1f30  drmkaud - ok
    00:26:40.0052 0x1f30  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
    00:26:40.0072 0x1f30  DXGKrnl - ok
    00:26:40.0092 0x1f30  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
    00:26:40.0092 0x1f30  EapHost - ok
    00:26:40.0192 0x1f30  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
    00:26:40.0252 0x1f30  ebdrv - ok
    00:26:40.0342 0x1f30  [ 47A68B3DBBB34D4FE61DE221A8536627, BC61CE4BD4F3A12C75BA6EB9D239F24CD3F54495DE9D6C901F4DAF5D92E8366B ] eeCtrl          C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
    00:26:40.0352 0x1f30  eeCtrl - ok
    00:26:40.0382 0x1f30  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] EFS             C:\Windows\System32\lsass.exe
    00:26:40.0382 0x1f30  EFS - ok
    00:26:40.0452 0x1f30  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
    00:26:40.0462 0x1f30  ehRecvr - ok
    00:26:40.0482 0x1f30  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
    00:26:40.0482 0x1f30  ehSched - ok
    00:26:40.0522 0x1f30  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
    00:26:40.0532 0x1f30  elxstor - ok
    00:26:40.0582 0x1f30  [ B9773081AAF65E6D553496BA0CADCBB3, 3A77A12544755BFA1ABAA6DC53E5F03522627F57EF7092E3CC54C6431C75076A ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
    00:26:40.0582 0x1f30  EraserUtilRebootDrv - ok
    00:26:40.0602 0x1f30  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
    00:26:40.0612 0x1f30  ErrDev - ok
    00:26:40.0642 0x1f30  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
    00:26:40.0642 0x1f30  EventSystem - ok
    00:26:40.0672 0x1f30  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
    00:26:40.0672 0x1f30  exfat - ok
    00:26:40.0692 0x1f30  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
    00:26:40.0702 0x1f30  fastfat - ok
    00:26:40.0742 0x1f30  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
    00:26:40.0752 0x1f30  Fax - ok
    00:26:40.0772 0x1f30  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
    00:26:40.0782 0x1f30  fdc - ok
    00:26:40.0792 0x1f30  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
    00:26:40.0802 0x1f30  fdPHost - ok
    00:26:40.0802 0x1f30  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
    00:26:40.0802 0x1f30  FDResPub - ok
    00:26:40.0822 0x1f30  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
    00:26:40.0822 0x1f30  FileInfo - ok
    00:26:40.0832 0x1f30  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
    00:26:40.0832 0x1f30  Filetrace - ok
    00:26:40.0912 0x1f30  [ B8602C90D3C427D8A86CE60437615CF5, E8058E71FD60D21884CBCF398338A65A92926BAC406F96713A262BDFDD04C80A ] FlipShare Service C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
    00:26:40.0912 0x1f30  FlipShare Service - ok
    00:26:40.0952 0x1f30  [ AC5FB7094F31534594CAE48306972CBD, DB5A0F63EF6ABF68B1A952A05646A163A5C075E3571682FC1C4B32918E1569FC ] FlipShareServer C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe
    00:26:40.0962 0x1d04  Object required for P2P: [ 637E0753BD6DEB8EA5314A5C357EC1A0 ] AtiHdmiService
    00:26:40.0972 0x1f30  FlipShareServer - ok
    00:26:41.0002 0x1f30  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
    00:26:41.0002 0x1f30  flpydisk - ok
    00:26:41.0042 0x1f30  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
    00:26:41.0052 0x1f30  FltMgr - ok
    00:26:41.0092 0x1f30  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll
    00:26:41.0112 0x1f30  FontCache - ok
    00:26:41.0132 0x1f30  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    00:26:41.0132 0x1f30  FontCache3.0.0.0 - ok
    00:26:41.0152 0x1f30  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
    00:26:41.0152 0x1f30  FsDepends - ok
    00:26:41.0182 0x1f30  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
    00:26:41.0182 0x1f30  Fs_Rec - ok
    00:26:41.0222 0x1f30  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
    00:26:41.0232 0x1f30  fvevol - ok
    00:26:41.0242 0x1f30  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
    00:26:41.0242 0x1f30  gagp30kx - ok
    00:26:41.0362 0x1f30  [ CE16683CFD11FE70BDE435DDA5EA1FCA, 43D850361F2B5C9389F7FABC3C62BD1517349C03834F436579DD01CFD09919F4 ] GameConsoleService C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
    00:26:41.0362 0x1f30  GameConsoleService - ok
    00:26:41.0452 0x1f30  [ 876D29312C0A297EEE28F3DA30A994E8, 09FD1AA8BA3BD8222CAB1FB915EF673D7A1C1604B0D7E78AB5F3A965D9D94886 ] Garmin Core Update Service C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
    00:26:41.0452 0x1f30  Garmin Core Update Service - ok
    00:26:41.0522 0x1f30  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
    00:26:41.0522 0x1f30  GEARAspiWDM - ok
    00:26:41.0552 0x1f30  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
    00:26:41.0572 0x1f30  gpsvc - ok
    00:26:41.0592 0x1f30  [ CD007D03A9284BFE67D49C01213132BF, ED8729C1E0E0ADA47B43659184BA7959898C1622F13B0AAFE1F1C08C04111099 ] grmnusb         C:\Windows\system32\drivers\grmnusb.sys
    00:26:41.0592 0x1f30  grmnusb - ok
    00:26:41.0682 0x1f30  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    00:26:41.0682 0x1f30  gupdate - ok
    00:26:41.0692 0x1f30  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    00:26:41.0692 0x1f30  gupdatem - ok
    00:26:41.0722 0x1f30  [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
    00:26:41.0722 0x1f30  gusvc - ok
    00:26:41.0732 0x1f30  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
    00:26:41.0732 0x1f30  hcw85cir - ok
    00:26:41.0762 0x1f30  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
    00:26:41.0772 0x1f30  HdAudAddService - ok
    00:26:41.0792 0x1f30  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
    00:26:41.0792 0x1f30  HDAudBus - ok
    00:26:41.0802 0x1f30  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
    00:26:41.0802 0x1f30  HidBatt - ok
    00:26:41.0822 0x1f30  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
    00:26:41.0822 0x1f30  HidBth - ok
    00:26:41.0832 0x1f30  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
    00:26:41.0842 0x1f30  HidIr - ok
    00:26:41.0872 0x1f30  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\System32\hidserv.dll
    00:26:41.0872 0x1f30  hidserv - ok
    00:26:41.0952 0x1f30  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
    00:26:41.0952 0x1f30  HidUsb - ok
    00:26:42.0002 0x1f30  [ B844412DEEDF78CBA2A0FD850A575A81, 8980948E62A99F7EA03EB9685EAB1B1CA4844BA1D9FD73FA1F96D3AC0D0B956F ] HitmanProScheduler C:\Program Files\HitmanPro\hmpsched.exe
    00:26:42.0002 0x1f30  HitmanProScheduler - ok
    00:26:42.0032 0x1f30  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
    00:26:42.0032 0x1f30  hkmsvc - ok
    00:26:42.0072 0x1f30  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
    00:26:42.0072 0x1f30  HomeGroupListener - ok
    00:26:42.0112 0x1f30  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
    00:26:42.0112 0x1f30  HomeGroupProvider - ok
    00:26:42.0162 0x1f30  [ 2A8B93A01621E100A578E83C768AFA2C, 6637D260AF180D1F200D219796FCE6D524FC6BF57C0CEEF9E1B3616E85865AD1 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
    00:26:42.0162 0x1f30  HP Support Assistant Service - ok
    00:26:42.0253 0x1f30  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05, 7B3F117C1D606DDA7623BEC0BFBC362C33A12213E899F049AC56A55826984134 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
    00:26:42.0253 0x1f30  hpqcxs08 - ok
    00:26:42.0293 0x1f30  [ 75CC8C5146A3FB76221A7606628778D5, 2FDD943E22E38083639DF61335DEFE9C38685158D8BF0528834C1B657DC1DE6F ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
    00:26:42.0293 0x1f30  hpqddsvc - ok
    00:26:42.0363 0x1f30  [ D2946D9F020AE76E9CEF9B4A6DF838C0, C29CE594879385DA12B8EAA90B258905827B613839CCD820DE49215B68676995 ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
    00:26:42.0383 0x1f30  hpqwmiex - ok
    00:26:42.0443 0x1f30  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
    00:26:42.0443 0x1f30  HpSAMD - ok
    00:26:42.0523 0x1f30  [ F37882F128EFACEFE353E0BAE2766909, 2F9D21613500F092DFC0DB879180B549EE615D9B07408A5CC1A7F84663B2F47A ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
    00:26:42.0543 0x1f30  HPSLPSVC - ok
    00:26:42.0613 0x1f30  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
    00:26:42.0623 0x1f30  HTTP - ok
    00:26:42.0653 0x1f30  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
    00:26:42.0653 0x1f30  hwpolicy - ok
    00:26:42.0703 0x1f30  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
    00:26:42.0703 0x1f30  i8042prt - ok
    00:26:42.0753 0x1f30  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
    00:26:42.0763 0x1f30  iaStorV - ok
    00:26:42.0823 0x1f30  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    00:26:42.0833 0x1f30  idsvc - ok
    00:26:42.0933 0x1f30  [ EB1118C371A096FFD4275EB85CB9EC2E, 9A697FFA7874279D26B71F1294858B8F91CB9782E40AB963AA417AFF4FFD3889 ] IDSVia64        C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSvia64.sys
    00:26:42.0943 0x1f30  IDSVia64 - ok
    00:26:42.0983 0x1f30  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
    00:26:42.0983 0x1f30  iirsp - ok
    00:26:43.0033 0x1f30  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
    00:26:43.0053 0x1f30  IKEEXT - ok
    00:26:43.0133 0x1f30  [ 2B888BBDF6962E608A5E1A1D7A626ADF, FF747B0D37FCE8CE8ED76532658AB325734D8F475A322884DB25729C4F8E2B50 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
    00:26:43.0163 0x1f30  IntcAzAudAddService - ok
    00:26:43.0203 0x1f30  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
    00:26:43.0203 0x1f30  intelide - ok
    00:26:43.0223 0x1f30  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
    00:26:43.0223 0x1f30  intelppm - ok
    00:26:43.0293 0x1f30  [ 0895CDD7F1542FFCC5BBB560EC78BC16, 383D9FFE7FB313EA201DE877F3D48B5116FFA261EDEF5D0D0FE79F14E9682D25 ] IntuitUpdateServiceV4 C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
    00:26:43.0293 0x1f30  IntuitUpdateServiceV4 - ok
    00:26:43.0323 0x1f30  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
    00:26:43.0323 0x1f30  IPBusEnum - ok
    00:26:43.0353 0x1f30  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
    00:26:43.0363 0x1f30  IpFilterDriver - ok
    00:26:43.0403 0x1f30  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
    00:26:43.0413 0x1f30  iphlpsvc - ok
    00:26:43.0443 0x1f30  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
    00:26:43.0453 0x1f30  IPMIDRV - ok
    00:26:43.0463 0x1f30  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
    00:26:43.0463 0x1f30  IPNAT - ok
    00:26:43.0513 0x1f30  [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
    00:26:43.0523 0x1f30  iPod Service - ok
    00:26:43.0543 0x1f30  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
    00:26:43.0543 0x1f30  IRENUM - ok
    00:26:43.0563 0x1f30  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
    00:26:43.0563 0x1f30  isapnp - ok
    00:26:43.0603 0x1f30  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
    00:26:43.0603 0x1f30  iScsiPrt - ok
    00:26:43.0623 0x1f30  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
    00:26:43.0623 0x1f30  kbdclass - ok
    00:26:43.0633 0x1f30  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
    00:26:43.0633 0x1f30  kbdhid - ok
    00:26:43.0663 0x1f30  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] KeyIso          C:\Windows\system32\lsass.exe
    00:26:43.0663 0x1f30  KeyIso - ok
    00:26:43.0703 0x1f30  [ C60C6B9A2E50B0404F6789C62B428C03, 0DFFAACBA038FB3D994049E7BBC8E0C63CB8B4A68C4AB770AD995B66B017C25B ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
    00:26:43.0703 0x1f30  KSecDD - ok
    00:26:43.0713 0x1f30  [ 78D152A9FD5747FF6AA89C79F0346F62, 69138077E84E5324751E3C8B80D05BE58EDF03CEC84F69B734537F10F6998F3B ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
    00:26:43.0713 0x1f30  KSecPkg - ok
    00:26:43.0723 0x1f30  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
    00:26:43.0723 0x1f30  ksthunk - ok
    00:26:43.0753 0x1f30  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
    00:26:43.0753 0x1f30  KtmRm - ok
    00:26:43.0793 0x1f30  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll
    00:26:43.0793 0x1f30  LanmanServer - ok
    00:26:43.0823 0x1f30  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
    00:26:43.0833 0x1f30  LanmanWorkstation - ok
    00:26:43.0873 0x1f30  [ C34411A244029F1C08687F7C752C4563, 4FC1D6156D760AE8138547262B33677118BD9369F4930F5C5F9BAA2FE6E78EA3 ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    00:26:43.0873 0x1f30  LightScribeService - ok
    00:26:43.0903 0x1f30  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
    00:26:43.0903 0x1f30  lltdio - ok
    00:26:43.0933 0x1f30  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
    00:26:43.0933 0x1f30  lltdsvc - ok
    00:26:43.0953 0x1f30  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
    00:26:43.0953 0x1f30  lmhosts - ok
    00:26:43.0973 0x1f30  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
    00:26:43.0973 0x1f30  LSI_FC - ok
    00:26:43.0993 0x1f30  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
    00:26:43.0993 0x1f30  LSI_SAS - ok
    00:26:44.0003 0x1f30  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
    00:26:44.0003 0x1f30  LSI_SAS2 - ok
    00:26:44.0023 0x1f30  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
    00:26:44.0023 0x1f30  LSI_SCSI - ok
    00:26:44.0043 0x1f30  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
    00:26:44.0043 0x1f30  luafv - ok
    00:26:44.0093 0x1f30  [ CA43F8904E24BBE49982E4C0B29E6579, 2E3E6D02980706061C478C1643F8838310DDAC573C8722AE7F3290CE36B02CB2 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
    00:26:44.0093 0x1f30  MBAMProtector - ok
    00:26:44.0183 0x1f30  [ 0BB29DE40C9D9529793DCDB59A43CF5B, 251001A407D32EF22F64915EEFFAAEC229073C4549BF7D9D1D4209B7D15B4681 ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    00:26:44.0223 0x1f30  MBAMScheduler - ok
    00:26:44.0263 0x1f30  [ 5F82D8188B370B0CF185D4AE2B9B4A0E, 549B53DD989A069E1C38347C4CEF5283DF9B428CE102799B06A20D3D8F23825F ] MBAMService     C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    00:26:44.0273 0x1f30  MBAMService - ok
    00:26:44.0323 0x1f30  [ 26C43960C99EE861A5D0EDC4DCF3B1C3, 6238FB8E785652040CCE3E7044EA52066CE1BF173A1467474D64A3AB214B6BCD ] MBAMSwissArmy   C:\Windows\system32\drivers\MBAMSwissArmy.sys
    00:26:44.0323 0x1f30  MBAMSwissArmy - ok
    00:26:44.0343 0x1f30  [ A646C2DDB8C46E9B20A326FAF566646C, F46E3BF392CB4EB53D323BC8CC41EFBB9C5D7C935FECF255F524EB18583A2A37 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
    00:26:44.0343 0x1f30  MBAMWebAccessControl - ok
    00:26:44.0423 0x1f30  [ 4BA84C832E0741A294C4444556DFE993, 2CC888C85887F0F3EB5395075B9C65FF1307D98608BDC1D88ACE4A375DD9DFD9 ] MCLIENT         C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe
    00:26:44.0423 0x1f30  MCLIENT - ok
    00:26:44.0443 0x1f30  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
    00:26:44.0443 0x1f30  Mcx2Svc - ok
    00:26:44.0463 0x1f30  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
    00:26:44.0463 0x1f30  megasas - ok
    00:26:44.0483 0x1f30  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
    00:26:44.0493 0x1f30  MegaSR - ok
    00:26:44.0513 0x1f30  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
    00:26:44.0513 0x1f30  MMCSS - ok
    00:26:44.0533 0x1f30  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
    00:26:44.0533 0x1f30  Modem - ok
    00:26:44.0563 0x1f30  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
    00:26:44.0563 0x1f30  monitor - ok
    00:26:44.0593 0x1f30  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
    00:26:44.0593 0x1f30  mouclass - ok
    00:26:44.0603 0x1f30  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
    00:26:44.0603 0x1f30  mouhid - ok
    00:26:44.0643 0x1f30  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
    00:26:44.0643 0x1f30  mountmgr - ok
    00:26:44.0713 0x1f30  [ 345477F02C308B7480702767218C86A2, 98AFB5CF35BD82BA44B8F52CBC5FA3760506ADD7892C2AA1A77E8DF71FC8523F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    00:26:44.0713 0x1f30  MozillaMaintenance - ok
    00:26:44.0723 0x1f30  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
    00:26:44.0723 0x1f30  mpio - ok
    00:26:44.0743 0x1f30  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
    00:26:44.0743 0x1f30  mpsdrv - ok
    00:26:44.0793 0x1f30  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
    00:26:44.0813 0x1f30  MpsSvc - ok
    00:26:44.0853 0x1f30  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
    00:26:44.0853 0x1f30  MRxDAV - ok
    00:26:44.0883 0x1f30  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
    00:26:44.0883 0x1f30  mrxsmb - ok
    00:26:44.0913 0x1f30  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
    00:26:44.0923 0x1f30  mrxsmb10 - ok
    00:26:44.0953 0x1f30  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
    00:26:44.0953 0x1f30  mrxsmb20 - ok
    00:26:44.0983 0x1f30  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
    00:26:44.0983 0x1f30  msahci - ok
    00:26:45.0003 0x1f30  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
    00:26:45.0003 0x1f30  msdsm - ok
    00:26:45.0023 0x1f30  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
    00:26:45.0023 0x1f30  MSDTC - ok
    00:26:45.0073 0x1f30  [ 72949A24D37A20A54B3D4D3DADBB55E9, 580B59EF2DFA4F6EE27BA37904F0705CBCD74F9B07D2D795093C045F94AE6DB5 ] MSDV            C:\Windows\system32\DRIVERS\msdv.sys
    00:26:45.0073 0x1f30  MSDV - ok
    00:26:45.0083 0x1f30  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
    00:26:45.0083 0x1f30  Msfs - ok
    00:26:45.0093 0x1f30  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
    00:26:45.0093 0x1f30  mshidkmdf - ok
    00:26:45.0103 0x1f30  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
    00:26:45.0103 0x1f30  msisadrv - ok
    00:26:45.0143 0x1f30  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
    00:26:45.0143 0x1f30  MSiSCSI - ok
    00:26:45.0143 0x1f30  msiserver - ok
    00:26:45.0183 0x1f30  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
    00:26:45.0183 0x1f30  MSKSSRV - ok
    00:26:45.0193 0x1f30  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
    00:26:45.0193 0x1f30  MSPCLOCK - ok
    00:26:45.0213 0x1f30  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
    00:26:45.0213 0x1f30  MSPQM - ok
    00:26:45.0253 0x1f30  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
    00:26:45.0253 0x1f30  MsRPC - ok
    00:26:45.0273 0x1f30  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
    00:26:45.0273 0x1f30  mssmbios - ok
    00:26:45.0283 0x1f30  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
    00:26:45.0283 0x1f30  MSTEE - ok
    00:26:45.0303 0x1f30  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
    00:26:45.0303 0x1f30  MTConfig - ok
    00:26:45.0323 0x1f30  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
    00:26:45.0323 0x1f30  Mup - ok
    00:26:45.0473 0x1f30  [ A0C88349651D9F5421AFD363C27102E8, 71D5F7EDAF47AB1376444CB648BFD86CEA36735EE42A9935BDB876DF8F765F45 ] N360            C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe
    00:26:45.0473 0x1f30  N360 - ok
    00:26:45.0503 0x1f30  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
    00:26:45.0513 0x1f30  napagent - ok
    00:26:45.0533 0x1f30  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
    00:26:45.0543 0x1f30  NativeWifiP - ok
    00:26:45.0633 0x1f30  [ E0E4A1F81A7D69C595A8A9DDAD084C19, 8F55F3637AE8BFFB0ACE37AFC5122026525137E0B2923899B779C1BD08DF0E22 ] NAUpdate        C:\Program Files (x86)\Nero\Update\NASvc.exe
    00:26:45.0653 0x1f30  NAUpdate - ok
    00:26:45.0763 0x1f30  [ 54F4B358F41C664CBDE4507D67EED1CD, CDCA0A778AF596933CD7CBF1119FCA551ECC03CBBD4F1E8213C3FD2FECA902F2 ] NAVENG          C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\ENG64.SYS
    00:26:45.0773 0x1f30  NAVENG - ok
    00:26:45.0833 0x1f30  [ A74D67EEEB3938FD2FA3B65B24C32C44, 4D780B70B57E23A3A155794C4DEEBD856E32D35B789BDF4673AAC8FC3AC4367B ] NAVEX15         C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\EX64.SYS
    00:26:45.0863 0x1f30  NAVEX15 - ok
    00:26:45.0933 0x1f30  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
    00:26:45.0953 0x1f30  NDIS - ok
    00:26:45.0973 0x1f30  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
    00:26:45.0973 0x1f30  NdisCap - ok
    00:26:45.0993 0x1f30  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
    00:26:45.0993 0x1f30  NdisTapi - ok
    00:26:46.0023 0x1f30  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
    00:26:46.0023 0x1f30  Ndisuio - ok
    00:26:46.0063 0x1f30  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
    00:26:46.0063 0x1f30  NdisWan - ok
    00:26:46.0093 0x1f30  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
    00:26:46.0093 0x1f30  NDProxy - ok
    00:26:46.0123 0x1f30  [ 2334DC48997BA203B794DF3EE70521DB, 832F4EC1586C9669F2D54AB3B212943E43B87A33B24DCC8CDAD6A0264291EE2F ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
    00:26:46.0123 0x1f30  Net Driver HPZ12 - ok
    00:26:46.0133 0x1f30  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
    00:26:46.0133 0x1f30  NetBIOS - ok
    00:26:46.0173 0x1f30  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
    00:26:46.0183 0x1f30  NetBT - ok
    00:26:46.0183 0x1f30  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] Netlogon        C:\Windows\system32\lsass.exe
    00:26:46.0193 0x1f30  Netlogon - ok
    00:26:46.0213 0x1f30  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
    00:26:46.0223 0x1f30  Netman - ok
    00:26:46.0283 0x1f30  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:26:46.0283 0x1f30  NetMsmqActivator - ok
    00:26:46.0293 0x1f30  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:26:46.0293 0x1f30  NetPipeActivator - ok
    00:26:46.0323 0x1f30  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
    00:26:46.0333 0x1f30  netprofm - ok
    00:26:46.0353 0x1f30  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:26:46.0353 0x1f30  NetTcpActivator - ok
    00:26:46.0353 0x1f30  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:26:46.0363 0x1f30  NetTcpPortSharing - ok
    00:26:46.0383 0x1f30  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
    00:26:46.0383 0x1f30  nfrd960 - ok
    00:26:46.0423 0x1f30  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
    00:26:46.0423 0x1f30  NlaSvc - ok
    00:26:46.0533 0x1f30  [ 5839A8027D6D324A7CD494051A96628C, 474F2D0BB463ABE68D7C4D2C630860AED4B722EC62C616C91EE00AA965378382 ] NOBU            C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
    00:26:46.0583 0x1f30  NOBU - ok
    00:26:46.0623 0x1f30  Norton PC Checkup Application Launcher - ok
    00:26:46.0633 0x1f30  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
    00:26:46.0633 0x1f30  Npfs - ok
    00:26:46.0643 0x1f30  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
    00:26:46.0643 0x1f30  nsi - ok
    00:26:46.0653 0x1f30  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
    00:26:46.0653 0x1f30  nsiproxy - ok
    00:26:46.0723 0x1f30  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
    00:26:46.0753 0x1f30  Ntfs - ok
    00:26:46.0773 0x1f30  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
    00:26:46.0773 0x1f30  Null - ok
    00:26:46.0793 0x1f30  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
    00:26:46.0793 0x1f30  nvraid - ok
    00:26:46.0823 0x1f30  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
    00:26:46.0823 0x1f30  nvstor - ok
    00:26:46.0843 0x1f30  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
    00:26:46.0843 0x1f30  nv_agp - ok
    00:26:46.0873 0x1f30  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
    00:26:46.0873 0x1f30  ohci1394 - ok
    00:26:46.0913 0x1f30  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    00:26:46.0923 0x1f30  ose - ok
    00:26:47.0073 0x1f30  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
    00:26:47.0163 0x1f30  osppsvc - ok
    00:26:47.0203 0x1f30  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
    00:26:47.0203 0x1f30  p2pimsvc - ok
    00:26:47.0223 0x1f30  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
    00:26:47.0233 0x1f30  p2psvc - ok
    00:26:47.0253 0x1f30  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
    00:26:47.0253 0x1f30  Parport - ok
    00:26:47.0283 0x1f30  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
    00:26:47.0283 0x1f30  partmgr - ok
    00:26:47.0313 0x1f30  [ 256390425414F90FCBC12F525A84EB11, A4992020BF6A239AD8A77125426E2C39980C9ABC971C4DBCB24B358F946AD7F9 ] PcaSvc          C:\Windows\System32\pcasvc.dll
    00:26:47.0323 0x1f30  PcaSvc - ok
    00:26:47.0363 0x1f30  [ 2F86BE1818C2D7AC90478E3323EE7FCB, CE721FCFFDC9D24483DEB6BB77DAFEBE79BA143CA2EE68BF28E2A9297AADB2D4 ] PCCUJobMgr      C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe
    00:26:47.0373 0x1f30  PCCUJobMgr - ok
    00:26:47.0383 0x1f30  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
    00:26:47.0383 0x1f30  pci - ok
    00:26:47.0423 0x1f30  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
    00:26:47.0423 0x1f30  pciide - ok
    00:26:47.0433 0x1f30  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
    00:26:47.0443 0x1f30  pcmcia - ok
    00:26:47.0453 0x1f30  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
    00:26:47.0463 0x1f30  pcw - ok
    00:26:47.0483 0x1f30  pdfcDispatcher - ok
    00:26:47.0503 0x1f30  [ 946010CDFA91469351B22E2620CEBCD8, F099C92706D42ADC289B72724F7932E5D4F62A427AEC967DDB0A1D728AE59A63 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
    00:26:47.0523 0x1f30  PEAUTH - ok
    00:26:47.0573 0x1f30  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
    00:26:47.0573 0x1f30  PerfHost - ok
    00:26:47.0643 0x1f30  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
    00:26:47.0673 0x1f30  pla - ok
    00:26:47.0703 0x1f30  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
    00:26:47.0713 0x1f30  PlugPlay - ok
    00:26:47.0763 0x1f30  [ AC78DF349F0E4CFB8B667C0CFFF83CCE, 7E635AA2E7350FCA0C954E697F1480A6204920AEFBCF06B90FFA02398DA82822 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
    00:26:47.0763 0x1f30  Pml Driver HPZ12 - ok
    00:26:47.0783 0x1f30  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
    00:26:47.0783 0x1f30  PNRPAutoReg - ok
    00:26:47.0803 0x1f30  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
    00:26:47.0813 0x1f30  PNRPsvc - ok
    00:26:47.0863 0x1f30  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
    00:26:47.0873 0x1f30  PolicyAgent - ok
    00:26:47.0893 0x1f30  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
    00:26:47.0903 0x1f30  Power - ok
    00:26:47.0913 0x1f30  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
    00:26:47.0923 0x1f30  PptpMiniport - ok
    00:26:47.0943 0x1f30  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
    00:26:47.0953 0x1f30  Processor - ok
    00:26:47.0983 0x1f30  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
    00:26:47.0993 0x1f30  ProfSvc - ok
    00:26:48.0003 0x1f30  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] ProtectedStorage C:\Windows\system32\lsass.exe
    00:26:48.0003 0x1f30  ProtectedStorage - ok
    00:26:48.0033 0x1f30  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
    00:26:48.0043 0x1f30  Psched - ok
    00:26:48.0103 0x1f30  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
    00:26:48.0133 0x1f30  ql2300 - ok
    00:26:48.0163 0x1f30  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
    00:26:48.0163 0x1f30  ql40xx - ok
    00:26:48.0193 0x1f30  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
    00:26:48.0193 0x1f30  QWAVE - ok
    00:26:48.0203 0x1f30  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
    00:26:48.0203 0x1f30  QWAVEdrv - ok
    00:26:48.0223 0x1f30  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
    00:26:48.0223 0x1f30  RasAcd - ok
    00:26:48.0243 0x1f30  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
    00:26:48.0243 0x1f30  RasAgileVpn - ok
    00:26:48.0253 0x1f30  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
    00:26:48.0263 0x1f30  RasAuto - ok
    00:26:48.0273 0x1f30  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
    00:26:48.0273 0x1f30  Rasl2tp - ok
    00:26:48.0283 0x1f30  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
    00:26:48.0293 0x1f30  RasMan - ok
    00:26:48.0303 0x1f30  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
    00:26:48.0313 0x1f30  RasPppoe - ok
    00:26:48.0333 0x1f30  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
    00:26:48.0333 0x1f30  RasSstp - ok
    00:26:48.0353 0x1f30  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
    00:26:48.0363 0x1f30  rdbss - ok
    00:26:48.0373 0x1f30  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
    00:26:48.0373 0x1f30  rdpbus - ok
    00:26:48.0383 0x1f30  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
    00:26:48.0383 0x1f30  RDPCDD - ok
    00:26:48.0403 0x1f30  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
    00:26:48.0403 0x1f30  RDPENCDD - ok
    00:26:48.0403 0x1f30  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
    00:26:48.0403 0x1f30  RDPREFMP - ok
    00:26:48.0443 0x1f30  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
    00:26:48.0443 0x1f30  RDPWD - ok
    00:26:48.0493 0x1f30  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
    00:26:48.0493 0x1f30  rdyboost - ok
    00:26:48.0523 0x1f30  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
    00:26:48.0523 0x1f30  RemoteAccess - ok
    00:26:48.0533 0x1f30  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
    00:26:48.0533 0x1f30  RemoteRegistry - ok
    00:26:48.0553 0x1f30  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
    00:26:48.0553 0x1f30  RpcEptMapper - ok
    00:26:48.0573 0x1f30  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
    00:26:48.0583 0x1f30  RpcLocator - ok
    00:26:48.0623 0x1f30  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\System32\rpcss.dll
    00:26:48.0633 0x1f30  RpcSs - ok
    00:26:48.0643 0x1f30  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
    00:26:48.0643 0x1f30  rspndr - ok
    00:26:48.0683 0x1f30  [ 7EA8D2EB9BBFD2AB8A3117A1E96D3B3A, 9F6CFBE7E64A63E0AFEF546C4B8D889657B2055CE80279EA1B63EB5650E730F8 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
    00:26:48.0693 0x1f30  RTL8167 - ok
    00:26:48.0703 0x1f30  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] SamSs           C:\Windows\system32\lsass.exe
    00:26:48.0703 0x1f30  SamSs - ok
    00:26:48.0743 0x1f30  [ 3289766038DB2CB14D07DC84392138D5, A7790B787690CC1A8B97E4532090C5295350A836A9474DEA74CEB3E81CF26124 ] SASDIFSV        C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
    00:26:48.0743 0x1f30  SASDIFSV - ok
    00:26:48.0743 0x1f30  [ 58A38E75F3316A83C23DF6173D41F2B5, B0A8CDA1D164B7534FB41AB80792861384709BF0F914F44553275CF20194F1A1 ] SASKUTIL        C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
    00:26:48.0743 0x1f30  SASKUTIL - ok
    00:26:48.0773 0x1f30  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\DRIVERS\sbp2port.sys
    00:26:48.0783 0x1f30  sbp2port - ok
    00:26:48.0793 0x1f30  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
    00:26:48.0803 0x1f30  SCardSvr - ok
    00:26:48.0823 0x1f30  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
    00:26:48.0823 0x1f30  scfilter - ok
    00:26:48.0893 0x1f30  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
    00:26:48.0903 0x1f30  Schedule - ok
    00:26:48.0943 0x1f30  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
    00:26:48.0943 0x1f30  SCPolicySvc - ok
    00:26:48.0963 0x1f30  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
    00:26:48.0963 0x1f30  SDRSVC - ok
    00:26:49.0033 0x1f30  [ CC781378E7EDA615D2CDCA3B17829FA4, 137BF83A2A3D69335AD031B8D73473526F782CB8917A34B3CD92F923E7660F2A ] SeaPort         C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
    00:26:49.0033 0x1f30  SeaPort - ok
    00:26:49.0053 0x1f30  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
    00:26:49.0053 0x1f30  secdrv - ok
    00:26:49.0073 0x1f30  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
    00:26:49.0073 0x1f30  seclogon - ok
    00:26:49.0083 0x1f30  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll
    00:26:49.0083 0x1f30  SENS - ok
    00:26:49.0093 0x1f30  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
    00:26:49.0093 0x1f30  SensrSvc - ok
    00:26:49.0123 0x1f30  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
    00:26:49.0123 0x1f30  Serenum - ok
    00:26:49.0143 0x1f30  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
    00:26:49.0143 0x1f30  Serial - ok
    00:26:49.0153 0x1f30  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
    00:26:49.0153 0x1f30  sermouse - ok
    00:26:49.0173 0x1f30  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
    00:26:49.0173 0x1f30  SessionEnv - ok
    00:26:49.0203 0x1f30  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
    00:26:49.0203 0x1f30  sffdisk - ok
    00:26:49.0223 0x1f30  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
    00:26:49.0223 0x1f30  sffp_mmc - ok
    00:26:49.0233 0x1f30  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
    00:26:49.0233 0x1f30  sffp_sd - ok
    00:26:49.0243 0x1f30  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
    00:26:49.0243 0x1f30  sfloppy - ok
    00:26:49.0294 0x1f30  [ 2046AA7491DE7EFA4D70E615D9BC9D09, A8763D059AD68D5842C407FA9644E0B129BEF0F63CD87E62B80B05441EDC3489 ] Sftfs           C:\Windows\system32\DRIVERS\Sftfslh.sys
    00:26:49.0314 0x1f30  Sftfs - ok
    00:26:49.0394 0x1f30  [ 77C5A741A7452812F278EF2C18478862, 0B763679EB7EFB8ED9DCE7B429706E939BB65BA6BCF1BAE0E0426D4E87074B8C ] sftlist         C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    00:26:49.0394 0x1f30  sftlist - ok
    00:26:49.0444 0x1f30  [ 0E0446BC4D51BE4263ACB7E33491191C, 2AD039FB440560658C4E06F67CC192EF71577EF3FF789A43C08430CE5EAE5A70 ] Sftplay         C:\Windows\system32\DRIVERS\Sftplaylh.sys
    00:26:49.0444 0x1f30  Sftplay - ok
    00:26:49.0464 0x1f30  [ C5FB982CD266E604ED3142102C26D62C, A6BC0D72E98F924274ECAD49C85F0775D1CD45B97CD43F53DF3992B560835FC5 ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirlh.sys
    00:26:49.0464 0x1f30  Sftredir - ok
    00:26:49.0464 0x1f30  [ 2575511AF67AA1FA068CCC4918E2C2A3, 3152FF5AC2CF6FE966DA59B1B33E22F9BD9B6BB4310441870528364BA9501A4D ] Sftvol          C:\Windows\system32\DRIVERS\Sftvollh.sys
    00:26:49.0464 0x1f30  Sftvol - ok
    00:26:49.0494 0x1f30  [ 39B1D0A636A400304565D4521FAD6D77, 1F01DB35B5A477AA7A77585C9304E6B5F3E67807531305BCA93A7F494CED8F59 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    00:26:49.0504 0x1f30  sftvsa - ok
    00:26:49.0534 0x1f30  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
    00:26:49.0544 0x1f30  SharedAccess - ok
    00:26:49.0574 0x1f30  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
    00:26:49.0584 0x1f30  ShellHWDetection - ok
    00:26:49.0594 0x1f30  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
    00:26:49.0604 0x1f30  SiSRaid2 - ok
    00:26:49.0614 0x1f30  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
    00:26:49.0614 0x1f30  SiSRaid4 - ok
    00:26:49.0644 0x1f30  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
    00:26:49.0644 0x1f30  Smb - ok
    00:26:49.0684 0x1f30  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
    00:26:49.0684 0x1f30  SNMPTRAP - ok
    00:26:49.0694 0x1f30  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
    00:26:49.0694 0x1f30  spldr - ok
    00:26:49.0734 0x1f30  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
    00:26:49.0744 0x1f30  Spooler - ok
    00:26:49.0864 0x1f30  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
    00:26:49.0924 0x1f30  sppsvc - ok
    00:26:50.0004 0x1f30  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
    00:26:50.0014 0x1f30  sppuinotify - ok
    00:26:50.0074 0x1f30  [ E163E10191958FF6A2B0B48353F9E9FD, C4F5B83B5C435458AEEC4BD5C6A0FE15F4C3CD5C23CA7F5949A62214634DBB36 ] SRTSP           C:\Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS
    00:26:50.0084 0x1f30  SRTSP - ok
    00:26:50.0114 0x1f30  [ 68E7B6708B9EEE021301C483825D05EA, 87E262405473A063E3E6E9D1D61D8381C997C95F77317CDBB3C59369436E70C5 ] SRTSPX          C:\Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS
    00:26:50.0114 0x1f30  SRTSPX - ok
    00:26:50.0144 0x1f30  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
    00:26:50.0154 0x1f30  srv - ok
    00:26:50.0194 0x1f30  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
    00:26:50.0204 0x1f30  srv2 - ok
    00:26:50.0214 0x1f30  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
    00:26:50.0214 0x1f30  srvnet - ok
    00:26:50.0234 0x1f30  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
    00:26:50.0234 0x1f30  SSDPSRV - ok
    00:26:50.0244 0x1f30  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
    00:26:50.0244 0x1f30  SstpSvc - ok
    00:26:50.0254 0x1f30  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
    00:26:50.0264 0x1f30  stexstor - ok
    00:26:50.0294 0x1f30  [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys
    00:26:50.0294 0x1f30  StillCam - ok
    00:26:50.0354 0x1f30  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
    00:26:50.0364 0x1f30  stisvc - ok
    00:26:50.0404 0x1f30  [ 42FEF84684D217870F3C8813B6F58276, F7008FD18174E7262E15D3DC1A148322D6B6D1CF5D324BA13AD99766B9E4EF12 ] SupportSoft RemoteAssist C:\Program Files (x86)\Common Files\supportsoft\bin\ssrc.exe
    00:26:50.0414 0x1f30  SupportSoft RemoteAssist - ok
    00:26:50.0434 0x1f30  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
    00:26:50.0434 0x1f30  swenum - ok
    00:26:50.0464 0x1f30  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
    00:26:50.0474 0x1f30  swprv - ok
    00:26:50.0504 0x1f30  [ 5C9EE2303CA7F267665D75237862B39C, 5DECD977A823C14B4D980D3DB621BC875231B741653F0450A027FC9E87725F9D ] SymDS           C:\Windows\system32\drivers\N360x64\1506000.020\SYMDS64.SYS
    00:26:50.0514 0x1f30  SymDS - ok
    00:26:50.0574 0x1f30  [ 9F31630D7FC2DD9D5DA1CE359AAD1F46, 296D29EDF53956D1899DE4669AB429C280DF9F183F00AE1CE528E7C575802235 ] SymEFA          C:\Windows\system32\drivers\N360x64\1506000.020\SYMEFA64.SYS
    00:26:50.0594 0x1f30  SymEFA - ok
    00:26:50.0644 0x1f30  [ 97E11C50CE52277B377396EA8838E539, E17D03F80E14F961C41F2D54D1EF73D29BF01F38459C5710D786234F8BA3C835 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
    00:26:50.0644 0x1f30  SymEvent - ok
    00:26:50.0674 0x1f30  [ 6DE89F4CDF0B31A5BAF2855F9D80F8BA, 53064C246732594127E7D927C179FEB8134701D7D8C4A85CB1FE29B82F37A16A ] SymIM           C:\Windows\system32\DRIVERS\SymIMv.sys
    00:26:50.0674 0x1f30  SymIM - ok
    00:26:50.0714 0x1f30  [ 2C95265BE19F338E1C1090E4E91055BB, 1E580E9367B1C89B06BD4B34EFD94CD511FD3AA1617D943DDFE0A28B7ED5D5F9 ] SymIRON         C:\Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS
    00:26:50.0714 0x1f30  SymIRON - ok
    00:26:50.0774 0x1f30  [ 5570A74FF9B1EFBC5154DD1E2F05C517, 2C883A0334CBE4AE257028805C9BB1E529A80F56BA6D341E8EBB83CB3E46FEB7 ] SymNetS         C:\Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS
    00:26:50.0784 0x1f30  SymNetS - ok
    00:26:50.0864 0x1f30  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
    00:26:50.0894 0x1f30  SysMain - ok
    00:26:50.0934 0x1f30  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
    00:26:50.0934 0x1f30  TabletInputService - ok
    00:26:50.0954 0x1f30  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
    00:26:50.0954 0x1f30  TapiSrv - ok
    00:26:50.0984 0x1f30  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
    00:26:50.0994 0x1f30  TBS - ok
    00:26:51.0064 0x1f30  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
    00:26:51.0094 0x1f30  Tcpip - ok
    00:26:51.0154 0x1f30  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
    00:26:51.0194 0x1f30  TCPIP6 - ok
    00:26:51.0224 0x1f30  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
    00:26:51.0224 0x1f30  tcpipreg - ok
    00:26:51.0244 0x1f30  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
    00:26:51.0244 0x1f30  TDPIPE - ok
    00:26:51.0274 0x1f30  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
    00:26:51.0274 0x1f30  TDTCP - ok
    00:26:51.0314 0x1f30  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
    00:26:51.0314 0x1f30  tdx - ok
    00:26:51.0344 0x1f30  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
    00:26:51.0344 0x1f30  TermDD - ok
    00:26:51.0394 0x1f30  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
    00:26:51.0414 0x1f30  TermService - ok
    00:26:51.0424 0x1f30  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
    00:26:51.0424 0x1f30  Themes - ok
    00:26:51.0454 0x1f30  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
    00:26:51.0454 0x1f30  THREADORDER - ok
    00:26:51.0464 0x1f30  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
    00:26:51.0474 0x1f30  TrkWks - ok
    00:26:51.0524 0x1f30  [ FD44FA80DA03EA144153A76DEBBB61B4, 0C46717F489A415A583470DAE8CF58E47BC307B9CB0F9DB6C4EDF33B7525475C ] TrueSight       C:\Windows\System32\drivers\TrueSight.sys
    00:26:51.0524 0x1f30  TrueSight - ok
    00:26:51.0574 0x1f30  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
    00:26:51.0574 0x1f30  TrustedInstaller - ok
    00:26:51.0614 0x1f30  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
    00:26:51.0614 0x1f30  tssecsrv - ok
    00:26:51.0654 0x1f30  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
    00:26:51.0654 0x1f30  TsUsbFlt - ok
    00:26:51.0694 0x1f30  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
    00:26:51.0704 0x1f30  tunnel - ok
    00:26:51.0714 0x1f30  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
    00:26:51.0714 0x1f30  uagp35 - ok
    00:26:51.0734 0x1f30  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
    00:26:51.0744 0x1f30  udfs - ok
    00:26:51.0764 0x1f30  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
    00:26:51.0764 0x1f30  UI0Detect - ok
    00:26:51.0774 0x1f30  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
    00:26:51.0774 0x1f30  uliagpkx - ok
    00:26:51.0804 0x1f30  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
    00:26:51.0804 0x1f30  umbus - ok
    00:26:51.0814 0x1f30  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
    00:26:51.0814 0x1f30  UmPass - ok
    00:26:51.0844 0x1f30  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
    00:26:51.0844 0x1f30  upnphost - ok
    00:26:51.0884 0x1f30  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
    00:26:51.0894 0x1f30  usbaudio - ok
    00:26:51.0904 0x1f30  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
    00:26:51.0914 0x1f30  usbccgp - ok
    00:26:51.0934 0x1f30  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
    00:26:51.0934 0x1f30  usbcir - ok
    00:26:51.0954 0x1f30  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
    00:26:51.0954 0x1f30  usbehci - ok
    00:26:51.0984 0x1f30  [ 2C780746DC44A28FE67004DC58173F05, 9E0596CE35C7430A31A7E77B4D12A1F521B9ED8EB0614E6FB38403AC614C3EE3 ] usbfilter       C:\Windows\system32\DRIVERS\usbfilter.sys
    00:26:51.0984 0x1f30  usbfilter - ok
    00:26:52.0034 0x1f30  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
    00:26:52.0044 0x1f30  usbhub - ok
    00:26:52.0074 0x1f30  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
    00:26:52.0074 0x1f30  usbohci - ok
    00:26:52.0094 0x1f30  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
    00:26:52.0094 0x1f30  usbprint - ok
    00:26:52.0114 0x1f30  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
    00:26:52.0114 0x1f30  usbscan - ok
    00:26:52.0154 0x1f30  [ 4ACEE387FA8FD39F83564FCD2FC234F2, 3D62DE27027B8C032D15EB74F97A14B4EC24E67052C1163862740D6312B2569B ] usbser          C:\Windows\system32\DRIVERS\usbser.sys
    00:26:52.0154 0x1f30  usbser - ok
    00:26:52.0164 0x1f30  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
    00:26:52.0174 0x1f30  USBSTOR - ok
    00:26:52.0184 0x1f30  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
    00:26:52.0184 0x1f30  usbuhci - ok
    00:26:52.0194 0x1f30  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
    00:26:52.0194 0x1f30  UxSms - ok
    00:26:52.0204 0x1f30  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] VaultSvc        C:\Windows\system32\lsass.exe
    00:26:52.0204 0x1f30  VaultSvc - ok
    00:26:52.0214 0x1f30  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
    00:26:52.0214 0x1f30  vdrvroot - ok
    00:26:52.0264 0x1f30  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
    00:26:52.0274 0x1f30  vds - ok
    00:26:52.0294 0x1f30  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
    00:26:52.0294 0x1f30  vga - ok
    00:26:52.0334 0x1f30  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
    00:26:52.0334 0x1f30  VgaSave - ok
    00:26:52.0364 0x1f30  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
    00:26:52.0364 0x1f30  vhdmp - ok
    00:26:52.0394 0x1f30  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
    00:26:52.0404 0x1f30  viaide - ok
    00:26:52.0444 0x1f30  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
    00:26:52.0444 0x1f30  volmgr - ok
    00:26:52.0464 0x1f30  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
    00:26:52.0474 0x1f30  volmgrx - ok
    00:26:52.0494 0x1f30  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
    00:26:52.0504 0x1f30  volsnap - ok
    00:26:52.0534 0x1f30  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
    00:26:52.0534 0x1f30  vsmraid - ok
    00:26:52.0604 0x1f30  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
    00:26:52.0634 0x1f30  VSS - ok
    00:26:52.0654 0x1f30  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
    00:26:52.0654 0x1f30  vwifibus - ok
    00:26:52.0674 0x1f30  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
    00:26:52.0674 0x1f30  vwififlt - ok
    00:26:52.0684 0x1f30  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
    00:26:52.0694 0x1f30  vwifimp - ok
    00:26:52.0724 0x1f30  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
    00:26:52.0724 0x1f30  W32Time - ok
    00:26:52.0744 0x1f30  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
    00:26:52.0744 0x1f30  WacomPen - ok
    00:26:52.0764 0x1f30  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
    00:26:52.0764 0x1f30  WANARP - ok
    00:26:52.0774 0x1f30  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
    00:26:52.0774 0x1f30  Wanarpv6 - ok
    00:26:52.0834 0x1f30  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
    00:26:52.0854 0x1f30  WatAdminSvc - ok
    00:26:52.0854 0x1f30  wayuia - ok
    00:26:52.0924 0x1f30  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
    00:26:52.0944 0x1f30  wbengine - ok
    00:26:52.0984 0x1f30  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
    00:26:52.0984 0x1f30  WbioSrvc - ok
    00:26:53.0014 0x1f30  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
    00:26:53.0014 0x1f30  wcncsvc - ok
    00:26:53.0034 0x1f30  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
    00:26:53.0034 0x1f30  WcsPlugInService - ok
    00:26:53.0044 0x1f30  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
    00:26:53.0044 0x1f30  Wd - ok
    00:26:53.0074 0x1f30  [ A3D04EBF5227886029B4532F20D026F7, D90F7B9C176008675DA0B5FD7E4973CBC2A04172CEDF8FB7D3B3B4F27B5440D7 ] WDC_SAM         C:\Windows\system32\DRIVERS\wdcsam64.sys
    00:26:53.0074 0x1f30  WDC_SAM - ok
    00:26:53.0114 0x1f30  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
    00:26:53.0134 0x1f30  Wdf01000 - ok
    00:26:53.0154 0x1f30  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
    00:26:53.0154 0x1f30  WdiServiceHost - ok
    00:26:53.0154 0x1f30  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
    00:26:53.0164 0x1f30  WdiSystemHost - ok
    00:26:53.0194 0x1f30  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
    00:26:53.0204 0x1f30  WebClient - ok
    00:26:53.0204 0x1f30  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
    00:26:53.0214 0x1f30  Wecsvc - ok
    00:26:53.0224 0x1f30  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
    00:26:53.0224 0x1f30  wercplsupport - ok
    00:26:53.0234 0x1f30  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
    00:26:53.0234 0x1f30  WerSvc - ok
    00:26:53.0254 0x1f30  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
    00:26:53.0254 0x1f30  WfpLwf - ok
    00:26:53.0264 0x1f30  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
    00:26:53.0264 0x1f30  WIMMount - ok
    00:26:53.0284 0x1f30  WinDefend - ok
    00:26:53.0294 0x1f30  WinHttpAutoProxySvc - ok
    00:26:53.0334 0x1f30  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
    00:26:53.0344 0x1f30  Winmgmt - ok
    00:26:53.0434 0x1f30  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
    00:26:53.0464 0x1f30  WinRM - ok
    00:26:53.0504 0x1f30  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
    00:26:53.0504 0x1f30  WinUsb - ok
    00:26:53.0544 0x1f30  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
    00:26:53.0554 0x1f30  Wlansvc - ok
    00:26:53.0564 0x1f30  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
    00:26:53.0574 0x1f30  WmiAcpi - ok
    00:26:53.0584 0x1f30  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
    00:26:53.0584 0x1f30  wmiApSrv - ok
    00:26:53.0594 0x1f30  WMPNetworkSvc - ok
    00:26:53.0604 0x1f30  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
    00:26:53.0614 0x1f30  WPCSvc - ok
    00:26:53.0654 0x1f30  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
    00:26:53.0654 0x1f30  WPDBusEnum - ok
    00:26:53.0664 0x1f30  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
    00:26:53.0664 0x1f30  ws2ifsl - ok
    00:26:53.0704 0x1f30  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
    00:26:53.0704 0x1f30  wscsvc - ok
    00:26:53.0734 0x1f30  [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys
    00:26:53.0734 0x1f30  WSDPrintDevice - ok
    00:26:53.0744 0x1f30  WSearch - ok
    00:26:53.0834 0x1f30  [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv        C:\Windows\system32\wuaueng.dll
    00:26:53.0874 0x1f30  wuauserv - ok
    00:26:53.0904 0x1f30  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
    00:26:53.0904 0x1f30  WudfPf - ok
    00:26:53.0924 0x1f30  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
    00:26:53.0924 0x1f30  WUDFRd - ok
    00:26:53.0954 0x1f30  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
    00:26:53.0954 0x1f30  wudfsvc - ok
    00:26:53.0994 0x1f30  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
    00:26:53.0994 0x1f30  WwanSvc - ok
    00:26:54.0014 0x1f30  ================ Scan global ===============================
    00:26:54.0024 0x1f30  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
    00:26:54.0064 0x1f30  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    00:26:54.0074 0x1f30  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    00:26:54.0094 0x1f30  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
    00:26:54.0114 0x1f30  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
    00:26:54.0114 0x1f30  [ Global ] - ok
    00:26:54.0114 0x1f30  ================ Scan MBR ==================================
    00:26:54.0124 0x1f30  [ 29742C1E4D2ADC0F186D7BCF35F3703B ] \Device\Harddisk0\DR0
    00:26:54.0345 0x1f30  \Device\Harddisk0\DR0 - ok
    00:26:54.0345 0x1f30  ================ Scan VBR ==================================
    00:26:54.0345 0x1f30  [ 94365E49A1778903D5B19A307AE4FA01 ] \Device\Harddisk0\DR0\Partition1
    00:26:54.0395 0x1f30  \Device\Harddisk0\DR0\Partition1 - ok
    00:26:54.0395 0x1f30  [ 6A7D69284B48C10B2CE9DAD7A22CF59F ] \Device\Harddisk0\DR0\Partition2
    00:26:54.0435 0x1f30  \Device\Harddisk0\DR0\Partition2 - ok
    00:26:54.0435 0x1f30  [ 96E7BCF58B398618FF6A9E56D4F42986 ] \Device\Harddisk0\DR0\Partition3
    00:26:54.0435 0x1f30  \Device\Harddisk0\DR0\Partition3 - ok
    00:26:54.0435 0x1f30  ================ Scan generic autorun ======================
    00:26:54.0475 0x1f30  [ 554A50B5310E702029D3A675459108FF, 4757D5FFFAC7E73D4A3D931DB1399DDFDBD5811639BDA4517F886C21CC7F2574 ] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
    00:26:54.0475 0x1f30  hpsysdrv - ok
    00:26:54.0535 0x1f30  [ 63A648C5FEB5DE641E1174ACB6CF78C6, D8DF39416CA18F627FC7BADA420129852F9718188A851D0AE522AAFA2BFAFF21 ] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    00:26:54.0545 0x1f30  SmartMenu - ok
    00:26:54.0605 0x1f30  [ DD79A6B15C2F28DE98DF4852AAF6B13B, 0F7E9023E0BA4B40E2DE9A9FA34E85FEAF72B93049AAB3E1D73AD046BB113E05 ] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe
    00:26:54.0605 0x1f30  NCPluginUpdater - ok
    00:26:54.0655 0x1f30  [ 3A4D4E97C4844F475CE02F543A8C4B85, FDF98E15C6870FE45E3258F3B8604BAE7103D5E79B8CA7C5DC410C0B1254802B ] C:\Program Files (x86)\PDF Complete\pdfsty.exe
    00:26:54.0665 0x1f30  PDF Complete - ok
    00:26:54.0725 0x1f30  [ 80FDA1E7877DDBBB53D736AD290EC08A, E042AD1D6D6F04C2000853A16AEE4F28C6325ABE64C00890460A4EC7FB6D1939 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    00:26:54.0725 0x1f30  StartCCC - ok
    00:26:54.0835 0x1f30  [ 5A4FCB9FA2798BFF8B2E9340CAD1347C, 6ABB3F762C48AF4316C674AF3A60EF2E1EF208C1650A5977BFC55A2C1F26B9DD ] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
    00:26:54.0865 0x1f30  Wondershare Helper Compact.exe - ok
    00:26:54.0905 0x1f30  [ 8E53B67FA3816E854B07C5DC66E10730, 21DC3B06437B052B693F77D2F579D9C02B7036502DDED16D06A245B966E29556 ] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
    00:26:54.0915 0x1f30  TkBellExe - ok
    00:26:54.0975 0x1f30  [ 09E60B4FE341A94A300830C008907099, 5F07868953FAA8FFA9E6477F6BAC52DEEDF3EA4A3F8AF5B4E15878D8240223AB ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
    00:26:54.0985 0x1f30  APSDaemon - ok
    00:26:55.0075 0x1f30  [ 4C8942B8721813E5C8874D47112DCF73, 85869B814417397D92A028CF841FC7B1B41E5D53EFF3470DED664484709C9FBA ] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    00:26:55.0115 0x1f30  LightScribe Control Panel - ok
    00:26:55.0345 0x1f30  [ 952E717574469A91BCC32B6B162BC2A0, 36F46C15CD9DBAC16D300DD3D731C95E2877A8D774B6CCEBF0EFB4D76D376944 ] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    00:26:55.0465 0x1f30  SUPERAntiSpyware - ok
    00:26:55.0575 0x1f30  [ 66E3878250E18FEDBA32CB90DA917005, 199DA21E7A269334E6F0BE7A73D3CA28F716CF32183DF9D50B282DAAFAE1D309 ] C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
    00:26:55.0595 0x1f30  GarminExpressTrayApp - ok
    00:26:55.0615 0x1f30  [ 42A4F221F85B44E9F1A5A436373F0502, 35CC3C18199751E02278648A81C26AFBB015EF321C3C5CA141DEF48D2AE73BA1 ] C:\Program Files (x86)\Content Manager\launchCM.exe
    00:26:55.0615 0x1f30  CmTray - ok
    00:26:55.0675 0x1f30  [ 105C276BB7B43501225C419B062096D0, F5D35230FC5E116FB04147F216313D2E2542D96E975B19F5FD9F7641CF11271F ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
    00:26:55.0675 0x1f30  ApplePhotoStreams - ok
    00:26:55.0705 0x1f30  [ EC58C1A9A3281CE0C8FCC05BDBFECB37, 3738BBC112346B32F686F1CB4B4AAD89B06AA1F8FB2D333BC2D2F554212A0A59 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    00:26:55.0705 0x1f30  iCloudServices - ok
    00:26:55.0775 0x1f30  [ 7C5F08E09F2C15381B47A246B48186BF, F7D63D43AEE67B13299F92C8296508FBB8C17451A95693E60AE29650BF09E44F ] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe
    00:26:55.0805 0x1f30  HPAdvisorDock - ok
    00:26:55.0905 0x1f30  [ 4C8942B8721813E5C8874D47112DCF73, 85869B814417397D92A028CF841FC7B1B41E5D53EFF3470DED664484709C9FBA ] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    00:26:55.0945 0x1f30  LightScribe Control Panel - ok
    00:26:56.0005 0x1f30  [ 7C5F08E09F2C15381B47A246B48186BF, F7D63D43AEE67B13299F92C8296508FBB8C17451A95693E60AE29650BF09E44F ] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe
    00:26:56.0025 0x1f30  HPAdvisorDock - ok
    00:26:56.0105 0x1f30  [ 4C8942B8721813E5C8874D47112DCF73, 85869B814417397D92A028CF841FC7B1B41E5D53EFF3470DED664484709C9FBA ] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    00:26:56.0145 0x1f30  LightScribe Control Panel - ok
    00:26:56.0205 0x1f30  [ 39D0074C59F6D1A62731942C7FA8B60B, 0847E03516CA3DB8297799F1439A1CC004B983F99B1A0ECFE263583DAA264502 ] C:\Program Files\Internet Explorer\iexplore.exe
    00:26:56.0225 0x1f30  Application Restart #0 - ok
    00:26:56.0225 0x1f30  Waiting for KSN requests completion. In queue: 106
    00:26:57.0225 0x1f30  Waiting for KSN requests completion. In queue: 106
    00:26:58.0225 0x1f30  Waiting for KSN requests completion. In queue: 106
    00:26:58.0895 0x1b88  Object required for P2P: [ 39D0074C59F6D1A62731942C7FA8B60B ] C:\Program Files\Internet Explorer\iexplore.exe
    00:26:59.0225 0x1f30  Waiting for KSN requests completion. In queue: 20
    00:27:00.0225 0x1f30  Waiting for KSN requests completion. In queue: 20
    00:27:00.0965 0x1d04  Object send P2P result: false
    00:27:01.0225 0x1f30  Waiting for KSN requests completion. In queue: 1
    00:27:01.0545 0x1b88  Object send P2P result: true
    00:27:02.0245 0x1f30  AV detected via SS2: Norton 360 Premier Edition, C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\WSCStub.exe ( 21.6.0.0 ), 0x50000 ( disabled : updated )
    00:27:02.0245 0x1f30  FW detected via SS2: Norton 360 Premier Edition, C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\WSCStub.exe ( 21.6.0.0 ), 0x51010 ( enabled )
    00:27:04.0735 0x1f30  ============================================================
    00:27:04.0735 0x1f30  Scan finished
    00:27:04.0735 0x1f30  ============================================================
    00:27:04.0735 0x1f20  Detected object count: 0
    00:27:04.0735 0x1f20  Actual detected object count: 0
    00:28:28.0023 0x1d88  ============================================================
    00:28:28.0023 0x1d88  Scan started
    00:28:28.0023 0x1d88  Mode: Manual; SigCheck; TDLFS;
    00:28:28.0023 0x1d88  ============================================================
    00:28:28.0023 0x1d88  KSN ping started
    00:28:30.0423 0x1d88  KSN ping finished: true
    00:28:30.0993 0x1d88  ================ Scan system memory ========================
    00:28:30.0993 0x1d88  System memory - ok
    00:28:30.0993 0x1d88  ================ Scan services =============================
    00:28:31.0053 0x1d88  [ 970C70F6B2953ED43822D3797855D84C, CB22723678B514277BC6E6DDDD206F3B2377CD889C9D473A47A7056BE597BC6B ] !SASCORE        C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    00:28:31.0093 0x1d88  !SASCORE - ok
    00:28:31.0203 0x1d88  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
    00:28:31.0253 0x1d88  1394ohci - ok
    00:28:31.0283 0x1d88  [ E0A8525A951ADDB4655BC2068566407D, 7C08B9DB7C281422FD64219DF81B7064CE16EA53CF00EB1FC33CB0741CE6605F ] 61883           C:\Windows\system32\DRIVERS\61883.sys
    00:28:31.0343 0x1d88  61883 - ok
    00:28:31.0373 0x1d88  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
    00:28:31.0383 0x1d88  ACPI - ok
    00:28:31.0403 0x1d88  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
    00:28:31.0433 0x1d88  AcpiPmi - ok
    00:28:31.0523 0x1d88  [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    00:28:31.0533 0x1d88  AdobeARMservice - ok
    00:28:31.0603 0x1d88  [ 080255CDCB878813B481B8C348D47D8E, 75808821FBC732D0504795B8F85852E4C01D3B412989A1E597E1295CFF7B7A45 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    00:28:31.0613 0x1d88  AdobeFlashPlayerUpdateSvc - ok
    00:28:31.0653 0x1d88  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
    00:28:31.0663 0x1d88  adp94xx - ok
    00:28:31.0713 0x1d88  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
    00:28:31.0723 0x1d88  adpahci - ok
    00:28:31.0753 0x1d88  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
    00:28:31.0763 0x1d88  adpu320 - ok
    00:28:31.0783 0x1d88  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
    00:28:31.0813 0x1d88  AeLookupSvc - ok
    00:28:31.0863 0x1d88  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
    00:28:31.0913 0x1d88  AFD - ok
    00:28:31.0943 0x1d88  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
    00:28:31.0953 0x1d88  agp440 - ok
    00:28:32.0003 0x1d88  [ AA3F73CCBF498BD56800F840D75E40E4, BBC52A9DD38ADCD071ABA1A5F0C6E5E38053D7ABC473ED153DEE49D6F2A00ABA ] ahcix64s        C:\Windows\system32\DRIVERS\ahcix64s.sys
    00:28:32.0023 0x1d88  ahcix64s - ok
    00:28:32.0043 0x1d88  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
    00:28:32.0063 0x1d88  ALG - ok
    00:28:32.0083 0x1d88  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
    00:28:32.0093 0x1d88  aliide - ok
    00:28:32.0123 0x1d88  [ F0E61CF2C0FDA5B011CD1CB2E2353C9A, B1CE3BB3ED8ED78468B11C7AFB64B0CD48C078C350F049EC9473B60F6130091E ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
    00:28:32.0173 0x1d88  AMD External Events Utility - ok
    00:28:32.0213 0x1d88  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
    00:28:32.0223 0x1d88  amdide - ok
    00:28:32.0243 0x1d88  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
    00:28:32.0293 0x1d88  AmdK8 - ok
    00:28:32.0473 0x1d88  [ CF3DB4D8B2CE0B282AB39C9D846ECA74, 1679FE9444057D8EFF1389C5EA9677B914DC269BBE447B2684A05FE4E438014A ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
    00:28:32.0643 0x1d88  amdkmdag - ok
    00:28:32.0683 0x1d88  [ 7D07DB26F6D3A16A6C8D34CE6C09FD01, 6ABE6D29ABA9F1E3A08A2FE7E5C1AF304093A8FE148340F5DA5A4F7C20F44753 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
    00:28:32.0713 0x1d88  amdkmdap - ok
    00:28:32.0723 0x1d88  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
    00:28:32.0733 0x1d88  AmdPPM - ok
    00:28:32.0783 0x1d88  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
    00:28:32.0793 0x1d88  amdsata - ok
    00:28:32.0803 0x1d88  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
    00:28:32.0823 0x1d88  amdsbs - ok
    00:28:32.0833 0x1d88  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
    00:28:32.0843 0x1d88  amdxata - ok
    00:28:32.0893 0x1d88  [ B9C95291F5EA1072CEC2BA690E07F29F, 1FC75E20B31680667A5FE4E0AB5ADD6CFE7016A3B9E975E92EAA192689684E54 ] AMD_RAIDXpert   C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
    00:28:32.0913 0x1d88  AMD_RAIDXpert - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:32.0913 0x1d88  Detect skipped due to KSN trusted
    00:28:32.0913 0x1d88  AMD_RAIDXpert - ok
    00:28:32.0943 0x1d88  [ 80B9412C4DE09147581FC935FB4C97AB, 0C9661F7B5EF7F9D61981790B7AB64E3375BD117962166619D0CC546A2D014D3 ] AppID           C:\Windows\system32\drivers\appid.sys
    00:28:32.0973 0x1d88  AppID - ok
    00:28:32.0983 0x1d88  [ F71CA01C24FC3798A717B5A6F682F9AD, 8CF1C209E7BBBAD02D6D087293C0B681CDA3170AF119CA2916C2708D8801E749 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
    00:28:32.0993 0x1d88  AppIDSvc - ok
    00:28:33.0023 0x1d88  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
    00:28:33.0073 0x1d88  Appinfo - ok
    00:28:33.0153 0x1d88  [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    00:28:33.0163 0x1d88  Apple Mobile Device - ok
    00:28:33.0183 0x1d88  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys
    00:28:33.0193 0x1d88  arc - ok
    00:28:33.0213 0x1d88  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
    00:28:33.0233 0x1d88  arcsas - ok
    00:28:33.0303 0x1d88  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
    00:28:33.0313 0x1d88  aspnet_state - ok
    00:28:33.0333 0x1d88  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
    00:28:33.0353 0x1d88  AsyncMac - ok
    00:28:33.0374 0x1d88  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
    00:28:33.0384 0x1d88  atapi - ok
    00:28:33.0444 0x1d88  [ F8633CDD09647A64EE8DB550630427FF, 565F32E6B1E8451B2DD866E4997336A47B8DC6669392BDAAF252C35C0383E8A3 ] athr            C:\Windows\system32\DRIVERS\athrx.sys
    00:28:33.0494 0x1d88  athr - ok
    00:28:33.0524 0x1d88  [ 637E0753BD6DEB8EA5314A5C357EC1A0, 2B479DBBF72A2AFB3DC65A3FDA30B628BC9FB21160EBD7E1BE44404C671B1D08 ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys
    00:28:33.0534 0x1d88  AtiHdmiService - ok
    00:28:33.0534 0x1d88  Object required for P2P: [ 637E0753BD6DEB8EA5314A5C357EC1A0 ] AtiHdmiService
    00:28:36.0214 0x1d88  Object send P2P result: true
    00:28:36.0224 0x1d88  [ E82E61F46D1336447F4DEFF8C074F13E, 9FC152B33F1D9F5684B687743E943AA26AC17A1093F4C31A43C7012E70BC302E ] AtiPcie         C:\Windows\system32\DRIVERS\AtiPcie64.sys
    00:28:36.0234 0x1d88  AtiPcie - ok
    00:28:36.0284 0x1d88  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
    00:28:36.0354 0x1d88  AudioEndpointBuilder - ok
    00:28:36.0364 0x1d88  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv        C:\Windows\System32\Audiosrv.dll
    00:28:36.0394 0x1d88  AudioSrv - ok
    00:28:36.0424 0x1d88  [ 16FABE84916623D0607E4A975544032C, 9D960CAE27B1769ED5B024C0A3375912432521C73C1F59E21111596A7981BDC3 ] Avc             C:\Windows\system32\DRIVERS\avc.sys
    00:28:36.0434 0x1d88  Avc - ok
    00:28:36.0474 0x1d88  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
    00:28:36.0484 0x1d88  AxInstSV - ok
    00:28:36.0524 0x1d88  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
    00:28:36.0574 0x1d88  b06bdrv - ok
    00:28:36.0594 0x1d88  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
    00:28:36.0634 0x1d88  b57nd60a - ok
    00:28:36.0684 0x1d88  [ 825F81A6F7DD073509DB101F0BA6DC59, 25555D1DDB223DD10C328E4FC4A55698607004A9FA6C55DA3317AC2400897E94 ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
    00:28:36.0694 0x1d88  BBSvc - ok
    00:28:36.0724 0x1d88  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
    00:28:36.0744 0x1d88  BDESVC - ok
    00:28:36.0754 0x1d88  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
    00:28:36.0784 0x1d88  Beep - ok
    00:28:36.0834 0x1d88  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
    00:28:36.0894 0x1d88  BFE - ok
    00:28:37.0044 0x1d88  [ 99EE5EB9FCBAD85F1992C47C5BB68649, 604B618F0106B09207B262E22E70E152C4104FB2602C009F19EBEB342D0E9CE7 ] BHDrvx64        C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys
    00:28:37.0084 0x1d88  BHDrvx64 - ok
    00:28:37.0124 0x1d88  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\system32\qmgr.dll
    00:28:37.0194 0x1d88  BITS - ok
    00:28:37.0194 0x1d88  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
    00:28:37.0224 0x1d88  blbdrive - ok
    00:28:37.0274 0x1d88  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
    00:28:37.0294 0x1d88  Bonjour Service - ok
    00:28:37.0314 0x1d88  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
    00:28:37.0334 0x1d88  bowser - ok
    00:28:37.0354 0x1d88  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
    00:28:37.0364 0x1d88  BrFiltLo - ok
    00:28:37.0374 0x1d88  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
    00:28:37.0384 0x1d88  BrFiltUp - ok
    00:28:37.0404 0x1d88  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
    00:28:37.0454 0x1d88  BridgeMP - ok
    00:28:37.0494 0x1d88  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
    00:28:37.0514 0x1d88  Browser - ok
    00:28:37.0534 0x1d88  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
    00:28:37.0594 0x1d88  Brserid - ok
    00:28:37.0604 0x1d88  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
    00:28:37.0644 0x1d88  BrSerWdm - ok
    00:28:37.0664 0x1d88  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
    00:28:37.0694 0x1d88  BrUsbMdm - ok
    00:28:37.0714 0x1d88  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
    00:28:37.0744 0x1d88  BrUsbSer - ok
    00:28:37.0764 0x1d88  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
    00:28:37.0804 0x1d88  BTHMODEM - ok
    00:28:37.0834 0x1d88  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
    00:28:37.0874 0x1d88  bthserv - ok
    00:28:37.0924 0x1d88  [ 248C952C82DF1E23775432774CBB20F1, D04D382E7963B84E4856534A2FA209787FEBA2B6F21F579CA8F7C6BE4AA10072 ] ccSet_MCLIENT   C:\Windows\system32\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys
    00:28:37.0944 0x1d88  ccSet_MCLIENT - ok
    00:28:37.0994 0x1d88  [ 0510396A957E9FD7205BA62D3CAE4528, C80C39EB3A87C5111132E96E966CF74ACABA36DE7714B545A707027D35995792 ] ccSet_N360      C:\Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys
    00:28:38.0004 0x1d88  ccSet_N360 - ok
    00:28:38.0024 0x1d88  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
    00:28:38.0074 0x1d88  cdfs - ok
    00:28:38.0104 0x1d88  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
    00:28:38.0124 0x1d88  cdrom - ok
    00:28:38.0144 0x1d88  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
    00:28:38.0194 0x1d88  CertPropSvc - ok
    00:28:38.0244 0x1d88  [ EA3333DB9AB03106EEC0D6D9D487ED01, 4102A1D212221800CD83DCAFAF54BA55140AAB4A490F3779624F1EE832B04441 ] CinemaNow Service C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemanowSvc.exe
    00:28:38.0254 0x1d88  CinemaNow Service - ok
    00:28:38.0274 0x1d88  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
    00:28:38.0294 0x1d88  circlass - ok
    00:28:38.0304 0x1d88  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys
    00:28:38.0324 0x1d88  CLFS - ok
    00:28:38.0374 0x1d88  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    00:28:38.0384 0x1d88  clr_optimization_v2.0.50727_32 - ok
    00:28:38.0424 0x1d88  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    00:28:38.0434 0x1d88  clr_optimization_v2.0.50727_64 - ok
    00:28:38.0494 0x1d88  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    00:28:38.0504 0x1d88  clr_optimization_v4.0.30319_32 - ok
    00:28:38.0514 0x1d88  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    00:28:38.0524 0x1d88  clr_optimization_v4.0.30319_64 - ok
    00:28:38.0534 0x1d88  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
    00:28:38.0564 0x1d88  CmBatt - ok
    00:28:38.0584 0x1d88  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
    00:28:38.0594 0x1d88  cmdide - ok
    00:28:38.0634 0x1d88  [ E45CDE1C8340DFEDF1D6724263F39E5B, 8B8091D0A8FF08170F34DA01A4201DAE7C3D026226BC77B5C2EC67657C670168 ] CNG             C:\Windows\system32\Drivers\cng.sys
    00:28:38.0654 0x1d88  CNG - ok
    00:28:38.0674 0x1d88  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
    00:28:38.0684 0x1d88  Compbatt - ok
    00:28:38.0714 0x1d88  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
    00:28:38.0744 0x1d88  CompositeBus - ok
    00:28:38.0744 0x1d88  COMSysApp - ok
    00:28:38.0764 0x1d88  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
    00:28:38.0774 0x1d88  crcdisk - ok
    00:28:38.0804 0x1d88  [ 19D511CC455C19DE1ADF60E6C39C85B6, 2A05DD5EF3D0BEC2C9F4EA186E0E2D0F7BE0BF6A473D51194B09D33773AC7FAA ] CryptSvc        C:\Windows\system32\cryptsvc.dll
    00:28:38.0824 0x1d88  CryptSvc - ok
    00:28:38.0884 0x1d88  [ FD557A50A65E44041CD2FCEF4BEB04DB, 746D5958F7198895D35A23566D3736D993D57726BF59D91421D8091C48926A26 ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
    00:28:38.0904 0x1d88  cvhsvc - ok
    00:28:38.0954 0x1d88  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
    00:28:38.0994 0x1d88  DcomLaunch - ok
    00:28:39.0014 0x1d88  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
    00:28:39.0054 0x1d88  defragsvc - ok
    00:28:39.0094 0x1d88  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
    00:28:39.0134 0x1d88  DfsC - ok
    00:28:39.0164 0x1d88  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
    00:28:39.0214 0x1d88  Dhcp - ok
    00:28:39.0224 0x1d88  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
    00:28:39.0274 0x1d88  discache - ok
    00:28:39.0304 0x1d88  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
    00:28:39.0314 0x1d88  Disk - ok
    00:28:39.0334 0x1d88  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
    00:28:39.0364 0x1d88  Dnscache - ok
    00:28:39.0404 0x1d88  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
    00:28:39.0444 0x1d88  dot3svc - ok
    00:28:39.0484 0x1d88  [ B42ED0320C6E41102FDE0005154849BB, 4DB872E23AD049C3C9FDC0759FC58BFA60DA91B18BC82B611BFA300D26DDFC7A ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys
    00:28:39.0514 0x1d88  Dot4 - ok
    00:28:39.0544 0x1d88  [ E9F5969233C5D89F3C35E3A66A52A361, C4BD35795C78FB11E6022372CB25DEB570730EFDAD3DC1584368235FF622638C ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys
    00:28:39.0584 0x1d88  Dot4Print - ok
    00:28:39.0614 0x1d88  [ FD05A02B0370BC3000F402E543CA5814, 089B1113E640F495F470E8F57060B89546270481B309DC8ED3C3D13A849076A3 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys
    00:28:39.0634 0x1d88  dot4usb - ok
    00:28:39.0664 0x1d88  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
    00:28:39.0694 0x1d88  DPS - ok
    00:28:39.0714 0x1d88  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
    00:28:39.0734 0x1d88  drmkaud - ok
    00:28:39.0784 0x1d88  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
    00:28:39.0814 0x1d88  DXGKrnl - ok
    00:28:39.0834 0x1d88  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
    00:28:39.0864 0x1d88  EapHost - ok
    00:28:39.0964 0x1d88  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
    00:28:40.0064 0x1d88  ebdrv - ok
    00:28:40.0124 0x1d88  [ 47A68B3DBBB34D4FE61DE221A8536627, BC61CE4BD4F3A12C75BA6EB9D239F24CD3F54495DE9D6C901F4DAF5D92E8366B ] eeCtrl          C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
    00:28:40.0144 0x1d88  eeCtrl - ok
    00:28:40.0184 0x1d88  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] EFS             C:\Windows\System32\lsass.exe
    00:28:40.0194 0x1d88  EFS - ok
    00:28:40.0254 0x1d88  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
    00:28:40.0294 0x1d88  ehRecvr - ok
    00:28:40.0314 0x1d88  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
    00:28:40.0364 0x1d88  ehSched - ok
    00:28:40.0394 0x1d88  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
    00:28:40.0414 0x1d88  elxstor - ok
    00:28:40.0444 0x1d88  [ B9773081AAF65E6D553496BA0CADCBB3, 3A77A12544755BFA1ABAA6DC53E5F03522627F57EF7092E3CC54C6431C75076A ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
    00:28:40.0454 0x1d88  EraserUtilRebootDrv - ok
    00:28:40.0484 0x1d88  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
    00:28:40.0494 0x1d88  ErrDev - ok
    00:28:40.0524 0x1d88  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
    00:28:40.0554 0x1d88  EventSystem - ok
    00:28:40.0574 0x1d88  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
    00:28:40.0604 0x1d88  exfat - ok
    00:28:40.0624 0x1d88  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
    00:28:40.0674 0x1d88  fastfat - ok
    00:28:40.0714 0x1d88  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
    00:28:40.0764 0x1d88  Fax - ok
    00:28:40.0784 0x1d88  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
    00:28:40.0804 0x1d88  fdc - ok
    00:28:40.0824 0x1d88  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
    00:28:40.0874 0x1d88  fdPHost - ok
    00:28:40.0904 0x1d88  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
    00:28:40.0944 0x1d88  FDResPub - ok
    00:28:40.0964 0x1d88  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
    00:28:40.0974 0x1d88  FileInfo - ok
    00:28:40.0984 0x1d88  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
    00:28:41.0024 0x1d88  Filetrace - ok
    00:28:41.0104 0x1d88  [ B8602C90D3C427D8A86CE60437615CF5, E8058E71FD60D21884CBCF398338A65A92926BAC406F96713A262BDFDD04C80A ] FlipShare Service C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
    00:28:41.0124 0x1d88  FlipShare Service - ok
    00:28:41.0154 0x1d88  [ AC5FB7094F31534594CAE48306972CBD, DB5A0F63EF6ABF68B1A952A05646A163A5C075E3571682FC1C4B32918E1569FC ] FlipShareServer C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe
    00:28:41.0194 0x1d88  FlipShareServer - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:41.0194 0x1d88  Detect skipped due to KSN trusted
    00:28:41.0194 0x1d88  FlipShareServer - ok
    00:28:41.0224 0x1d88  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
    00:28:41.0244 0x1d88  flpydisk - ok
    00:28:41.0284 0x1d88  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
    00:28:41.0294 0x1d88  FltMgr - ok
    00:28:41.0344 0x1d88  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll
    00:28:41.0394 0x1d88  FontCache - ok
    00:28:41.0434 0x1d88  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    00:28:41.0444 0x1d88  FontCache3.0.0.0 - ok
    00:28:41.0464 0x1d88  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
    00:28:41.0474 0x1d88  FsDepends - ok
    00:28:41.0494 0x1d88  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
    00:28:41.0504 0x1d88  Fs_Rec - ok
    00:28:41.0544 0x1d88  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
    00:28:41.0564 0x1d88  fvevol - ok
    00:28:41.0574 0x1d88  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
    00:28:41.0584 0x1d88  gagp30kx - ok
    00:28:41.0614 0x1d88  [ CE16683CFD11FE70BDE435DDA5EA1FCA, 43D850361F2B5C9389F7FABC3C62BD1517349C03834F436579DD01CFD09919F4 ] GameConsoleService C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
    00:28:41.0624 0x1d88  GameConsoleService - ok
    00:28:41.0704 0x1d88  [ 876D29312C0A297EEE28F3DA30A994E8, 09FD1AA8BA3BD8222CAB1FB915EF673D7A1C1604B0D7E78AB5F3A965D9D94886 ] Garmin Core Update Service C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
    00:28:41.0714 0x1d88  Garmin Core Update Service - ok
    00:28:41.0754 0x1d88  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
    00:28:41.0754 0x1d88  GEARAspiWDM - ok
    00:28:41.0804 0x1d88  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
    00:28:41.0874 0x1d88  gpsvc - ok
    00:28:41.0894 0x1d88  [ CD007D03A9284BFE67D49C01213132BF, ED8729C1E0E0ADA47B43659184BA7959898C1622F13B0AAFE1F1C08C04111099 ] grmnusb         C:\Windows\system32\drivers\grmnusb.sys
    00:28:41.0924 0x1d88  grmnusb - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:41.0924 0x1d88  Detect skipped due to KSN trusted
    00:28:41.0924 0x1d88  grmnusb - ok
    00:28:41.0984 0x1d88  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    00:28:41.0994 0x1d88  gupdate - ok
    00:28:42.0004 0x1d88  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    00:28:42.0014 0x1d88  gupdatem - ok
    00:28:42.0034 0x1d88  [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
    00:28:42.0044 0x1d88  gusvc - ok
    00:28:42.0054 0x1d88  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
    00:28:42.0114 0x1d88  hcw85cir - ok
    00:28:42.0144 0x1d88  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
    00:28:42.0184 0x1d88  HdAudAddService - ok
    00:28:42.0214 0x1d88  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
    00:28:42.0244 0x1d88  HDAudBus - ok
    00:28:42.0264 0x1d88  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
    00:28:42.0284 0x1d88  HidBatt - ok
    00:28:42.0314 0x1d88  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
    00:28:42.0324 0x1d88  HidBth - ok
    00:28:42.0344 0x1d88  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
    00:28:42.0364 0x1d88  HidIr - ok
    00:28:42.0414 0x1d88  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\System32\hidserv.dll
    00:28:42.0464 0x1d88  hidserv - ok
    00:28:42.0504 0x1d88  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
    00:28:42.0514 0x1d88  HidUsb - ok
    00:28:42.0554 0x1d88  [ B844412DEEDF78CBA2A0FD850A575A81, 8980948E62A99F7EA03EB9685EAB1B1CA4844BA1D9FD73FA1F96D3AC0D0B956F ] HitmanProScheduler C:\Program Files\HitmanPro\hmpsched.exe
    00:28:42.0564 0x1d88  HitmanProScheduler - ok
    00:28:42.0594 0x1d88  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
    00:28:42.0624 0x1d88  hkmsvc - ok
    00:28:42.0654 0x1d88  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
    00:28:42.0684 0x1d88  HomeGroupListener - ok
    00:28:42.0724 0x1d88  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
    00:28:42.0754 0x1d88  HomeGroupProvider - ok
    00:28:42.0794 0x1d88  [ 2A8B93A01621E100A578E83C768AFA2C, 6637D260AF180D1F200D219796FCE6D524FC6BF57C0CEEF9E1B3616E85865AD1 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
    00:28:42.0814 0x1d88  HP Support Assistant Service - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:42.0814 0x1d88  Detect skipped due to KSN trusted
    00:28:42.0814 0x1d88  HP Support Assistant Service - ok
    00:28:42.0904 0x1d88  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05, 7B3F117C1D606DDA7623BEC0BFBC362C33A12213E899F049AC56A55826984134 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
    00:28:42.0914 0x1d88  hpqcxs08 - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:42.0914 0x1d88  Detect skipped due to KSN trusted
    00:28:42.0914 0x1d88  hpqcxs08 - ok
    00:28:42.0944 0x1d88  [ 75CC8C5146A3FB76221A7606628778D5, 2FDD943E22E38083639DF61335DEFE9C38685158D8BF0528834C1B657DC1DE6F ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
    00:28:42.0974 0x1d88  hpqddsvc - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:42.0974 0x1d88  Detect skipped due to KSN trusted
    00:28:42.0974 0x1d88  hpqddsvc - ok
    00:28:43.0114 0x1d88  [ D2946D9F020AE76E9CEF9B4A6DF838C0, C29CE594879385DA12B8EAA90B258905827B613839CCD820DE49215B68676995 ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
    00:28:43.0144 0x1d88  hpqwmiex - ok
    00:28:43.0174 0x1d88  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
    00:28:43.0184 0x1d88  HpSAMD - ok
    00:28:43.0244 0x1d88  [ F37882F128EFACEFE353E0BAE2766909, 2F9D21613500F092DFC0DB879180B549EE615D9B07408A5CC1A7F84663B2F47A ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
    00:28:43.0264 0x1d88  HPSLPSVC - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:43.0264 0x1d88  Detect skipped due to KSN trusted
    00:28:43.0264 0x1d88  HPSLPSVC - ok
    00:28:43.0324 0x1d88  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
    00:28:43.0364 0x1d88  HTTP - ok
    00:28:43.0364 0x1d88  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
    00:28:43.0374 0x1d88  hwpolicy - ok
    00:28:43.0415 0x1d88  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
    00:28:43.0425 0x1d88  i8042prt - ok
    00:28:43.0445 0x1d88  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
    00:28:43.0465 0x1d88  iaStorV - ok
    00:28:43.0525 0x1d88  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    00:28:43.0555 0x1d88  idsvc - ok
    00:28:43.0635 0x1d88  [ EB1118C371A096FFD4275EB85CB9EC2E, 9A697FFA7874279D26B71F1294858B8F91CB9782E40AB963AA417AFF4FFD3889 ] IDSVia64        C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSvia64.sys
    00:28:43.0665 0x1d88  IDSVia64 - ok
    00:28:43.0685 0x1d88  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
    00:28:43.0695 0x1d88  iirsp - ok
    00:28:43.0745 0x1d88  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
    00:28:43.0795 0x1d88  IKEEXT - ok
    00:28:43.0885 0x1d88  [ 2B888BBDF6962E608A5E1A1D7A626ADF, FF747B0D37FCE8CE8ED76532658AB325734D8F475A322884DB25729C4F8E2B50 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
    00:28:43.0935 0x1d88  IntcAzAudAddService - ok
    00:28:43.0965 0x1d88  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
    00:28:43.0985 0x1d88  intelide - ok
    00:28:43.0995 0x1d88  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
    00:28:44.0025 0x1d88  intelppm - ok
    00:28:44.0085 0x1d88  [ 0895CDD7F1542FFCC5BBB560EC78BC16, 383D9FFE7FB313EA201DE877F3D48B5116FFA261EDEF5D0D0FE79F14E9682D25 ] IntuitUpdateServiceV4 C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
    00:28:44.0095 0x1d88  IntuitUpdateServiceV4 - ok
    00:28:44.0125 0x1d88  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
    00:28:44.0165 0x1d88  IPBusEnum - ok
    00:28:44.0205 0x1d88  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
    00:28:44.0225 0x1d88  IpFilterDriver - ok
    00:28:44.0275 0x1d88  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
    00:28:44.0305 0x1d88  iphlpsvc - ok
    00:28:44.0335 0x1d88  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
    00:28:44.0355 0x1d88  IPMIDRV - ok
    00:28:44.0385 0x1d88  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
    00:28:44.0435 0x1d88  IPNAT - ok
    00:28:44.0505 0x1d88  [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
    00:28:44.0525 0x1d88  iPod Service - ok
    00:28:44.0555 0x1d88  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
    00:28:44.0595 0x1d88  IRENUM - ok
    00:28:44.0625 0x1d88  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
    00:28:44.0635 0x1d88  isapnp - ok
    00:28:44.0675 0x1d88  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
    00:28:44.0695 0x1d88  iScsiPrt - ok
    00:28:44.0705 0x1d88  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
    00:28:44.0725 0x1d88  kbdclass - ok
    00:28:44.0735 0x1d88  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
    00:28:44.0765 0x1d88  kbdhid - ok
    00:28:44.0785 0x1d88  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] KeyIso          C:\Windows\system32\lsass.exe
    00:28:44.0795 0x1d88  KeyIso - ok
    00:28:44.0845 0x1d88  [ C60C6B9A2E50B0404F6789C62B428C03, 0DFFAACBA038FB3D994049E7BBC8E0C63CB8B4A68C4AB770AD995B66B017C25B ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
    00:28:44.0855 0x1d88  KSecDD - ok
    00:28:44.0895 0x1d88  [ 78D152A9FD5747FF6AA89C79F0346F62, 69138077E84E5324751E3C8B80D05BE58EDF03CEC84F69B734537F10F6998F3B ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
    00:28:44.0905 0x1d88  KSecPkg - ok
    00:28:44.0915 0x1d88  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
    00:28:44.0955 0x1d88  ksthunk - ok
    00:28:45.0005 0x1d88  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
    00:28:45.0055 0x1d88  KtmRm - ok
    00:28:45.0085 0x1d88  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll
    00:28:45.0115 0x1d88  LanmanServer - ok
    00:28:45.0145 0x1d88  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
    00:28:45.0175 0x1d88  LanmanWorkstation - ok
    00:28:45.0205 0x1d88  [ C34411A244029F1C08687F7C752C4563, 4FC1D6156D760AE8138547262B33677118BD9369F4930F5C5F9BAA2FE6E78EA3 ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    00:28:45.0235 0x1d88  LightScribeService - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:45.0235 0x1d88  Detect skipped due to KSN trusted
    00:28:45.0235 0x1d88  LightScribeService - ok
    00:28:45.0265 0x1d88  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
    00:28:45.0295 0x1d88  lltdio - ok
    00:28:45.0315 0x1d88  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
    00:28:45.0345 0x1d88  lltdsvc - ok
    00:28:45.0365 0x1d88  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
    00:28:45.0395 0x1d88  lmhosts - ok
    00:28:45.0415 0x1d88  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
    00:28:45.0425 0x1d88  LSI_FC - ok
    00:28:45.0445 0x1d88  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
    00:28:45.0455 0x1d88  LSI_SAS - ok
    00:28:45.0465 0x1d88  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
    00:28:45.0475 0x1d88  LSI_SAS2 - ok
    00:28:45.0495 0x1d88  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
    00:28:45.0505 0x1d88  LSI_SCSI - ok
    00:28:45.0535 0x1d88  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
    00:28:45.0575 0x1d88  luafv - ok
    00:28:45.0605 0x1d88  [ CA43F8904E24BBE49982E4C0B29E6579, 2E3E6D02980706061C478C1643F8838310DDAC573C8722AE7F3290CE36B02CB2 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
    00:28:45.0615 0x1d88  MBAMProtector - ok
    00:28:45.0695 0x1d88  [ 0BB29DE40C9D9529793DCDB59A43CF5B, 251001A407D32EF22F64915EEFFAAEC229073C4549BF7D9D1D4209B7D15B4681 ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    00:28:45.0745 0x1d88  MBAMScheduler - ok
    00:28:45.0775 0x1d88  [ 5F82D8188B370B0CF185D4AE2B9B4A0E, 549B53DD989A069E1C38347C4CEF5283DF9B428CE102799B06A20D3D8F23825F ] MBAMService     C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    00:28:45.0805 0x1d88  MBAMService - ok
    00:28:45.0845 0x1d88  [ 26C43960C99EE861A5D0EDC4DCF3B1C3, 6238FB8E785652040CCE3E7044EA52066CE1BF173A1467474D64A3AB214B6BCD ] MBAMSwissArmy   C:\Windows\system32\drivers\MBAMSwissArmy.sys
    00:28:45.0855 0x1d88  MBAMSwissArmy - ok
    00:28:45.0885 0x1d88  [ A646C2DDB8C46E9B20A326FAF566646C, F46E3BF392CB4EB53D323BC8CC41EFBB9C5D7C935FECF255F524EB18583A2A37 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
    00:28:45.0895 0x1d88  MBAMWebAccessControl - ok
    00:28:45.0965 0x1d88  [ 4BA84C832E0741A294C4444556DFE993, 2CC888C85887F0F3EB5395075B9C65FF1307D98608BDC1D88ACE4A375DD9DFD9 ] MCLIENT         C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe
    00:28:45.0975 0x1d88  MCLIENT - ok
    00:28:45.0995 0x1d88  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
    00:28:46.0015 0x1d88  Mcx2Svc - ok
    00:28:46.0025 0x1d88  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
    00:28:46.0035 0x1d88  megasas - ok
    00:28:46.0055 0x1d88  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
    00:28:46.0065 0x1d88  MegaSR - ok
    00:28:46.0095 0x1d88  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
    00:28:46.0135 0x1d88  MMCSS - ok
    00:28:46.0165 0x1d88  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
    00:28:46.0205 0x1d88  Modem - ok
    00:28:46.0235 0x1d88  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
    00:28:46.0255 0x1d88  monitor - ok
    00:28:46.0275 0x1d88  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
    00:28:46.0285 0x1d88  mouclass - ok
    00:28:46.0295 0x1d88  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
    00:28:46.0325 0x1d88  mouhid - ok
    00:28:46.0365 0x1d88  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
    00:28:46.0375 0x1d88  mountmgr - ok
    00:28:46.0425 0x1d88  [ 345477F02C308B7480702767218C86A2, 98AFB5CF35BD82BA44B8F52CBC5FA3760506ADD7892C2AA1A77E8DF71FC8523F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    00:28:46.0445 0x1d88  MozillaMaintenance - ok
    00:28:46.0465 0x1d88  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
    00:28:46.0475 0x1d88  mpio - ok
    00:28:46.0485 0x1d88  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
    00:28:46.0535 0x1d88  mpsdrv - ok
    00:28:46.0585 0x1d88  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
    00:28:46.0645 0x1d88  MpsSvc - ok
    00:28:46.0685 0x1d88  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
    00:28:46.0715 0x1d88  MRxDAV - ok
    00:28:46.0745 0x1d88  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
    00:28:46.0765 0x1d88  mrxsmb - ok
    00:28:46.0795 0x1d88  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
    00:28:46.0805 0x1d88  mrxsmb10 - ok
    00:28:46.0835 0x1d88  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
    00:28:46.0855 0x1d88  mrxsmb20 - ok
    00:28:46.0875 0x1d88  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
    00:28:46.0885 0x1d88  msahci - ok
    00:28:46.0905 0x1d88  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
    00:28:46.0915 0x1d88  msdsm - ok
    00:28:46.0935 0x1d88  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
    00:28:46.0965 0x1d88  MSDTC - ok
    00:28:47.0005 0x1d88  [ 72949A24D37A20A54B3D4D3DADBB55E9, 580B59EF2DFA4F6EE27BA37904F0705CBCD74F9B07D2D795093C045F94AE6DB5 ] MSDV            C:\Windows\system32\DRIVERS\msdv.sys
    00:28:47.0025 0x1d88  MSDV - ok
    00:28:47.0035 0x1d88  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
    00:28:47.0085 0x1d88  Msfs - ok
    00:28:47.0105 0x1d88  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
    00:28:47.0155 0x1d88  mshidkmdf - ok
    00:28:47.0185 0x1d88  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
    00:28:47.0195 0x1d88  msisadrv - ok
    00:28:47.0225 0x1d88  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
    00:28:47.0275 0x1d88  MSiSCSI - ok
    00:28:47.0275 0x1d88  msiserver - ok
    00:28:47.0295 0x1d88  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
    00:28:47.0345 0x1d88  MSKSSRV - ok
    00:28:47.0365 0x1d88  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
    00:28:47.0395 0x1d88  MSPCLOCK - ok
    00:28:47.0405 0x1d88  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
    00:28:47.0445 0x1d88  MSPQM - ok
    00:28:47.0485 0x1d88  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
    00:28:47.0505 0x1d88  MsRPC - ok
    00:28:47.0515 0x1d88  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
    00:28:47.0525 0x1d88  mssmbios - ok
    00:28:47.0535 0x1d88  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
    00:28:47.0565 0x1d88  MSTEE - ok
    00:28:47.0575 0x1d88  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
    00:28:47.0585 0x1d88  MTConfig - ok
    00:28:47.0605 0x1d88  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
    00:28:47.0615 0x1d88  Mup - ok
    00:28:47.0755 0x1d88  [ A0C88349651D9F5421AFD363C27102E8, 71D5F7EDAF47AB1376444CB648BFD86CEA36735EE42A9935BDB876DF8F765F45 ] N360            C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe
    00:28:47.0775 0x1d88  N360 - ok
    00:28:47.0795 0x1d88  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
    00:28:47.0835 0x1d88  napagent - ok
    00:28:47.0845 0x1d88  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
    00:28:47.0885 0x1d88  NativeWifiP - ok
    00:28:47.0955 0x1d88  [ E0E4A1F81A7D69C595A8A9DDAD084C19, 8F55F3637AE8BFFB0ACE37AFC5122026525137E0B2923899B779C1BD08DF0E22 ] NAUpdate        C:\Program Files (x86)\Nero\Update\NASvc.exe
    00:28:47.0975 0x1d88  NAUpdate - ok
    00:28:48.0065 0x1d88  [ 54F4B358F41C664CBDE4507D67EED1CD, CDCA0A778AF596933CD7CBF1119FCA551ECC03CBBD4F1E8213C3FD2FECA902F2 ] NAVENG          C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\ENG64.SYS
    00:28:48.0085 0x1d88  NAVENG - ok
    00:28:48.0145 0x1d88  [ A74D67EEEB3938FD2FA3B65B24C32C44, 4D780B70B57E23A3A155794C4DEEBD856E32D35B789BDF4673AAC8FC3AC4367B ] NAVEX15         C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.003\EX64.SYS
    00:28:48.0195 0x1d88  NAVEX15 - ok
    00:28:48.0255 0x1d88  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
    00:28:48.0285 0x1d88  NDIS - ok
    00:28:48.0295 0x1d88  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
    00:28:48.0345 0x1d88  NdisCap - ok
    00:28:48.0365 0x1d88  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
    00:28:48.0395 0x1d88  NdisTapi - ok
    00:28:48.0425 0x1d88  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
    00:28:48.0455 0x1d88  Ndisuio - ok
    00:28:48.0485 0x1d88  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
    00:28:48.0535 0x1d88  NdisWan - ok
    00:28:48.0575 0x1d88  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
    00:28:48.0595 0x1d88  NDProxy - ok
    00:28:48.0635 0x1d88  [ 2334DC48997BA203B794DF3EE70521DB, 832F4EC1586C9669F2D54AB3B212943E43B87A33B24DCC8CDAD6A0264291EE2F ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
    00:28:48.0635 0x1d88  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:48.0645 0x1d88  Detect skipped due to KSN trusted
    00:28:48.0645 0x1d88  Net Driver HPZ12 - ok
    00:28:48.0655 0x1d88  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
    00:28:48.0695 0x1d88  NetBIOS - ok
    00:28:48.0735 0x1d88  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
    00:28:48.0765 0x1d88  NetBT - ok
    00:28:48.0775 0x1d88  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] Netlogon        C:\Windows\system32\lsass.exe
    00:28:48.0785 0x1d88  Netlogon - ok
    00:28:48.0805 0x1d88  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
    00:28:48.0845 0x1d88  Netman - ok
    00:28:48.0895 0x1d88  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:28:48.0915 0x1d88  NetMsmqActivator - ok
    00:28:48.0915 0x1d88  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:28:48.0945 0x1d88  NetPipeActivator - ok
    00:28:48.0975 0x1d88  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
    00:28:49.0005 0x1d88  netprofm - ok
    00:28:49.0015 0x1d88  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:28:49.0025 0x1d88  NetTcpActivator - ok
    00:28:49.0035 0x1d88  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    00:28:49.0045 0x1d88  NetTcpPortSharing - ok
    00:28:49.0065 0x1d88  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
    00:28:49.0075 0x1d88  nfrd960 - ok
    00:28:49.0115 0x1d88  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
    00:28:49.0135 0x1d88  NlaSvc - ok
    00:28:49.0245 0x1d88  [ 5839A8027D6D324A7CD494051A96628C, 474F2D0BB463ABE68D7C4D2C630860AED4B722EC62C616C91EE00AA965378382 ] NOBU            C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
    00:28:49.0305 0x1d88  NOBU - ok
    00:28:49.0335 0x1d88  Norton PC Checkup Application Launcher - ok
    00:28:49.0345 0x1d88  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
    00:28:49.0365 0x1d88  Npfs - ok
    00:28:49.0375 0x1d88  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
    00:28:49.0415 0x1d88  nsi - ok
    00:28:49.0435 0x1d88  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
    00:28:49.0485 0x1d88  nsiproxy - ok
    00:28:49.0555 0x1d88  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
    00:28:49.0595 0x1d88  Ntfs - ok
    00:28:49.0615 0x1d88  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
    00:28:49.0635 0x1d88  Null - ok
    00:28:49.0655 0x1d88  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
    00:28:49.0665 0x1d88  nvraid - ok
    00:28:49.0695 0x1d88  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
    00:28:49.0715 0x1d88  nvstor - ok
    00:28:49.0725 0x1d88  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
    00:28:49.0745 0x1d88  nv_agp - ok
    00:28:49.0765 0x1d88  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
    00:28:49.0795 0x1d88  ohci1394 - ok
    00:28:49.0835 0x1d88  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    00:28:49.0845 0x1d88  ose - ok
    00:28:50.0005 0x1d88  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
    00:28:50.0115 0x1d88  osppsvc - ok
    00:28:50.0145 0x1d88  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
    00:28:50.0175 0x1d88  p2pimsvc - ok
    00:28:50.0205 0x1d88  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
    00:28:50.0245 0x1d88  p2psvc - ok
    00:28:50.0285 0x1d88  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
    00:28:50.0315 0x1d88  Parport - ok
    00:28:50.0355 0x1d88  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
    00:28:50.0365 0x1d88  partmgr - ok
    00:28:50.0405 0x1d88  [ 256390425414F90FCBC12F525A84EB11, A4992020BF6A239AD8A77125426E2C39980C9ABC971C4DBCB24B358F946AD7F9 ] PcaSvc          C:\Windows\System32\pcasvc.dll
    00:28:50.0455 0x1d88  PcaSvc - ok
    00:28:50.0505 0x1d88  [ 2F86BE1818C2D7AC90478E3323EE7FCB, CE721FCFFDC9D24483DEB6BB77DAFEBE79BA143CA2EE68BF28E2A9297AADB2D4 ] PCCUJobMgr      C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe
    00:28:50.0525 0x1d88  PCCUJobMgr - ok
    00:28:50.0565 0x1d88  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
    00:28:50.0575 0x1d88  pci - ok
    00:28:50.0595 0x1d88  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
    00:28:50.0605 0x1d88  pciide - ok
    00:28:50.0635 0x1d88  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
    00:28:50.0655 0x1d88  pcmcia - ok
    00:28:50.0665 0x1d88  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
    00:28:50.0675 0x1d88  pcw - ok
    00:28:50.0705 0x1d88  pdfcDispatcher - ok
    00:28:50.0725 0x1d88  [ 946010CDFA91469351B22E2620CEBCD8, F099C92706D42ADC289B72724F7932E5D4F62A427AEC967DDB0A1D728AE59A63 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
    00:28:50.0745 0x1d88  PEAUTH - ok
    00:28:50.0795 0x1d88  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
    00:28:50.0805 0x1d88  PerfHost - ok
    00:28:50.0875 0x1d88  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
    00:28:50.0935 0x1d88  pla - ok
    00:28:50.0965 0x1d88  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
    00:28:51.0025 0x1d88  PlugPlay - ok
    00:28:51.0065 0x1d88  [ AC78DF349F0E4CFB8B667C0CFFF83CCE, 7E635AA2E7350FCA0C954E697F1480A6204920AEFBCF06B90FFA02398DA82822 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
    00:28:51.0085 0x1d88  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
    00:28:51.0085 0x1d88  Detect skipped due to KSN trusted
    00:28:51.0085 0x1d88  Pml Driver HPZ12 - ok
    00:28:51.0115 0x1d88  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
    00:28:51.0135 0x1d88  PNRPAutoReg - ok
    00:28:51.0145 0x1d88  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
    00:28:51.0165 0x1d88  PNRPsvc - ok
    00:28:51.0215 0x1d88  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
    00:28:51.0245 0x1d88  PolicyAgent - ok
    00:28:51.0275 0x1d88  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
    00:28:51.0325 0x1d88  Power - ok
    00:28:51.0355 0x1d88  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
    00:28:51.0405 0x1d88  PptpMiniport - ok
    00:28:51.0435 0x1d88  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
    00:28:51.0445 0x1d88  Processor - ok
    00:28:51.0475 0x1d88  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
    00:28:51.0505 0x1d88  ProfSvc - ok
    00:28:51.0515 0x1d88  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] ProtectedStorage C:\Windows\system32\lsass.exe
    00:28:51.0535 0x1d88  ProtectedStorage - ok
    00:28:51.0565 0x1d88  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
    00:28:51.0595 0x1d88  Psched - ok
    00:28:51.0645 0x1d88  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
    00:28:51.0685 0x1d88  ql2300 - ok
    00:28:51.0705 0x1d88  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
    00:28:51.0715 0x1d88  ql40xx - ok
    00:28:51.0745 0x1d88  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
    00:28:51.0765 0x1d88  QWAVE - ok
    00:28:51.0775 0x1d88  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
    00:28:51.0785 0x1d88  QWAVEdrv - ok
    00:28:51.0795 0x1d88  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
    00:28:51.0845 0x1d88  RasAcd - ok
    00:28:51.0875 0x1d88  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
    00:28:51.0905 0x1d88  RasAgileVpn - ok
    00:28:51.0915 0x1d88  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
    00:28:51.0955 0x1d88  RasAuto - ok
    00:28:51.0995 0x1d88  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
    00:28:52.0025 0x1d88  Rasl2tp - ok
    00:28:52.0045 0x1d88  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
    00:28:52.0075 0x1d88  RasMan - ok
    00:28:52.0095 0x1d88  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
    00:28:52.0145 0x1d88  RasPppoe - ok
    00:28:52.0165 0x1d88  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
    00:28:52.0215 0x1d88  RasSstp - ok
    00:28:52.0255 0x1d88  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
    00:28:52.0285 0x1d88  rdbss - ok
    00:28:52.0295 0x1d88  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
    00:28:52.0325 0x1d88  rdpbus - ok
    00:28:52.0335 0x1d88  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
    00:28:52.0365 0x1d88  RDPCDD - ok
    00:28:52.0385 0x1d88  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
    00:28:52.0425 0x1d88  RDPENCDD - ok
    00:28:52.0435 0x1d88  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
    00:28:52.0465 0x1d88  RDPREFMP - ok
    00:28:52.0495 0x1d88  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
    00:28:52.0525 0x1d88  RDPWD - ok
    00:28:52.0565 0x1d88  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
    00:28:52.0585 0x1d88  rdyboost - ok
    00:28:52.0605 0x1d88  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
    00:28:52.0655 0x1d88  RemoteAccess - ok
    00:28:52.0695 0x1d88  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
    00:28:52.0725 0x1d88  RemoteRegistry - ok
    00:28:52.0735 0x1d88  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
    00:28:52.0765 0x1d88  RpcEptMapper - ok
    00:28:52.0765 0x1d88  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
    00:28:52.0785 0x1d88  RpcLocator - ok
    00:28:52.0805 0x1d88  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\System32\rpcss.dll
    00:28:52.0845 0x1d88  RpcSs - ok
    00:28:52.0855 0x1d88  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
    00:28:52.0885 0x1d88  rspndr - ok
    00:28:52.0905 0x1d88  [ 7EA8D2EB9BBFD2AB8A3117A1E96D3B3A, 9F6CFBE7E64A63E0AFEF546C4B8D889657B2055CE80279EA1B63EB5650E730F8 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
    00:28:52.0925 0x1d88  RTL8167 - ok
    00:28:52.0935 0x1d88  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] SamSs           C:\Windows\system32\lsass.exe
    00:28:52.0945 0x1d88  SamSs - ok
    00:28:52.0975 0x1d88  [ 3289766038DB2CB14D07DC84392138D5, A7790B787690CC1A8B97E4532090C5295350A836A9474DEA74CEB3E81CF26124 ] SASDIFSV        C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
    00:28:52.0985 0x1d88  SASDIFSV - ok
    00:28:52.0995 0x1d88  [ 58A38E75F3316A83C23DF6173D41F2B5, B0A8CDA1D164B7534FB41AB80792861384709BF0F914F44553275CF20194F1A1 ] SASKUTIL        C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
    00:28:53.0005 0x1d88  SASKUTIL - ok
    00:28:53.0045 0x1d88  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\DRIVERS\sbp2port.sys
    00:28:53.0055 0x1d88  sbp2port - ok
    00:28:53.0065 0x1d88  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
    00:28:53.0115 0x1d88  SCardSvr - ok
    00:28:53.0145 0x1d88  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
    00:28:53.0195 0x1d88  scfilter - ok
    00:28:53.0245 0x1d88  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
    00:28:53.0295 0x1d88  Schedule - ok
    00:28:53.0325 0x1d88  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
    00:28:53.0355 0x1d88  SCPolicySvc - ok
    00:28:53.0365 0x1d88  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
    00:28:53.0395 0x1d88  SDRSVC - ok
    00:28:53.0445 0x1d88  [ CC781378E7EDA615D2CDCA3B17829FA4, 137BF83A2A3D69335AD031B8D73473526F782CB8917A34B3CD92F923E7660F2A ] SeaPort         C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
    00:28:53.0465 0x1d88  SeaPort - ok
    00:28:53.0485 0x1d88  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
    00:28:53.0525 0x1d88  secdrv - ok
    00:28:53.0565 0x1d88  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
    00:28:53.0585 0x1d88  seclogon - ok
    00:28:53.0595 0x1d88  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll
    00:28:53.0645 0x1d88  SENS - ok
    00:28:53.0665 0x1d88  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
    00:28:53.0715 0x1d88  SensrSvc - ok
    00:28:53.0725 0x1d88  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
    00:28:53.0755 0x1d88  Serenum - ok
    00:28:53.0775 0x1d88  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
    00:28:53.0785 0x1d88  Serial - ok
    00:28:53.0815 0x1d88  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
    00:28:53.0825 0x1d88  sermouse - ok
    00:28:53.0865 0x1d88  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
    00:28:53.0895 0x1d88  SessionEnv - ok
    00:28:53.0905 0x1d88  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
    00:28:53.0925 0x1d88  sffdisk - ok
    00:28:53.0935 0x1d88  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
    00:28:53.0965 0x1d88  sffp_mmc - ok
    00:28:54.0005 0x1d88  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
    00:28:54.0025 0x1d88  sffp_sd - ok
    00:28:54.0035 0x1d88  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
    00:28:54.0045 0x1d88  sfloppy - ok
    00:28:54.0095 0x1d88  [ 2046AA7491DE7EFA4D70E615D9BC9D09, A8763D059AD68D5842C407FA9644E0B129BEF0F63CD87E62B80B05441EDC3489 ] Sftfs           C:\Windows\system32\DRIVERS\Sftfslh.sys
    00:28:54.0125 0x1d88  Sftfs - ok
    00:28:54.0185 0x1d88  [ 77C5A741A7452812F278EF2C18478862, 0B763679EB7EFB8ED9DCE7B429706E939BB65BA6BCF1BAE0E0426D4E87074B8C ] sftlist         C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    00:28:54.0205 0x1d88  sftlist - ok
    00:28:54.0245 0x1d88  [ 0E0446BC4D51BE4263ACB7E33491191C, 2AD039FB440560658C4E06F67CC192EF71577EF3FF789A43C08430CE5EAE5A70 ] Sftplay         C:\Windows\system32\DRIVERS\Sftplaylh.sys
    00:28:54.0265 0x1d88  Sftplay - ok
    00:28:54.0275 0x1d88  [ C5FB982CD266E604ED3142102C26D62C, A6BC0D72E98F924274ECAD49C85F0775D1CD45B97CD43F53DF3992B560835FC5 ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirlh.sys
    00:28:54.0285 0x1d88  Sftredir - ok
    00:28:54.0295 0x1d88  [ 2575511AF67AA1FA068CCC4918E2C2A3, 3152FF5AC2CF6FE966DA59B1B33E22F9BD9B6BB4310441870528364BA9501A4D ] Sftvol          C:\Windows\system32\DRIVERS\Sftvollh.sys
    00:28:54.0305 0x1d88  Sftvol - ok
    00:28:54.0325 0x1d88  [ 39B1D0A636A400304565D4521FAD6D77, 1F01DB35B5A477AA7A77585C9304E6B5F3E67807531305BCA93A7F494CED8F59 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    00:28:54.0335 0x1d88  sftvsa - ok
    00:28:54.0375 0x1d88  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
    00:28:54.0415 0x1d88  SharedAccess - ok
    00:28:54.0455 0x1d88  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
    00:28:54.0485 0x1d88  ShellHWDetection - ok
    00:28:54.0495 0x1d88  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
    00:28:54.0505 0x1d88  SiSRaid2 - ok
    00:28:54.0525 0x1d88  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
    00:28:54.0535 0x1d88  SiSRaid4 - ok
    00:28:54.0555 0x1d88  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
    00:28:54.0585 0x1d88  Smb - ok
    00:28:54.0605 0x1d88  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
    00:28:54.0625 0x1d88  SNMPTRAP - ok
    00:28:54.0625 0x1d88  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
    00:28:54.0635 0x1d88  spldr - ok
    00:28:54.0675 0x1d88  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
    00:28:54.0695 0x1d88  Spooler - ok
    00:28:54.0815 0x1d88  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
    00:28:54.0905 0x1d88  sppsvc - ok
    00:28:54.0925 0x1d88  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
    00:28:54.0965 0x1d88  sppuinotify - ok
    00:28:55.0035 0x1d88  [ E163E10191958FF6A2B0B48353F9E9FD, C4F5B83B5C435458AEEC4BD5C6A0FE15F4C3CD5C23CA7F5949A62214634DBB36 ] SRTSP           C:\Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS
    00:28:55.0055 0x1d88  SRTSP - ok
    00:28:55.0075 0x1d88  [ 68E7B6708B9EEE021301C483825D05EA, 87E262405473A063E3E6E9D1D61D8381C997C95F77317CDBB3C59369436E70C5 ] SRTSPX          C:\Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS
    00:28:55.0085 0x1d88  SRTSPX - ok
    00:28:55.0115 0x1d88  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
    00:28:55.0145 0x1d88  srv - ok
    00:28:55.0195 0x1d88  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
    00:28:55.0205 0x1d88  srv2 - ok
    00:28:55.0225 0x1d88  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
    00:28:55.0235 0x1d88  srvnet - ok
    00:28:55.0255 0x1d88  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
    00:28:55.0285 0x1d88  SSDPSRV - ok
    00:28:55.0315 0x1d88  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
    00:28:55.0335 0x1d88  SstpSvc - ok
    00:28:55.0345 0x1d88  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
    00:28:55.0365 0x1d88  stexstor - ok
    00:28:55.0385 0x1d88  [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys
    00:28:55.0396 0x1d88  StillCam - ok
    00:28:55.0456 0x1d88  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
    00:28:55.0476 0x1d88  stisvc - ok
    00:28:55.0526 0x1d88  [ 42FEF84684D217870F3C8813B6F58276, F7008FD18174E7262E15D3DC1A148322D6B6D1CF5D324BA13AD99766B9E4EF12 ] SupportSoft RemoteAssist C:\Program Files (x86)\Common Files\supportsoft\bin\ssrc.exe
    00:28:55.0536 0x1d88  SupportSoft RemoteAssist - ok
    00:28:55.0566 0x1d88  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
    00:28:55.0576 0x1d88  swenum - ok
    00:28:55.0606 0x1d88  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
    00:28:55.0656 0x1d88  swprv - ok
    00:28:55.0706 0x1d88  [ 5C9EE2303CA7F267665D75237862B39C, 5DECD977A823C14B4D980D3DB621BC875231B741653F0450A027FC9E87725F9D ] SymDS           C:\Windows\system32\drivers\N360x64\1506000.020\SYMDS64.SYS
    00:28:55.0726 0x1d88  SymDS - ok
    00:28:55.0776 0x1d88  [ 9F31630D7FC2DD9D5DA1CE359AAD1F46, 296D29EDF53956D1899DE4669AB429C280DF9F183F00AE1CE528E7C575802235 ] SymEFA          C:\Windows\system32\drivers\N360x64\1506000.020\SYMEFA64.SYS
    00:28:55.0806 0x1d88  SymEFA - ok
    00:28:55.0856 0x1d88  [ 97E11C50CE52277B377396EA8838E539, E17D03F80E14F961C41F2D54D1EF73D29BF01F38459C5710D786234F8BA3C835 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
    00:28:55.0866 0x1d88  SymEvent - ok
    00:28:55.0886 0x1d88  [ 6DE89F4CDF0B31A5BAF2855F9D80F8BA, 53064C246732594127E7D927C179FEB8134701D7D8C4A85CB1FE29B82F37A16A ] SymIM           C:\Windows\system32\DRIVERS\SymIMv.sys
    00:28:55.0896 0x1d88  SymIM - ok
    00:28:55.0926 0x1d88  [ 2C95265BE19F338E1C1090E4E91055BB, 1E580E9367B1C89B06BD4B34EFD94CD511FD3AA1617D943DDFE0A28B7ED5D5F9 ] SymIRON         C:\Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS
    00:28:55.0936 0x1d88  SymIRON - ok
    00:28:55.0986 0x1d88  [ 5570A74FF9B1EFBC5154DD1E2F05C517, 2C883A0334CBE4AE257028805C9BB1E529A80F56BA6D341E8EBB83CB3E46FEB7 ] SymNetS         C:\Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS
    00:28:56.0006 0x1d88  SymNetS - ok
    00:28:56.0076 0x1d88  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
    00:28:56.0126 0x1d88  SysMain - ok
    00:28:56.0136 0x1d88  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
    00:28:56.0166 0x1d88  TabletInputService - ok
    00:28:56.0196 0x1d88  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
    00:28:56.0226 0x1d88  TapiSrv - ok
    00:28:56.0236 0x1d88  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
    00:28:56.0266 0x1d88  TBS - ok
    00:28:56.0336 0x1d88  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
    00:28:56.0386 0x1d88  Tcpip - ok
    00:28:56.0446 0x1d88  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
    00:28:56.0506 0x1d88  TCPIP6 - ok
    00:28:56.0536 0x1d88  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
    00:28:56.0546 0x1d88  tcpipreg - ok
    00:28:56.0566 0x1d88  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
    00:28:56.0616 0x1d88  TDPIPE - ok
    00:28:56.0636 0x1d88  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
    00:28:56.0646 0x1d88  TDTCP - ok
    00:28:56.0676 0x1d88  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
    00:28:56.0686 0x1d88  tdx - ok
    00:28:56.0726 0x1d88  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
    00:28:56.0736 0x1d88  TermDD - ok
    00:28:56.0776 0x1d88  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
    00:28:56.0806 0x1d88  TermService - ok
    00:28:56.0826 0x1d88  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
    00:28:56.0856 0x1d88  Themes - ok
    00:28:56.0876 0x1d88  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
    00:28:56.0906 0x1d88  THREADORDER - ok
    00:28:56.0916 0x1d88  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
    00:28:56.0946 0x1d88  TrkWks - ok
    00:28:56.0986 0x1d88  [ FD44FA80DA03EA144153A76DEBBB61B4, 0C46717F489A415A583470DAE8CF58E47BC307B9CB0F9DB6C4EDF33B7525475C ] TrueSight       C:\Windows\System32\drivers\TrueSight.sys
    00:28:56.0996 0x1d88  TrueSight - ok
    00:28:57.0036 0x1d88  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
    00:28:57.0066 0x1d88  TrustedInstaller - ok
    00:28:57.0096 0x1d88  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
    00:28:57.0136 0x1d88  tssecsrv - ok
    00:28:57.0156 0x1d88  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
    00:28:57.0206 0x1d88  TsUsbFlt - ok
    00:28:57.0236 0x1d88  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
    00:28:57.0286 0x1d88  tunnel - ok
    00:28:57.0316 0x1d88  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
    00:28:57.0326 0x1d88  uagp35 - ok
    00:28:57.0366 0x1d88  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
    00:28:57.0396 0x1d88  udfs - ok
    00:28:57.0416 0x1d88  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
    00:28:57.0446 0x1d88  UI0Detect - ok
    00:28:57.0476 0x1d88  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
    00:28:57.0486 0x1d88  uliagpkx - ok
    00:28:57.0496 0x1d88  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
    00:28:57.0516 0x1d88  umbus - ok
    00:28:57.0526 0x1d88  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
    00:28:57.0556 0x1d88  UmPass - ok
    00:28:57.0576 0x1d88  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
    00:28:57.0616 0x1d88  upnphost - ok
    00:28:57.0646 0x1d88  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
    00:28:57.0686 0x1d88  usbaudio - ok
    00:28:57.0706 0x1d88  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
    00:28:57.0716 0x1d88  usbccgp - ok
    00:28:57.0756 0x1d88  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
    00:28:57.0776 0x1d88  usbcir - ok
    00:28:57.0796 0x1d88  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
    00:28:57.0806 0x1d88  usbehci - ok
    00:28:57.0826 0x1d88  [ 2C780746DC44A28FE67004DC58173F05, 9E0596CE35C7430A31A7E77B4D12A1F521B9ED8EB0614E6FB38403AC614C3EE3 ] usbfilter       C:\Windows\system32\DRIVERS\usbfilter.sys
    00:28:57.0846 0x1d88  usbfilter - ok
    00:28:57.0886 0x1d88  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
    00:28:57.0896 0x1d88  usbhub - ok
    00:28:57.0926 0x1d88  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
    00:28:57.0966 0x1d88  usbohci - ok
    00:28:57.0976 0x1d88  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
    00:28:58.0016 0x1d88  usbprint - ok
    00:28:58.0036 0x1d88  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
    00:28:58.0046 0x1d88  usbscan - ok
    00:28:58.0076 0x1d88  [ 4ACEE387FA8FD39F83564FCD2FC234F2, 3D62DE27027B8C032D15EB74F97A14B4EC24E67052C1163862740D6312B2569B ] usbser          C:\Windows\system32\DRIVERS\usbser.sys
    00:28:58.0126 0x1d88  usbser - ok
    00:28:58.0146 0x1d88  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
    00:28:58.0186 0x1d88  USBSTOR - ok
    00:28:58.0196 0x1d88  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
    00:28:58.0206 0x1d88  usbuhci - ok
    00:28:58.0226 0x1d88  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
    00:28:58.0266 0x1d88  UxSms - ok
    00:28:58.0276 0x1d88  [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] VaultSvc        C:\Windows\system32\lsass.exe
    00:28:58.0286 0x1d88  VaultSvc - ok
    00:28:58.0306 0x1d88  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
    00:28:58.0316 0x1d88  vdrvroot - ok
    00:28:58.0356 0x1d88  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
    00:28:58.0396 0x1d88  vds - ok
    00:28:58.0416 0x1d88  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
    00:28:58.0426 0x1d88  vga - ok
    00:28:58.0466 0x1d88  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
    00:28:58.0486 0x1d88  VgaSave - ok
    00:28:58.0516 0x1d88  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
    00:28:58.0536 0x1d88  vhdmp - ok
    00:28:58.0566 0x1d88  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
    00:28:58.0576 0x1d88  viaide - ok
    00:28:58.0586 0x1d88  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
    00:28:58.0606 0x1d88  volmgr - ok
    00:28:58.0636 0x1d88  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
    00:28:58.0656 0x1d88  volmgrx - ok
    00:28:58.0676 0x1d88  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
    00:28:58.0686 0x1d88  volsnap - ok
    00:28:58.0706 0x1d88  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
    00:28:58.0726 0x1d88  vsmraid - ok
    00:28:58.0796 0x1d88  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
    00:28:58.0856 0x1d88  VSS - ok
    00:28:58.0866 0x1d88  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
    00:28:58.0876 0x1d88  vwifibus - ok
    00:28:58.0886 0x1d88  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
    00:28:58.0916 0x1d88  vwififlt - ok
    00:28:58.0946 0x1d88  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
    00:28:58.0956 0x1d88  vwifimp - ok
    00:28:58.0986 0x1d88  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
    00:28:59.0016 0x1d88  W32Time - ok
    00:28:59.0036 0x1d88  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
    00:28:59.0066 0x1d88  WacomPen - ok
    00:28:59.0096 0x1d88  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
    00:28:59.0146 0x1d88  WANARP - ok
    00:28:59.0146 0x1d88  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
    00:28:59.0176 0x1d88  Wanarpv6 - ok
    00:28:59.0246 0x1d88  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
    00:28:59.0276 0x1d88  WatAdminSvc - ok
    00:28:59.0286 0x1d88  wayuia - ok
    00:28:59.0336 0x1d88  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
    00:28:59.0386 0x1d88  wbengine - ok
    00:28:59.0406 0x1d88  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
    00:28:59.0426 0x1d88  WbioSrvc - ok
    00:28:59.0456 0x1d88  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
    00:28:59.0506 0x1d88  wcncsvc - ok
    00:28:59.0526 0x1d88  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
    00:28:59.0566 0x1d88  WcsPlugInService - ok
    00:28:59.0586 0x1d88  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
    00:28:59.0596 0x1d88  Wd - ok
    00:28:59.0626 0x1d88  [ A3D04EBF5227886029B4532F20D026F7, D90F7B9C176008675DA0B5FD7E4973CBC2A04172CEDF8FB7D3B3B4F27B5440D7 ] WDC_SAM         C:\Windows\system32\DRIVERS\wdcsam64.sys
    00:28:59.0666 0x1d88  WDC_SAM - ok
    00:28:59.0716 0x1d88  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
    00:28:59.0746 0x1d88  Wdf01000 - ok
    00:28:59.0756 0x1d88  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
    00:28:59.0816 0x1d88  WdiServiceHost - ok
    00:28:59.0816 0x1d88  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
    00:28:59.0836 0x1d88  WdiSystemHost - ok
    00:28:59.0856 0x1d88  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
    00:28:59.0916 0x1d88  WebClient - ok
    00:28:59.0926 0x1d88  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
    00:28:59.0976 0x1d88  Wecsvc - ok
    00:28:59.0996 0x1d88  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
    00:29:00.0026 0x1d88  wercplsupport - ok
    00:29:00.0036 0x1d88  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
    00:29:00.0086 0x1d88  WerSvc - ok
    00:29:00.0106 0x1d88  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
    00:29:00.0136 0x1d88  WfpLwf - ok
    00:29:00.0146 0x1d88  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
    00:29:00.0156 0x1d88  WIMMount - ok
    00:29:00.0186 0x1d88  WinDefend - ok
    00:29:00.0186 0x1d88  WinHttpAutoProxySvc - ok
    00:29:00.0236 0x1d88  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
    00:29:00.0266 0x1d88  Winmgmt - ok
    00:29:00.0356 0x1d88  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
    00:29:00.0436 0x1d88  WinRM - ok
    00:29:00.0486 0x1d88  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
    00:29:00.0496 0x1d88  WinUsb - ok
    00:29:00.0526 0x1d88  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
    00:29:00.0566 0x1d88  Wlansvc - ok
    00:29:00.0586 0x1d88  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
    00:29:00.0636 0x1d88  WmiAcpi - ok
    00:29:00.0666 0x1d88  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
    00:29:00.0696 0x1d88  wmiApSrv - ok
    00:29:00.0696 0x1d88  WMPNetworkSvc - ok
    00:29:00.0726 0x1d88  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
    00:29:00.0766 0x1d88  WPCSvc - ok
    00:29:00.0796 0x1d88  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
    00:29:00.0816 0x1d88  WPDBusEnum - ok
    00:29:00.0826 0x1d88  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
    00:29:00.0846 0x1d88  ws2ifsl - ok
    00:29:00.0866 0x1d88  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
    00:29:00.0896 0x1d88  wscsvc - ok
    00:29:00.0926 0x1d88  [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys
    00:29:00.0936 0x1d88  WSDPrintDevice - ok
    00:29:00.0946 0x1d88  WSearch - ok
    00:29:01.0036 0x1d88  [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv        C:\Windows\system32\wuaueng.dll
    00:29:01.0096 0x1d88  wuauserv - ok
    00:29:01.0136 0x1d88  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
    00:29:01.0156 0x1d88  WudfPf - ok
    00:29:01.0176 0x1d88  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
    00:29:01.0186 0x1d88  WUDFRd - ok
    00:29:01.0206 0x1d88  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
    00:29:01.0226 0x1d88  wudfsvc - ok
    00:29:01.0276 0x1d88  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
    00:29:01.0326 0x1d88  WwanSvc - ok
    00:29:01.0346 0x1d88  ================ Scan global ===============================
    00:29:01.0366 0x1d88  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
    00:29:01.0406 0x1d88  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    00:29:01.0416 0x1d88  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    00:29:01.0436 0x1d88  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
    00:29:01.0446 0x1d88  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
    00:29:01.0456 0x1d88  [ Global ] - ok
    00:29:01.0456 0x1d88  ================ Scan MBR ==================================
    00:29:01.0466 0x1d88  [ 29742C1E4D2ADC0F186D7BCF35F3703B ] \Device\Harddisk0\DR0
    00:29:01.0736 0x1d88  \Device\Harddisk0\DR0 - ok
    00:29:01.0736 0x1d88  ================ Scan VBR ==================================
    00:29:01.0736 0x1d88  [ 94365E49A1778903D5B19A307AE4FA01 ] \Device\Harddisk0\DR0\Partition1
    00:29:01.0766 0x1d88  \Device\Harddisk0\DR0\Partition1 - ok
    00:29:01.0776 0x1d88  [ 6A7D69284B48C10B2CE9DAD7A22CF59F ] \Device\Harddisk0\DR0\Partition2
    00:29:01.0806 0x1d88  \Device\Harddisk0\DR0\Partition2 - ok
    00:29:01.0806 0x1d88  [ 96E7BCF58B398618FF6A9E56D4F42986 ] \Device\Harddisk0\DR0\Partition3
    00:29:01.0806 0x1d88  \Device\Harddisk0\DR0\Partition3 - ok
    00:29:01.0806 0x1d88  ================ Scan generic autorun ======================
    00:29:01.0846 0x1d88  [ 554A50B5310E702029D3A675459108FF, 4757D5FFFAC7E73D4A3D931DB1399DDFDBD5811639BDA4517F886C21CC7F2574 ] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
    00:29:01.0856 0x1d88  hpsysdrv - ok
    00:29:01.0966 0x1d88  [ 63A648C5FEB5DE641E1174ACB6CF78C6, D8DF39416CA18F627FC7BADA420129852F9718188A851D0AE522AAFA2BFAFF21 ] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    00:29:01.0986 0x1d88  SmartMenu - ok
    00:29:02.0046 0x1d88  [ DD79A6B15C2F28DE98DF4852AAF6B13B, 0F7E9023E0BA4B40E2DE9A9FA34E85FEAF72B93049AAB3E1D73AD046BB113E05 ] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe
    00:29:02.0056 0x1d88  NCPluginUpdater - ok
    00:29:02.0096 0x1d88  [ 3A4D4E97C4844F475CE02F543A8C4B85, FDF98E15C6870FE45E3258F3B8604BAE7103D5E79B8CA7C5DC410C0B1254802B ] C:\Program Files (x86)\PDF Complete\pdfsty.exe
    00:29:02.0116 0x1d88  PDF Complete - ok
    00:29:02.0166 0x1d88  [ 80FDA1E7877DDBBB53D736AD290EC08A, E042AD1D6D6F04C2000853A16AEE4F28C6325ABE64C00890460A4EC7FB6D1939 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    00:29:02.0166 0x1d88  StartCCC - detected UnsignedFile.Multi.Generic ( 1 )
    00:29:02.0166 0x1d88  Detect skipped due to KSN trusted
    00:29:02.0166 0x1d88  StartCCC - ok
    00:29:02.0276 0x1d88  [ 5A4FCB9FA2798BFF8B2E9340CAD1347C, 6ABB3F762C48AF4316C674AF3A60EF2E1EF208C1650A5977BFC55A2C1F26B9DD ] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
    00:29:02.0316 0x1d88  Wondershare Helper Compact.exe - detected UnsignedFile.Multi.Generic ( 1 )
    00:29:02.0316 0x1d88  Detect skipped due to KSN trusted
    00:29:02.0316 0x1d88  Wondershare Helper Compact.exe - ok
    00:29:02.0356 0x1d88  [ 8E53B67FA3816E854B07C5DC66E10730, 21DC3B06437B052B693F77D2F579D9C02B7036502DDED16D06A245B966E29556 ] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
    00:29:02.0366 0x1d88  TkBellExe - ok
    00:29:02.0436 0x1d88  [ 09E60B4FE341A94A300830C008907099, 5F07868953FAA8FFA9E6477F6BAC52DEEDF3EA4A3F8AF5B4E15878D8240223AB ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
    00:29:02.0446 0x1d88  APSDaemon - ok
    00:29:02.0546 0x1d88  [ 4C8942B8721813E5C8874D47112DCF73, 85869B814417397D92A028CF841FC7B1B41E5D53EFF3470DED664484709C9FBA ] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    00:29:02.0606 0x1d88  LightScribe Control Panel - ok
    00:29:02.0816 0x1d88  [ 952E717574469A91BCC32B6B162BC2A0, 36F46C15CD9DBAC16D300DD3D731C95E2877A8D774B6CCEBF0EFB4D76D376944 ] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    00:29:02.0976 0x1d88  SUPERAntiSpyware - ok
    00:29:03.0076 0x1d88  [ 66E3878250E18FEDBA32CB90DA917005, 199DA21E7A269334E6F0BE7A73D3CA28F716CF32183DF9D50B282DAAFAE1D309 ] C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
    00:29:03.0106 0x1d88  GarminExpressTrayApp - ok
    00:29:03.0126 0x1d88  [ 42A4F221F85B44E9F1A5A436373F0502, 35CC3C18199751E02278648A81C26AFBB015EF321C3C5CA141DEF48D2AE73BA1 ] C:\Program Files (x86)\Content Manager\launchCM.exe
    00:29:03.0136 0x1d88  CmTray - detected UnsignedFile.Multi.Generic ( 1 )
    00:29:03.0136 0x1d88  Detect skipped due to KSN trusted
    00:29:03.0136 0x1d88  CmTray - ok
    00:29:03.0186 0x1d88  [ 105C276BB7B43501225C419B062096D0, F5D35230FC5E116FB04147F216313D2E2542D96E975B19F5FD9F7641CF11271F ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
    00:29:03.0196 0x1d88  ApplePhotoStreams - ok
    00:29:03.0226 0x1d88  [ EC58C1A9A3281CE0C8FCC05BDBFECB37, 3738BBC112346B32F686F1CB4B4AAD89B06AA1F8FB2D333BC2D2F554212A0A59 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    00:29:03.0236 0x1d88  iCloudServices - ok
    00:29:03.0306 0x1d88  [ 7C5F08E09F2C15381B47A246B48186BF, F7D63D43AEE67B13299F92C8296508FBB8C17451A95693E60AE29650BF09E44F ] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe
    00:29:03.0346 0x1d88  HPAdvisorDock - ok
    00:29:03.0426 0x1d88  [ 4C8942B8721813E5C8874D47112DCF73, 85869B814417397D92A028CF841FC7B1B41E5D53EFF3470DED664484709C9FBA ] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    00:29:03.0486 0x1d88  LightScribe Control Panel - ok
    00:29:03.0536 0x1d88  [ 7C5F08E09F2C15381B47A246B48186BF, F7D63D43AEE67B13299F92C8296508FBB8C17451A95693E60AE29650BF09E44F ] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe
    00:29:03.0576 0x1d88  HPAdvisorDock - ok
    00:29:03.0666 0x1d88  [ 4C8942B8721813E5C8874D47112DCF73, 85869B814417397D92A028CF841FC7B1B41E5D53EFF3470DED664484709C9FBA ] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    00:29:03.0726 0x1d88  LightScribe Control Panel - ok
    00:29:03.0786 0x1d88  [ 39D0074C59F6D1A62731942C7FA8B60B, 0847E03516CA3DB8297799F1439A1CC004B983F99B1A0ECFE263583DAA264502 ] C:\Program Files\Internet Explorer\iexplore.exe
    00:29:03.0816 0x1d88  Application Restart #0 - ok
    00:29:03.0816 0x1d88  Object required for P2P: [ 39D0074C59F6D1A62731942C7FA8B60B ] C:\Program Files\Internet Explorer\iexplore.exe
    00:29:06.0496 0x1d88  Object send P2P result: true
    00:29:06.0496 0x1d88  AV detected via SS2: Norton 360 Premier Edition, C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\WSCStub.exe ( 21.6.0.0 ), 0x50000 ( disabled : updated )
    00:29:06.0496 0x1d88  FW detected via SS2: Norton 360 Premier Edition, C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\WSCStub.exe ( 21.6.0.0 ), 0x51010 ( enabled )
    00:29:08.0977 0x1d88  ============================================================
    00:29:08.0977 0x1d88  Scan finished
    00:29:08.0977 0x1d88  ============================================================
    00:29:08.0977 0x1d0c  Detected object count: 0
    00:29:08.0977 0x1d0c  Actual detected object count: 0
     


    • 0

    #7
    RKinner

    RKinner

      Malware Expert

    • Expert
    • 20,031 posts
    • MVP
     
    Download aswMBR.exe  to your desktop.
    Right click aswMBR.exe and Run as Administrator
    uncheck trace disk IO calls
    Click the "Scan" button to start scan (Accept the Avast Engine)
    On completion of the scan if the Fix button is enabled (not the FixMBR button) press it and then run a new scan and  click save log, save it to your desktop and post in your next reply
    If the Fix button is not enabled then just click save log, save it to your desktop and post in your next reply

    • 0

    #8
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    Good morning RKinner. Thank you for taking my topic. I am happy that you did. You cleaned up a very poorly running old 2002 model windows xp PC for me in January 2013. You spent a lot of time working with me on that PC until it was running perfectly. That old XP is still running perfectly and I am using it now to work on this Windows 7 PC. I am  grateful for your work and success on that old computer and hope we can  have the same success and find the culprit files on this windows 7. I checked your profile and it appears you have moved from the beautiful Ocras Island to Florida. I am surprised at that since you sent me some pictures of  your beautiful house(s) and scenery in Ocras.

     

     

    Here is the txt file from aswMBr

     

    aswMBR version 1.0.1.2290 Copyright© 2014 AVAST Software
    Run date: 2015-02-13 09:55:40
    -----------------------------
    09:55:40.833    OS Version: Windows x64 6.1.7601 Service Pack 1
    09:55:40.833    Number of processors: 4 586 0xA00
    09:55:40.834    ComputerName: PAVILIONELITE  UserName: Rich
    09:55:48.186    Initialize success
    09:55:48.442    VM: initialized successfully
    09:55:48.443    VM: Amd CPU BiosDisabled
    09:58:41.062    AVAST engine defs: 15021300
    10:00:36.130    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000073
    10:00:36.132    Disk 0 Vendor: Seagate_ HP35 Size: 953674MB BusType: 8
    10:00:36.235    Disk 0 MBR read successfully
    10:00:36.238    Disk 0 MBR scan
    10:00:36.242    Disk 0 unknown MBR code
    10:00:36.491    Disk 0 Partition 1 80 (A) 07      HPFS/NTFS NTFS          100 MB offset 2048
    10:00:36.495    Disk 0 default boot code
    10:00:36.526    Disk 0 Partition 2 00     07      HPFS/NTFS NTFS       940597 MB offset 206848
    10:00:36.557    Disk 0 Partition 3 00     07      HPFS/NTFS NTFS        12975 MB offset 1926549504
    10:00:36.598    Disk 0 scanning C:\Windows\system32\drivers
    10:00:47.497    Service scanning
    10:00:50.111    Service BHDrvx64 C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys **LOCKED** 5
    10:00:54.899    Service IDSVia64 C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSvia64.sys **LOCKED** 5
    10:00:57.701    Service NAVENG C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.032\ENG64.SYS **LOCKED** 5
    10:00:57.830    Service NAVEX15 C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.032\EX64.SYS **LOCKED** 5
    10:01:07.265    Modules scanning
    10:01:18.528    AVAST engine scan C:\Windows
    10:01:21.250    AVAST engine scan C:\Windows\system32
    10:04:29.926    AVAST engine scan C:\Windows\system32\drivers
    10:04:49.183    AVAST engine scan C:\Users\Rich
    10:12:22.593    AVAST engine scan C:\ProgramData
    10:22:31.591    Disk 0 statistics 4336455/0/0 @ 2.20 MB/s
    10:22:31.597    Scan finished successfully
    10:29:42.037    Disk 0 MBR has been saved successfully to "C:\Users\Rich\Desktop\MBR.dat"
    10:29:42.043    The log file has been saved successfully to "C:\Users\Rich\Desktop\aswMBR.txt"


    aswMBR version 1.0.1.2290 Copyright© 2014 AVAST Software
    Run date: 2015-02-13 09:55:40
    -----------------------------
    09:55:40.833    OS Version: Windows x64 6.1.7601 Service Pack 1
    09:55:40.833    Number of processors: 4 586 0xA00
    09:55:40.834    ComputerName: PAVILIONELITE  UserName: Rich
    09:55:48.186    Initialize success
    09:55:48.442    VM: initialized successfully
    09:55:48.443    VM: Amd CPU BiosDisabled
    09:58:41.062    AVAST engine defs: 15021300
    10:00:36.130    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000073
    10:00:36.132    Disk 0 Vendor: Seagate_ HP35 Size: 953674MB BusType: 8
    10:00:36.235    Disk 0 MBR read successfully
    10:00:36.238    Disk 0 MBR scan
    10:00:36.242    Disk 0 unknown MBR code
    10:00:36.491    Disk 0 Partition 1 80 (A) 07      HPFS/NTFS NTFS          100 MB offset 2048
    10:00:36.495    Disk 0 default boot code
    10:00:36.526    Disk 0 Partition 2 00     07      HPFS/NTFS NTFS       940597 MB offset 206848
    10:00:36.557    Disk 0 Partition 3 00     07      HPFS/NTFS NTFS        12975 MB offset 1926549504
    10:00:36.598    Disk 0 scanning C:\Windows\system32\drivers
    10:00:47.497    Service scanning
    10:00:50.111    Service BHDrvx64 C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys **LOCKED** 5
    10:00:54.899    Service IDSVia64 C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150212.001\IDSvia64.sys **LOCKED** 5
    10:00:57.701    Service NAVENG C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.032\ENG64.SYS **LOCKED** 5
    10:00:57.830    Service NAVEX15 C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150212.032\EX64.SYS **LOCKED** 5
    10:01:07.265    Modules scanning
    10:01:18.528    AVAST engine scan C:\Windows
    10:01:21.250    AVAST engine scan C:\Windows\system32
    10:04:29.926    AVAST engine scan C:\Windows\system32\drivers
    10:04:49.183    AVAST engine scan C:\Users\Rich
    10:12:22.593    AVAST engine scan C:\ProgramData
    10:22:31.591    Disk 0 statistics 4336455/0/0 @ 2.20 MB/s
    10:22:31.597    Scan finished successfully
    10:29:42.037    Disk 0 MBR has been saved successfully to "C:\Users\Rich\Desktop\MBR.dat"
    10:29:42.043    The log file has been saved successfully to "C:\Users\Rich\Desktop\aswMBR.txt"
    10:30:21.064    Disk 0 MBR has been saved successfully to "C:\Users\Rich\Desktop\MBR.dat"
    10:30:21.069    The log file has been saved successfully to "C:\Users\Rich\Desktop\aswMBR.txt"

     


    • 0

    #9
    RKinner

    RKinner

      Malware Expert

    • Expert
    • 20,031 posts
    • MVP

    Didn't want to move but wife wanted to be near her 3 year old granddaughter.


    • 0

    #10
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    Hello RKinner

    I was busy doing some other scans you requested and completely missed seeing your post of 12 Feb at 12:58 until just now so I have put the txt file you attached on my desktop where FRST.exe is located and running FRST twice and posting the files as requested.

     

    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015
    Ran by Rich at 2015-02-15 02:32:28 Run:1
    Running from C:\Users\Rich\Desktop
    Loaded Profiles: Rich (Available profiles: Rich & norton & Guest)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    Toolbar: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> No Name - {2E924F4F-67F0-4BD8-9560-49F468E843D2} -  No File
    Handler: WSISVCUchrome - No CLSID Value
    S0 wayuia; No ImagePath
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieUserList
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieSiteList
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieBrowserModeList
    Task: {F3529C6B-3FFA-47B1-BC05-A67FD9107B47} - \VisualBeeRecovery No Task File <==== ATTENTION
    Task: {D1AF1A37-7879-49C2-A9AD-FC500F922B7B} - System32\Tasks\{6E1A08FF-B4D1-4C23-8616-56A7F8865598} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
    C:\$Recycle.bin\S-1-5-21-4215829332-950673753-2765580295-1001


    *****************

    "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
    HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
    "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
    HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2E924F4F-67F0-4BD8-9560-49F468E843D2} => value deleted successfully.
    HKCR\CLSID\{2E924F4F-67F0-4BD8-9560-49F468E843D2} => Key not found.
    "HKCR\PROTOCOLS\Handler\WSISVCUchrome" => Key deleted successfully.
    wayuia => Service deleted successfully.
    C:\Users\norton\AppData\Local\EmieUserList => Moved successfully.
    C:\Users\norton\AppData\Local\EmieSiteList => Moved successfully.
    C:\Users\norton\AppData\Local\EmieBrowserModeList => Moved successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F3529C6B-3FFA-47B1-BC05-A67FD9107B47}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3529C6B-3FFA-47B1-BC05-A67FD9107B47}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\VisualBeeRecovery" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D1AF1A37-7879-49C2-A9AD-FC500F922B7B}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1AF1A37-7879-49C2-A9AD-FC500F922B7B}" => Key deleted successfully.
    C:\Windows\System32\Tasks\{6E1A08FF-B4D1-4C23-8616-56A7F8865598} => Moved successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6E1A08FF-B4D1-4C23-8616-56A7F8865598}" => Key deleted successfully.
    C:\$Recycle.bin\S-1-5-21-4215829332-950673753-2765580295-1001 => Moved successfully.

    ==== End of Fixlog 02:32:29 ====

     

     

     

    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015
    Ran by Rich at 2015-02-15 02:32:28 Run:1
    Running from C:\Users\Rich\Desktop
    Loaded Profiles: Rich (Available profiles: Rich & norton & Guest)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    Toolbar: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> No Name - {2E924F4F-67F0-4BD8-9560-49F468E843D2} -  No File
    Handler: WSISVCUchrome - No CLSID Value
    S0 wayuia; No ImagePath
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieUserList
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieSiteList
    2015-02-11 20:49 - 2015-02-11 20:49 - 00000000 __SHD () C:\Users\norton\AppData\Local\EmieBrowserModeList
    Task: {F3529C6B-3FFA-47B1-BC05-A67FD9107B47} - \VisualBeeRecovery No Task File <==== ATTENTION
    Task: {D1AF1A37-7879-49C2-A9AD-FC500F922B7B} - System32\Tasks\{6E1A08FF-B4D1-4C23-8616-56A7F8865598} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
    C:\$Recycle.bin\S-1-5-21-4215829332-950673753-2765580295-1001


    *****************

    "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
    HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
    "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
    HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2E924F4F-67F0-4BD8-9560-49F468E843D2} => value deleted successfully.
    HKCR\CLSID\{2E924F4F-67F0-4BD8-9560-49F468E843D2} => Key not found.
    "HKCR\PROTOCOLS\Handler\WSISVCUchrome" => Key deleted successfully.
    wayuia => Service deleted successfully.
    C:\Users\norton\AppData\Local\EmieUserList => Moved successfully.
    C:\Users\norton\AppData\Local\EmieSiteList => Moved successfully.
    C:\Users\norton\AppData\Local\EmieBrowserModeList => Moved successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F3529C6B-3FFA-47B1-BC05-A67FD9107B47}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3529C6B-3FFA-47B1-BC05-A67FD9107B47}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\VisualBeeRecovery" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D1AF1A37-7879-49C2-A9AD-FC500F922B7B}" => Key deleted successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1AF1A37-7879-49C2-A9AD-FC500F922B7B}" => Key deleted successfully.
    C:\Windows\System32\Tasks\{6E1A08FF-B4D1-4C23-8616-56A7F8865598} => Moved successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6E1A08FF-B4D1-4C23-8616-56A7F8865598}" => Key deleted successfully.
    C:\$Recycle.bin\S-1-5-21-4215829332-950673753-2765580295-1001 => Moved successfully.

    ==== End of Fixlog 02:32:29 ====

     

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-02-2015
    Ran by Rich at 2015-02-15 02:43:11
    Running from C:\Users\Rich\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Norton 360 Premier Edition (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
    AS: Norton 360 Premier Edition (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    FW: Norton 360 Premier Edition (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
    7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
    Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
    Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
    Amazon Kindle (HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Amazon Kindle) (Version:  - Amazon)
    Ant.com IE add-on (HKLM-x32\...\{B905CAA1-D6FF-4D21-8858-F8C610491C0B}) (Version: 2.2.4.1076 - Ant.com)
    Any DVD Converter Professional 5.7.6 (HKLM-x32\...\Any DVD Converter Professional_is1) (Version:  - Any-DVD-Converter.com)
    Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
    Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 8.0 - Atheros)
    ATI Catalyst Install Manager (HKLM\...\{422DAAC6-8E99-ED2E-CD46-0DEEE1A09EF8}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
    Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Bing Bar (HKLM-x32\...\{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}) (Version: 7.0.609.0 - Microsoft Corporation)
    Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
    Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    CaddieSync Express 1.1.13 (HKLM-x32\...\CaddieSync Express) (Version: 1.1.13 - SkyHawke Technologies)
    CanoScan Toolbox Ver4.1 (HKLM-x32\...\{BCE46757-7674-4416-BEDB-68205A60409E}) (Version:  - )
    ccc-core-static (x32 Version: 2010.0517.1742.29870 - ATI) Hidden
    Chinese Simplified Fonts Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-2447-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)
    Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
    CinemaNow Media Manager (HKLM-x32\...\{6C122441-1861-4CD7-B1C5-A163A6984E12}) (Version: 1.9.1.105 - CinemaNow, Inc.)
    Content Manager (HKLM-x32\...\{B64BC516-2406-43AE-A21A-1E387A2343B1}) (Version: 2.70 - Magellan)
    CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2823 - CyberLink Corp.)
    Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
    DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
    Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
    DocMgr (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
    Dora's Carnival Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
    DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4030 - Hewlett-Packard)
    DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden
    Easy Photo Scan (HKLM-x32\...\{2D76CB3C-AC17-4143-891E-F4C3BCDC78B6}) (Version: 1.00.0001 - Seiko Epson Corporation)
    Elevated Installer (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) Hidden
    Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.4.0.0 - SEIKO EPSON CORPORATION)
    Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
    EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
    EPSON XP-400 Series Printer Uninstall (HKLM\...\EPSON XP-400 Series) (Version:  - SEIKO EPSON Corporation)
    EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
    Escape Rosecliff Island (x32 Version: 2.2.0.95 - WildTangent) Hidden
    ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
    EuroTalk Talk Now! (HKLM-x32\...\{F26615EF-AF0A-486C-99C9-B65C8C401EBC}) (Version: 2.2.5.1 - EuroTalk Interactive)
    FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
    Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
    FlipShare (HKLM-x32\...\{97C658D2-61FB-027F-0D76-E9CDC84AFEC7}) (Version: 5.12.3.0 - Flip Video)
    FLV to MP4 Converter 2009.2.20 (HKLM-x32\...\{D98D2FD8-26FB-4B92-B2B8-75DE8FB28FC4}_is1) (Version:  - FLVtoMP4Converter.com)
    Garmin Communicator Plugin x64 (HKLM\...\{550331CC-C34B-494F-BCDA-37CE4EF6E924}) (Version: 4.0.3 - Garmin Ltd or its subsidiaries)
    Garmin Express (HKLM-x32\...\{6f60b921-2ae3-43fe-a6fb-ad849bd91451}) (Version: 2.3.16.0 - Garmin Ltd or its subsidiaries)
    Garmin Express (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) Hidden
    Garmin Express Tray (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) Hidden
    Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)
    Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
    Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
    Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
    GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Heroes of Hellas 2 - Olympia (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
    HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.236 - SurfRight B.V.)
    HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.12850.3526 - Hewlett-Packard)
    HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
    HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
    HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
    HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
    HP MediaSmart CinemaNow 2.0 (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard)
    HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 4.1.4229 - Hewlett-Packard)
    HP MediaSmart Music (HKLM-x32\...\InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}) (Version: 4.1.4301 - Hewlett-Packard)
    HP MediaSmart Photo (HKLM-x32\...\InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}) (Version: 4.1.4211 - Hewlett-Packard)
    HP MediaSmart SmartMenu (HKLM\...\{5B08AF35-B699-4A44-BB89-3E51E70611E8}) (Version: 3.1.1.12 - Hewlett-Packard)
    HP MediaSmart Video (HKLM-x32\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.1.4214 - Hewlett-Packard)
    HP MediaSmart/TouchSmart Netflix (HKLM-x32\...\{BDDA1E1E-204E-4368-B0C2-737F16B76307}) (Version: 1.0.3.0 - Hewlett-Packard)
    HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
    HP Product Detection (HKLM-x32\...\{8A9FC225-75F6-4B5D-911C-0ED230565643}) (Version: 11.15.0009 - HP)
    HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
    HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
    HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
    HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
    HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
    HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.2.27173 - Hewlett-Packard)
    HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Hulu Desktop (HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\HuluDesktop) (Version: 0.9.13 - Hulu LLC)
    HydraVision (x32 Version: 4.2.166.0 - ATI Technologies Inc.) Hidden
    iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
    ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
    iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
    Jewel Quest 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Kobo (HKLM-x32\...\Kobo) (Version:  - )
    LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2823 - CyberLink Corp.)
    LabelPrint (x32 Version: 2.5.2823 - CyberLink Corp.) Hidden
    LightScribe System Software (HKLM-x32\...\{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}) (Version: 1.18.22.2 - LightScribe)
    Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
    MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
    Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
    Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
    Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
    Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
    Microsoft SkyDrive (HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.1.4030 - Hewlett-Packard)
    Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden
    Mozilla Firefox 35.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 en-US)) (Version: 35.0.1 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)
    Mozilla Thunderbird 31.4.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 31.4.0 (x86 en-US)) (Version: 31.4.0 - Mozilla)
    MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    Nero BurningROM 12 (HKLM-x32\...\{C0CA68BF-2963-4139-8207-1E83038F86F8}) (Version: 12.0.00800 - Nero AG)
    Norton 360 (HKLM-x32\...\N360) (Version: 21.6.0.32 - Symantec Corporation)
    Norton Bootable Recovery Tool Wizard (HKLM-x32\...\NBRTWizard) (Version: 5.1.0.26 - Symantec Corporation)
    Norton One (HKLM-x32\...\MCLIENT) (Version: 3.2.2.12 - Symantec Corporation)
    Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
    Norton PC Checkup (HKLM-x32\...\Norton PC Checkup_is1) (Version: 3.0.2.122.0 - NortonLive Services)
    Norton PC Checkup (HKLM-x32\...\NortonPCCheckup) (Version: 2.0.17.20 - Symantec Corporation)
    OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
    PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 3.5.111 - PDF Complete, Inc)
    Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
    PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
    PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
    PIXELA ImageMixer (HKLM-x32\...\{13413C6C-C640-40B8-917E-CA3062826B18}) (Version:  - )
    Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
    PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
    Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4022 - CyberLink Corp.)
    Power2Go (x32 Version: 6.1.4022 - CyberLink Corp.) Hidden
    PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2906 - CyberLink Corp.)
    PowerDirector (x32 Version: 8.0.2906 - CyberLink Corp.) Hidden
    Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
    PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-13231864975D}) (Version: 5.10.621.0 -  NewspaperDirect Inc.)
    QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
    RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.2.1540.10 - AMD)
    RAIDXpert (x32 Version: 3.2.1540.10 - AMD) Hidden
    Real Alternative 2.0.2 (HKLM-x32\...\RealAlt_is1) (Version: 2.0.2 - )
    RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
    RealPlayer (HKLM-x32\...\RealPlayer 15.0) (Version: 15.0.4 - RealNetworks)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6132 - Realtek Semiconductor Corp.)
    RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
    Recovery Manager (x32 Version: 5.5.2926 - CyberLink Corp.) Hidden
    RZ DVD Creator (HKLM-x32\...\{3F32058A-343A-4C16-BD1B-BE35E9A42352}) (Version: 4.52 - RealZeal Soft)
    Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
    SkyCaddie Desktop (HKLM-x32\...\SkyCaddieDesktop) (Version:  - SkyHawke Technologies)
    SkyHawke CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - )
    SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
    Software Updater (HKLM-x32\...\{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}) (Version: 4.2.1 - SEIKO EPSON CORPORATION)
    SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
    Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
    SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1014 - SUPERAntiSpyware.com)
    SysTools DBX Converter (HKLM-x32\...\SysTools DBX Converter v3.2 DEMO Version_is1) (Version:  - )
    TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
    TurboTax 2011 (HKLM-x32\...\TurboTax 2011) (Version:  - Intuit, Inc)
    TurboTax 2012 (HKLM-x32\...\TurboTax 2012) (Version: 2012.0 - Intuit, Inc)
    TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)
    TWC Customer Controls (HKLM-x32\...\{A2E5F2AA-2996-41EA-BCCD-9FD0476A5326}) (Version: 11 - SupportSoft)
    Virtual Families (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
    VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
    Wheel of Fortune 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)
    Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
    Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
    WinX DVD Author 6.3.3 (HKLM-x32\...\WinX DVD Author_is1) (Version:  - DigiartySoft, Inc.)
    Wondershare DVD Creator(Build 3.2.0) (HKLM-x32\...\Wondershare DVD Creator_is1) (Version:  - Wondershare Software)
    Xvid MPEG-4 Video Codec (HKLM-x32\...\xvid) (Version:  - Xvid Development Team)
    Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-4215829332-950673753-2765580295-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Rich\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)

    ==================== Restore Points  =========================

    11-02-2015 20:58:19 Windows Update
    11-02-2015 23:07:25 Windows Modules Installer
    13-02-2015 01:36:07 Windows Update
    13-02-2015 22:05:08 Windows Update
    14-02-2015 23:22:31 Installed Epson Event Manager
    14-02-2015 23:24:32 Installed EpsonNet Print

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 21:34 - 2013-01-27 12:45 - 00445399 ____N C:\Windows\system32\Drivers\etc\hosts
    127.0.0.1    www.007guard.com
    127.0.0.1    007guard.com
    127.0.0.1    008i.com
    127.0.0.1    www.008k.com
    127.0.0.1    008k.com
    127.0.0.1    www.00hq.com
    127.0.0.1    00hq.com
    127.0.0.1    010402.com
    127.0.0.1    www.032439.com
    127.0.0.1    032439.com
    127.0.0.1    www.0scan.com
    127.0.0.1    0scan.com
    127.0.0.1    www.1000gratisproben.com
    127.0.0.1    1000gratisproben.com
    127.0.0.1    1001namen.com
    127.0.0.1    www.1001namen.com
    127.0.0.1    100888290cs.com
    127.0.0.1    www.100888290cs.com
    127.0.0.1    www.100sexlinks.com
    127.0.0.1    100sexlinks.com
    127.0.0.1    www.10sek.com
    127.0.0.1    10sek.com
    127.0.0.1    www.1-2005-search.com
    127.0.0.1    1-2005-search.com
    127.0.0.1    www.123fporn.info
    127.0.0.1    123fporn.info
    127.0.0.1    123haustiereundmehr.com
    127.0.0.1    www.123haustiereundmehr.com
    127.0.0.1    123moviedownload.com

    There are 1000 more lines.


    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {0179AA91-5E79-49E0-B032-4C2D1DC4EA58} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
    Task: {048B6227-19BF-44FD-BD1C-552DBDE2FF92} - System32\Tasks\HPCeeScheduleForRich => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
    Task: {0E0D7FAB-FEFD-4B33-95E5-56E9AD4F60A6} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4215829332-950673753-2765580295-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
    Task: {18E7279F-5DE2-46B5-9528-CAF2CDA7F9B4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
    Task: {2B567E20-97CB-4682-930D-441EB060C743} - System32\Tasks\Norton One\Norton Error Processor => C:\Program Files (x86)\Norton One\Engine\3.2.2.12\SymErr.exe [2012-10-18] (Symantec Corporation)
    Task: {3C1690D3-E4F7-4BD9-8710-D5B1215B8303} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
    Task: {4A96F90B-4153-4678-ADAA-F37D4F1AB701} - System32\Tasks\{335D1FAE-EED5-4D4D-B27C-4249ED1F60E0} => C:\Program Files (x86)\Wondershare\DVD Creator\DVDCreator.exe [2014-10-24] (Wondershare Software)
    Task: {64CA2BC6-2E66-48ED-9465-27A872ECAF96} - System32\Tasks\{864F9621-19DA-42F2-ABE0-4FF6297F34B9} => pcalua.exe -a C:\Users\Rich\Desktop\zip.exe -d C:\Users\Rich\Desktop
    Task: {724B212D-AF80-4CDD-9D23-462730C90AD5} - System32\Tasks\{A4F3003B-AF2F-402F-B542-32083C18C215} => C:\Program Files (x86)\Wondershare\DVD Creator\DVDCreator.exe [2014-10-24] (Wondershare Software)
    Task: {86111AC7-64E6-46ED-AFB9-31BB5B3AB59C} - System32\Tasks\Norton One\Norton Error Analyzer => C:\Program Files (x86)\Norton One\Engine\3.2.2.12\SymErr.exe [2012-10-18] (Symantec Corporation)
    Task: {90A75E82-1D73-48F5-9EBE-7BB9427C6DF1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4215829332-950673753-2765580295-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
    Task: {91AB3876-AD27-449B-9B3E-F44687F1295C} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
    Task: {927FB1C1-E4BC-4B0E-A267-D00EDB294DB9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-01-21] (Hewlett-Packard)
    Task: {9F23648D-F3A4-452C-BFA1-5EF408260279} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
    Task: {A752B474-1750-45CF-961D-5D882A291864} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
    Task: {A82A3D0A-590B-466F-8BFD-7A8744B1B639} - System32\Tasks\{DAFD05DE-1E4F-44FE-B151-976F16156B59} => pcalua.exe -a E:\USB_Drivers.exe -d E:\
    Task: {CF4BF027-9ECE-436E-9702-1868FF58BDB4} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] ()
    Task: {D28C6E84-1024-4D52-B373-6611CFA7F3E0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-15] (Google Inc.)
    Task: {D35B727C-B0F8-46B2-A89B-79EA13B5F994} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-15] (Google Inc.)
    Task: {D61314E4-3F45-46C3-A1D5-531C5B447257} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
    Task: {E03B42E2-AB3E-4363-A163-C77E65934189} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
    Task: {E572B95E-F4B3-44C9-8545-F4B60B6589F5} - System32\Tasks\{C5096586-DDFD-4A6D-827E-5B1AE1ED65A4} => pcalua.exe -a C:\Users\Rich\Desktop\deldrvwin1250ejf.exe -d C:\Users\Rich\Desktop
    Task: {ECFAFBED-406E-4C69-8DC3-FF62152D2440} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] ()
    Task: {F22654EC-0CA3-4B1A-A188-0BA93114095E} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
    Task: {F9460B52-EB18-4834-8265-B3D3CA961409} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\HPCeeScheduleForRich.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

    ==================== Loaded Modules (whitelisted) ==============

    2009-12-15 20:40 - 2009-12-15 20:40 - 00065536 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
    2011-05-06 13:07 - 2011-05-06 13:07 - 00460144 _____ () C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
    2011-05-06 12:58 - 2011-05-06 12:58 - 01085440 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe
    2014-12-27 18:25 - 2014-10-24 14:16 - 00721263 _____ () C:\Windows\SysWOW64\ISCM64.dll
    2010-01-18 13:21 - 2010-01-18 13:21 - 00568888 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    2010-05-18 20:25 - 2010-05-18 20:25 - 00098304 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
    2010-05-17 20:40 - 2010-05-17 20:40 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
    2009-12-15 20:40 - 2009-12-15 20:40 - 00122880 _____ () C:\Windows\SysWOW64\WinMsgBalloonServer.exe
    2009-12-15 20:41 - 2009-12-15 20:41 - 00139264 _____ () C:\Windows\SysWOW64\WinMsgBalloonClient.exe
    2009-12-16 02:44 - 2009-12-16 02:44 - 00516096 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\libxml2.dll
    2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
    2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
    2010-10-26 00:06 - 2010-10-26 00:06 - 02248704 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtCore4.dll
    2011-05-06 13:07 - 2011-05-06 13:07 - 04317184 _____ () C:\Program Files (x86)\Flip Video\FlipShare\Core.dll
    2011-05-06 13:02 - 2011-05-06 13:02 - 00737280 _____ () C:\Program Files (x86)\Flip Video\FlipShare\qca2.dll
    2010-10-26 00:23 - 2010-10-26 00:23 - 08351744 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtGui4.dll
    2010-10-26 00:08 - 2010-10-26 00:08 - 00983040 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtNetwork4.dll
    2010-10-26 00:23 - 2010-10-26 00:23 - 00204800 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtSql4.dll
    2010-10-26 00:06 - 2010-10-26 00:06 - 00364544 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtXml4.dll
    2010-10-26 08:34 - 2010-10-26 08:34 - 11853824 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtWebKit4.dll
    2010-10-26 00:37 - 2010-10-26 00:37 - 00258048 _____ () C:\Program Files (x86)\Flip Video\FlipShare\phonon4.dll
    2010-05-20 13:49 - 2010-05-20 13:49 - 00258048 _____ () C:\Program Files (x86)\Flip Video\FlipShare\boost_serialization-vc80-mt-1_43.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 01199104 _____ () C:\Program Files (x86)\Flip Video\FlipShare\PocoFoundation.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00642048 _____ () C:\Program Files (x86)\Flip Video\FlipShare\PocoNet.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00511488 _____ () C:\Program Files (x86)\Flip Video\FlipShare\PocoXML.dll
    2010-10-26 00:06 - 2010-10-26 00:06 - 02248704 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\QtCore4.dll
    2010-10-26 00:08 - 2010-10-26 00:08 - 00983040 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\QtNetwork4.dll
    2010-10-26 00:23 - 2010-10-26 00:23 - 00204800 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\QtSql4.dll
    2010-05-20 13:49 - 2010-05-20 13:49 - 00258048 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\boost_serialization-vc80-mt-1_43.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 01199104 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoFoundation.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00642048 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNet.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00175616 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNetSSL.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00291840 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoUtil.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00511488 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoXML.dll
    2010-05-17 09:47 - 2010-05-17 09:47 - 00110592 _____ () C:\Program Files (x86)\Flip Video\FlipShareServer\PocoCrypto.dll
    2011-03-04 12:02 - 2011-03-04 12:02 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
    2011-03-04 12:02 - 2011-03-04 12:02 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
    2011-03-04 12:02 - 2011-03-04 12:02 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
    2014-12-29 15:00 - 2013-07-24 09:24 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
    2014-12-29 15:00 - 2014-02-15 11:48 - 00295936 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
    2014-12-27 18:25 - 2014-10-31 16:40 - 01498112 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll
    2014-12-27 18:25 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll
    2015-01-14 01:37 - 2015-01-14 01:37 - 03347056 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
    2015-01-14 01:37 - 2015-01-14 01:37 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
    2015-01-14 01:37 - 2015-01-14 01:37 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
    2015-02-13 01:14 - 2015-01-23 05:37 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\ProgramData\Temp:FB1B13D8

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR430 => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SprtListen => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SprtListenPush => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SupportSoft RemoteAssist => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

    ==================== EXE Association (whitelisted) ===============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Rich\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 209.18.47.61 - 209.18.47.62

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== Accounts: =============================

    Administrator (S-1-5-21-4215829332-950673753-2765580295-500 - Administrator - Disabled)
    Guest (S-1-5-21-4215829332-950673753-2765580295-501 - Limited - Enabled) => C:\Users\Guest
    HomeGroupUser$ (S-1-5-21-4215829332-950673753-2765580295-1003 - Limited - Enabled)
    norton (S-1-5-21-4215829332-950673753-2765580295-1004 - Limited - Enabled) => C:\Users\norton
    Rich (S-1-5-21-4215829332-950673753-2765580295-1001 - Administrator - Enabled) => C:\Users\Rich

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (02/13/2015 09:21:16 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
    Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c92c
    Exception code: 0xc0000005
    Fault offset: 0x0000000000031327
    Faulting process id: 0x1dc
    Faulting application start time: 0xsvchost.exe0
    Faulting application path: svchost.exe1
    Faulting module path: svchost.exe2
    Report Id: svchost.exe3

    Error: (02/12/2015 11:05:44 PM) (Source: CVHSVC) (EventID: 100) (User: )
    Description: Information only.
    (Patch task for {90140011-0066-0409-0000-0000000FF1CE}): DownloadLatest Failed: The server name or address could not be resolved

    Error: (02/11/2015 11:26:25 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16736, time stamp: 0x5258c4cc
    Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeaf722
    Exception code: 0xc000041d
    Fault offset: 0x000179ac
    Faulting process id: 0x16fc
    Faulting application start time: 0xIEXPLORE.EXE0
    Faulting application path: IEXPLORE.EXE1
    Faulting module path: IEXPLORE.EXE2
    Report Id: IEXPLORE.EXE3

    Error: (02/11/2015 11:25:17 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16736, time stamp: 0x5258c4cc
    Faulting module name: shlwapi.DLL, version: 6.1.7601.17514, time stamp: 0x4ce7b9e2
    Exception code: 0xc000041d
    Fault offset: 0x0001c4da
    Faulting process id: 0x1e30
    Faulting application start time: 0xIEXPLORE.EXE0
    Faulting application path: IEXPLORE.EXE1
    Faulting module path: IEXPLORE.EXE2
    Report Id: IEXPLORE.EXE3

    Error: (02/10/2015 05:35:11 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: plugin-container.exe, version: 35.0.1.5500, time stamp: 0x54c1f9f3
    Faulting module name: mozalloc.dll, version: 35.0.1.5500, time stamp: 0x54c1f224
    Exception code: 0x80000003
    Fault offset: 0x00001425
    Faulting process id: 0x6c0
    Faulting application start time: 0xplugin-container.exe0
    Faulting application path: plugin-container.exe1
    Faulting module path: plugin-container.exe2
    Report Id: plugin-container.exe3

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 3008) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    The client was unable to connect to an Application Virtualization Server (rc 00000729-00000020)

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    The Application Virtualization Client could not connect to stream URL 'http://c2r.microsoft...0.7113.5007.sft' (rc 00000729-00000020, original rc 00000729-00000020).

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second


    System errors:
    =============
    Error: (02/15/2015 02:12:35 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 02:11:34 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 01:49:01 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 01:34:01 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 01:08:04 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 00:36:05 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 00:32:16 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 00:21:51 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/15/2015 00:12:03 AM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0

    Error: (02/14/2015 11:49:00 PM) (Source: ipnathlp) (EventID: 31004) (User: )
    Description: 0


    Microsoft Office Sessions:
    =========================
    Error: (02/13/2015 09:21:16 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: svchost.exe6.1.7600.163854a5bc3c1ole32.dll6.1.7601.175144ce7c92cc000000500000000000313271dc01d0479792a399f9C:\Windows\system32\svchost.exeC:\Windows\system32\ole32.dll2711cc6b-b3f0-11e4-9f4f-643150227862

    Error: (02/12/2015 11:05:44 PM) (Source: CVHSVC) (EventID: 100) (User: )
    Description: (Patch task for {90140011-0066-0409-0000-0000000FF1CE}): DownloadLatest Failed: The server name or address could not be resolved

    Error: (02/11/2015 11:26:25 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: IEXPLORE.EXE10.0.9200.167365258c4ccmsvcrt.dll7.0.7601.177444eeaf722c000041d000179ac16fc01d0467bf347edeeC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\syswow64\msvcrt.dll4e1416b4-b26f-11e4-9965-643150227862

    Error: (02/11/2015 11:25:17 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: IEXPLORE.EXE10.0.9200.167365258c4ccshlwapi.DLL6.1.7601.175144ce7b9e2c000041d0001c4da1e3001d0467b00f662b6C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\syswow64\shlwapi.DLL2520a274-b26f-11e4-9965-643150227862

    Error: (02/10/2015 05:35:11 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: plugin-container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f22480000003000014256c001d0458142d2deebC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll121f9a9a-b175-11e4-b873-643150227862

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 3008) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    00000729-00000020

    Error: (02/10/2015 01:34:41 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
    Description: {hap=12:app=OfficeVirt 9014006604090000:tid=1234}
    http://c2r.microsoft...000729-00000020

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 13088

    Error: (02/06/2015 01:23:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second


    CodeIntegrity Errors:
    ===================================
      Date: 2013-12-18 12:13:04.807
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 12:13:04.507
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:55:05.436
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:55:05.126
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:57.476
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:57.176
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:27.908
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 11:41:27.608
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 10:44:30.306
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

      Date: 2013-12-18 10:44:30.006
      Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\grmnusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


    ==================== Memory info ===========================

    Processor: AMD Phenom™ II X4 840T Processor
    Percentage of memory in use: 38%
    Total physical RAM: 8183.89 MB
    Available physical RAM: 5009.57 MB
    Total Pagefile: 16365.98 MB
    Available Pagefile: 12843.61 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.82 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:918.55 GB) (Free:774.71 GB) NTFS
    Drive d: (HP_RECOVERY) (Fixed) (Total:12.67 GB) (Free:1.52 GB) NTFS ==>[System with boot components (obtained from reading drive)]
    Drive e: (XP-400) (CDROM) (Total:0.24 GB) (Free:0 GB) CDFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 931.3 GB) (Disk ID: B9726EF6)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=918.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=12.7 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================

     

     


    • 0

    Advertisements


    #11
    RKinner

    RKinner

      Malware Expert

    • Expert
    • 20,031 posts
    • MVP

    We need to clean out the hosts file.  Spybot immunize feature does not work so well with Win 7 and causes svchost to use too much CPU time.  I see some svchost errors and that might be the cause.

     

    Download HostsXpert from http://www.majorgeek...hostsxpert.html Save the file then right click and Extract All.  It will create a new folder in the same place.  In the folder find HostsXpert.exe and right click on it and Run As Administrator.
     
    It will take a few seconds to appear.  If the top line in the left column says Make Writeable, click on it and it should change to Make Read Only?  If it already says Make Read Only? that's OK just go on to the next step.
    Now click on the left column entry that says: Restore MSHosts file.  Click on the Make Read Only? entry then close HostXpert.  Run FRST (Scan) again and let's see if the hosts file is happy now.
     
    Ron

    • 0

    #12
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    I downloaded hostexpert, extracted the files. It made a folder on my desktop. When I opened that folder, the same folder  popped up in "Favorites"  above "desktop" in computer. I opened that folder and saw two files hostsExpert.chm and hostsExpert.exe.  I had to turn off Norton 360 to run the file because norton deleted the file when I tried to run it. After turning off Norton I was able to run the .exe and do the things you instructed.  I hope I did everything right.  (It was 12 degrees here last night and winds 40-45mph all night. I didn't sleep much. Have a heat pump for heat---no good in this weather)

     

     

     

     

     

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
    Ran by Rich (administrator) on PAVILIONELITE on 15-02-2015 11:15:09
    Running from C:\Users\Rich\Desktop
    Loaded Profiles: Rich (Available profiles: Rich & norton & Guest)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 10 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AMD) C:\Windows\System32\atiesrxx.exe
    (SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
    (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    (AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
    () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (CinemaNow, Inc.) C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
    (SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
    () C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
    () C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe
    (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccsvchst.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\n360.exe
    (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe
    (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
    (Microsoft Corporation) C:\Windows\System32\alg.exe
    () C:\Windows\SysWOW64\WinMsgBalloonServer.exe
    () C:\Windows\SysWOW64\WinMsgBalloonClient.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccsvchst.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe
    (Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\n360.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
    () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
    (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIIBE.EXE
    (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
    (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
    (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
    (iSkySoft) C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
    (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
    (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
    () C:\Program Files (x86)\Content Manager\CmTray.exe
    (Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
    (Microsoft Corporation) C:\Windows\System32\wisptis.exe
    (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
    HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [568888 2010-01-18] ()
    HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [563736 2009-10-14] (PDF Complete Inc)
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-17] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1994752 2014-02-20] (Wondershare)
    HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296056 2012-05-19] (RealNetworks, Inc.)
    HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2066432 2014-10-31] (iSkySoft)
    HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
    HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
    HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
    HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2015-02-03] (Hewlett-Packard)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2741616 2011-03-04] (Hewlett-Packard Company)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7780120 2015-01-28] (SUPERAntiSpyware)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1095000 2013-11-08] (Garmin Ltd or its subsidiaries)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [CmTray] => C:\Program Files (x86)\Content Manager\launchCM.exe [94208 2011-12-28] ()
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-11-21] (Apple Inc.)
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIBE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
    ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
    ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
    ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
    ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
    BootExecute: autocheck autochk * sdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...d=ie&ar=msnhome
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://finance.yahoo.com/
    HKU\S-1-5-21-4215829332-950673753-2765580295-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
    SearchScopes: HKLM -> {15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5} URL = http://en.wikipedia....h={searchTerms}
    SearchScopes: HKLM -> {6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE} URL = http://search.yahoo....psg&type=HPDTDF
    SearchScopes: HKLM -> {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKLM -> {E7190224-F19B-4F52-A26D-F7259C9C0A65} URL = http://www.ask.com/w...}&l=dis&o=ushpd
    SearchScopes: HKLM-x32 -> {15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5} URL = http://en.wikipedia....h={searchTerms}
    SearchScopes: HKLM-x32 -> {6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE} URL = http://search.yahoo....psg&type=HPDTDF
    SearchScopes: HKLM-x32 -> {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKLM-x32 -> {E7190224-F19B-4F52-A26D-F7259C9C0A65} URL = http://www.ask.com/w...}&l=dis&o=ushpd
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> DefaultScope {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {15AC70AB-2FA5-48E7-A9F6-7A32E6E2F2C5} URL = http://en.wikipedia....h={searchTerms}
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {6F4E0F35-1F22-4DFB-A56B-99942C1A4EBE} URL = http://search.yahoo....psg&type=HPDTDF
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {7B7852DA-35F5-4A59-BF84-F2A65817A8CE} URL = http://www.bing.com/...rc=IE-SearchBox
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.se...t=kwd&qsrc=2869
    SearchScopes: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> {E7190224-F19B-4F52-A26D-F7259C9C0A65} URL = http://www.ask.com/w...}&l=dis&o=ushpd
    BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
    BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
    BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
    BHO-x32: Ant.com browser helper (video detector) -> {346FDE31-DFF9-418A-90C8-BA31DC9FF2EF} -> C:\Program Files (x86)\Ant.com\IE add-on\Download.dll (Ant.com)
    BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
    BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
    BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
    Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
    Toolbar: HKLM-x32 - Ant.com Video Downloader toolbar - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:\Program Files (x86)\Ant.com\IE add-on\AntToolbar.dll (Ant.com)
    Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    Toolbar: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    Toolbar: HKU\S-1-5-21-4215829332-950673753-2765580295-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
    DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} http://quickscan.bit...m/qsax/qsax.cab
    DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
    DPF: HKLM-x32 {C6B95BE9-4373-4BF8-9D18-9FCEAE5563F0} https://col0-sec.mai...spx?n=895340653
    Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62 192.168.1.1

    FireFox:
    ========
    FF ProfilePath: C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default
    FF DefaultSearchEngine: Norton Safe Search
    FF Homepage: hxxp://finance.yahoo.com/
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
    FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
    FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-4215829332-950673753-2765580295-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Rich\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
    FF Plugin HKU\S-1-5-21-4215829332-950673753-2765580295-1001: @hulu.com/Hulu Desktop -> C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll (Hulu LLC)
    FF user.js: detected! => C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\user.js
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
    FF SearchPlugin: C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\searchplugins\s-amazon.xml
    FF SearchPlugin: C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\searchplugins\safesearch.xml
    FF Extension: Ant Video Downloader - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\[email protected] [2015-01-16]
    FF Extension: Xmarks - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\[email protected] [2014-11-30]
    FF Extension: Garmin Communicator - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-21]
    FF Extension: Webroot - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}_deleted [2013-09-04]
    FF Extension: HP Detect - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2013-10-15]
    FF Extension: Antmark extensions - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\[email protected] [2014-05-13]
    FF Extension: Flagfox - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-03-08]
    FF Extension: Adblock Plus - C:\Users\Rich\AppData\Roaming\Mozilla\Firefox\Profiles\f3ykms63.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-01-24]
    FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
    FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-19]
    FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-12-30]
    FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn
    FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2015-02-15]
    FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\ProgramData\iSkysoft\Video Converter Ultimate\[email protected]
    FF HKU\S-1-5-21-4215829332-950673753-2765580295-1001\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

    Chrome:
    =======
    CHR Profile: C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Docs) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-01-23]
    CHR Extension: (Google Drive) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-01-23]
    CHR Extension: (YouTube) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-23]
    CHR Extension: (Google Search) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-23]
    CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-01-23]
    CHR Extension: (Norton Identity Protection) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2013-01-23]
    CHR Extension: (Gmail) - C:\Users\Rich\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-23]
    CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
    CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]
    CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [Not Found]
    CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
    CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-05-19]
    CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-08-12] (SUPERAntiSpyware.com)
    R2 AMD_RAIDXpert; C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [122880 2009-12-15] (AMD) [File not signed]
    R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
    R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
    R2 FlipShare Service; C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe [460144 2011-05-06] ()
    R2 FlipShareServer; C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe [1085440 2011-05-06] () [File not signed]
    R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250712 2013-11-08] (Garmin Ltd or its subsidiaries)
    R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2015-02-10] (SurfRight B.V.)
    R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
    R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
    R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-03-04] (Hewlett-Packard Company) [File not signed]
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
    R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
    R2 MCLIENT; C:\Program Files (x86)\Norton One\Engine\3.2.2.12\ccSvcHst.exe [143928 2012-12-04] (Symantec Corporation)
    R2 N360; C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.6.0.32\N360.exe [265040 2014-09-21] (Symantec Corporation)
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
    R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
    R2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [132504 2013-03-17] (Symantec Corporation)
    R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [126392 2011-11-07] (Symantec Corporation)
    R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-10-14] (PDF Complete Inc)
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
    S2 SupportSoft RemoteAssist; C:\Program Files (x86)\Common Files\supportsoft\bin\ssrc.exe [386424 2010-02-24] (SupportSoft, Inc.)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-13] (Microsoft Corporation)
    U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
    R1 BHDrvx64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20150203.001\BHDrvx64.sys [1622744 2015-02-02] (Symantec Corporation)
    R1 ccSet_MCLIENT; C:\Windows\system32\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys [168096 2012-10-03] (Symantec Corporation)
    R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)
    R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-11] (Symantec Corporation)
    R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
    S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [7296 2003-09-23] (GARMIN Corp.) [File not signed]
    R1 IDSVia64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20150213.001\IDSvia64.sys [669400 2015-02-05] (Symantec Corporation)
    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
    R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-15] (Malwarebytes Corporation)
    R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
    R3 NAVENG; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150214.001\ENG64.SYS [129752 2015-01-27] (Symantec Corporation)
    R3 NAVEX15; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20150214.001\EX64.SYS [2137304 2015-01-27] (Symantec Corporation)
    R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
    R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
    R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
    R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
    R0 SymDS; C:\Windows\System32\drivers\N360x64\1506000.020\SYMDS64.SYS [493656 2013-09-09] (Symantec Corporation)
    R0 SymEFA; C:\Windows\System32\drivers\N360x64\1506000.020\SYMEFA64.SYS [1148120 2014-03-03] (Symantec Corporation)
    R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-12] (Symantec Corporation)
    R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-09] (Symantec Corporation)
    R1 SymIRON; C:\Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
    R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS [593112 2014-02-17] (Symantec Corporation)
    U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-02-11] ()

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-02-15 11:09 - 2015-02-15 11:09 - 00000000 ____D () C:\Users\Rich\Desktop\HostsXpert
    2015-02-15 10:58 - 2015-02-15 10:58 - 00357766 _____ () C:\Users\Rich\Desktop\HostsXpert.zip
    2015-02-15 10:12 - 2015-02-15 10:12 - 00000000 ____D () C:\Users\Rich\AppData\Roaming\Epson
    2015-02-15 02:32 - 2015-02-15 02:32 - 00000000 ____D () C:\Users\Rich\Desktop\FRST-OlderVersion
    2015-02-14 23:35 - 2015-02-14 23:35 - 00002099 _____ () C:\Users\Public\Desktop\EPSON XP-400 User's Guide.lnk
    2015-02-14 23:35 - 2015-02-14 23:35 - 00000000 ____D () C:\Users\Rich\AppData\Roaming\Leadertech
    2015-02-14 23:31 - 2007-09-07 17:33 - 00135168 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBAPI.dll
    2015-02-14 23:31 - 2007-03-28 18:26 - 00065536 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBUtil.dll
    2015-02-14 23:31 - 2006-12-19 18:31 - 00110592 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBDSCVR.dll
    2015-02-14 23:31 - 2006-12-19 18:20 - 00077824 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EBAPI.dll
    2015-02-14 23:31 - 2003-12-17 01:01 - 00055808 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBSDKIF.dll
    2015-02-14 23:29 - 2015-02-14 23:29 - 00000000 ____D () C:\Program Files\Common Files\EPSON
    2015-02-14 23:25 - 2015-02-14 23:25 - 00000000 ____D () C:\Program Files\EPSON
    2015-02-14 23:24 - 2015-02-14 23:24 - 00000000 ____D () C:\Program Files\EpsonNet
    2015-02-14 23:24 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
    2015-02-14 23:24 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
    2015-02-14 23:24 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
    2015-02-14 23:24 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
    2015-02-14 23:24 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
    2015-02-14 23:24 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
    2015-02-14 23:23 - 2015-02-14 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
    2015-02-14 23:23 - 2015-02-14 23:35 - 00000000 ____D () C:\Program Files (x86)\Epson Software
    2015-02-14 23:22 - 2011-04-19 18:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMIBE.DLL
    2015-02-14 23:22 - 2011-04-19 18:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMIBA.DLL
    2015-02-14 23:22 - 2011-03-14 18:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ID4BIBE.DLL
    2015-02-14 23:22 - 2011-03-14 18:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ID4BIBA.DLL
    2015-02-14 23:22 - 2007-04-09 16:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL
    2015-02-14 23:21 - 2015-02-14 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
    2015-02-14 23:21 - 2015-02-14 23:35 - 00000000 ____D () C:\Program Files (x86)\epson
    2015-02-14 23:21 - 2015-02-14 23:29 - 00000000 ____D () C:\ProgramData\EPSON
    2015-02-14 23:21 - 2015-02-14 23:21 - 00000971 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk
    2015-02-14 23:21 - 2012-07-24 00:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
    2015-02-14 23:21 - 2011-12-12 00:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
    2015-02-14 23:17 - 2015-02-14 23:35 - 00000079 _____ () C:\Windows\XP400.ini
    2015-02-14 23:03 - 2015-02-14 23:03 - 00000000 ____H () C:\Users\Rich\Documents\Default.rdp
    2015-02-14 14:11 - 2010-05-14 15:04 - 00138752 _____ (Hewlett-Packard Company) C:\Windows\system32\hpf3l02t.dll
    2015-02-13 13:23 - 2015-01-23 00:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2015-02-13 13:23 - 2015-01-22 23:27 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2015-02-13 10:29 - 2015-02-13 10:30 - 00004991 _____ () C:\Users\Rich\Desktop\aswMBR.txt
    2015-02-13 10:29 - 2015-02-13 10:30 - 00000512 _____ () C:\Users\Rich\Desktop\MBR.dat
    2015-02-13 09:54 - 2015-02-13 09:54 - 05200384 _____ (AVAST Software) C:\Users\Rich\Desktop\aswmbr.exe
    2015-02-13 01:14 - 2015-02-13 01:14 - 00001200 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2015-02-13 01:14 - 2015-02-13 01:14 - 00001188 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2015-02-13 00:23 - 2015-02-13 00:23 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Rich\Desktop\tdsskiller.exe
    2015-02-13 00:09 - 2015-02-13 00:09 - 00030874 _____ () C:\ComboFix.txt
    2015-02-12 23:03 - 2011-06-26 01:45 - 00256000 _____ () C:\Windows\PEV.exe
    2015-02-12 23:03 - 2010-11-07 12:20 - 00208896 _____ () C:\Windows\MBR.exe
    2015-02-12 23:03 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
    2015-02-12 23:03 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
    2015-02-12 23:03 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
    2015-02-12 23:03 - 2000-08-30 19:00 - 00098816 _____ () C:\Windows\sed.exe
    2015-02-12 23:03 - 2000-08-30 19:00 - 00080412 _____ () C:\Windows\grep.exe
    2015-02-12 23:03 - 2000-08-30 19:00 - 00068096 _____ () C:\Windows\zip.exe
    2015-02-12 22:53 - 2015-02-12 22:53 - 00000085 _____ () C:\Windows\wininit.ini
    2015-02-12 22:49 - 2015-02-13 00:09 - 00000000 ____D () C:\Qoobox
    2015-02-12 22:48 - 2015-02-13 00:07 - 00000000 ____D () C:\Windows\erdnt
    2015-02-12 22:47 - 2015-02-12 22:47 - 05611930 ____R (Swearware) C:\Users\Rich\Desktop\ComboFix.exe
    2015-02-12 22:18 - 2015-02-15 02:43 - 00048405 _____ () C:\Users\Rich\Desktop\Addition.txt
    2015-02-12 22:17 - 2015-02-15 11:15 - 00033415 _____ () C:\Users\Rich\Desktop\FRST.txt
    2015-02-12 22:17 - 2015-02-15 11:15 - 00000000 ____D () C:\FRST
    2015-02-12 22:15 - 2015-02-15 02:32 - 02134528 _____ (Farbar) C:\Users\Rich\Desktop\FRST64.exe
    2015-02-12 21:06 - 2015-02-12 21:06 - 00000000 ____D () C:\Users\Rich\Documents\ProcAlyzer Dumps
    2015-02-12 20:53 - 2015-02-12 22:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
    2015-02-12 20:53 - 2015-02-12 20:53 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
    2015-02-12 20:44 - 2015-02-12 18:44 - 00124290 _____ () C:\Users\Rich\Documents\OTL.Txt
    2015-02-12 18:44 - 2015-02-12 18:44 - 00124290 _____ () C:\Users\Rich\Desktop\OTL.Txt
    2015-02-12 18:34 - 2015-02-12 18:36 - 00602112 _____ (OldTimer Tools) C:\Users\Rich\Desktop\OTL.exe
    2015-02-12 18:08 - 2015-01-13 01:59 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2015-02-12 18:08 - 2015-01-13 01:59 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2015-02-12 18:08 - 2015-01-13 01:59 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2015-02-12 18:08 - 2015-01-13 01:59 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2015-02-12 18:08 - 2015-01-13 01:58 - 19291136 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2015-02-12 18:08 - 2015-01-13 01:58 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2015-02-12 18:08 - 2015-01-13 01:58 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2015-02-12 18:08 - 2015-01-13 01:58 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 15403008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 02655744 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2015-02-12 18:08 - 2015-01-13 01:57 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2015-02-12 18:08 - 2015-01-13 01:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2015-02-12 18:08 - 2015-01-13 00:01 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2015-02-12 18:08 - 2015-01-13 00:01 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2015-02-12 18:08 - 2015-01-13 00:01 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 14373376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2015-02-12 18:08 - 2015-01-13 00:00 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2015-02-12 18:08 - 2015-01-13 00:00 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2015-02-12 18:08 - 2015-01-12 23:42 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2015-02-12 18:08 - 2015-01-12 23:17 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2015-02-12 18:08 - 2015-01-12 23:10 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2015-02-12 18:08 - 2015-01-12 22:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
    2015-02-12 18:08 - 2015-01-12 22:43 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
    2015-02-12 18:08 - 2015-01-12 22:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
    2015-02-11 23:30 - 2015-02-11 23:30 - 00000000 ____D () C:\Program Files (x86)\ESET
    2015-02-11 22:16 - 2015-02-11 22:16 - 00000000 ____D () C:\Users\Rich\AppData\Roaming\QuickScan
    2015-02-11 20:46 - 2015-02-11 20:47 - 55915216 _____ (Microsoft Corporation) C:\Users\norton\Downloads\IE11-Windows6.1-x64-en-us.exe
    2015-02-11 19:39 - 2015-02-11 20:10 - 00000000 ____D () C:\AdwCleaner
    2015-02-11 19:38 - 2015-02-11 19:38 - 02112512 _____ () C:\Users\norton\Downloads\AdwCleaner.exe
    2015-02-11 19:30 - 2015-02-11 19:31 - 00003928 _____ () C:\Users\Rich\Desktop\Rkill.txt
    2015-02-11 19:29 - 2015-02-11 19:29 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\norton\Downloads\rkill.exe
    2015-02-11 18:41 - 2015-02-11 18:41 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\norton\Downloads\tdsskiller.exe
    2015-02-11 18:12 - 2015-02-11 18:12 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
    2015-02-11 18:12 - 2015-02-11 18:12 - 00000000 ____D () C:\ProgramData\RogueKiller
    2015-02-11 18:08 - 2015-02-11 18:11 - 15431256 _____ () C:\Users\Rich\Desktop\RogueKiller.exe
    2015-02-11 10:59 - 2015-02-11 10:59 - 00000072 _____ () C:\Users\Rich\AppData\Local\.directory
    2015-02-10 22:25 - 2015-02-10 22:25 - 00000000 ____D () C:\ProgramData\Recovery
    2015-02-10 19:09 - 2015-02-03 22:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2015-02-10 19:09 - 2015-02-03 22:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2015-02-10 19:09 - 2015-02-03 22:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2015-02-10 19:09 - 2015-01-27 18:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
    2015-02-10 19:09 - 2015-01-10 01:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2015-02-10 19:09 - 2015-01-10 01:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2015-02-10 19:08 - 2015-01-15 03:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2015-02-10 19:08 - 2015-01-15 03:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2015-02-10 19:08 - 2015-01-15 03:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2015-02-10 19:08 - 2015-01-15 03:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2015-02-10 19:08 - 2015-01-15 03:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2015-02-10 19:08 - 2015-01-15 03:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2015-02-10 19:08 - 2015-01-15 03:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2015-02-10 19:08 - 2015-01-15 03:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2015-02-10 19:08 - 2015-01-15 03:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2015-02-10 19:08 - 2015-01-15 03:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2015-02-10 19:08 - 2015-01-15 03:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2015-02-10 19:08 - 2015-01-15 02:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2015-02-10 19:08 - 2015-01-15 02:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2015-02-10 19:08 - 2015-01-15 02:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2015-02-10 19:08 - 2015-01-15 02:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2015-02-10 19:08 - 2015-01-15 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2015-02-10 19:08 - 2015-01-15 02:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2015-02-10 19:08 - 2015-01-14 23:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2015-02-10 19:08 - 2015-01-12 22:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2015-02-10 19:08 - 2015-01-12 21:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2015-02-10 19:08 - 2015-01-10 01:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2015-02-10 19:08 - 2015-01-10 01:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2015-02-10 19:08 - 2014-12-12 00:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2015-02-10 19:07 - 2015-01-14 01:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-02-10 19:07 - 2015-01-14 01:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2015-02-10 19:07 - 2015-01-14 01:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2015-02-10 19:07 - 2015-01-14 01:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2015-02-10 19:07 - 2015-01-14 00:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2015-02-10 19:07 - 2015-01-14 00:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2015-02-10 19:07 - 2015-01-14 00:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2015-02-10 19:07 - 2014-12-12 00:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
    2015-02-10 19:07 - 2014-12-07 22:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2015-02-10 19:07 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
    2015-02-10 19:07 - 2014-11-25 22:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2015-02-10 19:07 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2015-02-10 19:07 - 2014-10-03 21:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
    2015-02-10 19:07 - 2014-10-03 20:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
    2015-02-10 19:07 - 2014-10-03 20:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
    2015-02-10 19:06 - 2015-01-08 21:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2015-02-10 18:14 - 2015-02-10 18:14 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE(4).exe
    2015-02-10 14:52 - 2015-02-10 14:52 - 00000000 ____D () C:\Users\norton\AppData\Roaming\SUPERAntiSpyware.com
    2015-02-10 14:48 - 2015-02-12 12:55 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
    2015-02-10 13:24 - 2015-02-10 13:25 - 03060320 _____ (Symantec Corporation) C:\Users\norton\Downloads\NPE(3).exe
    2015-02-10 13:23 - 2015-02-10 13:23 - 00000000 ____D () C:\Users\norton\AppData\Local\Macromedia
    2015-02-10 12:52 - 2015-02-10 12:52 - 00000000 ____D () C:\ProgramData\SMR430
    2015-02-10 12:28 - 2015-02-10 12:28 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE(2).exe
    2015-02-10 11:14 - 2015-02-10 11:14 - 00065856 _____ () C:\Users\norton\AppData\Local\GDIPFONTCACHEV1.DAT
    2015-02-10 11:14 - 2015-02-10 11:14 - 00000000 ____D () C:\Users\norton\AppData\Roaming\ATI
    2015-02-10 11:14 - 2015-02-10 11:14 - 00000000 ____D () C:\Users\norton\AppData\Local\Hewlett-Packard
    2015-02-10 11:14 - 2015-02-10 11:14 - 00000000 ____D () C:\Users\norton\AppData\Local\ATI
    2015-02-10 11:13 - 2015-02-10 11:13 - 00001454 _____ () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Real
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Hewlett-Packard
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Apple Computer
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Adobe
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Local\Wondershare
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Local\PDFC
    2015-02-10 11:13 - 2015-02-10 11:13 - 00000000 ____D () C:\Users\norton\AppData\Local\iSkysoft
    2015-02-10 11:12 - 2015-02-10 11:12 - 00000000 ____D () C:\Users\norton\AppData\Local\VirtualStore
    2015-02-10 11:04 - 2015-02-10 11:04 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE(1).exe
    2015-02-10 10:42 - 2015-02-10 10:42 - 03060320 ____N (Symantec Corporation) C:\Users\norton\Downloads\NPE.exe
    2015-02-10 10:40 - 2015-02-10 10:40 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Mozilla
    2015-02-10 10:40 - 2015-02-10 10:40 - 00000000 ____D () C:\Users\norton\AppData\Local\Mozilla
    2015-02-10 10:38 - 2015-02-10 11:12 - 00000000 ____D () C:\Users\norton
    2015-02-10 10:38 - 2015-02-10 10:38 - 00000020 ___SH () C:\Users\norton\ntuser.ini
    2015-02-10 10:38 - 2013-01-10 11:28 - 00002102 _____ () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
    2015-02-10 10:38 - 2011-01-06 17:01 - 00001974 _____ () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hulu Desktop.lnk
    2015-02-10 10:38 - 2011-01-06 17:01 - 00000000 ____D () C:\Users\norton\AppData\Roaming\Macromedia
    2015-02-10 10:38 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-02-10 10:38 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\norton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    2015-01-27 09:26 - 2015-02-13 01:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2015-01-20 12:24 - 2015-01-22 10:48 - 00000000 ____D () C:\Users\Rich\AppData\Local\Citrix

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-02-15 11:00 - 2014-10-07 07:44 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-02-15 10:29 - 2014-05-17 15:11 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2015-02-15 10:17 - 2011-11-16 22:21 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-02-15 10:17 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-02-15 10:17 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-02-15 10:16 - 2011-01-06 16:37 - 01993180 _____ () C:\Windows\WindowsUpdate.log
    2015-02-15 10:12 - 2013-01-23 15:48 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
    2015-02-15 10:11 - 2011-11-16 22:21 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-02-15 10:10 - 2011-01-30 19:59 - 00000440 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
    2015-02-15 10:09 - 2011-01-25 13:49 - 04081808 _____ () C:\Windows\PFRO.log
    2015-02-15 10:09 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-02-15 10:09 - 2009-07-13 23:51 - 00169888 _____ () C:\Windows\setupact.log
    2015-02-14 23:36 - 2009-07-14 00:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
    2015-02-14 23:29 - 2009-07-14 00:13 - 00783464 _____ () C:\Windows\system32\PerfStringBackup.INI
    2015-02-14 23:24 - 2011-01-06 16:36 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
    2015-02-13 21:23 - 2012-12-30 20:42 - 00005018 _____ () C:\ProgramData\hpzinstall.log
    2015-02-13 21:23 - 2011-03-07 16:21 - 00000000 ____D () C:\Users\Rich\AppData\Roaming\SoftGrid Client
    2015-02-13 21:22 - 2011-01-06 16:42 - 00000000 ____D () C:\Program Files (x86)\Hp
    2015-02-13 21:21 - 2011-01-06 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
    2015-02-13 16:12 - 2009-07-13 21:34 - 00000438 _____ () C:\Windows\win.ini
    2015-02-13 09:14 - 2012-04-26 12:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2015-02-13 00:09 - 2014-04-22 14:10 - 00000000 ____D () C:\Users\dub_cm_auto
    2015-02-13 00:09 - 2009-07-13 22:20 - 00000000 __RHD () C:\Users\Default
    2015-02-13 00:06 - 2009-07-13 21:34 - 00000215 _____ () C:\Windows\system.ini
    2015-02-12 22:53 - 2013-01-27 12:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
    2015-02-12 20:51 - 2013-01-27 12:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
    2015-02-12 02:41 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
    2015-02-12 01:44 - 2015-01-07 01:32 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForRich
    2015-02-12 01:44 - 2015-01-07 01:32 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForRich.job
    2015-02-11 23:15 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
    2015-02-11 23:09 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
    2015-02-11 21:02 - 2011-01-25 11:02 - 00000000 ____D () C:\Users\Rich
    2015-02-11 20:48 - 2013-12-07 03:00 - 00018935 _____ () C:\Windows\IE11_main.log
    2015-02-10 19:27 - 2009-07-13 23:45 - 00285088 _____ () C:\Windows\system32\FNTCACHE.DAT
    2015-02-10 19:23 - 2014-12-10 03:23 - 00000000 ____D () C:\Windows\system32\appraiser
    2015-02-10 19:23 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2015-02-10 19:19 - 2013-08-26 02:01 - 00000000 ____D () C:\Windows\system32\MRT
    2015-02-10 19:14 - 2011-01-30 08:06 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2015-02-10 18:52 - 2013-01-10 05:53 - 00000000 ____D () C:\Users\Rich\AppData\Local\NPE
    2015-02-10 13:55 - 2014-05-17 15:10 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-02-10 00:07 - 2011-01-06 16:37 - 00000000 ____D () C:\ProgramData\PDFC
    2015-02-04 15:00 - 2014-10-07 07:44 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-02-04 15:00 - 2012-04-08 15:57 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-02-04 15:00 - 2011-05-22 20:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-02-04 01:44 - 2011-01-26 21:22 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
    2015-02-04 01:43 - 2011-11-09 09:59 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
    2015-02-03 20:12 - 2011-11-16 22:21 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-02-03 20:12 - 2011-11-16 22:21 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-01-26 03:25 - 2009-07-14 00:08 - 00032610 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
    2015-01-26 03:04 - 2011-03-07 16:21 - 00775586 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
    2015-01-25 22:56 - 2011-04-22 18:42 - 00000000 ____D () C:\Users\Rich\AppData\Local\CrashDumps
    2015-01-24 13:14 - 2012-03-03 21:18 - 00028672 _____ () C:\Users\Rich\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2015-01-20 18:55 - 2014-04-09 02:23 - 00000000 ____D () C:\Windows\Minidump
    2015-01-20 11:51 - 2013-04-02 20:41 - 00000000 ____D () C:\Users\Rich\Documents\My Scans

    ==================== Files in the root of some directories =======

    2013-09-04 07:28 - 2013-09-26 08:10 - 9842040 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
    2015-02-11 10:59 - 2015-02-11 10:59 - 0000072 _____ () C:\Users\Rich\AppData\Local\.directory
    2012-03-03 21:18 - 2015-01-24 13:14 - 0028672 _____ () C:\Users\Rich\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2014-12-11 22:32 - 2014-12-11 22:32 - 0007609 _____ () C:\Users\Rich\AppData\Local\Resmon.ResmonCfg
    2012-12-30 20:42 - 2015-02-13 21:23 - 0005018 _____ () C:\ProgramData\hpzinstall.log
    2012-03-12 21:55 - 2014-03-19 16:04 - 0000935 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-02-13 14:50

    ==================== End Of Log ============================


    • 0

    #13
    RKinner

    RKinner

      Malware Expert

    • Expert
    • 20,031 posts
    • MVP
     
    Right click on (My) Computer and select Manage (Continue) Then click on the arrow in front of Event Viewer. Next Click on the arrow in front of Windows Logs Right click on System and Clear Log, Clear. Repeat for Application.
     
    Reboot. 
     
    Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator.  Then type (with an Enter after each line).
    sfc  /scannow
     
    (This will check your critical system files. Does this finish without complaint?  IF it says it couldn't fix everything then:
     
    Copy the next two lines:
    
    
    findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \windows\logs\cbs\junk.txt 
    notepad \windows\logs\cbs\junk.txt 
    
    
    Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.
    Hit Enter. Copy and paste the text from notepad or if it is too big, just attach the file.)
    
     
    1. Please download the Event Viewer Tool by Vino Rosso
    and save it to your Desktop:
    2. Right-click VEW.exe and Run AS Administrator
    3. Under 'Select log to query', select:
     
    * System
    4. Under 'Select type to list', select:
    * Error
    * Warning
     
     
    Then use the 'Number of events' as follows:
     
     
    1. Click the radio button for 'Number of events'
    Type 20 in the 1 to 20 box
    Then click the Run button.
    Notepad will open with the output log.
     
     
    Please post the Output log in your next reply then repeat but select Application.
     
     
     
     
     
     
    Get Process Explorer
     
    Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).  
     
    View, Select Column, check Verified Signer, OK
    Options, Verify Image Signatures
     
     
    Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  
     
    Wait a full minute then:
     
    File, Save As, Save.  Open the file Procexp.txt on your desktop and copy and paste the text to a reply.
     
     
    Get the free version of Speccy:
     
    http://www.filehippo...download_speccy  (Look in the upper right for the Download
    Latest Version button  - Do NOT press the large Start Download button on the upper left!)  Download, Save and Install it.  
     
    Close all browsers and open progrms before running Speccy.  Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  (It will be near the top about 10 lines down.)  Save the file and close notepad  Attach the file to your next post as it is usually too large for the forum (Click on More Reply Options then Choose file, select the file, Open, Attach this File) Uninstall Speccy.
     
     
     

    • 0

    #14
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    I cleared windows and application logs, rebooted and ran system scans which stated it found no errors.

     

    Here is the event viewer system log

     

    Vino's Event Viewer v01c run on Windows 2008 in English
    Report run at 15/02/2015 1:25:24 PM

    Note: All dates below are in the format dd/mm/yyyy

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'System' Log - Critical Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'System' Log - Error Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Log: 'System' Date/Time: 15/02/2015 6:12:37 PM
    Type: Error Category: 0
    Event: 31004 Source: Microsoft-Windows-SharedAccess_NAT
    The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

    Log: 'System' Date/Time: 15/02/2015 6:06:17 PM
    Type: Error Category: 0
    Event: 31004 Source: Microsoft-Windows-SharedAccess_NAT
    The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

    Log: 'System' Date/Time: 15/02/2015 5:51:44 PM
    Type: Error Category: 0
    Event: 31004 Source: Microsoft-Windows-SharedAccess_NAT
    The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

    Log: 'System' Date/Time: 15/02/2015 5:47:56 PM
    Type: Error Category: 0
    Event: 34001 Source: Microsoft-Windows-SharedAccess_NAT
    The ICS_IPV6 failed to configure IPv6 stack.

    Log: 'System' Date/Time: 15/02/2015 5:45:42 PM
    Type: Error Category: 0
    Event: 34001 Source: Microsoft-Windows-SharedAccess_NAT
    The ICS_IPV6 failed to configure IPv6 stack.

    Log: 'System' Date/Time: 15/02/2015 5:44:16 PM
    Type: Error Category: 0
    Event: 31004 Source: Microsoft-Windows-SharedAccess_NAT
    The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

    Log: 'System' Date/Time: 15/02/2015 5:44:07 PM
    Type: Error Category: 0
    Event: 31004 Source: Microsoft-Windows-SharedAccess_NAT
    The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

    Log: 'System' Date/Time: 15/02/2015 5:42:39 PM
    Type: Error Category: 0
    Event: 34001 Source: Microsoft-Windows-SharedAccess_NAT
    The ICS_IPV6 failed to configure IPv6 stack.

    Log: 'System' Date/Time: 15/02/2015 5:42:31 PM
    Type: Error Category: 0
    Event: 30005 Source: Microsoft-Windows-SharedAccess_NAT
    The DHCP allocator has detected a DHCP server with IP address 192.168.1.1 on the same network as the interface with IP address 192.168.137.1. The allocator has disabled itself on the interface to avoid confusing DHCP clients.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'System' Log - Warning Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Log: 'System' Date/Time: 15/02/2015 5:45:23 PM
    Type: Warning Category: 0
    Event: 129 Source: ahcix64s
    Reset to device, \Device\RaidPort0, was issued.

    Log: 'System' Date/Time: 15/02/2015 5:42:39 PM
    Type: Warning Category: 0
    Event: 1014 Source: Microsoft-Windows-DNS-Client
    Name resolution for the name omt.garmin.com timed out after none of the configured DNS servers responded.

    Log: 'System' Date/Time: 15/02/2015 5:42:24 PM
    Type: Warning Category: 0
    Event: 1014 Source: Microsoft-Windows-DNS-Client
    Name resolution for the name login.norton.com timed out after none of the configured DNS servers responded.

    Log: 'System' Date/Time: 15/02/2015 5:42:13 PM
    Type: Warning Category: 0
    Event: 34005 Source: Microsoft-Windows-SharedAccess_NAT
    The ICS_IPV6 was unable to allocate bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.

    Log: 'System' Date/Time: 15/02/2015 5:41:55 PM
    Type: Warning Category: 212
    Event: 219 Source: Microsoft-Windows-Kernel-PnP
    The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.00#20060413092100000&0#.

    Log: 'System' Date/Time: 15/02/2015 5:40:15 PM
    Type: Warning Category: 0
    Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
    WLAN AutoConfig service has successfully stopped.
     


    • 0

    #15
    wharriss

    wharriss

      Member

    • Topic Starter
    • Member
    • PipPipPip
    • 105 posts

    Here is the processexplorer txt file

     

    Process    CPU    Private Bytes    Working Set    PID    Description    Company Name    Verified Signer
    System Idle Process    78.53    0 K    24 K    0            
    svchost.exe    17.63    223,000 K    233,568 K    116    Host Process for Windows Services    Microsoft Corporation    
    procexp64.exe    0.99    31,864 K    56,692 K    708    Sysinternals Process Explorer    Sysinternals - www.sysinternals.com    
    WmiPrvSE.exe    0.93    7,552 K    12,172 K    3452    WMI Provider Host    Microsoft Corporation    
    Garmin.Cartography.MapUpdate.CoreService.exe    0.41    31,068 K    43,268 K    2188    Garmin Core Update Service    Garmin Ltd or its subsidiaries    
    Interrupts    0.39    0 K    0 K    n/a    Hardware Interrupts and DPCs        
    dwm.exe    0.26    33,724 K    33,244 K    4704    Desktop Window Manager    Microsoft Corporation    
    System    0.23    156 K    1,992 K    4            
    svchost.exe    0.15    30,484 K    49,412 K    464    Host Process for Windows Services    Microsoft Corporation    
    csrss.exe    0.11    3,444 K    9,128 K    560    Client Server Runtime Process    Microsoft Corporation    
    mbam.exe    0.07    34,264 K    48,700 K    4284    Malwarebytes Anti-Malware    Malwarebytes Corporation    
    n360.exe    0.03    34,488 K    22,240 K    2680    Norton 360    Symantec Corporation    
    wisptis.exe    0.03    3,048 K    7,780 K    972    Microsoft Pen and Touch Input Component    Microsoft Corporation    
    CinemaNowSvc.exe    0.03    7,252 K    6,912 K    1928    CinemaNow Service Application    CinemaNow, Inc.    
    SUPERANTISPYWARE.EXE    0.02    21,280 K    10,808 K    128    SUPERAntiSpyware Application    SUPERAntiSpyware    
    ExpressTray.exe    0.02    77,500 K    69,244 K    5440    Express Tray    Garmin Ltd or its subsidiaries    
    RAIDXpert.exe    0.02    32,180 K    36,644 K    1840    AMD RAIDXpert        
    explorer.exe    0.02    49,484 K    72,836 K    4956    Windows Explorer    Microsoft Corporation    
    lsass.exe    0.01    6,044 K    13,364 K    620    Local Security Authority Process    Microsoft Corporation    
    MOM.exe    0.01    45,884 K    9,792 K    5424    Catalyst Control Center: Monitoring program    Advanced Micro Devices Inc.    
    firefox.exe    0.01    301,040 K    316,540 K    4712    Firefox    Mozilla Corporation    
    FlipShareServer.exe    0.01    5,244 K    11,452 K    2160    FlipShareServer        
    NOBuAgent.exe    0.01    2,608 K    5,836 K    2732    Norton Online Backup Service    Symantec Corporation    
    iPodService.exe    0.01    2,508 K    6,840 K    3384    iPodService Module (64-bit)    Apple Inc.    
    EEventManager.exe    0.01    3,644 K    9,880 K    3840    EEventManager Application    SEIKO EPSON CORPORATION    
    audiodg.exe    0.01    17,680 K    17,260 K    1032    Windows Audio Device Graph Isolation     Microsoft Corporation    
    sftlist.exe    0.01    8,792 K    18,612 K    3344    Microsoft Application Virtualization Client Service    Microsoft Corporation    
    WinMsgBalloonServer.exe    0.01    988 K    3,536 K    4552    RAIDXpert Event Notifier Server        
    eEBSvc.exe    0.01    5,432 K    7,520 K    1604    eEBAPI Core Process module    SEIKO EPSON CORPORATION    
    n360.exe    < 0.01    18,628 K    10,380 K    5032    Norton 360    Symantec Corporation    
    AppleMobileDeviceService.exe    < 0.01    3,196 K    9,644 K    1848    MobileDeviceService    Apple Inc.    
    E_IATIIBE.EXE    < 0.01    4,860 K    10,580 K    5336    EPSON Status Monitor 3    SEIKO EPSON CORPORATION    
    SASCORE64.EXE    < 0.01    2,256 K    4,664 K    1772    Core Service    SUPERAntiSpyware.com    
    taskhost.exe    < 0.01    8,072 K    11,808 K    3960    Host Process for Windows Tasks    Microsoft Corporation    
    svchost.exe    < 0.01    12,376 K    19,880 K    384    Host Process for Windows Services    Microsoft Corporation    
    lsm.exe    < 0.01    2,860 K    4,600 K    628    Local Session Manager Service    Microsoft Corporation    
    ccsvchst.exe    < 0.01    9,820 K    18,204 K    2472    Symantec Service Framework    Symantec Corporation    
    svchost.exe    < 0.01    16,000 K    17,276 K    1192    Host Process for Windows Services    Microsoft Corporation    
    IntuitUpdateService.exe    < 0.01    29,468 K    13,208 K    8096    Intuit Update Service    Intuit Inc.    
    iCloudServices.exe    < 0.01    7,264 K    21,720 K    3544    iCloud    Apple Inc.    
    WSHelper.exe    < 0.01    13,980 K    21,480 K    2172    Wondershare Studio    Wondershare    
    svchost.exe    < 0.01    10,420 K    17,764 K    2020    Host Process for Windows Services    Microsoft Corporation    
    SearchIndexer.exe    < 0.01    25,200 K    15,600 K    4204    Microsoft Windows Search Indexer    Microsoft Corporation    
    hpqtra08.exe    < 0.01    3,348 K    9,944 K    6004    HP Digital Imaging Monitor    Hewlett-Packard Co.    
    csrss.exe    < 0.01    2,500 K    4,996 K    472    Client Server Runtime Process    Microsoft Corporation    
    HPSA_Service.exe    < 0.01    35,660 K    29,332 K    7564    HP Support Assistant Service    Hewlett-Packard Company    
    iTunesHelper.exe    < 0.01    3,884 K    11,796 K    5784    iTunesHelper    Apple Inc.    
    CCC.exe    < 0.01    56,052 K    18,876 K    1588    Catalyst Control Centre: Host application    ATI Technologies Inc.    
    svchost.exe    < 0.01    2,048 K    6,712 K    2272    Host Process for Windows Services    Microsoft Corporation    
    FlipShareService.exe    < 0.01    15,464 K    24,772 K    2044    FlipShare Service        
    WUDFHost.exe        2,296 K    6,328 K    6012    Windows Driver Foundation - User-mode Driver Framework Host Process    Microsoft Corporation    
    wmpnetwk.exe        13,980 K    13,584 K    6712    Windows Media Player Network Sharing Service    Microsoft Corporation    
    WmiPrvSE.exe        3,208 K    6,808 K    7704    WMI Provider Host    Microsoft Corporation    
    WinMsgBalloonClient.exe        1,336 K    4,096 K    840    RAIDXpert Event Notifier        
    winlogon.exe        3,552 K    8,364 K    680    Windows Logon Application    Microsoft Corporation    
    wininit.exe        1,660 K    4,564 K    536    Windows Start-Up Application    Microsoft Corporation    
    unsecapp.exe        1,792 K    5,068 K    3444    Sink to receive asynchronous callbacks for WMI client application    Microsoft Corporation    
    SymcPCCULaunchSvc.exe        1,928 K    5,712 K    2800    Norton PC Checkup Launcher Service    Symantec Corporation    
    svchost.exe        12,160 K    14,968 K    1500    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        6,388 K    10,480 K    860    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        4,760 K    9,788 K    776    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        23,692 K    25,928 K    988    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        3,880 K    8,808 K    6932    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        2,200 K    6,412 K    3212    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        1,364 K    3,736 K    2940    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        1,348 K    3,728 K    2704    Host Process for Windows Services    Microsoft Corporation    
    svchost.exe        2,600 K    5,976 K    5396    Host Process for Windows Services    Microsoft Corporation    
    spoolsv.exe        11,376 K    18,688 K    1472    Spooler SubSystem App    Microsoft Corporation    
    smss.exe        540 K    1,188 K    296    Windows Session Manager    Microsoft Corporation    
    SmartMenu.exe        8,888 K    16,896 K    4056    SmartMenu        
    sftvsa.exe        1,504 K    4,816 K    3184    Microsoft Application Virtualization Virtual Service Agent    Microsoft Corporation    
    services.exe        7,876 K    13,676 K    592    Services and Controller app    Microsoft Corporation    
    SeaPort.EXE        4,028 K    9,040 K    2972    Microsoft SeaPort Search Enhancement Broker    Microsoft Corporation    
    realsched.exe        2,896 K    692 K    3540    RealNetworks Scheduler    RealNetworks, Inc.    
    RAIDXpertService.exe        932 K    3,200 K    1816    AMD RAIDXpert Service    AMD    
    procexp.exe        2,312 K    7,336 K    6172    Sysinternals Process Explorer    Sysinternals - www.sysinternals.com    
    pdfsvc.exe        2,184 K    6,656 K    2876    Dispatcher    PDF Complete Inc    
    NASvc.exe        2,540 K    6,780 K    7768    NeroUpdate    Nero AG    
    mDNSResponder.exe        2,800 K    6,272 K    1896    Bonjour Service    Apple Inc.    
    mbamservice.exe        266,600 K    104,524 K    2444    Malwarebytes Anti-Malware    Malwarebytes Corporation    
    mbamscheduler.exe        4,756 K    9,892 K    2356    Malwarebytes Anti-Malware    Malwarebytes Corporation    
    LSSrvc.exe        1,328 K    4,292 K    2300    LightScribe Service    Hewlett-Packard Company    
    LightScribeControlPanel.exe        5,560 K    10,944 K    5760        Hewlett-Packard Company    
    ISHelper.exe        13,644 K    21,820 K    5936    iSkySoft Studio    iSkySoft    
    hpwuschd2.exe        1,044 K    3,720 K    880    hpwuSchd Application    Hewlett-Packard    
    hpsysdrv.exe        976 K    3,500 K    5292    hpsysdrv    Hewlett-Packard    
    hmpsched.exe        1,420 K    3,724 K    1140    HitmanPro Scheduler    SurfRight B.V.    
    escsvc64.exe        1,880 K    5,288 K    3552    Epson Scanner Service (64bit)    Seiko Epson Corporation    
    EPCP.exe        5,160 K    9,976 K    1988    Epson Customer Participation    SEIKO EPSON CORPORATION    
    CVHSVC.EXE        7,440 K    15,144 K    3880    Microsoft Office Client Virtualization Service     Microsoft Corporation    
    conhost.exe        1,220 K    3,124 K    1856    Console Window Host    Microsoft Corporation    
    conhost.exe        1,828 K    5,368 K    7388    Console Window Host    Microsoft Corporation    
    cmd.exe        2,132 K    3,048 K    7180    Windows Command Processor    Microsoft Corporation    
    ccSvcHst.exe        4,048 K    11,140 K    2832    Symantec Service Framework    Symantec Corporation    
    ccSvcHst.exe        3,452 K    9,708 K    4680    Symantec Service Framework    Symantec Corporation    
    ccsvchst.exe        5,248 K    15,296 K    4592    Symantec Service Framework    Symantec Corporation    
    atiesrxx.exe        1,708 K    4,476 K    920    AMD External Events Service Module    AMD    
    atieclxx.exe        2,508 K    6,308 K    1108    AMD External Events Client Module    AMD    
    armsvc.exe        1,216 K    3,924 K    1796    Adobe Acrobat Update Service    Adobe Systems Incorporated    
    APSDaemon.exe        4,460 K    13,048 K    5448    Apple Push    Apple Inc.    
    ApplePhotoStreams.exe        10,600 K    26,656 K    5676    iCloud Photos    Apple Inc.    
    alg.exe        1,656 K    5,088 K    4232    Application Layer Gateway Service    Microsoft Corporation    
     


    • 0






    Similar Topics

    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users

    As Featured On:

    Microsoft Yahoo BBC MSN PC Magazine Washington Post HP