Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Internet access problem: Malware or motherboard [Solved]


  • This topic is locked This topic is locked

#1
SSri09

SSri09

    Member

  • Member
  • PipPipPip
  • 144 posts

We moved home recently. My workstation was absolutely fine and could connect to the internet until we moved. It took us a few months to sort out the new house. But,it does not connect by wired or wireless. We have done all trouble shooting including driver update, network card configuration, etc.  I have a super slow mobile modem, which connects the internet on the workstation. I tried a couple of wireless cards, which they dont work on this machine, while working on other notebooks.

I suspect the motherboard is probably damaged on the move. But I want to check for any malware.

**********************

Rogue Killer

****************

RogueKiller V10.5.8.0 [Mar 30 2015] by Adlice Software

mail : http://www.adlice.com/contact/

Feedback : http://forum.adlice.com

Website : http://www.adlice.co...es/roguekiller/

Blog : http://www.adlice.com

 

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : SUNDARS PC [Administrator]

Started from : D:\DownloadSW\Utility\Utility Tools\RogueKiller.exe

Mode : Delete -- Date : 04/03/2015  15:58:07

 

¤¤¤ Processes : 0 ¤¤¤

 

¤¤¤ Registry : 4 ¤¤¤

[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Not selected

[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> Not selected

[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Not selected

[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> Not selected

 

¤¤¤ Tasks : 0 ¤¤¤

 

¤¤¤ Files : 0 ¤¤¤

 

¤¤¤ Hosts File : 0 ¤¤¤

 

¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

 

¤¤¤ Web browsers : 4 ¤¤¤

[FIREFX:Addon] tc02jb7q.default-1409742926604 : Mozilla Firefox hotfix [[email protected]] -> Deleted

[FIREFX:Addon] tc02jb7q.default-1409742926604 :  [[email protected]] -> Deleted

[FIREFX:Addon] tc02jb7q.default-1409742926604 :  [[email protected]] -> Deleted

[FIREFX:Addon] tc02jb7q.default-1409742926604 :  [[email protected]] -> Deleted

 

¤¤¤ MBR Check : ¤¤¤

+++++ PhysicalDrive0: WDC WD5000AAKS-00A7B2 +++++

--- User ---

[MBR] 54c9ceed20e71e84d8aed651e3b87eaa

[BSP] 8f4f837cf063111c987661cb4b876d36 : Windows Vista/7/8 MBR Code

Partition table:

User = LL1 ... OK

User = LL2 ... OK

+++++ PhysicalDrive1: Volume0 +++++

--- User ---

[MBR] 7cfbe8da5b34b1df1fbe4479ed8b308d

[BSP] 3f324703398cc0971d7e50c4043ad58c : Unknown MBR Code

Partition table:

User = LL1 ... OK

Error reading LL2 MBR! ([57] The parameter is incorrect. )

+++++ PhysicalDrive2: Seagate Backup+ BL USB Device +++++

--- User ---

[MBR] eb74973ed0f09dff85091c646a19f0c8

[BSP] 7fc993aeb7489dfc16ccadb5352df364 : Empty MBR Code

Partition table:

User = LL1 ... OK

Error reading LL2 MBR! ([32] The request is not supported. )

 

============================================

RKreport_SCN_04032015_155704.log

*****************

TDS KILLER

***************

15:49:44.0822 0x16d4  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04

15:49:47.0536 0x16d4  ============================================================

15:49:47.0536 0x16d4  Current date / time: 2015/04/03 15:49:47.0536

15:49:47.0536 0x16d4  SystemInfo:

15:49:47.0536 0x16d4 

15:49:47.0536 0x16d4  OS Version: 6.1.7601 ServicePack: 1.0

15:49:47.0536 0x16d4  Product type: Workstation

15:49:47.0536 0x16d4  ComputerName: SUNDARSPC-PC

15:49:47.0536 0x16d4  UserName: SUNDARS PC

15:49:47.0536 0x16d4  Windows directory: C:\Windows

15:49:47.0536 0x16d4  System windows directory: C:\Windows

15:49:47.0536 0x16d4  Running under WOW64

15:49:47.0536 0x16d4  Processor architecture: Intel x64

15:49:47.0536 0x16d4  Number of processors: 4

15:49:47.0536 0x16d4  Page size: 0x1000

15:49:47.0536 0x16d4  Boot type: Normal boot

15:49:47.0536 0x16d4  ============================================================

15:49:49.0174 0x16d4  KLMD registered as C:\Windows\system32\drivers\44387259.sys

15:49:49.0673 0x16d4  System UUID: {B349395A-79C5-9C41-A26E-DD75BB06B92F}

15:49:50.0422 0x16d4  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

15:49:50.0422 0x16d4  Drive \Device\Harddisk1\DR1 - Size: 0x15D51C00000 ( 1397.28 Gb ), SectorSize: 0x200, Cylinders: 0x2C882, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

15:49:50.0438 0x16d4  Drive \Device\Harddisk2\DR3 - Size: 0xE8E0DB5E00 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

15:49:50.0812 0x16d4  ============================================================

15:49:50.0812 0x16d4  \Device\Harddisk0\DR0:

15:49:50.0812 0x16d4  MBR partitions:

15:49:50.0812 0x16d4  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

15:49:50.0812 0x16d4  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000

15:49:50.0812 0x16d4  \Device\Harddisk1\DR1:

15:49:50.0812 0x16d4  MBR partitions:

15:49:50.0812 0x16d4  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xAEA8A5C3

15:49:50.0812 0x16d4  \Device\Harddisk2\DR3:

15:49:50.0812 0x16d4  MBR partitions:

15:49:50.0812 0x16d4  \Device\Harddisk2\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705000

15:49:50.0812 0x16d4  ============================================================

15:49:50.0828 0x16d4  C: <-> \Device\Harddisk0\DR0\Partition2

15:49:50.0843 0x16d4  D: <-> \Device\Harddisk1\DR1\Partition1

15:49:50.0906 0x16d4  G: <-> \Device\Harddisk2\DR3\Partition1

15:49:50.0906 0x16d4  ============================================================

15:49:50.0906 0x16d4  Initialize success

15:49:50.0906 0x16d4  ============================================================

15:50:13.0666 0x0464  ============================================================

15:50:13.0666 0x0464  Scan started

15:50:13.0666 0x0464  Mode: Manual;

15:50:13.0666 0x0464  ============================================================

15:50:13.0666 0x0464  KSN ping started

15:50:13.0697 0x0464  KSN ping finished: false

15:50:15.0975 0x0464  ================ Scan system memory ========================

15:50:15.0975 0x0464  System memory - ok

15:50:15.0975 0x0464  ================ Scan services =============================

15:50:16.0100 0x0464  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

15:50:16.0100 0x0464  1394ohci - ok

15:50:16.0225 0x0464  [ 76C0D63592621EB5E844D3B438AD4C4E, BD622A3804FC5CE6485EB1476F13D42F27BDADF65C1BDB67EC0B24FA49E8379C ] A6210           C:\Windows\system32\DRIVERS\A6210.sys

15:50:16.0271 0x0464  A6210 - ok

15:50:16.0318 0x0464  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

15:50:16.0318 0x0464  ACPI - ok

15:50:16.0349 0x0464  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

15:50:16.0349 0x0464  AcpiPmi - ok

15:50:16.0443 0x0464  [ 05A14823307ACBBB549CC8EA9C54143E, 0244B0628B86DFBCD30B0B961C7E2BFFDCEABCB57C5DEB25A701832A97786004 ] AcrSch2Svc      C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

15:50:16.0459 0x0464  AcrSch2Svc - ok

15:50:16.0521 0x0464  [ C5679E5186B2FC95BC76A8A9870D5456, 70AC61850B811A0A902532F098AE1D5DF4622455E56C78B89D4ABDBE4A061A48 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

15:50:16.0521 0x0464  AdobeARMservice - ok

15:50:16.0615 0x0464  [ A2A9C100FE1BE20A76C0B80D4CA44103, C34B4A31C8563E29EC6A3D318C40075F43C891C23D156F53EE2102C959B7887F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

15:50:16.0615 0x0464  AdobeFlashPlayerUpdateSvc - ok

15:50:16.0661 0x0464  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

15:50:16.0677 0x0464  adp94xx - ok

15:50:16.0708 0x0464  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

15:50:16.0724 0x0464  adpahci - ok

15:50:16.0739 0x0464  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

15:50:16.0739 0x0464  adpu320 - ok

15:50:16.0771 0x0464  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

15:50:16.0771 0x0464  AeLookupSvc - ok

15:50:16.0802 0x0464  [ ABCF9C80EAACE03021BB7F450EB8993F, 8E38726C423E82954CA85266D6F38B605D010A659420A4EF99D29035A9474BFB ] afcdp           C:\Windows\system32\DRIVERS\afcdp.sys

15:50:16.0802 0x0464  afcdp - ok

15:50:16.0911 0x0464  [ 587062408B495CFE12A4BBC6284F19D9, 5E78B8165BBA2BF82F2F1E66E95C4B354F2CF16A8DB6C933FA86A056B8439137 ] afcdpsrv        C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

15:50:16.0958 0x0464  afcdpsrv - ok

15:50:17.0020 0x0464  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys

15:50:17.0036 0x0464  AFD - ok

15:50:17.0067 0x0464  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

15:50:17.0067 0x0464  agp440 - ok

15:50:17.0098 0x0464  [ 913C625EB03E0F917BF934734369EC54, DF69D59B2570DAEBB39C217B59B713D5726AB32174FD01C83210A20255842365 ] ALCATELUSB      C:\Windows\system32\Drivers\AlcatelUsb.sys

15:50:17.0098 0x0464  ALCATELUSB - ok

15:50:17.0114 0x0464  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

15:50:17.0114 0x0464  ALG - ok

15:50:17.0129 0x0464  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

15:50:17.0129 0x0464  aliide - ok

15:50:17.0145 0x0464  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

15:50:17.0145 0x0464  amdide - ok

15:50:17.0176 0x0464  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

15:50:17.0176 0x0464  AmdK8 - ok

15:50:17.0176 0x0464  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

15:50:17.0176 0x0464  AmdPPM - ok

15:50:17.0207 0x0464  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

15:50:17.0207 0x0464  amdsata - ok

15:50:17.0239 0x0464  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

15:50:17.0239 0x0464  amdsbs - ok

15:50:17.0254 0x0464  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys

15:50:17.0254 0x0464  amdxata - ok

15:50:17.0270 0x0464  ANIWConnService - ok

15:50:17.0317 0x0464  [ 4CCF421E6C4B2A4CBCE000715911F7CC, DD544BDAA4D948495D690B0AE031AA8A25563F0E0A64B467E5081F5C207A3596 ] anodlwf         C:\Windows\system32\DRIVERS\anodlwfx.sys

15:50:17.0317 0x0464  anodlwf - ok

15:50:17.0348 0x0464  [ 80B9412C4DE09147581FC935FB4C97AB, 0C9661F7B5EF7F9D61981790B7AB64E3375BD117962166619D0CC546A2D014D3 ] AppID           C:\Windows\system32\drivers\appid.sys

15:50:17.0348 0x0464  AppID - ok

15:50:17.0348 0x0464  [ F71CA01C24FC3798A717B5A6F682F9AD, 8CF1C209E7BBBAD02D6D087293C0B681CDA3170AF119CA2916C2708D8801E749 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

15:50:17.0363 0x0464  AppIDSvc - ok

15:50:17.0379 0x0464  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll

15:50:17.0379 0x0464  Appinfo - ok

15:50:17.0473 0x0464  [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

15:50:17.0473 0x0464  Apple Mobile Device - ok

15:50:17.0504 0x0464  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll

15:50:17.0504 0x0464  AppMgmt - ok

15:50:17.0519 0x0464  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys

15:50:17.0519 0x0464  arc - ok

15:50:17.0535 0x0464  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

15:50:17.0535 0x0464  arcsas - ok

15:50:17.0629 0x0464  [ 9217D874131AE6FF8F642F124F00A555, BE2923D5AA7748FDAAED73AF567D015517B36F1C739C6E5637DD15112EFDF495 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

15:50:17.0629 0x0464  aspnet_state - ok

15:50:17.0644 0x0464  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

15:50:17.0644 0x0464  AsyncMac - ok

15:50:17.0675 0x0464  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

15:50:17.0675 0x0464  atapi - ok

15:50:17.0707 0x0464  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

15:50:17.0722 0x0464  AudioEndpointBuilder - ok

15:50:17.0753 0x0464  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv        C:\Windows\System32\Audiosrv.dll

15:50:17.0769 0x0464  AudioSrv - ok

15:50:17.0816 0x0464  [ 15D2DB9BFA8E833ED31FAB2BB088FDDA, 6198C0A5DA01DA146A9A054C3C882A1DBF9BA84466EBFDDA1C1062EF36F9B34B ] AVP             C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe

15:50:17.0816 0x0464  AVP - ok

15:50:17.0847 0x0464  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

15:50:17.0847 0x0464  AxInstSV - ok

15:50:17.0894 0x0464  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

15:50:17.0909 0x0464  b06bdrv - ok

15:50:17.0956 0x0464  [ A0D92A8E192C8D602E1F700A1E27CA11, D59AB96B23D5099B7A9126BA440AAD2BA547C0983DC30BFB8F10FDBD6202E8F0 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

15:50:17.0972 0x0464  b57nd60a - ok

15:50:18.0003 0x0464  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

15:50:18.0003 0x0464  BDESVC - ok

15:50:18.0003 0x0464  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

15:50:18.0003 0x0464  Beep - ok

15:50:18.0050 0x0464  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

15:50:18.0050 0x0464  BFE - ok

15:50:18.0112 0x0464  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

15:50:18.0112 0x0464  BITS - ok

15:50:18.0206 0x0464  [ 6E984D17526995C8FA9B65FFCE324A63, AFAB5004C333F90AC13769701D253F65EAE23D5B277DAD9C6EA8AF658374B48D ] BlackBerry Device Manager C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe

15:50:18.0221 0x0464  BlackBerry Device Manager - ok

15:50:18.0237 0x0464  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

15:50:18.0237 0x0464  blbdrive - ok

15:50:18.0315 0x0464  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

15:50:18.0315 0x0464  Bonjour Service - ok

15:50:18.0362 0x0464  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

15:50:18.0362 0x0464  bowser - ok

15:50:18.0377 0x0464  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

15:50:18.0377 0x0464  BrFiltLo - ok

15:50:18.0393 0x0464  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

15:50:18.0393 0x0464  BrFiltUp - ok

15:50:18.0424 0x0464  [ 42DDA1AF011996BC7091F0C99B3564A9, 02F8158AE7DE0A96D751698674E31E99CDBF3062710F8126E3D737B188EAD57D ] BrnFileLock     c:\windows\system32\drivers\brnfilelock.sys

15:50:18.0424 0x0464  BrnFileLock - ok

15:50:18.0471 0x0464  [ DD8055DA488A87C6BBB8A8671EA2E01C, A1664170A9F97CD178BF2FF6A9B4BF687E52845801FEC989D2AC9023097AB243 ] BRN_APPGUARD_SERVICE C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardAgent.exe

15:50:18.0487 0x0464  BRN_APPGUARD_SERVICE - ok

15:50:18.0502 0x0464  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

15:50:18.0502 0x0464  Browser - ok

15:50:18.0533 0x0464  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

15:50:18.0533 0x0464  Brserid - ok

15:50:18.0549 0x0464  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

15:50:18.0549 0x0464  BrSerWdm - ok

15:50:18.0565 0x0464  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

15:50:18.0565 0x0464  BrUsbMdm - ok

15:50:18.0565 0x0464  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

15:50:18.0565 0x0464  BrUsbSer - ok

15:50:18.0580 0x0464  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

15:50:18.0596 0x0464  BTHMODEM - ok

15:50:18.0627 0x0464  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

15:50:18.0627 0x0464  bthserv - ok

15:50:18.0658 0x0464  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

15:50:18.0658 0x0464  cdfs - ok

15:50:18.0689 0x0464  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

15:50:18.0705 0x0464  cdrom - ok

15:50:18.0721 0x0464  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

15:50:18.0721 0x0464  CertPropSvc - ok

15:50:18.0736 0x0464  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

15:50:18.0736 0x0464  circlass - ok

15:50:18.0767 0x0464  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys

15:50:18.0783 0x0464  CLFS - ok

15:50:18.0830 0x0464  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

15:50:18.0830 0x0464  clr_optimization_v2.0.50727_32 - ok

15:50:18.0861 0x0464  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

15:50:18.0877 0x0464  clr_optimization_v2.0.50727_64 - ok

15:50:18.0923 0x0464  [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 c:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

15:50:18.0923 0x0464  clr_optimization_v4.0.30319_32 - ok

15:50:18.0939 0x0464  [ C6F9AF94DCD58122A4D7E89DB6BED29D, CB0E5AE60EC76323585FB86D89E8DB7ADB5EDF6EA3D0B27E9ECE75B8CAA8BFDE ] clr_optimization_v4.0.30319_64 c:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

15:50:18.0939 0x0464  clr_optimization_v4.0.30319_64 - ok

15:50:18.0955 0x0464  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

15:50:18.0955 0x0464  CmBatt - ok

15:50:18.0970 0x0464  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

15:50:18.0970 0x0464  cmdide - ok

15:50:19.0017 0x0464  [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG             C:\Windows\system32\Drivers\cng.sys

15:50:19.0033 0x0464  CNG - ok

15:50:19.0064 0x0464  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

15:50:19.0064 0x0464  Compbatt - ok

15:50:19.0079 0x0464  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

15:50:19.0079 0x0464  CompositeBus - ok

15:50:19.0095 0x0464  COMSysApp - ok

15:50:19.0095 0x0464  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

15:50:19.0095 0x0464  crcdisk - ok

15:50:19.0126 0x0464  [ 19D511CC455C19DE1ADF60E6C39C85B6, 2A05DD5EF3D0BEC2C9F4EA186E0E2D0F7BE0BF6A473D51194B09D33773AC7FAA ] CryptSvc        C:\Windows\system32\cryptsvc.dll

15:50:19.0126 0x0464  CryptSvc - ok

15:50:19.0157 0x0464  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys

15:50:19.0173 0x0464  CSC - ok

15:50:19.0204 0x0464  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll

15:50:19.0220 0x0464  CscService - ok

15:50:19.0251 0x0464  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

15:50:19.0267 0x0464  DcomLaunch - ok

15:50:19.0298 0x0464  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

15:50:19.0313 0x0464  defragsvc - ok

15:50:19.0329 0x0464  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

15:50:19.0329 0x0464  DfsC - ok

15:50:19.0360 0x0464  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

15:50:19.0360 0x0464  Dhcp - ok

15:50:19.0376 0x0464  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

15:50:19.0376 0x0464  discache - ok

15:50:19.0391 0x0464  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys

15:50:19.0391 0x0464  Disk - ok

15:50:19.0423 0x0464  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

15:50:19.0423 0x0464  Dnscache - ok

15:50:19.0485 0x0464  [ ECBFD9B64DD8EF5EA1B82FE49C71DC91, 4C47FD4E0989258230B6DA2004AA00CEF2A3559C90AA2679B715D62AF56A050B ] dnscrypt-proxy  C:\DNSCRYPT\dnscrypt-proxy.exe

15:50:19.0485 0x0464  dnscrypt-proxy - ok

15:50:19.0516 0x0464  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

15:50:19.0516 0x0464  dot3svc - ok

15:50:19.0532 0x0464  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

15:50:19.0532 0x0464  DPS - ok

15:50:19.0563 0x0464  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

15:50:19.0563 0x0464  drmkaud - ok

15:50:19.0610 0x0464  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

15:50:19.0625 0x0464  DXGKrnl - ok

15:50:19.0657 0x0464  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

15:50:19.0657 0x0464  EapHost - ok

15:50:19.0766 0x0464  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

15:50:19.0844 0x0464  ebdrv - ok

15:50:19.0906 0x0464  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS             C:\Windows\System32\lsass.exe

15:50:19.0906 0x0464  EFS - ok

15:50:19.0937 0x0464  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

15:50:19.0969 0x0464  ehRecvr - ok

15:50:19.0984 0x0464  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

15:50:20.0000 0x0464  ehSched - ok

15:50:20.0031 0x0464  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

15:50:20.0047 0x0464  elxstor - ok

15:50:20.0062 0x0464  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

15:50:20.0062 0x0464  ErrDev - ok

15:50:20.0093 0x0464  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

15:50:20.0109 0x0464  EventSystem - ok

15:50:20.0125 0x0464  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

15:50:20.0125 0x0464  exfat - ok

15:50:20.0140 0x0464  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

15:50:20.0140 0x0464  fastfat - ok

15:50:20.0187 0x0464  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe

15:50:20.0203 0x0464  Fax - ok

15:50:20.0203 0x0464  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

15:50:20.0203 0x0464  fdc - ok

15:50:20.0218 0x0464  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

15:50:20.0218 0x0464  fdPHost - ok

15:50:20.0234 0x0464  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

15:50:20.0234 0x0464  FDResPub - ok

15:50:20.0234 0x0464  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

15:50:20.0249 0x0464  FileInfo - ok

15:50:20.0249 0x0464  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

15:50:20.0249 0x0464  Filetrace - ok

15:50:20.0265 0x0464  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

15:50:20.0265 0x0464  flpydisk - ok

15:50:20.0359 0x0464  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

15:50:20.0390 0x0464  FltMgr - ok

15:50:20.0483 0x0464  [ C06AF3D1E7CA6868A6A3064CE6907C4A, A1A357CF99291E1611A4380BF8866B5B594637C186B5FD1EFDF052D4EB69FAB9 ] fltsrv          C:\Windows\system32\DRIVERS\fltsrv.sys

15:50:20.0515 0x0464  fltsrv - ok

15:50:20.0561 0x0464  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll

15:50:20.0577 0x0464  FontCache - ok

15:50:20.0639 0x0464  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

15:50:20.0639 0x0464  FontCache3.0.0.0 - ok

15:50:20.0639 0x0464  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

15:50:20.0639 0x0464  FsDepends - ok

15:50:20.0655 0x0464  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

15:50:20.0655 0x0464  Fs_Rec - ok

15:50:20.0671 0x0464  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

15:50:20.0686 0x0464  fvevol - ok

15:50:20.0702 0x0464  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

15:50:20.0702 0x0464  gagp30kx - ok

15:50:20.0733 0x0464  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

15:50:20.0733 0x0464  GEARAspiWDM - ok

15:50:20.0764 0x0464  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

15:50:20.0764 0x0464  gpsvc - ok

15:50:20.0827 0x0464  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:50:20.0842 0x0464  gupdate - ok

15:50:20.0842 0x0464  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:50:20.0842 0x0464  gupdatem - ok

15:50:20.0873 0x0464  [ 57EE8E7C2487E4EA69276A305102EAA1, F0947C2AE77D600E8632BEB25F09BF3F231EA35AE27CDE7FB9640EC4350452D7 ] hcmon           C:\Windows\system32\drivers\hcmon.sys

15:50:20.0873 0x0464  hcmon - ok

15:50:20.0889 0x0464  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

15:50:20.0889 0x0464  hcw85cir - ok

15:50:20.0936 0x0464  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

15:50:20.0951 0x0464  HdAudAddService - ok

15:50:20.0983 0x0464  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

15:50:20.0983 0x0464  HDAudBus - ok

15:50:20.0983 0x0464  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

15:50:20.0983 0x0464  HidBatt - ok

15:50:20.0998 0x0464  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

15:50:21.0014 0x0464  HidBth - ok

15:50:21.0014 0x0464  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

15:50:21.0014 0x0464  HidIr - ok

15:50:21.0029 0x0464  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll

15:50:21.0029 0x0464  hidserv - ok

15:50:21.0061 0x0464  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

15:50:21.0061 0x0464  HidUsb - ok

15:50:21.0076 0x0464  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

15:50:21.0092 0x0464  hkmsvc - ok

15:50:21.0107 0x0464  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

15:50:21.0107 0x0464  HomeGroupListener - ok

15:50:21.0139 0x0464  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

15:50:21.0139 0x0464  HomeGroupProvider - ok

15:50:21.0154 0x0464  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

15:50:21.0170 0x0464  HpSAMD - ok

15:50:21.0201 0x0464  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

15:50:21.0232 0x0464  HTTP - ok

15:50:21.0248 0x0464  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

15:50:21.0248 0x0464  hwpolicy - ok

15:50:21.0263 0x0464  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

15:50:21.0279 0x0464  i8042prt - ok

15:50:21.0295 0x0464  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

15:50:21.0310 0x0464  iaStorV - ok

15:50:21.0357 0x0464  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

15:50:21.0388 0x0464  idsvc - ok

15:50:21.0404 0x0464  IEEtwCollectorService - ok

15:50:21.0435 0x0464  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

15:50:21.0435 0x0464  iirsp - ok

15:50:21.0497 0x0464  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

15:50:21.0513 0x0464  IKEEXT - ok

15:50:21.0529 0x0464  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

15:50:21.0544 0x0464  intelide - ok

15:50:21.0560 0x0464  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

15:50:21.0560 0x0464  intelppm - ok

15:50:21.0591 0x0464  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

15:50:21.0591 0x0464  IPBusEnum - ok

15:50:21.0607 0x0464  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

15:50:21.0607 0x0464  IpFilterDriver - ok

15:50:21.0638 0x0464  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

15:50:21.0653 0x0464  iphlpsvc - ok

15:50:21.0669 0x0464  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

15:50:21.0669 0x0464  IPMIDRV - ok

15:50:21.0685 0x0464  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

15:50:21.0685 0x0464  IPNAT - ok

15:50:21.0731 0x0464  [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

15:50:21.0747 0x0464  iPod Service - ok

15:50:21.0763 0x0464  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

15:50:21.0763 0x0464  IRENUM - ok

15:50:21.0778 0x0464  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

15:50:21.0778 0x0464  isapnp - ok

15:50:21.0794 0x0464  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

15:50:21.0809 0x0464  iScsiPrt - ok

15:50:21.0841 0x0464  [ 7F928D5A5D1D843AAECE688E96963575, 2DF0C012A016A3E3BA92493B948C32F692AB571504DDB5385B9FDADD21A10565 ] jrdusbser       C:\Windows\system32\DRIVERS\jrdusbser.sys

15:50:21.0841 0x0464  jrdusbser - ok

15:50:21.0872 0x0464  [ F1C98C1CAD82638DBDFA482BD64DD62C, 0BA847FB6ADCE92EDA4680EEAF3D14F1E4627BC6E3E34D7DC263B9E30A3E0DF7 ] JRDusbwwan      C:\Windows\system32\DRIVERS\AlcatelUsbWwan.sys

15:50:21.0887 0x0464  JRDusbwwan - ok

15:50:21.0903 0x0464  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys

15:50:21.0903 0x0464  kbdclass - ok

15:50:21.0934 0x0464  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys

15:50:21.0934 0x0464  kbdhid - ok

15:50:21.0934 0x0464  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso          C:\Windows\system32\lsass.exe

15:50:21.0934 0x0464  KeyIso - ok

15:50:21.0997 0x0464  [ 783BEB99743BACB9586CCB70356449C5, CEE63FC2E7937B181743D4CFE837FFB29E3BF94BBA5394A3B5FFAF5142EF0D48 ] KeyScrambler    C:\Windows\system32\drivers\keyscrambler.sys

15:50:21.0997 0x0464  KeyScrambler - ok

15:50:22.0028 0x0464  [ 795EC29BA21F1D948FD6FD740C00B599, 780900717A812C5DB78C67057010BD62DF2C756C087599A6F8C67CB4EFA7518C ] kl1             C:\Windows\system32\DRIVERS\kl1.sys

15:50:22.0043 0x0464  kl1 - ok

15:50:22.0075 0x0464  [ FEA38D7024CD9C27D58A862A19DCFA14, 522A15963A105AD551ED45E7BA2AFA7A90408FE7D349307A17F12FE761AFB903 ] KLIF            C:\Windows\system32\DRIVERS\klif.sys

15:50:22.0090 0x0464  KLIF - ok

15:50:22.0106 0x0464  [ 31B69BFF28348503E4BD10C2A4F66D05, 891318C2DDF85E43DFCEE73717AEFCE79BC3DCD83FCD58E6F794AB6BF1739688 ] KLIM6           C:\Windows\system32\DRIVERS\klim6.sys

15:50:22.0106 0x0464  KLIM6 - ok

15:50:22.0121 0x0464  [ AEB50941C6D67128B14F88DB9917C4E0, 2ACE46665DE298CC197660A442A3172B1FB460A40BD18AECEA786ACB011FDA43 ] klkbdflt        C:\Windows\system32\DRIVERS\klkbdflt.sys

15:50:22.0121 0x0464  klkbdflt - ok

15:50:22.0137 0x0464  [ 72CF64FBF38CD681FA7F37176047E967, BE5683C119DCEF7E678EE477D6CADF873E32D42372A253B7E86B8C335DF28E1C ] klmouflt        C:\Windows\system32\DRIVERS\klmouflt.sys

15:50:22.0137 0x0464  klmouflt - ok

15:50:22.0153 0x0464  [ 45ECF097BC6330C2054D7D43B7AD822B, 41684ED54E75FE6BEEA322E7CE888DFDD53EE1F45016E01CE10B84ABB02CBDA8 ] kltdi           C:\Windows\system32\DRIVERS\kltdi.sys

15:50:22.0153 0x0464  kltdi - ok

15:50:22.0168 0x0464  [ 0E71FAED99892750DFE1C5237A6F8FE6, 786FEEEF637BC89FDED3DDEA2563144C7128E7C9582261B23F16B98D69149088 ] kneps           C:\Windows\system32\DRIVERS\kneps.sys

15:50:22.0168 0x0464  kneps - ok

15:50:22.0184 0x0464  [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

15:50:22.0184 0x0464  KSecDD - ok

15:50:22.0215 0x0464  [ 41774FF331F609EF442B7398EE6202B1, AD67DA06A74895C384F4A1F1CF47050DAEE9C6CE8AD12F1A116FC977B6C3A864 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

15:50:22.0215 0x0464  KSecPkg - ok

15:50:22.0246 0x0464  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

15:50:22.0246 0x0464  ksthunk - ok

15:50:22.0277 0x0464  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

15:50:22.0293 0x0464  KtmRm - ok

15:50:22.0324 0x0464  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll

15:50:22.0324 0x0464  LanmanServer - ok

15:50:22.0355 0x0464  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

15:50:22.0371 0x0464  LanmanWorkstation - ok

15:50:22.0387 0x0464  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

15:50:22.0387 0x0464  lltdio - ok

15:50:22.0418 0x0464  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

15:50:22.0433 0x0464  lltdsvc - ok

15:50:22.0449 0x0464  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

15:50:22.0449 0x0464  lmhosts - ok

15:50:22.0465 0x0464  lmimirr - ok

15:50:22.0480 0x0464  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

15:50:22.0480 0x0464  LSI_FC - ok

15:50:22.0496 0x0464  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

15:50:22.0496 0x0464  LSI_SAS - ok

15:50:22.0511 0x0464  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

15:50:22.0511 0x0464  LSI_SAS2 - ok

15:50:22.0527 0x0464  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

15:50:22.0527 0x0464  LSI_SCSI - ok

15:50:22.0558 0x0464  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

15:50:22.0558 0x0464  luafv - ok

15:50:22.0574 0x0464  [ CA43F8904E24BBE49982E4C0B29E6579, 2E3E6D02980706061C478C1643F8838310DDAC573C8722AE7F3290CE36B02CB2 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

15:50:22.0589 0x0464  MBAMProtector - ok

15:50:22.0667 0x0464  [ 0BB29DE40C9D9529793DCDB59A43CF5B, 251001A407D32EF22F64915EEFFAAEC229073C4549BF7D9D1D4209B7D15B4681 ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

15:50:22.0683 0x0464  MBAMScheduler - ok

15:50:22.0745 0x0464  [ 5F82D8188B370B0CF185D4AE2B9B4A0E, 549B53DD989A069E1C38347C4CEF5283DF9B428CE102799B06A20D3D8F23825F ] MBAMService     C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

15:50:22.0761 0x0464  MBAMService - ok

15:50:22.0808 0x0464  [ 26C43960C99EE861A5D0EDC4DCF3B1C3, 6238FB8E785652040CCE3E7044EA52066CE1BF173A1467474D64A3AB214B6BCD ] MBAMSwissArmy   C:\Windows\system32\drivers\MBAMSwissArmy.sys

15:50:22.0808 0x0464  MBAMSwissArmy - ok

15:50:22.0870 0x0464  [ A646C2DDB8C46E9B20A326FAF566646C, F46E3BF392CB4EB53D323BC8CC41EFBB9C5D7C935FECF255F524EB18583A2A37 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys

15:50:22.0886 0x0464  MBAMWebAccessControl - ok

15:50:22.0917 0x0464  [ 1704A8189EE5580AB147CFD25C5C8770, DFA076FD36B5CC844D4BE3B865E9A1F809E14CCB1D78D82A2D8D8EE38210E6EB ] McComponentHostService C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe

15:50:22.0933 0x0464  McComponentHostService - ok

15:50:22.0964 0x0464  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

15:50:22.0964 0x0464  Mcx2Svc - ok

15:50:22.0979 0x0464  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

15:50:22.0979 0x0464  megasas - ok

15:50:22.0995 0x0464  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

15:50:23.0011 0x0464  MegaSR - ok

15:50:23.0042 0x0464  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

15:50:23.0042 0x0464  MMCSS - ok

15:50:23.0057 0x0464  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

15:50:23.0057 0x0464  Modem - ok

15:50:23.0073 0x0464  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

15:50:23.0073 0x0464  monitor - ok

15:50:23.0104 0x0464  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

15:50:23.0104 0x0464  mouclass - ok

15:50:23.0135 0x0464  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

15:50:23.0135 0x0464  mouhid - ok

15:50:23.0151 0x0464  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

15:50:23.0151 0x0464  mountmgr - ok

15:50:23.0198 0x0464  [ 9038C370DA9764A8209415596A2A59B5, C8ED73BF1E24DF76BC54E2A56F77827397AD6E83D131D0AFC5B1E7D2C8EE8EBC ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

15:50:23.0198 0x0464  MozillaMaintenance - ok

15:50:23.0229 0x0464  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

15:50:23.0229 0x0464  mpio - ok

15:50:23.0260 0x0464  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

15:50:23.0260 0x0464  mpsdrv - ok

15:50:23.0291 0x0464  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

15:50:23.0307 0x0464  MpsSvc - ok

15:50:23.0338 0x0464  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

15:50:23.0338 0x0464  MRxDAV - ok

15:50:23.0354 0x0464  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

15:50:23.0369 0x0464  mrxsmb - ok

15:50:23.0385 0x0464  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

15:50:23.0385 0x0464  mrxsmb10 - ok

15:50:23.0401 0x0464  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

15:50:23.0401 0x0464  mrxsmb20 - ok

15:50:23.0432 0x0464  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

15:50:23.0432 0x0464  msahci - ok

15:50:23.0447 0x0464  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

15:50:23.0463 0x0464  msdsm - ok

15:50:23.0479 0x0464  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

15:50:23.0479 0x0464  MSDTC - ok

15:50:23.0494 0x0464  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

15:50:23.0494 0x0464  Msfs - ok

15:50:23.0510 0x0464  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

15:50:23.0510 0x0464  mshidkmdf - ok

15:50:23.0541 0x0464  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

15:50:23.0541 0x0464  msisadrv - ok

15:50:23.0572 0x0464  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

15:50:23.0572 0x0464  MSiSCSI - ok

15:50:23.0572 0x0464  msiserver - ok

15:50:23.0603 0x0464  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

15:50:23.0603 0x0464  MSKSSRV - ok

15:50:23.0603 0x0464  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

15:50:23.0603 0x0464  MSPCLOCK - ok

15:50:23.0619 0x0464  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

15:50:23.0619 0x0464  MSPQM - ok

15:50:23.0650 0x0464  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

15:50:23.0666 0x0464  MsRPC - ok

15:50:23.0681 0x0464  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

15:50:23.0681 0x0464  mssmbios - ok

15:50:23.0697 0x0464  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

15:50:23.0697 0x0464  MSTEE - ok

15:50:23.0713 0x0464  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

15:50:23.0713 0x0464  MTConfig - ok

15:50:23.0728 0x0464  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

15:50:23.0728 0x0464  Mup - ok

15:50:23.0759 0x0464  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

15:50:23.0759 0x0464  napagent - ok

15:50:23.0791 0x0464  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

15:50:23.0806 0x0464  NativeWifiP - ok

15:50:23.0869 0x0464  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys

15:50:23.0884 0x0464  NDIS - ok

15:50:23.0900 0x0464  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

15:50:23.0900 0x0464  NdisCap - ok

15:50:23.0931 0x0464  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

15:50:23.0931 0x0464  NdisTapi - ok

15:50:23.0947 0x0464  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

15:50:23.0947 0x0464  Ndisuio - ok

15:50:23.0962 0x0464  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

15:50:23.0978 0x0464  NdisWan - ok

15:50:23.0993 0x0464  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

15:50:23.0993 0x0464  NDProxy - ok

15:50:24.0025 0x0464  [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl         C:\Windows\system32\DRIVERS\netaapl64.sys

15:50:24.0025 0x0464  Netaapl - ok

15:50:24.0040 0x0464  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

15:50:24.0040 0x0464  NetBIOS - ok

15:50:24.0071 0x0464  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

15:50:24.0087 0x0464  NetBT - ok

15:50:24.0149 0x0464  [ 6D5405A8DB7E14034BB1FCD5AE0E7C8C, A3BF30B279054E73C773CB6996E897799664CB017E9C11C36410487F100F8BA6 ] NetgearSwitchUSB C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe

15:50:24.0165 0x0464  NetgearSwitchUSB - ok

15:50:24.0181 0x0464  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon        C:\Windows\system32\lsass.exe

15:50:24.0181 0x0464  Netlogon - ok

15:50:24.0196 0x0464  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

15:50:24.0212 0x0464  Netman - ok

15:50:24.0243 0x0464  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:50:24.0243 0x0464  NetMsmqActivator - ok

15:50:24.0259 0x0464  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetPipeActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:50:24.0259 0x0464  NetPipeActivator - ok

15:50:24.0305 0x0464  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

15:50:24.0321 0x0464  netprofm - ok

15:50:24.0383 0x0464  [ A12AF861C33A1D00CD66B8A325314A38, CF48458F92968E69C489D16E17DEB6C7309C8C67723AC27FC87D9329E5893B26 ] netr28ux        C:\Windows\system32\DRIVERS\netr28ux.sys

15:50:24.0415 0x0464  netr28ux - ok

15:50:24.0415 0x0464  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:50:24.0415 0x0464  NetTcpActivator - ok

15:50:24.0430 0x0464  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:50:24.0430 0x0464  NetTcpPortSharing - ok

15:50:24.0446 0x0464  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

15:50:24.0446 0x0464  nfrd960 - ok

15:50:24.0493 0x0464  [ F76EFDDBEB1F07F37917CA07965B2903, 65FF7239D770B7C158D7B92A9C267CA9DFCFF6F36BB0617FE1C35D442A49E335 ] NitroDriverReadSpool9 C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe

15:50:24.0508 0x0464  NitroDriverReadSpool9 - ok

15:50:24.0524 0x0464  [ 00A7C3AF3EDD4F5F2B2B1CE7D7FDD674, 88633C3D4628AF3F9438C16738640B4CD68B83CD9407C94D8EA8C2AAAA8D023F ] NitroUpdateService C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe

15:50:24.0539 0x0464  NitroUpdateService - ok

15:50:24.0571 0x0464  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll

15:50:24.0571 0x0464  NlaSvc - ok

15:50:24.0617 0x0464  [ C2AACB686395B90E856B2AF85A5F1DA2, D9D80EB6E18D021CE3BDF1B70A6A3AE3E126C9561C168150CF0D5445B45E41B3 ] nlsX86cc        C:\Windows\SysWOW64\NLSSRV32.EXE

15:50:24.0617 0x0464  nlsX86cc - ok

15:50:24.0649 0x0464  [ 7AEA4DF1CA68FD45DD4BBE1F0243CE7F, 4CCE820F455512C41E4F98109FA6F048907DD3452D5A00D5F885C77F93C9C105 ] NMSAccess       C:\Windows\SysWOW64\NMSAccessU.exe

15:50:24.0649 0x0464  NMSAccess - ok

15:50:24.0695 0x0464  [ 109338286793775088CB5A3A13C874DB, BAB7187980B7783618CBE721F71052C1A1C70DC7ADCF126ACDBE480D75393648 ] NPF             C:\Windows\syswow64\drivers\aztech_npf64.sys

15:50:24.0695 0x0464  NPF - ok

15:50:24.0711 0x0464  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

15:50:24.0711 0x0464  Npfs - ok

15:50:24.0727 0x0464  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

15:50:24.0727 0x0464  nsi - ok

15:50:24.0742 0x0464  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

15:50:24.0742 0x0464  nsiproxy - ok

15:50:24.0805 0x0464  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

15:50:24.0851 0x0464  Ntfs - ok

15:50:24.0867 0x0464  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

15:50:24.0867 0x0464  Null - ok

15:50:25.0226 0x0464  [ DD81FBC57AB9134CDDC5CE90880BFD80, 16DF4D9645238D1014FA9189FF171DCF7B7C7573F759B5AC73025518139D86B1 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

15:50:25.0397 0x0464  nvlddmkm - ok

15:50:25.0444 0x0464  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

15:50:25.0444 0x0464  nvraid - ok

15:50:25.0491 0x0464  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

15:50:25.0491 0x0464  nvstor - ok

15:50:25.0585 0x0464  [ EFA53C374227431FBB686622003145BB, 45FC7B3AF13E99832B6A50DDC5B1B446DBB782E8C68A3C927AA82E802ECA2C74 ] nvsvc           C:\Windows\system32\nvvsvc.exe

15:50:25.0600 0x0464  nvsvc - ok

15:50:25.0631 0x0464  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

15:50:25.0663 0x0464  nv_agp - ok

15:50:25.0756 0x0464  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

15:50:25.0772 0x0464  odserv - ok

15:50:25.0787 0x0464  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

15:50:25.0803 0x0464  ohci1394 - ok

15:50:25.0834 0x0464  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

15:50:25.0834 0x0464  ose - ok

15:50:25.0850 0x0464  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

15:50:25.0865 0x0464  p2pimsvc - ok

15:50:25.0912 0x0464  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

15:50:25.0928 0x0464  p2psvc - ok

15:50:25.0943 0x0464  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

15:50:25.0943 0x0464  Parport - ok

15:50:25.0959 0x0464  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

15:50:25.0959 0x0464  partmgr - ok

15:50:26.0006 0x0464  [ 256390425414F90FCBC12F525A84EB11, A4992020BF6A239AD8A77125426E2C39980C9ABC971C4DBCB24B358F946AD7F9 ] PcaSvc          C:\Windows\System32\pcasvc.dll

15:50:26.0006 0x0464  PcaSvc - ok

15:50:26.0021 0x0464  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

15:50:26.0021 0x0464  pci - ok

15:50:26.0037 0x0464  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

15:50:26.0037 0x0464  pciide - ok

15:50:26.0053 0x0464  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

15:50:26.0068 0x0464  pcmcia - ok

15:50:26.0068 0x0464  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

15:50:26.0068 0x0464  pcw - ok

15:50:26.0099 0x0464  [ 946010CDFA91469351B22E2620CEBCD8, F099C92706D42ADC289B72724F7932E5D4F62A427AEC967DDB0A1D728AE59A63 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

15:50:26.0131 0x0464  PEAUTH - ok

15:50:26.0177 0x0464  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

15:50:26.0209 0x0464  PeerDistSvc - ok

15:50:26.0224 0x0464  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

15:50:26.0224 0x0464  PerfHost - ok

15:50:26.0287 0x0464  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

15:50:26.0333 0x0464  pla - ok

15:50:26.0365 0x0464  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

15:50:26.0365 0x0464  PlugPlay - ok

15:50:26.0380 0x0464  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

15:50:26.0380 0x0464  PNRPAutoReg - ok

15:50:26.0396 0x0464  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

15:50:26.0396 0x0464  PNRPsvc - ok

15:50:26.0427 0x0464  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

15:50:26.0458 0x0464  PolicyAgent - ok

15:50:26.0474 0x0464  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

15:50:26.0474 0x0464  Power - ok

15:50:26.0505 0x0464  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

15:50:26.0505 0x0464  PptpMiniport - ok

15:50:26.0536 0x0464  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys

15:50:26.0536 0x0464  Processor - ok

15:50:26.0567 0x0464  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll

15:50:26.0583 0x0464  ProfSvc - ok

15:50:26.0583 0x0464  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe

15:50:26.0599 0x0464  ProtectedStorage - ok

15:50:26.0614 0x0464  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

15:50:26.0630 0x0464  Psched - ok

15:50:26.0677 0x0464  [ DD3FD48D69F5FBBB21D46D1514C1C2DB, 2B188E3AC4BD9B608D375DD550507717852C2AF7C0F99FFED90098999B9D4F01 ] PSI             C:\Windows\system32\DRIVERS\psi_mf_amd64.sys

15:50:26.0677 0x0464  PSI - ok

15:50:26.0723 0x0464  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

15:50:26.0770 0x0464  ql2300 - ok

15:50:26.0786 0x0464  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

15:50:26.0786 0x0464  ql40xx - ok

15:50:26.0817 0x0464  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

15:50:26.0833 0x0464  QWAVE - ok

15:50:26.0833 0x0464  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

15:50:26.0833 0x0464  QWAVEdrv - ok

15:50:26.0848 0x0464  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

15:50:26.0848 0x0464  RasAcd - ok

15:50:26.0879 0x0464  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

15:50:26.0879 0x0464  RasAgileVpn - ok

15:50:26.0879 0x0464  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

15:50:26.0895 0x0464  RasAuto - ok

15:50:26.0911 0x0464  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

15:50:26.0926 0x0464  Rasl2tp - ok

15:50:26.0958 0x0464  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

15:50:26.0958 0x0464  RasMan - ok

15:50:26.0973 0x0464  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

15:50:26.0973 0x0464  RasPppoe - ok

15:50:26.0989 0x0464  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

15:50:26.0989 0x0464  RasSstp - ok

15:50:27.0004 0x0464  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

15:50:27.0020 0x0464  rdbss - ok

15:50:27.0020 0x0464  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

15:50:27.0020 0x0464  rdpbus - ok

15:50:27.0036 0x0464  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

15:50:27.0036 0x0464  RDPCDD - ok

15:50:27.0067 0x0464  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

15:50:27.0067 0x0464  RDPDR - ok

15:50:27.0082 0x0464  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

15:50:27.0082 0x0464  RDPENCDD - ok

15:50:27.0098 0x0464  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

15:50:27.0098 0x0464  RDPREFMP - ok

15:50:27.0145 0x0464  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

15:50:27.0160 0x0464  RdpVideoMiniport - ok

15:50:27.0176 0x0464  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

15:50:27.0192 0x0464  RDPWD - ok

15:50:27.0207 0x0464  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

15:50:27.0223 0x0464  rdyboost - ok

15:50:27.0238 0x0464  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

15:50:27.0238 0x0464  RemoteAccess - ok

15:50:27.0270 0x0464  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

15:50:27.0270 0x0464  RemoteRegistry - ok

15:50:27.0301 0x0464  [ 010C9C26AF2464023D1F084975E69F80, 52404C1FA02CDBD5787C80F417E770D4C467FA70F58382FCFD17ABD4BDC076DC ] RimUsb          C:\Windows\system32\Drivers\RimUsb_AMD64.sys

15:50:27.0301 0x0464  RimUsb - ok

15:50:27.0316 0x0464  [ 344604E6913BD6E4EAEC34AF2E0943D7, 4ADFE13AFECD0F263A27F647FC6BA1AB47B2A28F9D70FCAC90F23D0A2FB8C493 ] RimVSerPort     C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys

15:50:27.0316 0x0464  RimVSerPort - ok

15:50:27.0332 0x0464  [ 388D3DD1A6457280F3BADBA9F3ACD6B1, 5C534EA15195B1301C917904627AF09FE2ABA3FEE1641B5C87E8F3191BC49058 ] ROOTMODEM       C:\Windows\system32\Drivers\RootMdm.sys

15:50:27.0332 0x0464  ROOTMODEM - ok

15:50:27.0363 0x0464  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

15:50:27.0363 0x0464  RpcEptMapper - ok

15:50:27.0379 0x0464  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

15:50:27.0379 0x0464  RpcLocator - ok

15:50:27.0410 0x0464  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

15:50:27.0426 0x0464  RpcSs - ok

15:50:27.0441 0x0464  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

15:50:27.0441 0x0464  rspndr - ok

15:50:27.0504 0x0464  [ B358C047E081AC70035017BD1D7ED818, D52455156F2913C5A88B18EC76C4C10B3589FE95F9735DD687A0307FA00FF500 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

15:50:27.0519 0x0464  RTL8167 - ok

15:50:27.0535 0x0464  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

15:50:27.0535 0x0464  s3cap - ok

15:50:27.0550 0x0464  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs           C:\Windows\system32\lsass.exe

15:50:27.0550 0x0464  SamSs - ok

15:50:27.0566 0x0464  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

15:50:27.0566 0x0464  sbp2port - ok

15:50:27.0582 0x0464  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

15:50:27.0582 0x0464  SCardSvr - ok

15:50:27.0613 0x0464  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

15:50:27.0613 0x0464  scfilter - ok

15:50:27.0660 0x0464  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll

15:50:27.0675 0x0464  Schedule - ok

15:50:27.0706 0x0464  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

15:50:27.0706 0x0464  SCPolicySvc - ok

15:50:27.0722 0x0464  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

15:50:27.0722 0x0464  SDRSVC - ok

15:50:27.0738 0x0464  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys

15:50:27.0738 0x0464  secdrv - ok

15:50:27.0738 0x0464  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

15:50:27.0738 0x0464  seclogon - ok

15:50:27.0800 0x0464  [ 398A81D590424441B2F5C5C08073CADB, 1E064DFCC49EB0D8A4150276BF796B9DFA030C451570A170EC940F8CBAAD80F3 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe

15:50:27.0831 0x0464  Secunia PSI Agent - ok

15:50:27.0862 0x0464  [ 8C2D3A80FC90A860F0F24DEB67471481, CE4D17B63149C44B4CD5CB7776FD4705DC675F6D2D077D53BE15578294EBC9D4 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe

15:50:27.0878 0x0464  Secunia Update Agent - ok

15:50:27.0894 0x0464  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll

15:50:27.0909 0x0464  SENS - ok

15:50:27.0909 0x0464  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

15:50:27.0909 0x0464  SensrSvc - ok

15:50:27.0925 0x0464  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

15:50:27.0925 0x0464  Serenum - ok

15:50:27.0940 0x0464  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys

15:50:27.0940 0x0464  Serial - ok

15:50:27.0940 0x0464  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

15:50:27.0956 0x0464  sermouse - ok

15:50:27.0972 0x0464  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

15:50:27.0972 0x0464  SessionEnv - ok

15:50:28.0003 0x0464  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

15:50:28.0003 0x0464  sffdisk - ok

15:50:28.0018 0x0464  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

15:50:28.0018 0x0464  sffp_mmc - ok

15:50:28.0034 0x0464  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

15:50:28.0034 0x0464  sffp_sd - ok

15:50:28.0034 0x0464  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

15:50:28.0050 0x0464  sfloppy - ok

15:50:28.0081 0x0464  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

15:50:28.0096 0x0464  SharedAccess - ok

15:50:28.0128 0x0464  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

15:50:28.0128 0x0464  ShellHWDetection - ok

15:50:28.0143 0x0464  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

15:50:28.0143 0x0464  SiSRaid2 - ok

15:50:28.0159 0x0464  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

15:50:28.0159 0x0464  SiSRaid4 - ok

15:50:28.0174 0x0464  [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

15:50:28.0174 0x0464  SkypeUpdate - ok

15:50:28.0206 0x0464  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

15:50:28.0206 0x0464  Smb - ok

15:50:28.0252 0x0464  [ E3E56CAF0472163871B922FC7CBC9654, 1D7208519DB904E1B27F8D5214CA219BD52AB8C1AB64F22F8959DC4E8955AD37 ] snapman         C:\Windows\system32\DRIVERS\snapman.sys

15:50:28.0252 0x0464  snapman - ok

15:50:28.0268 0x0464  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

15:50:28.0268 0x0464  SNMPTRAP - ok

15:50:28.0284 0x0464  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

15:50:28.0284 0x0464  spldr - ok

15:50:28.0330 0x0464  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe

15:50:28.0330 0x0464  Spooler - ok

15:50:28.0440 0x0464  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

15:50:28.0502 0x0464  sppsvc - ok

15:50:28.0518 0x0464  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

15:50:28.0518 0x0464  sppuinotify - ok

15:50:28.0580 0x0464  [ EAD5300C93946B0250A309E2BF2BE4CF, 6B9131D94ED31F838B1820EE67F068C4741B69D5C655587C89C9477986BD270F ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

15:50:28.0580 0x0464  SQLWriter - ok

15:50:28.0627 0x0464  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

15:50:28.0627 0x0464  srv - ok

15:50:28.0642 0x0464  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

15:50:28.0658 0x0464  srv2 - ok

15:50:28.0674 0x0464  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

15:50:28.0674 0x0464  srvnet - ok

15:50:28.0689 0x0464  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

15:50:28.0689 0x0464  SSDPSRV - ok

15:50:28.0705 0x0464  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

15:50:28.0705 0x0464  SstpSvc - ok

15:50:28.0720 0x0464  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

15:50:28.0720 0x0464  stexstor - ok

15:50:28.0752 0x0464  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

15:50:28.0767 0x0464  stisvc - ok

15:50:28.0798 0x0464  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

15:50:28.0798 0x0464  storflt - ok

15:50:28.0814 0x0464  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys

15:50:28.0814 0x0464  storvsc - ok

15:50:28.0830 0x0464  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys

15:50:28.0830 0x0464  swenum - ok

15:50:28.0845 0x0464  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

15:50:28.0876 0x0464  swprv - ok

15:50:29.0110 0x0464  [ 4BCC8ACE771AF417B9D4D640372033BC, 4ACDFF97EC67849922B7953C1D3DF4CE935F1CB8ABDA4BE22F0B2BCA39E52924 ] syncagentsrv    C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

15:50:29.0220 0x0464  syncagentsrv - ok

15:50:29.0251 0x0464  Synth3dVsc - ok

15:50:29.0313 0x0464  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll

15:50:29.0344 0x0464  SysMain - ok

15:50:29.0376 0x0464  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

15:50:29.0376 0x0464  TabletInputService - ok

15:50:29.0407 0x0464  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

15:50:29.0407 0x0464  TapiSrv - ok

15:50:29.0422 0x0464  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

15:50:29.0422 0x0464  TBS - ok

15:50:29.0485 0x0464  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

15:50:29.0547 0x0464  Tcpip - ok

15:50:29.0610 0x0464  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

15:50:29.0641 0x0464  TCPIP6 - ok

15:50:29.0656 0x0464  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

15:50:29.0672 0x0464  tcpipreg - ok

15:50:29.0688 0x0464  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

15:50:29.0703 0x0464  TDPIPE - ok

15:50:29.0766 0x0464  [ AC28A6FCA485821499FF018695CEDE16, 8BA6086EB1831FDEDB9E195EA7D5F2FE2B0944E4E0B0CDB41CD06971F7DAC805 ] tdrpman         C:\Windows\system32\DRIVERS\tdrpman.sys

15:50:29.0797 0x0464  tdrpman - ok

15:50:29.0812 0x0464  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

15:50:29.0828 0x0464  TDTCP - ok

15:50:29.0859 0x0464  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

15:50:29.0859 0x0464  tdx - ok

15:50:30.0031 0x0464  [ 4ACFC5853A3F0C6C2F54E537C23EE90F, 47D81F471A250696A1A0D19294FC553EB88D813612A8351C89F65D7BF99C8532 ] TeamViewer9     C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

15:50:30.0109 0x0464  TeamViewer9 - ok

15:50:30.0140 0x0464  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys

15:50:30.0140 0x0464  TermDD - ok

15:50:30.0187 0x0464  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll

15:50:30.0187 0x0464  TermService - ok

15:50:30.0249 0x0464  [ AB10AFD7809ABA275A8E20F215C5C0BD, 566718AE01B4B46AD3CAE50B8F54D131FF8DFB13D28F592639D0572C74C8B168 ] TGCM_ImportWiFiSvc C:\Program Files (x86)\O2\Connection Manager\ImpWiFiSvc.exe

15:50:30.0249 0x0464  TGCM_ImportWiFiSvc - ok

15:50:30.0265 0x0464  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

15:50:30.0280 0x0464  Themes - ok

15:50:30.0296 0x0464  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

15:50:30.0296 0x0464  THREADORDER - ok

15:50:30.0343 0x0464  [ DE604462206F7D8C203F767F425FCA8D, 149FBF6367C45415B939A9B1A7A10DA7A5E19F28CE533BCBE2B20DA4B78F8645 ] tib             C:\Windows\system32\DRIVERS\tib.sys

15:50:30.0374 0x0464  tib - ok

15:50:30.0405 0x0464  [ 8C750FE6DE38AF13506B99EC2F519F79, 232D18416E9DE3A676C625280CF172ED180B5AF98C69E5B24CC780D480549E35 ] tib_mounter     C:\Windows\system32\DRIVERS\tib_mounter.sys

15:50:30.0405 0x0464  tib_mounter - ok

15:50:30.0436 0x0464  [ DBCC20C02E8A3E43B03C304A4E40A84F, BF5F3ACCB0342304A6870E94D2576644B08DBF307C853C7DBA4B82B0C7309DA4 ] TPM             C:\Windows\system32\drivers\tpm.sys

15:50:30.0436 0x0464  TPM - ok

15:50:30.0452 0x0464  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

15:50:30.0452 0x0464  TrkWks - ok

15:50:30.0483 0x0464  [ FD44FA80DA03EA144153A76DEBBB61B4, 0C46717F489A415A583470DAE8CF58E47BC307B9CB0F9DB6C4EDF33B7525475C ] TrueSight       C:\Windows\System32\drivers\TrueSight.sys

15:50:30.0483 0x0464  TrueSight - ok

15:50:30.0514 0x0464  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

15:50:30.0514 0x0464  TrustedInstaller - ok

15:50:30.0546 0x0464  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

15:50:30.0546 0x0464  tssecsrv - ok

15:50:30.0561 0x0464  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

15:50:30.0561 0x0464  TsUsbFlt - ok

15:50:30.0561 0x0464  tsusbhub - ok

15:50:30.0608 0x0464  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

15:50:30.0608 0x0464  tunnel - ok

15:50:30.0624 0x0464  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

15:50:30.0624 0x0464  uagp35 - ok

15:50:30.0655 0x0464  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

15:50:30.0670 0x0464  udfs - ok

15:50:30.0702 0x0464  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

15:50:30.0733 0x0464  UI0Detect - ok

15:50:30.0764 0x0464  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

15:50:30.0780 0x0464  uliagpkx - ok

15:50:30.0858 0x0464  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\drivers\umbus.sys

15:50:30.0858 0x0464  umbus - ok

15:50:30.0904 0x0464  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

15:50:30.0904 0x0464  UmPass - ok

15:50:30.0920 0x0464  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll

15:50:30.0920 0x0464  UmRdpService - ok

15:50:30.0951 0x0464  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

15:50:30.0951 0x0464  upnphost - ok

15:50:30.0982 0x0464  [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys

15:50:30.0982 0x0464  USBAAPL64 - ok

15:50:30.0998 0x0464  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

15:50:30.0998 0x0464  usbccgp - ok

15:50:31.0029 0x0464  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

15:50:31.0029 0x0464  usbcir - ok

15:50:31.0060 0x0464  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

15:50:31.0060 0x0464  usbehci - ok

15:50:31.0076 0x0464  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

15:50:31.0092 0x0464  usbhub - ok

15:50:31.0107 0x0464  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys

15:50:31.0107 0x0464  usbohci - ok

15:50:31.0123 0x0464  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

15:50:31.0123 0x0464  usbprint - ok

15:50:31.0154 0x0464  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\drivers\usbscan.sys

15:50:31.0154 0x0464  usbscan - ok

15:50:31.0170 0x0464  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

15:50:31.0170 0x0464  USBSTOR - ok

15:50:31.0170 0x0464  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

15:50:31.0185 0x0464  usbuhci - ok

15:50:31.0201 0x0464  [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys

15:50:31.0201 0x0464  usb_rndisx - ok

15:50:31.0216 0x0464  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

15:50:31.0216 0x0464  UxSms - ok

15:50:31.0216 0x0464  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc        C:\Windows\system32\lsass.exe

15:50:31.0232 0x0464  VaultSvc - ok

15:50:31.0263 0x0464  [ 9C24F61B36E7305AC42DC41881A2C97C, 4800D9517D2AE7772784BC2E8A85F4516A1483B9A2F7C3FE96DFC65CD3089E06 ] VBoxNetAdp      C:\Windows\system32\DRIVERS\VBoxNetAdp.sys

15:50:31.0263 0x0464  VBoxNetAdp - ok

15:50:31.0279 0x0464  VBoxNetFlt - ok

15:50:31.0294 0x0464  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

15:50:31.0294 0x0464  vdrvroot - ok

15:50:31.0326 0x0464  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

15:50:31.0357 0x0464  vds - ok

15:50:31.0372 0x0464  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

15:50:31.0372 0x0464  vga - ok

15:50:31.0388 0x0464  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

15:50:31.0388 0x0464  VgaSave - ok

15:50:31.0388 0x0464  VGPU - ok

15:50:31.0419 0x0464  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

15:50:31.0419 0x0464  vhdmp - ok

15:50:31.0435 0x0464  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

15:50:31.0450 0x0464  viaide - ok

15:50:31.0466 0x0464  [ 35E8A18D1C558D5C2FF2FFED2FD396F6, 5516AC03964DD33CF239AB3FB1D41BAB7454DB35FB38C45907614C3DB8F23391 ] vididr          C:\Windows\system32\DRIVERS\vididr.sys

15:50:31.0466 0x0464  vididr - ok

15:50:31.0482 0x0464  [ 0DCD5C8F2E0B3650C4A29F6569C074FD, 8FB24D79ADE1541C5DD6241A3395EF2E6575A8376111294CD5C87ECA798EDCFD ] vidsflt         C:\Windows\system32\DRIVERS\vidsflt.sys

15:50:31.0497 0x0464  vidsflt - ok

15:50:31.0528 0x0464  [ 29BDAD03D52587A1312B52DC1FABA1CD, C3EFD15C1D1ECF4ADB15EBDC77C39AE5C8DF6597F3194ED2BE8FB697B0BBB7AE ] VMAuthdService  C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

15:50:31.0544 0x0464  VMAuthdService - ok

15:50:31.0560 0x0464  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys

15:50:31.0560 0x0464  vmbus - ok

15:50:31.0575 0x0464  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

15:50:31.0575 0x0464  VMBusHID - ok

15:50:31.0591 0x0464  [ 6203C901DEFF10631AAD919B3BD1489B, 2CF99A56EEBB444A30736982647FBECC037D03F4EC3A7B06C147FF62876F438B ] vmci            C:\Windows\system32\DRIVERS\vmci.sys

15:50:31.0591 0x0464  vmci - ok

15:50:31.0622 0x0464  [ BCF80435A7DB12FC29A39DE35313434C, F8419622BE1787F9EEDC7513BEBD0C446A8FDF95A18F2F2AD8DF759B69720690 ] vmkbd           C:\Windows\system32\drivers\VMkbd.sys

15:50:31.0622 0x0464  vmkbd - ok

15:50:31.0622 0x0464  [ AEF53B47E960F227BF7638A6A1A9D5C6, 21280177B404F27A5C9725AE50D6E8595CFFED59837741C9FEEF6013CE7C8CF6 ] VMnetAdapter    C:\Windows\system32\DRIVERS\vmnetadapter.sys

15:50:31.0622 0x0464  VMnetAdapter - ok

15:50:31.0638 0x0464  [ C234A1DC2F06A15B9210787F54253810, B1A25D9F84752294BEE643EB9E17CC0538E5C26B7C741E32F7AEFE6514B1F5C6 ] VMnetBridge     C:\Windows\system32\DRIVERS\vmnetbridge.sys

15:50:31.0638 0x0464  VMnetBridge - ok

15:50:31.0638 0x0464  VMnetDHCP - ok

15:50:31.0653 0x0464  [ 60FD2002D27AA986AABDAD88E6389A16, 596DAC8BF9449DDB630635ED1E2084DDD96F28DC7CD63EDC6B00B4858D68B591 ] VMnetuserif     C:\Windows\system32\drivers\vmnetuserif.sys

15:50:31.0653 0x0464  VMnetuserif - ok

15:50:31.0669 0x0464  [ 415B167695C4B5960A13098622EF3D80, E68AE845A6967E68FB22EB0F4D95631D041DA906801202F7662B22EAD34B2371 ] vmusb           C:\Windows\system32\Drivers\vmusb.sys

15:50:31.0684 0x0464  vmusb - ok

15:50:31.0716 0x0464  [ 37BED1FE8A5024AE47617DF335508C9B, C244407DCC95A9D76C2C724DC22036A3FAB4AC0E0C62556FD1603AC7F644D4EE ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

15:50:31.0731 0x0464  VMUSBArbService - ok

15:50:31.0747 0x0464  VMware NAT Service - ok

15:50:31.0747 0x0464  [ B5ADAAD05669023A7F4986FC804E9592, 0CADF2DFCA3BFBEC462A26BB82A08007FF4C89437F432454453A9DEEB1D0E329 ] vmx86           C:\Windows\system32\drivers\vmx86.sys

15:50:31.0762 0x0464  vmx86 - ok

15:50:31.0762 0x0464  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

15:50:31.0778 0x0464  volmgr - ok

15:50:31.0809 0x0464  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

15:50:31.0825 0x0464  volmgrx - ok

15:50:31.0840 0x0464  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys

15:50:31.0840 0x0464  volsnap - ok

15:50:31.0903 0x0464  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

15:50:31.0903 0x0464  vsmraid - ok

15:50:31.0918 0x0464  [ EF1E48D431223F670CFFD6169B1A136F, 7DEF32CA45019DD79438B93626C4F31BB903093D605F18F71E055319BF4BB41E ] vsock           C:\Windows\system32\drivers\vsock.sys

15:50:31.0918 0x0464  vsock - ok

15:50:31.0981 0x0464  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

15:50:32.0028 0x0464  VSS - ok

15:50:32.0043 0x0464  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

15:50:32.0043 0x0464  vwifibus - ok

15:50:32.0059 0x0464  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

15:50:32.0059 0x0464  vwififlt - ok

15:50:32.0090 0x0464  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

15:50:32.0090 0x0464  vwifimp - ok

15:50:32.0121 0x0464  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

15:50:32.0137 0x0464  W32Time - ok

15:50:32.0152 0x0464  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

15:50:32.0152 0x0464  WacomPen - ok

15:50:32.0168 0x0464  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

15:50:32.0168 0x0464  WANARP - ok

15:50:32.0184 0x0464  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

15:50:32.0184 0x0464  Wanarpv6 - ok

15:50:32.0262 0x0464  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

15:50:32.0293 0x0464  WatAdminSvc - ok

15:50:32.0371 0x0464  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

15:50:32.0402 0x0464  wbengine - ok

15:50:32.0433 0x0464  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

15:50:32.0433 0x0464  WbioSrvc - ok

15:50:32.0449 0x0464  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

15:50:32.0464 0x0464  wcncsvc - ok

15:50:32.0464 0x0464  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

15:50:32.0480 0x0464  WcsPlugInService - ok

15:50:32.0496 0x0464  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys

15:50:32.0496 0x0464  Wd - ok

15:50:32.0528 0x0464  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

15:50:32.0559 0x0464  Wdf01000 - ok

15:50:32.0575 0x0464  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll

15:50:32.0590 0x0464  WdiServiceHost - ok

15:50:32.0590 0x0464  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll

15:50:32.0606 0x0464  WdiSystemHost - ok

15:50:32.0668 0x0464  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll

15:50:32.0684 0x0464  WebClient - ok

15:50:32.0699 0x0464  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

15:50:32.0699 0x0464  Wecsvc - ok

15:50:32.0715 0x0464  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

15:50:32.0715 0x0464  wercplsupport - ok

15:50:32.0731 0x0464  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

15:50:32.0746 0x0464  WerSvc - ok

15:50:32.0777 0x0464  [ 559284D49BA0A03F70DB82239CF2B23B, F5434F4735A8D2790208EBA1A4C83584A473705ACDC7AE7F88C77BDD67FAFF28 ] wfcs            C:\Program Files\Windows Firewall Control\wfcs.exe

15:50:32.0777 0x0464  wfcs - ok

15:50:32.0809 0x0464  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

15:50:32.0809 0x0464  WfpLwf - ok

15:50:32.0824 0x0464  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

15:50:32.0824 0x0464  WIMMount - ok

15:50:32.0840 0x0464  WinDefend - ok

15:50:32.0855 0x0464  WinHttpAutoProxySvc - ok

15:50:32.0902 0x0464  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

15:50:32.0918 0x0464  Winmgmt - ok

15:50:32.0996 0x0464  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll

15:50:33.0058 0x0464  WinRM - ok

15:50:33.0089 0x0464  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

15:50:33.0105 0x0464  WinUsb - ok

15:50:33.0136 0x0464  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

15:50:33.0152 0x0464  Wlansvc - ok

15:50:33.0167 0x0464  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

15:50:33.0183 0x0464  WmiAcpi - ok

15:50:33.0199 0x0464  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

15:50:33.0199 0x0464  wmiApSrv - ok

15:50:33.0214 0x0464  WMPNetworkSvc - ok

15:50:33.0230 0x0464  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

15:50:33.0245 0x0464  WPCSvc - ok

15:50:33.0261 0x0464  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

15:50:33.0261 0x0464  WPDBusEnum - ok

15:50:33.0308 0x0464  [ 38F209772630760E9C2358D6957C0576, AB6AD5FF97A987FFB4091028224A7F2404664FC5F9FD842922DD33CE09AE853A ] WRkrn           C:\Windows\system32\drivers\WRkrn.sys

15:50:33.0308 0x0464  WRkrn - ok

15:50:33.0339 0x0464  [ B1525F4FF77AF44BF1B0E851C28A5F7D, E0D201241B104E5139832B0092C1ACFE26361B30B44DA13E81FB95716FA69E81 ] WRSVC           C:\Program Files\Webroot\WRSA.exe

15:50:33.0355 0x0464  WRSVC - ok

15:50:33.0370 0x0464  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

15:50:33.0370 0x0464  ws2ifsl - ok

15:50:33.0401 0x0464  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll

15:50:33.0401 0x0464  wscsvc - ok

15:50:33.0401 0x0464  WSearch - ok

15:50:33.0495 0x0464  [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv        C:\Windows\system32\wuaueng.dll

15:50:33.0526 0x0464  wuauserv - ok

15:50:33.0557 0x0464  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

15:50:33.0557 0x0464  WudfPf - ok

15:50:33.0589 0x0464  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

15:50:33.0589 0x0464  WUDFRd - ok

15:50:33.0604 0x0464  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

15:50:33.0604 0x0464  wudfsvc - ok

15:50:33.0620 0x0464  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll

15:50:33.0635 0x0464  WwanSvc - ok

15:50:33.0682 0x0464  ================ Scan global ===============================

15:50:33.0682 0x0464  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll

15:50:33.0713 0x0464  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

15:50:33.0729 0x0464  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

15:50:33.0745 0x0464  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

15:50:33.0791 0x0464  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe

15:50:33.0791 0x0464  [ Global ] - ok

15:50:33.0791 0x0464  ================ Scan MBR ==================================

15:50:33.0791 0x0464  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

15:50:33.0979 0x0464  \Device\Harddisk0\DR0 - ok

15:50:33.0979 0x0464  [ E64B2A49894D1FD5A0201870E3E41A51 ] \Device\Harddisk1\DR1

15:50:34.0010 0x0464  \Device\Harddisk1\DR1 - ok

15:50:34.0010 0x0464  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR3

15:50:34.0025 0x0464  \Device\Harddisk2\DR3 - ok

15:50:34.0025 0x0464  ================ Scan VBR ==================================

15:50:34.0025 0x0464  [ F97A45EA3C7864EA49B12073DCF6DA01 ] \Device\Harddisk0\DR0\Partition1

15:50:34.0025 0x0464  \Device\Harddisk0\DR0\Partition1 - ok

15:50:34.0041 0x0464  [ 2E2445606964527D83EBDAB901FD2AD3 ] \Device\Harddisk0\DR0\Partition2

15:50:34.0041 0x0464  \Device\Harddisk0\DR0\Partition2 - ok

15:50:34.0041 0x0464  [ 7301DD4F2B4EB4E2334F7ADD5BC9F278 ] \Device\Harddisk1\DR1\Partition1

15:50:34.0088 0x0464  \Device\Harddisk1\DR1\Partition1 - ok

15:50:34.0103 0x0464  [ 306203EA0B8933E668DEA8A3AE64ACA4 ] \Device\Harddisk2\DR3\Partition1

15:50:34.0525 0x0464  \Device\Harddisk2\DR3\Partition1 - ok

15:50:34.0525 0x0464  ================ Scan generic autorun ======================

15:50:34.0556 0x0464  [ 322B1B1C82D92BB017D9588357A5AA0B, 5B797ABCEBDBE4C95E6A54D8626DA07F8C285D9E43C0925B6CA2C4B54A424D44 ] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

15:50:34.0571 0x0464  Acronis Scheduler2 Service - ok

15:50:34.0852 0x0464  [ D7952C092447131478C1B1E808DFBBC1, E1547E2587BEC5E59C8B27D897FA852E580510EEA0289497986A3079B1D4508B ] C:\Program Files\Investintech.com Inc\Able2Extract 9.0\Able2Extract.PrnDisp.exe

15:50:34.0977 0x0464  Able2Extract 9.0 Print Dispatcher - ok

15:50:35.0039 0x0464  [ 15D2DB9BFA8E833ED31FAB2BB088FDDA, 6198C0A5DA01DA146A9A054C3C882A1DBF9BA84466EBFDDA1C1062EF36F9B34B ] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe

15:50:35.0039 0x0464  AVP - ok

15:50:35.0102 0x0464  [ 47EA5F76FAB723C61AB4A0D79BAD512C, A7A38EB0A7068B160E6949945EF639F999A06AE35746F6E79C7350745798E5C9 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

15:50:35.0117 0x0464  Adobe ARM - ok

15:50:35.0164 0x0464  [ 09E60B4FE341A94A300830C008907099, 5F07868953FAA8FFA9E6477F6BAC52DEEDF3EA4A3F8AF5B4E15878D8240223AB ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

15:50:35.0164 0x0464  APSDaemon - ok

15:50:35.0351 0x0464  [ 73FBABDB72DB4E3F372D1B813135C9C2, 0B9EC3F83A980D544546765E9CD867B64B7CF5AB7F785C69416449CDCD617138 ] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

15:50:35.0445 0x0464  TrueImageMonitor.exe - ok

15:50:35.0492 0x0464  [ E2BF5267333394516C74B1E9D88D989C, 143D40EEC41DE04AB604E5243C84BFFB178E063F8B6208C922C35A75F28CC5A3 ] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

15:50:35.0507 0x0464  AcronisTibMounterMonitor - ok

15:50:35.0539 0x0464  [ B1525F4FF77AF44BF1B0E851C28A5F7D, E0D201241B104E5139832B0092C1ACFE26361B30B44DA13E81FB95716FA69E81 ] C:\Program Files\Webroot\WRSA.exe

15:50:35.0554 0x0464  WRSVC - ok

15:50:35.0601 0x0464  [ 07DACF8EE0581D188931E02CB7D50E1A, 4789520F8F5596CCC830D2C6B7C9592F156B298F9CA76EC9E0254D3499455367 ] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

15:50:35.0601 0x0464  RIMBBLaunchAgent.exe - ok

15:50:35.0648 0x0464  [ 3F744D5BCEF935B32B43BF7F83098032, 8152B47CB1B5966329C2C66DE0F137FBF7E5CE8D3AF56AD949BE737D5FE0AD17 ] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe

15:50:35.0663 0x0464  KeyScrambler - ok

15:50:35.0788 0x0464  [ 6AFC92C6F756CEEF40E6C7E00CC9FDB0, F7603C2C4909420E19D1DF4F59CB7E713424A682955E71522F2C72A4874F7403 ] C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardGUI.exe

15:50:35.0819 0x0464  AppGuardGUI - ok

15:50:35.0866 0x0464  [ 0EF0822810009D58118CCDFD098FA9F4, 9FAA263057898BCDBCB0A064C463F48D149474AA339A3C4C47626CC118750D2D ] C:\Program Files (x86)\iTunes\iTunesHelper.exe

15:50:35.0866 0x0464  iTunesHelper - ok

15:50:36.0007 0x0464  [ 271B0D188430670509CB9943D5229205, 74CB5A9D8B5988AE08C0F65C601FC54F8745BAB6825B6FEEFBA8F068D656D8D7 ] C:\Program Files (x86)\QuickTime\QTTask.exe

15:50:36.0007 0x0464  QuickTime Task - ok

15:50:36.0038 0x0464  [ 6D313E4121365B2ABEED5A93F9B197E5, 94CDAD27F1A362A23F6CE0D65881EB8753B7A3744DE127022DB77B4459EE1FD6 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

15:50:36.0053 0x0464  SunJavaUpdateSched - ok

15:50:36.0085 0x0464  [ 2775EDE4F2EEB56D94AFC7D6D0E45A5D, 0AF265E9BD3DEFC4F66215CB7431D073CBD88DBAC8D96EF7F81294658F4D971A ] C:\Program Files (x86)\Alcatel\Alcatel USB Modem\AutoLauncher.exe

15:50:36.0085 0x0464  AlcatelAutoLauncher_O2 - ok

15:50:36.0303 0x0464  [ 8116E700D5B62746B2A715722415EC52, 1CF5AE32DE2A73DBBFA4C53486E762BDB73A7E18A83691B6C2D73A0768CDD314 ] C:\Program Files (x86)\NETGEAR\A6210\A6210.EXE

15:50:36.0381 0x0464  A6210 - ok

15:50:36.0459 0x0464  [ 5FCE678826ACCC54C2481FC3494AC515, 09FF16D2953F09BF58D2B3738F1B6008C113E17716596408FFF5E4E5C21442DC ] C:\Program Files (x86)\DrayTek Vigor N61\WLANmon.exe

15:50:36.0475 0x0464  DrayTek Vigor N61 802.11n Wireless USB Adapter - ok

15:50:36.0521 0x0464  [ 67890918105702D77CE72073E16F1153, 795F7DDB045EBEEF6591C97FFFB872E0527D8EE31394F24CA35AF9C668995076 ] C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe

15:50:36.0521 0x0464  ANIWZCS2Service - ok

15:50:36.0599 0x0464  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

15:50:36.0631 0x0464  Sidebar - ok

15:50:36.0646 0x0464  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

15:50:36.0646 0x0464  mctadmin - ok

15:50:36.0693 0x0464  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

15:50:36.0709 0x0464  Sidebar - ok

15:50:36.0709 0x0464  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

15:50:36.0724 0x0464  mctadmin - ok

15:50:36.0771 0x0464  [ 105C276BB7B43501225C419B062096D0, F5D35230FC5E116FB04147F216313D2E2542D96E975B19F5FD9F7641CF11271F ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

15:50:36.0771 0x0464  ApplePhotoStreams - ok

15:50:36.0818 0x0464  [ F1DC2458DFC929331F2FE071EB17CFE8, 2A046F41DC0C2A72B425812D5EEBC5FF8B0970DB492646A979FA242ECB63CCD1 ] C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe

15:50:36.0833 0x0464  MyDriveConnect.exe - ok

15:50:36.0849 0x0464  [ B22CB67919EBAD88B0E8BB9CDA446010, 2F744FEAC48EDE7D6B6D2727F7DDFA80B26D9E3B0009741B00992B19AD85E128 ] C:\Windows\System32\StikyNot.exe

15:50:36.0865 0x0464  RESTART_STICKY_NOTES - ok

15:50:36.0880 0x0464  SandboxieControl - ok

15:50:36.0911 0x0464  [ A064A1D9CBD7F6959AAEAEAFF96DB2E9, F3DC0C0240FCE4FE7478093C415548297E49C349FE600D7F6CC1C655953C1D48 ] C:\Windows\system32\osk.exe

15:50:36.0927 0x0464  osk.exe - ok

15:50:36.0974 0x0464  AV detected via SS2: Kaspersky Anti-Virus, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\wmiav.exe ( 13.0.1.4190 ), 0x41000 ( enabled : updated )

15:50:36.0974 0x0464  Win FW state via NFP2: enabled

15:50:36.0974 0x0464  ============================================================

15:50:36.0974 0x0464  Scan finished

15:50:36.0974 0x0464  ============================================================

15:50:37.0005 0x1790  Detected object count: 0

15:50:37.0005 0x1790  Actual detected object count: 0

 

****************

Combo Fix

********************

ComboFix 15-04-01.01 - SUNDARS PC 04/04/2015   0:53.2.4 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.44.1033.18.12287.9952 [GMT 1:00]

Running from: d:\downloadsw\Utility\Utility Tools\ComboFix.exe

AV: Kaspersky Anti-Virus *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}

SP: Kaspersky Anti-Virus *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\ntuser.pol

c:\windows\SysWow64\AdobePDF.dll

c:\windows\SysWow64\ccrpTmr6.dll

c:\windows\SysWow64\Packet.dll

c:\windows\SysWow64\wpcap.dll

.

.

(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_NPF

-------\Service_NPF

.

.

(((((((((((((((((((((((((   Files Created from 2015-03-04 to 2015-04-04  )))))))))))))))))))))))))))))))

.

.

2015-04-04 10:08 . 2015-04-04 10:08 -------- d-----w- d:\users\SUNDARS PC\AppData\Local\temp

2015-04-04 10:08 . 2015-04-04 10:08 -------- d-----w- c:\users\Administrator\AppData\Local\temp

2015-04-04 10:08 . 2015-04-04 10:08 -------- d-----w- d:\users\ITunes Sundar\AppData\Local\temp

2015-04-03 14:48 . 2015-04-03 14:48 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys

2015-04-03 14:48 . 2015-04-03 14:59 -------- d-----w- c:\programdata\RogueKiller

2015-04-03 14:10 . 2014-07-09 08:18 74344 ----a-w- c:\windows\system32\RtNicProp64.dll

2015-04-03 14:10 . 2014-07-09 08:18 107552 ----a-w- c:\windows\system32\RTNUninst64.dll

2015-04-03 14:10 . 2014-07-09 08:18 769168 ----a-w- c:\windows\system32\drivers\Rt64win7.sys

2015-04-03 14:10 . 2015-04-03 14:10 -------- d-----w- c:\program files (x86)\Realtek

2015-04-02 15:40 . 2015-04-02 15:40 -------- d-----w- d:\users\SUNDARS PC\AppData\Roaming\InstallShield

2015-04-02 13:25 . 2015-04-02 13:25 -------- d-----w- c:\users\Administrator\AppData\Local\ElevatedDiagnostics

2015-04-02 11:33 . 2015-04-02 13:56 129752 ----a-w- c:\windows\system32\drivers\428A3AF7.sys

2015-03-31 19:22 . 2015-03-31 19:22 -------- d-----w- d:\users\SUNDARS PC\AppData\Roaming\2BrightSparks

2015-03-31 19:22 . 2011-05-31 18:03 20480 ----a-w- c:\windows\SysWow64\SyncBackPro.dll

2015-03-31 19:22 . 2009-01-12 07:15 71096 ----a-w- c:\windows\SysWow64\NMSAccessU.exe

2015-03-31 19:22 . 2015-03-31 19:22 -------- d-----w- d:\users\SUNDARS PC\AppData\Local\2BrightSparks

2015-03-31 19:22 . 2015-03-31 19:22 -------- d-----w- c:\program files (x86)\2BrightSparks

2015-03-30 22:43 . 2009-05-04 13:55 40208 ----a-w- c:\windows\SysWow64\drivers\aztech_npf64.sys

2015-03-30 22:43 . 2015-03-30 22:43 -------- d-----w- c:\program files (x86)\HomeplugAV

2015-03-30 22:43 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll

2015-03-30 22:43 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll

2015-03-30 22:43 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll

2015-03-30 22:43 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll

2015-03-30 22:43 . 2002-07-25 16:07 614532 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

2015-03-30 12:26 . 2015-03-30 23:03 129752 ----a-w- c:\windows\system32\drivers\0264792B.sys

2015-03-26 12:26 . 2015-03-26 12:26 0 ----a-w- d:\users\SUNDARS PC\AppData\Local\BITF9B1.tmp

2015-03-26 07:06 . 2015-03-26 07:06 129752 ----a-w- c:\windows\system32\drivers\67994B70.sys

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-04-04 10:36 . 2014-04-19 23:30 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys

2015-04-02 16:34 . 2012-08-13 15:49 177864 ----a-w- c:\windows\system32\drivers\kneps.sys

2015-04-02 10:37 . 2013-12-10 17:41 151728 ----a-w- c:\windows\SysWow64\WRusr.dll

2015-04-02 10:37 . 2013-12-10 17:41 104360 ----a-w- c:\windows\system32\WRusr.dll

2015-04-02 10:36 . 2013-12-10 17:41 114720 ----a-w- c:\windows\system32\drivers\WRkrn.sys

2015-03-30 23:21 . 2014-12-16 20:29 467224 ----a-w- c:\windows\system32\drivers\b57nd60a.sys

2015-02-02 09:52 . 2013-11-27 18:57 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2015-02-02 09:52 . 2013-11-27 18:57 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2015-02-02 09:52 . 2014-11-12 17:52 4087472 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe

2015-01-29 10:16 . 2015-01-28 09:27 129752 ----a-w- c:\windows\system32\drivers\573B5188.sys

.

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816]

"MyDriveConnect.exe"="c:\program files (x86)\MyDrive Connect\MyDriveConnect.exe" [2013-11-29 473496]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe" [2013-10-10 356128]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712]

"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2013-03-28 6366264]

"AcronisTibMounterMonitor"="c:\program files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe" [2013-01-10 1103440]

"WRSVC"="c:\program files\Webroot\WRSA.exe" [2013-12-10 757864]

"RIMBBLaunchAgent.exe"="c:\program files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2013-09-09 443408]

"KeyScrambler"="c:\program files (x86)\KeyScrambler\keyscrambler.exe" [2013-11-14 508144]

"AppGuardGUI"="c:\program files (x86)\Blue Ridge Networks\AppGuard\AppGuardGUI.exe" [2014-08-11 2988256]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-10-07 507776]

"AlcatelAutoLauncher_O2"="c:\program files (x86)\Alcatel\Alcatel USB Modem\AutoLauncher.exe" [2012-10-12 133120]

"A6210"="c:\program files (x86)\NETGEAR\A6210\A6210.EXE" [2015-01-21 6214488]

"DrayTek Vigor N61 802.11n Wireless USB Adapter"="c:\program files (x86)\DrayTek Vigor N61\WLANmon.exe" [2009-10-30 827392]

"ANIWZCS2Service"="c:\program files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2009-10-19 102400]

.

d:\users\SUNDARS PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-3-4 42560368]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.150\SSScheduler.exe [2014-4-9 332016]

OpenDNSCrypt.lnk - c:\windows\Installer\{E811D3DC-A647-4744-9CA6-BD4707D2808B}\_41100329364C94A5913B21.exe [2013-12-5 4710]

Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-12-6 565464]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableLinkedConnections"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

.

R1 anodlwf;ANOD Network Security Filter driver;c:\windows\system32\DRIVERS\anodlwfx.sys;c:\windows\SYSNATIVE\DRIVERS\anodlwfx.sys [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]

R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 A6210;NETGEAR A6210 USB Wireless LAN Card Driver;c:\windows\system32\DRIVERS\A6210.sys;c:\windows\SYSNATIVE\DRIVERS\A6210.sys [x]

R3 ALCATELUSB;Alcatel HSPA Modem Service;c:\windows\system32\Drivers\AlcatelUsb.sys;c:\windows\SYSNATIVE\Drivers\AlcatelUsb.sys [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 jrdusbser;Modem Interface Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\jrdusbser.sys;c:\windows\SYSNATIVE\DRIVERS\jrdusbser.sys [x]

R3 JRDusbwwan;Alcatel USB-NDIS WWAN miniport;c:\windows\system32\DRIVERS\AlcatelUsbWwan.sys;c:\windows\SYSNATIVE\DRIVERS\AlcatelUsbWwan.sys [x]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]

R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe [x]

R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]

R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]

R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R4 dnscrypt-proxy;dnscrypt-proxy;c:\dnscrypt\dnscrypt-proxy.exe;c:\dnscrypt\dnscrypt-proxy.exe [x]

S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]

S0 tib;Acronis TIB Manager;c:\windows\system32\DRIVERS\tib.sys;c:\windows\SYSNATIVE\DRIVERS\tib.sys [x]

S0 tib_mounter;Acronis TIB Mounter;c:\windows\system32\DRIVERS\tib_mounter.sys;c:\windows\SYSNATIVE\DRIVERS\tib_mounter.sys [x]

S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys;c:\windows\SYSNATIVE\DRIVERS\vididr.sys [x]

S0 vidsflt;Acronis Disk Storage Filter;c:\windows\system32\DRIVERS\vidsflt.sys;c:\windows\SYSNATIVE\DRIVERS\vidsflt.sys [x]

S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]

S0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys [x]

S0 WRkrn;WRkrn;c:\windows\System32\drivers\WRkrn.sys;c:\windows\SYSNATIVE\drivers\WRkrn.sys [x]

S1 BrnFileLock;Blue Ridge Networks FileLock mini-filter driver;c:\windows\system32\drivers\brnfilelock.sys;c:\windows\SYSNATIVE\drivers\brnfilelock.sys [x]

S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]

S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]

S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]

S2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]

S2 ANIWConnService;ANIWConn Service;c:\windows\system32\ANIWConnService.exe;c:\windows\SYSNATIVE\ANIWConnService.exe [x]

S2 BRN_APPGUARD_SERVICE;Blue Ridge AppGuard Service;c:\program files (x86)\Blue Ridge Networks\AppGuard\AppGuardAgent.exe;c:\program files (x86)\Blue Ridge Networks\AppGuard\AppGuardAgent.exe [x]

S2 NetgearSwitchUSB;NetgearSwitchUSB;c:\program files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe;c:\program files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe [x]

S2 NitroDriverReadSpool9;NitroPDFDriverCreatorReadSpool9;c:\program files\Nitro\Pro 9\NitroPDFDriverService9x64.exe;c:\program files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [x]

S2 NitroUpdateService;NitroUpdateService;c:\program files\Nitro\Pro 9\Nitro_UpdateService.exe;c:\program files\Nitro\Pro 9\Nitro_UpdateService.exe [x]

S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\NLSSRV32.EXE;c:\windows\SysWOW64\NLSSRV32.EXE [x]

S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]

S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]

S2 syncagentsrv;Acronis Sync Agent Service;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [x]

S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]

S2 TGCM_ImportWiFiSvc;TGCM_ImportWiFiSvc;c:\program files (x86)\O2\Connection Manager\ImpWiFiSvc.exe;c:\program files (x86)\O2\Connection Manager\ImpWiFiSvc.exe [x]

S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]

S2 wfcs;Windows Firewall Control;c:\program files\Windows Firewall Control\wfcs.exe;c:\program files\Windows Firewall Control\wfcs.exe [x]

S2 WRSVC;WRSVC;c:\program files\Webroot\WRSA.exe;c:\program files\Webroot\WRSA.exe [x]

S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]

S3 BlackBerry Device Manager;BlackBerry Device Manager;c:\program files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe;c:\program files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [x]

S3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys;c:\windows\SYSNATIVE\drivers\keyscrambler.sys [x]

S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

.

.

Contents of the 'Scheduled Tasks' folder

.

2015-04-04 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-27 09:52]

.

2015-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19 15:15]

.

2015-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19 15:15]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]

@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]

@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]

@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]

@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]

2014-06-24 22:04 164760 ----a-w- d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncError]

@="{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}"

[HKEY_CLASSES_ROOT\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}]

2013-03-28 01:59 2818848 ----a-w- c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncInProgress]

@="{00F848DC-B1D4-4892-9C25-CAADC86A215D}"

[HKEY_CLASSES_ROOT\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D}]

2013-03-28 01:59 2818848 ----a-w- c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncOk]

@="{71573297-552E-46fc-BE3D-3DFAF88D47B7}"

[HKEY_CLASSES_ROOT\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7}]

2013-03-28 01:59 2818848 ----a-w- c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2013-02-15 516960]

"Able2Extract 9.0 Print Dispatcher"="c:\program files\Investintech.com Inc\Able2Extract 9.0\Able2Extract.PrnDisp.exe" [2014-12-08 9023816]

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

Trusted Zone: books24x7.com

Trusted Zone: skillport.com

Trusted Zone: skillwsa.com

Trusted Zone: ultimatix.net\icalms

TCP: Interfaces\{D069F953-031D-4CCC-860A-9F8AD58B4496}: NameServer = 127.0.0.1

TCP: Interfaces\{DFD2CCC5-AB2C-4057-9408-1AB1A135237C}: NameServer = 127.0.0.1

FF - ProfilePath - d:\users\SUNDARS PC\AppData\Roaming\Mozilla\Firefox\Profiles\tc02jb7q.default-1409742926604\

.

.

------- File Associations -------

.

.txt=

.

- - - - ORPHANS REMOVED - - - -

.

ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll

ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll

ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll

Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe

.

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Wondershare\Wondershare Helper Compact\1684366662\*PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC*PROCESSOR_ARCHITECTURE=x86*PROCESSOR_ARCHITEW6432=AMD64*PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel*PROCESSOR_LEVEL=6*PROCESSOR_REVISION=170a*ProgramData=C:\Program]

"JoinUserExperience"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Wondershare\Wondershare Helper Compact\1919381362\am Files (x86)\DTN\IQFeed*PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC*PROCESSOR_ARCHITECTURE=x86*PROCESSOR_ARCHITEW6432=AMD64*PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel*PROCESSOR_LEVEL=6*PROCESSOR_REVISION=17]

"JoinUserExperience"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Other Running Processes ------------------------

.

c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\windows\SysWOW64\ANIWConnService.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\windows\SysWOW64\NMSAccessU.exe

c:\windows\SysWOW64\vmnat.exe

c:\windows\SysWOW64\vmnetdhcp.exe

c:\program files (x86)\VMware\VMware Player\vmware-authd.exe

d:\users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe

.

**************************************************************************

.

Completion time: 2015-04-04  11:56:17 - machine was rebooted

ComboFix-quarantined-files.txt  2015-04-04 10:55

.

Pre-Run: 402,119,790,592 bytes free

Post-Run: 402,534,453,248 bytes free

.

- - End Of File - - 0BDD404801FEF86182E757E1F7EC4113

A36C5E4F47E84449FF07ED3517B43A31

***************8

FARBAR TOOL - FRST

**********************

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015

Ran by SUNDARS PC (administrator) on SUNDARSPC-PC on 13-06-2015 16:31:51

Running from D:\Users\SUNDARS PC\Desktop

Loaded Profiles: SUNDARS PC (Available Profiles: SUNDARS PC & ITunes Sundar & Administrator)

Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Webroot) C:\Program Files\Webroot\WRSA.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

() C:\Windows\SysWOW64\ANIWConnService.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Blue Ridge Networks) C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardAgent.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe

(Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe

() C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE

() C:\Windows\SysWOW64\NMSAccessU.exe

(Microsoft Corporation) C:\Windows\System32\Locator.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(Telefónica) C:\Program Files (x86)\O2\Connection Manager\ImpWiFiSvc.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(BiniSoft.org) C:\Program Files\Windows Firewall Control\wfcs.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

(Investintech.com Inc.) C:\Program Files\Investintech.com Inc\Able2Extract 9.0\Able2Extract.PrnDisp.exe

(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe

(Microsoft Corporation) C:\Windows\System32\StikyNot.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

(Dropbox, Inc.) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe

(Webroot) C:\Program Files\Webroot\WRSA.exe

(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe

(Blue Ridge Networks) C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardGUI.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\Alcatel\Alcatel USB Modem\AutoLauncher.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe

(NETGEAR) C:\Program Files (x86)\NETGEAR\A6210\A6210.EXE

() C:\Program Files (x86)\DrayTek Vigor N61\WlanMon.exe

(Wireless Service) C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [516960 2013-02-15] (Acronis)

HKLM\...\Run: [Able2Extract 9.0 Print Dispatcher] => C:\Program Files\Investintech.com Inc\Able2Extract 9.0\Able2Extract.PrnDisp.exe [9023816 2014-12-08] (Investintech.com Inc.)

HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6366264 2013-03-28] (Acronis)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1103440 2013-01-10] (Acronis)

HKLM-x32\...\Run: [WRSVC] => C:\Program Files\Webroot\WRSA.exe [757864 2013-12-10] (Webroot)

HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443408 2013-09-09] (Research In Motion Limited)

HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [508144 2013-11-14] (QFX Software Corporation)

HKLM-x32\...\Run: [AppGuardGUI] => C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardGUI.exe [2988256 2014-08-11] (Blue Ridge Networks)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

HKLM-x32\...\Run: [AlcatelAutoLauncher_O2] => C:\Program Files (x86)\Alcatel\Alcatel USB Modem\AutoLauncher.exe [133120 2012-10-12] ()

HKLM-x32\...\Run: [A6210] => C:\Program Files (x86)\NETGEAR\A6210\A6210.EXE [6214488 2015-01-21] (NETGEAR)

HKLM-x32\...\Run: [DrayTek Vigor N61 802.11n Wireless USB Adapter] => C:\Program Files (x86)\DrayTek Vigor N61\WLANmon.exe [827392 2009-10-30] ()

HKLM-x32\...\Run: [ANIWZCS2Service] => C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe [102400 2009-10-19] (Wireless Service)

HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)

HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473496 2013-11-29] (TomTom)

HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)

Startup: D:\Users\SUNDARS PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-09-20]

ShortcutTarget: Dropbox.lnk -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-03-28] (Acronis)

ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-03-28] (Acronis)

ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-03-28] (Acronis)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-629275367-314371585-4215095554-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...d=ie&ar=msnhome

HKU\S-1-5-21-629275367-314371585-4215095554-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

HKU\S-1-5-21-629275367-314371585-4215095554-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?...U218DHP&pc=U218

SearchScopes: HKLM-x32 -> DefaultScope value is missing

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-11] (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-05-20] (Kaspersky Lab ZAO)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-22] (Oracle Corporation)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-11] (Kaspersky Lab ZAO)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-22] (Oracle Corporation)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-11] (Kaspersky Lab ZAO)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-11] (Kaspersky Lab ZAO)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-05-20] (Kaspersky Lab ZAO)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-03] (Oracle Corporation)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-11] (Kaspersky Lab ZAO)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-03] (Oracle Corporation)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-11] (Kaspersky Lab ZAO)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)

Tcpip\..\Interfaces\{D069F953-031D-4CCC-860A-9F8AD58B4496}: [NameServer] 127.0.0.1

Tcpip\..\Interfaces\{DFD2CCC5-AB2C-4057-9408-1AB1A135237C}: [NameServer] 127.0.0.1

 

FireFox:

========

FF ProfilePath: D:\Users\SUNDARS PC\AppData\Roaming\Mozilla\Firefox\Profiles\tc02jb7q.default-1409742926604

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll [2015-02-02] ()

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-22] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-22] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll [2015-02-02] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-09-22] (CANON INC.)

FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-09-03] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-09-03] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2014-08-01] (Nitro PDF)

FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2013-11-06] ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-13] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-13] (Google Inc.)

FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-629275367-314371585-4215095554-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)

FF Plugin ProgramFiles/Appdata: D:\Users\SUNDARS PC\AppData\Roaming\mozilla\plugins\npatgpc.dll [2014-11-14] (Cisco WebEx LLC)

FF Extension: Download Status Bar - D:\Users\SUNDARS PC\AppData\Roaming\Mozilla\Firefox\Profiles\tc02jb7q.default-1409742926604\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-09-03]

FF Extension: Adblock Plus - D:\Users\SUNDARS PC\AppData\Roaming\Mozilla\Firefox\Profiles\tc02jb7q.default-1409742926604\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-15]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected]

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected] [2013-06-09]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected]

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected] [2013-06-09]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected]

FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected] [2013-06-09]

StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Nightly\firefox.exe

 

Chrome:

=======

CHR HomePage: Default ->

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Entanglement Web App) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd [2014-11-01]

CHR Extension: (Google Docs) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-22]

CHR Extension: (Google Drive) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-22]

CHR Extension: (Google Voice Search Hotword (Beta)) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-25]

CHR Extension: (WOT) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-11-01]

CHR Extension: (YouTube) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-22]

CHR Extension: (Abine TACO) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cadbkmipeldjmjfcpcjibfjgflahmphk [2014-11-01]

CHR Extension: (Adblock Plus) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-01]

CHR Extension: (Google Search) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-22]

CHR Extension: (Kaspersky URL Advisor) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-02-03]

CHR Extension: (VTchromizer) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\efbjojhplkelaegfbieplglfidafgoka [2014-11-01]

CHR Extension: (Blur) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd [2014-11-01]

CHR Extension: (Kaspersky Protection) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2015-02-03]

CHR Extension: (Poppit!) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2014-11-01]

CHR Extension: (Google Mail Checker) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-11-01]

CHR Extension: (Google Wallet) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-25]

CHR Extension: (Gmail) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-22]

CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.goog...ice/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\urladvisor.crx [2013-01-14]

CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.googl...dnajaicnklhfplh

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 ANIWConnService; C:\Windows\SysWOW64\ANIWConnService.exe [147456 2009-02-11] () [File not signed]

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)

R3 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728 2013-09-09] (Research In Motion Limited) [File not signed]

R2 BRN_APPGUARD_SERVICE; C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardAgent.exe [783072 2014-08-11] (Blue Ridge Networks)

S4 dnscrypt-proxy; C:\DNSCRYPT\dnscrypt-proxy.exe [258062 2013-12-05] () [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

R2 NetgearSwitchUSB; C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe [210648 2014-05-13] ()

R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-08-01] (Nitro PDF Software)

R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [418312 2014-08-01] ()

R2 NMSAccess; C:\Windows\SysWOW64\NMSAccessU.exe [71096 2009-01-12] ()

R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\O2\Connection Manager\ImpWiFiSvc.exe [201080 2011-06-14] (Telefónica)

R2 wfcs; C:\Program Files\Windows Firewall Control\wfcs.exe [78336 2013-12-24] (BiniSoft.org) [File not signed]

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 WRSVC; C:\Program Files\Webroot\WRSA.exe [757864 2013-12-10] (Webroot)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 A6210; C:\Windows\System32\DRIVERS\A6210.sys [2208984 2014-06-20] (Ralink Technology Corp.)

S3 ALCATELUSB; C:\Windows\System32\Drivers\AlcatelUsb.sys [25088 2010-06-09] (Windows ® Codename Longhorn DDK provider)

S1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] () [File not signed]

R1 BrnFileLock; c:\windows\system32\drivers\brnfilelock.sys [79648 2014-06-13] (Blue Ridge Networks)

S3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [123776 2012-03-31] (TCT International Mobile Ltd.)

S3 JRDusbwwan; C:\Windows\System32\DRIVERS\AlcatelUsbWwan.sys [228352 2010-08-05] (TCT International Mobile Ltd)

R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-12-11] (Kaspersky Lab ZAO)

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [91008 2014-05-20] (Kaspersky Lab ZAO) [File not signed]

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628320 2014-05-20] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-12-11] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [177864 2015-04-02] (Kaspersky Lab ZAO)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-06-13] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2013-06-27] (Research In Motion Limited)

S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)

R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-12-06] (Acronis International GmbH)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-12-06] (Acronis)

U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-04-03] ()

R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-12-06] (Acronis International GmbH)

R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.)

R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [114720 2015-04-02] (Webroot)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-06-13 16:31 - 2015-06-13 16:32 - 00027624 _____ D:\Users\SUNDARS PC\Desktop\FRST.txt

2015-06-13 16:31 - 2015-06-13 16:31 - 00000000 ____D C:\FRST

2015-06-13 16:26 - 2015-06-13 16:26 - 02109952 _____ (Farbar) D:\Users\SUNDARS PC\Desktop\FRST64.exe

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-06-13 16:32 - 2014-10-06 13:56 - 00000000 ____D C:\Windows TMP

2015-06-13 16:26 - 2014-10-19 16:15 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-06-13 16:10 - 2009-07-14 05:45 - 00013760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-06-13 16:10 - 2009-07-14 05:45 - 00013760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-06-13 16:06 - 2013-06-09 11:59 - 01651346 _____ C:\Windows\WindowsUpdate.log

2015-06-13 16:04 - 2014-10-19 16:15 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-06-13 16:04 - 2014-10-06 13:56 - 00000000 ____D C:\Windows TEMP

2015-06-13 16:04 - 2014-04-20 00:30 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-06-13 16:02 - 2014-03-04 20:28 - 00017209 _____ C:\Windows\setupact.log

2015-06-13 16:02 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-06-13 14:52 - 2013-11-27 19:57 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-06-13 12:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2015-06-13 12:39 - 2014-03-04 20:28 - 02357256 _____ C:\Windows\system32\FNTCACHE.DAT

2015-06-13 12:30 - 2014-01-21 00:50 - 00000000 ___RD D:\Users\SUNDARS PC\Dropbox

2015-06-13 12:04 - 2014-01-21 00:47 - 00000000 ____D D:\Users\SUNDARS PC\AppData\Roaming\Dropbox

 

==================== Files in the root of some directories =======

 

2015-04-02 16:43 - 2015-04-02 16:43 - 0003284 _____ () D:\Users\SUNDARS PC\AppData\Roaming\ANIWZCS{57EBEEAA-7AB5-4156-B13C-0830C39151A4}

2015-01-29 11:58 - 2015-02-03 15:02 - 0003284 _____ () D:\Users\SUNDARS PC\AppData\Roaming\ANIWZCS{624826FE-7B9A-4414-9232-8E1185407EB2}

2013-12-29 14:06 - 2014-01-03 14:08 - 0000154 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Rim.Desktop.Exception.log

2013-12-29 14:04 - 2014-05-28 08:24 - 0002021 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Rim.Desktop.HttpServerSetup.log

2013-12-29 14:06 - 2014-01-03 14:08 - 0000154 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Rim.DesktopHelper.Exception.log

2015-03-26 13:26 - 2015-03-26 13:26 - 0000000 _____ () D:\Users\SUNDARS PC\AppData\Local\BITF9B1.tmp

2014-01-09 12:34 - 2015-01-16 19:59 - 0005296 _____ () D:\Users\SUNDARS PC\AppData\Local\tcNSISDump.Log

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

LastRegBack: 2015-06-13 13:12

 

==================== End of log ============================

******************

FARBAR TOOL - ADDITIONS

********************

Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015

Ran by SUNDARS PC at 2015-06-13 16:32:24

Running from D:\Users\SUNDARS PC\Desktop

Boot Mode: Normal

==========================================================

 

==================== Accounts: =============================

Administrator (S-1-5-21-629275367-314371585-4215095554-500 - Administrator - Enabled) => C:\Users\Administrator

Guest (S-1-5-21-629275367-314371585-4215095554-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-629275367-314371585-4215095554-1007 - Limited - Enabled)

ITunes Sundar (S-1-5-21-629275367-314371585-4215095554-1008 - Limited - Enabled) => D:\Users\ITunes Sundar

SUNDARS PC (S-1-5-21-629275367-314371585-4215095554-1001 - Administrator - Enabled) => D:\Users\SUNDARS PC

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Anti-Virus (Disabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}

AS: Kaspersky Anti-Virus (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Able2Extract 9.0 (HKLM\...\{98A71953-B535-4E63-897B-EC9B2FC46376}_is1) (Version: 9.0 - Investintech.com Inc.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)

Alcatel USB Modem (HKLM-x32\...\{2E35E738-75E8-4C31-8E04-2564619DC7D5}) (Version: 1.002.00001 - Alcatel)

AmiBroker 5.60.3 x64 (HKLM\...\AmiBroker64_is1) (Version: 5.60 - AmiBroker.com)

ANIWZCS2 Service (HKLM-x32\...\{4C590030-7469-453E-8589-D15DA9D03F52}) (Version:  - )

Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

BlackBerry Device Software Updater (HKLM-x32\...\{334147DC-B3C8-4626-A985-4AEA8A36DAB6}) (Version: 8.0.0.41 - Research In Motion Ltd)

Blue Ridge Networks AppGuard (HKLM-x32\...\{B18537F1-B130-4C4B-A606-01128D45907E}) (Version: 4.1.45.1 - Blue Ridge Networks)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Bullzip PDF Printer 10.3.0.2191 (HKLM\...\Bullzip PDF Printer_is1) (Version: 10.3.0.2191 - Bullzip)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon MP Navigator 2.0 (HKLM-x32\...\MP Navigator 2.0) (Version:  - )

Canon MP800 (HKLM\...\{04F9B09E-CDB5-46fc-AC30-2E7E7C7A8A34}) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.08 - Piriform)

Cisco WebEx Meetings (HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)

Connection Manager (HKLM-x32\...\O2UK) (Version: 8.7.6.800 - Connection Manager)

Dropbox (HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)

Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{32136776-FE3F-453D-80DA-CDD993BDB2A3}) (Version: 11.1.20810.00 - Microsoft Corporation)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

HomeplugAV (HKLM-x32\...\{2DFC446B-8A6E-4EF3-99DF-C89E37DB156D}) (Version:  - )

iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

IQFeed Client 5.1.0.5 (HKLM-x32\...\IQFeed Client) (Version: 5.1.0.5 - DTN)

iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)

Jagannatha Hora 7.66 (HKLM-x32\...\Jagannatha Hora_is1) (Version: 7.66 - PVR Narasimha Rao)

Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)

Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)

Jyotishya Deepika v5.0 (HKLM-x32\...\{40342A0E-7166-491B-A98C-3BEEBD7837A6}) (Version: 5.2.2 - Sridhara Software Technologies)

Kaspersky Anti-Virus 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab)

Kaspersky Anti-Virus 2013 (x32 Version: 13.0.1.4190 - Kaspersky Lab) Hidden

KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.3.0.0 - QFX Software Corporation)

Macromedia Contribute 3.11 (HKLM-x32\...\{4B9535BF-CC90-4158-AF32-CAF57A8820CA}) (Version: 3.11.0.2419 - Macromedia, Inc.)

Macromedia Dreamweaver 8 (HKLM-x32\...\{0837A661-FEC3-48B3-876C-91E7D32048A9}) (Version: 8.0.2 - Macromedia)

Macromedia Extension Manager (HKLM-x32\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)

Macromedia Fireworks 8 (HKLM-x32\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)

Macromedia Flash 8 (HKLM-x32\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)

Macromedia Flash 8 Video Encoder (HKLM-x32\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)

Macromedia Flash Player 8 (HKLM-x32\...\{885A63EA-382B-4DD4-A755-14809B8557D6}) (Version: 8.0.22.0 - Macromedia)

Maitreya 7.0.3 (HKLM-x32\...\Maitreya7.0_is1) (Version:  - )

Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)

Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Professional 2007 (HKLM-x32\...\PROR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Data Tools - enu (11.1.20828.01) (HKLM-x32\...\{4F2B8233-35EE-4197-8C3B-EACCBF712029}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20828.01) (HKLM-x32\...\{FAE0523E-08A4-4717-8E8E-6EC6F32CBE88}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio Express 2012 for Windows Desktop - ENU (HKLM-x32\...\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}) (Version: 11.0.50727.42 - Microsoft Corporation)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0a1 - Mozilla)

MyDriveConnect 3.3.0.1342 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1342 - TomTom)

NETGEAR A6210 Genie (HKLM-x32\...\InstallShield_{B37F67D3-ABD1-48E0-B422-E011C355529C}) (Version: 1.0.0.30 - NETGEAR)

NETGEAR A6210 Genie (x32 Version: 1.0.0.30 - NETGEAR) Hidden

Nightly 37.0a1 (x86 en-US) (HKLM-x32\...\Nightly 37.0a1 (x86 en-US)) (Version: 37.0a1 - Mozilla)

Nitro Pro 9 (HKLM-x32\...\{c5237a45-d0a0-4c12-9269-f59919377de1}) (Version: 9.5.3.8 - Nitro)

Nitro Pro 9 (Version: 9.5.3.8 - Nitro) Hidden

NVIDIA nView 136.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 136.53 - NVIDIA Corporation)

PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.210.0 - Tracker Software Products Ltd)

PDF-XChange Lite 4 (HKLM\...\{B860298B-CE03-4DE2-B92E-422F2C20A2D8}_is1) (Version: 4.0.214.2 - Tracker Software Products Ltd)

Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)

Python 3.3.3 (64-bit) (HKLM\...\{e9d90870-ab19-32a8-aa93-f8348ba21d05}) (Version: 3.3.3150 - Python Software Foundation)

Python 3.3.4 (HKLM-x32\...\{cc2659bc-d27d-3593-a0a0-9ac0de07a430}) (Version: 3.3.4150 - Python Software Foundation)

QCollector Expert For DTN 4.0 (HKLM-x32\...\QC_EXPERT_IQFEED_is1) (Version:  - Tradeworks Software)

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

R for Windows 3.1.1 (HKLM\...\R for Windows 3.1.1_is1) (Version: 3.1.1 - R Core Team)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)

Recuva (HKLM\...\Recuva) (Version: 1.49 - Piriform)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

RStudio (HKLM-x32\...\RStudio) (Version: 0.98.1073 - RStudio)

SaxoTrader 2 (HKLM-x32\...\{024D66E9-D50C-44A7-92B4-2DFDDD95D228}) (Version: 2.85.31.0 - Saxo Bank)

Scratch 2 Offline Editor (HKLM-x32\...\edu.media.mit.Scratch2Editor) (Version: 385 - MIT Media Lab)

Scratch 2 Offline Editor (x32 Version: 255 - MIT Media Lab) Hidden

Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)

Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)

SmartKpHorary (HKLM-x32\...\{F3B425D8-E179-4EF4-89DB-38686457DECE}) (Version: 1.1.1 - AstroOpenSource)

SnapAPI (HKLM-x32\...\{D4830EE9-E795-4CCA-AA7A-612A4E565977}) (Version: 3.11.586 - Acronis)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

SyncBackPro (HKLM-x32\...\SyncBackPro_is1) (Version: 6.0.12.0 - 2BrightSparks)

System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)

TaxCalc (HKLM-x32\...\TaxCalcHub) (Version: 2 - Acorah Software Products)

TaxCalc 2010 (HKLM-x32\...\TaxCalc 2010) (Version:  - Acorah Software Products)

TaxCalc 2011 (HKLM-x32\...\TaxCalc 2011) (Version:  - )

TaxCalc 2012 (HKLM-x32\...\TaxCalc 2012) (Version:  - )

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)

True Image 2013 (HKLM-x32\...\{A3FDA583-78E5-45B6-A14A-BCF99B8410FB}Visible) (Version: 16.0.6514 - Acronis)

True Image 2013 (x32 Version: 16.0.6514 - Acronis) Hidden

Undelete 360 (HKLM-x32\...\Undelete 360_is1) (Version:  - File Recovery Ltd.)

Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Vigor N61 802.11n Wireless USB Adapter (HKLM-x32\...\{272E80B6-9579-421F-8B8E-6E8855FA1F91}) (Version:  - DrayTek)

Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)

VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)

VMware Player (HKLM-x32\...\VMware_Player) (Version: 5.0.3 - VMware, Inc)

VMware Player (Version: 5.0.3 - VMware, Inc.) Hidden

Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 8.0.3.3 - Webroot)

WhoCrashed 4.01 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)

Windows Firewall Control (HKLM\...\Windows Firewall Control) (Version: 4.0.6.0 - BiniSoft.org)

Write-N-Cite (HKLM-x32\...\Write-N-Cite) (Version: III - Refworks)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

31-03-2015 16:18:13 Revo Uninstaller's restore point - Janus 4.3 Atlas Update

31-03-2015 16:18:54 Revo Uninstaller's restore point - Janus 4.3 Atlas Update (C:\Program Files (x86)\Janus4\)

31-03-2015 16:19:48 Revo Uninstaller's restore point - lmc

31-03-2015 16:20:58 Revo Uninstaller's restore point - Nitro Pro 9

31-03-2015 16:21:39 Revo Uninstaller's restore point - Nitro Pro 9

02-04-2015 14:45:24 Removed EMET 5.0

02-04-2015 16:39:15 Removed Vigor N61 802.11n Wireless USB Adapter

02-04-2015 16:40:23 Installed Vigor N61 802.11n Wireless USB Adapter

02-04-2015 16:41:25 Installed ANIWZCS2 Service

03-04-2015 15:09:52 Installed Realtek Ethernet Controller Driver

05-05-2015 20:03:44 Scheduled Checkpoint

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-04-04 11:09 - 2015-04-04 11:37 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {02070FD3-A44F-496A-9BF3-A329BE5124DD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)

Task: {04B57B4C-3522-46CB-A39F-D2610095338A} - System32\Tasks\{DF309475-A581-4165-936E-1EFF15E30CC2} => pcalua.exe -a "D:\Users\SUNDARS PC\Downloads\Shockwave_Installer_Slim.exe" -d "D:\Users\SUNDARS PC\Downloads"

Task: {0DB22FCF-CA6C-4D27-B97B-12B2C08D272F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {18400EFC-BD36-4A9B-ADB3-7398EDC0061C} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2013-06-10] (Microsoft Corporation)

Task: {190C2DC1-57A5-4E36-A1B1-2461F82D42C0} - System32\Tasks\{0067DF06-1CA4-4EB7-92AA-34A15C2A47A4} => pcalua.exe -a "D:\DownloadSW\Canon MP800\mp800win64111ej.exe" -d "D:\DownloadSW\Canon MP800"

Task: {28D12B95-450D-47A3-AB21-8BE4984A8260} - System32\Tasks\{49A434F2-4257-4659-B31A-D2F1735D8D9E} => pcalua.exe -a "C:\Windows TMP\Temp3_Vigor_N61+V5.0.2.1022.zip\Setup.exe"

Task: {4824DB31-F424-4D71-A2C0-788488D7BAA0} - System32\Tasks\{FBCC3706-EACD-40D1-8B3B-80B83C9F1C0D} => Chrome.exe http://ui.skype.com/...?LastError=1603

Task: {619CC783-587A-4D5A-A1D5-048A7C1396D9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: {6C18733F-DF79-412E-B6F7-ED706CB8DA96} - System32\Tasks\{D973572D-16DB-4F0B-B03D-18B159F083FE} => Chrome.exe http://ui.skype.com/...all?page=tsBing

Task: {93C12D0C-319E-4D21-AD89-91BDFDF67E8D} - System32\Tasks\{45630174-9AFF-4037-9939-25D92277BC8F} => pcalua.exe -a "D:\DownloadSW\Canon MP800\mp800win64111ej.exe" -d "D:\DownloadSW\Canon MP800"

Task: {B3FE7C04-6C76-47D7-B569-A09CAE1CFE71} - System32\Tasks\{0D0787EB-2131-49B4-B353-001FAF0936FA} => Chrome.exe http://ui.skype.com/...e=tsProgressBar

Task: {D2F35EE7-7FFC-4370-9BE2-60890CDA9D6E} - System32\Tasks\{B9DCA183-88F6-4390-A715-B64212C01F26} => pcalua.exe -a "D:\Users\SUNDARS PC\Desktop\wfc4setup.exe" -d "D:\Users\SUNDARS PC\Desktop"

Task: {D779A5C3-E00F-4DBA-9DD1-18E8375113F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-02] (Adobe Systems Incorporated)

Task: {DE846982-5DFD-4C6B-B900-8024031173FF} - System32\Tasks\{FDF79372-B4AC-404F-9714-C52B74B5B67D} => Chrome.exe http://ui.skype.com/...?LastError=1603

Task: {E2915503-5ED1-44CC-A4BC-58970E03C055} - System32\Tasks\{5E28E702-CF72-4DD8-B357-ECB39F446816} => pcalua.exe -a "C:\Windows TMP\Temp1_Vigor_N61+V5.0.2.1022.zip\Setup.exe"

Task: {F7366F50-15A1-4A45-B143-F86BDE7B197D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (Whitelisted) ==============

 

2015-04-02 16:41 - 2009-02-11 18:57 - 00147456 _____ () C:\Windows\SysWOW64\ANIWConnService.exe

2014-05-13 17:57 - 2014-05-13 17:57 - 00210648 _____ () C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe

2014-08-01 15:23 - 2014-08-01 15:23 - 00418312 _____ () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe

2015-03-31 20:22 - 2009-01-12 08:15 - 00071096 _____ () C:\Windows\SysWOW64\NMSAccessU.exe

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2013-03-27 23:39 - 2013-03-27 23:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll

2013-06-09 14:48 - 2012-11-06 10:34 - 00380776 _____ () C:\Program Files\NVIDIA Corporation\nview\nvshell.dll

2015-01-29 12:45 - 2012-10-12 11:59 - 00133120 _____ () C:\Program Files (x86)\Alcatel\Alcatel USB Modem\AutoLauncher.exe

2015-04-02 16:40 - 2009-10-30 10:20 - 00827392 _____ () C:\Program Files (x86)\DrayTek Vigor N61\WlanMon.exe

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-01-14 14:41 - 2013-01-14 14:41 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\kpcengine.2.2.dll

2013-11-05 22:05 - 2013-11-05 22:05 - 01261272 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll

2014-12-15 17:54 - 2014-09-25 15:49 - 00883496 _____ () C:\Program Files\Investintech.com Inc\Able2Extract 9.0\platforms\qwindows.dll

2013-11-29 10:29 - 2013-11-29 10:29 - 00026520 _____ () C:\Program Files (x86)\MyDrive Connect\DeviceDetection.dll

2013-11-29 10:28 - 2013-11-29 10:28 - 00082840 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterBase.dll

2013-11-29 10:28 - 2013-11-29 10:28 - 00344984 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterProxy.dll

2015-03-04 23:08 - 2015-03-04 23:08 - 00750080 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\libGLESv2.dll

2015-06-13 16:04 - 2015-06-13 16:04 - 00043008 _____ () c:\Windows TEMP\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmportfts.dll

2015-03-04 23:08 - 2015-03-04 23:08 - 00047616 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\libEGL.dll

2015-03-04 23:08 - 2015-03-04 23:08 - 00865280 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll

2015-03-04 23:07 - 2015-03-04 23:07 - 00200704 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll

2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll

2012-08-17 21:40 - 2012-08-17 21:40 - 00068024 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\QtWebKit\qmlwebkitplugin4.dll

2013-03-28 02:42 - 2013-03-28 02:42 - 13606944 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll

2013-01-10 14:43 - 2013-01-10 14:43 - 00014360 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll

2015-01-21 16:21 - 2015-01-21 16:21 - 00131808 _____ () C:\Program Files (x86)\NETGEAR\A6210\Ralink.dll

2013-03-27 23:09 - 2013-03-27 23:09 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll

2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL

2013-03-27 23:36 - 2013-03-27 23:36 - 00021312 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

 

==================== Safe Mode (Whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\books24x7.com -> hxxps://books24x7.com

IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\skillport.com -> hxxps://skillport.com

IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\skillwsa.com -> hxxps://skillwsa.com

IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\ultimatix.net -> hxxps://icalms.ultimatix.net

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-629275367-314371585-4215095554-1001\Control Panel\Desktop\\Wallpaper -> D:\Users\SUNDARS PC\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: Media is not connected to internet.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [{8DBDF54A-6044-4280-BD95-A75FE5503C6F}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe

FirewallRules: [{FA99D32A-DFE9-4A49-8244-3AF34448FA84}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe

FirewallRules: [{9F5E6F7C-1BAE-48C0-906A-5B84CB0FF752}] => (Block) C:\Windows\system32\svchost.exe

FirewallRules: [{52F0BEC5-E727-493E-9ED9-8F53C11E1BA8}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE

FirewallRules: [{37173833-9E91-4523-BB2C-9D0F35330214}] => (Allow) %SystemRoot%\SysWOW64\svchost.exe

FirewallRules: [{76D7BFC5-DE32-4D2B-975E-BF311A970C2B}] => (Allow) %SystemRoot%\SysWOW64\svchost.exe

FirewallRules: [{C25FDC95-75C8-4B02-A680-A9683369255D}] => (Block) LPort=1900

FirewallRules: [{9768C54D-E186-418F-A875-D6E358FA8DBA}] => (Block) LPort=445

FirewallRules: [{6D1CA2F5-7CF0-46CA-AF7A-277C38B2754F}] => (Block) C:\Windows\System32\svchost.exe

FirewallRules: [{38A745CD-9C0B-481F-A0F6-2B55D409C8DE}] => (Allow) C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe

FirewallRules: [{55A77A94-5B62-498A-9426-C02BAF3F977B}] => (Allow) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

FirewallRules: [{D1D6BDA2-327D-4124-A999-7B5CBC25EFBF}] => (Allow) LocalHost

FirewallRules: [{FAD88354-8E90-48F0-9C06-93B86887956B}] => (Allow) C:\program files (x86)\malwarebytes' anti-malware\mbam.exe

FirewallRules: [{770D90DC-A3EC-4E2A-9BD9-D1A9A381A196}] => (Allow) C:\program files (x86)\malwarebytes' anti-malware\mbamscheduler.exe

FirewallRules: [{CB76087B-1BA0-4271-8CF5-6DD3F72E2E98}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe

FirewallRules: [{734788E0-AFAF-487E-AED0-9298930A1088}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe

FirewallRules: [{E231AF57-69BB-40B9-8E60-7AEA8D2AFCBF}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\IQLinkLauncher.exe

FirewallRules: [{FBA1FFFE-E890-4A05-A650-C5E74DF32FC9}] => (Allow) C:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe

FirewallRules: [{EFB25419-6427-4026-863D-0D0ABAF13106}] => (Allow) C:\program files\bonjour\mdnsresponder.exe

FirewallRules: [{A1DD282B-58C7-45B4-BEE7-752EA6D3906C}] => (Allow) C:\program files\bonjour\mdnsresponder.exe

FirewallRules: [{CB8C8985-DED2-4AD8-A6DB-9DACB7382757}] => (Allow) C:\windows\explorer.exe

FirewallRules: [{2FA6246B-3291-43C2-9104-335418D2B2C9}] => (Allow) C:\program files (x86)\malwarebytes' anti-malware\mbamscheduler.exe

FirewallRules: [{CED1BDAB-355B-43E1-AE4C-B6F2BDACD7D7}] => (Allow) C:\Program Files (x86)\Internet Explorer\iexplore.exe

FirewallRules: [{C7AF0FCA-D9E0-46CC-9560-CC3F6374000F}] => (Allow) C:\Windows\System32\ftp.exe

FirewallRules: [{3E10042F-FF69-4A2F-885D-593CF23AB8CB}] => (Allow) FTPCommand

FirewallRules: [{460D9863-B5A3-49C7-85EB-1B0A0DEAFF55}] => (Allow) FTPs

FirewallRules: [{691532FC-BDE4-4416-9D10-2D58CFF798D8}] => (Allow) FTPDataPass

FirewallRules: [{94A3740E-1CBD-4890-92D0-544398794671}] => (Allow) FTPData

FirewallRules: [{AEE2927D-0BE7-48AD-B84F-BB9420B413F7}] => (Allow) C:\program files (x86)\google\update\googleupdate.exe

FirewallRules: [{0080B179-9CEC-40A5-A462-0B82343768A9}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe

FirewallRules: [{1004C511-AFBE-458B-98D5-833B7DB26337}] => (Allow) %ProgramFiles% (x86)\Common Files\Java\Java Update\jaucheck.exe

FirewallRules: [{435B5C72-25C2-4F4C-BECB-128217EA84E2}] => (Allow) %ProgramFiles% (x86)\Java\jre7\bin\javacpl.exe

FirewallRules: [{12CF2A8A-9497-417A-9D2E-2F3506289CC2}] => (Allow) %ProgramFiles% (x86)\Java\jre7\bin\java.exe

FirewallRules: [{5F3BD7B4-F12D-4F53-9333-8388EC1F3D79}] => (Allow) %ProgramFiles% (x86)\Java\jre7\bin\javaw.exe

FirewallRules: [{17CA3D79-A96C-4BBE-B23E-75A7FCDBC4FD}] => (Allow) %ProgramFiles% (x86)\Java\jre7\bin\javaws.exe

FirewallRules: [{55BD0BCC-0811-4876-A209-C948E128C403}] => (Allow) %ProgramFiles% (x86)\Common Files\Java\Java Update\jusched.exe

FirewallRules: [{A3E44110-D81C-4C40-97A6-AC370F8A58BC}] => (Allow) %ProgramFiles% (x86)\Common Files\Java\Java Update\jucheck.exe

FirewallRules: [{27BD713F-6845-4387-BBFF-E98D8C0B5B20}] => (Block) Any

FirewallRules: [{36E58820-6D9D-457A-B352-AF3F0CB53A5E}] => (Block) Any

FirewallRules: [{2E0D74DE-530B-4CB9-9F2C-7C2979EDDE73}] => (Allow) %ProgramFiles%\Tracker Software\Live Update\LiveUpdate.exe

FirewallRules: [{D0DA4E97-B166-4DE7-B464-648FA8FD55B0}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\EXCEL.EXE

FirewallRules: [{2F0D4201-BAD0-424A-8C73-E882B4F873AF}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\WINWORD.EXE

FirewallRules: [{9D9D968F-5989-4C63-9066-47179AFDD2B9}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\MSPUB.EXE

FirewallRules: [{AA452646-7D51-40D5-8305-9E680E329612}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\MSACCESS.EXE

FirewallRules: [{5AC02C1F-54F8-4DE5-817E-4FC269EDA339}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe

FirewallRules: [{7647472E-4DD4-4328-B47E-EFC512D8E11C}] => (Allow) LPort=5454

FirewallRules: [{9CDC55CE-0F8C-4329-8BB1-4E0ECEABF1EC}] => (Block) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE

FirewallRules: [{F37CA6CF-E3AE-4078-A751-D5B252818BCA}] => (Allow) %ProgramFiles% (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe

FirewallRules: [{22146DC1-A30D-4580-8FD3-D6F5A139510E}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpress.exe

FirewallRules: [{AFF8CA93-2376-44AD-A58F-789CA3994AA1}] => (Allow) LPort=4481

FirewallRules: [{05B41AF1-335D-45C9-9F32-CBC3EE012287}] => (Allow) LPort=4481

FirewallRules: [{5E340545-F01E-49EE-926D-80FA8CDCAF10}] => (Allow) LPort=4482

FirewallRules: [{AB0463F1-4AC9-40C1-83E6-36DDD75867DB}] => (Allow) LPort=4482

FirewallRules: [{A57529DA-512C-4D19-9058-5138DEE08DAC}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\IQLinkLauncher.exe

FirewallRules: [{C5EAB85D-32A8-4BD0-A1EC-8B0EC2B3B0E5}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqlink.exe

FirewallRules: [{184F0E05-1A6E-4CE6-B5EE-0F747B1161BD}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqlink.exe

FirewallRules: [{E0707014-1506-4E14-8D4F-A92B26385F9B}] => (Allow) C:\program files (x86)\kaspersky lab\kaspersky anti-virus 2013\avp.exe

FirewallRules: [TCP Query User{98C6E13A-351A-487D-AD44-5AF8D8D9F9F4}F:\windows temp\showmypc\smpc3152\smpcph.exe] => (Allow) F:\windows temp\showmypc\smpc3152\smpcph.exe

FirewallRules: [UDP Query User{700CA384-000C-4FFC-9A73-373A6F53B27B}F:\windows temp\showmypc\smpc3152\smpcph.exe] => (Allow) F:\windows temp\showmypc\smpc3152\smpcph.exe

FirewallRules: [{BB96FE9C-EF2E-4A88-BF14-7EB13465E357}] => (Allow) %SystemDrive%\SierraChart\SierraChart.exe

FirewallRules: [{552068C3-117F-412A-A9EE-668545D44F13}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{CC0EB99A-2F26-48FB-9F8D-5550D5243835}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{04442390-99C2-400E-A685-6AF12AB5ABF3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{7B9D0D08-61D8-419D-B506-9B14F2A8BCAE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FA8BC656-9D70-46DD-94EC-B84F08F4FAF4}] => (Allow) %ProgramFiles% (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{F5682E41-440F-4A19-8F7D-B5406E95F99B}] => (Allow) %ProgramFiles% (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{4055FC8A-1CEE-4E36-A927-BA19197D4C4A}] => (Allow) %ProgramFiles% (x86)\Janus4\Janus4.exe

FirewallRules: [{1FCFDF11-9AE4-43E0-A3E4-F583387E30CD}] => (Allow) %SystemDrive%\DNSCRYPT\dnscrypt-proxy.exe

FirewallRules: [{44BC45A3-350D-42B0-8C9C-71CD726B335B}] => (Allow) %ProgramFiles% (x86)\FileZilla FTP Client\filezilla.exe

FirewallRules: [{EDCDCB73-C6AD-43B0-AB3A-885E738B4187}] => (Allow) %ProgramFiles% (x86)\FileZilla FTP Client\filezilla.exe

FirewallRules: [{120895B4-34BF-4A89-9DCA-1B0D0571DF01}] => (Allow) C:\Program Files\Windows Firewall Control\wfc.exe

FirewallRules: [{394C8FE4-10B7-4A04-A2D2-010C1AA9E1BE}] => (Block) C:\Windows\system32\svchost.exe

FirewallRules: [{3338AFB7-9D11-44F4-A24C-922E4957757A}] => (Block) C:\Windows\system32\svchost.exe

FirewallRules: [{06D10F59-E785-4245-9DA1-D0DF91F4DCBE}] => (Block) C:\Windows\system32\svchost.exe

FirewallRules: [{0532C1C9-E221-40FA-A14A-8BDF388BFA5E}] => (Allow) %ProgramFiles% (x86)\MyDrive Connect\MyDriveConnect.exe

FirewallRules: [{9BE2F7CC-DC2C-49D4-A8B5-0C1E2FE04D32}] => (Block) C:\program files (x86)\kaspersky lab\kaspersky anti-virus 2013\avp.exe

FirewallRules: [{663AC72B-5D2D-4568-BCDD-B1EDEEEB51E6}] => (Allow) %ProgramFiles% (x86)\Skype\Phone\Skype.exe

FirewallRules: [{087C125B-FA62-48B1-9932-14876DAFE822}] => (Allow) %ProgramFiles% (x86)\Skype\Phone\Skype.exe

FirewallRules: [{3CF4B9B8-DDC0-4B64-823C-278499389329}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE

FirewallRules: [{4961CF2A-C1BE-446C-B570-F0685F0EA4AE}] => (Block) %ProgramFiles% (x86)\Skype\Phone\Skype.exe

FirewallRules: [{2D78B49C-C263-4E58-96A5-439881217E78}] => (Block) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE

FirewallRules: [{20DA01E8-28BF-4D5A-837F-AB59D75DB5A4}] => (Allow) %ProgramFiles% (x86)\Skype\Phone\Skype.exe

FirewallRules: [{86C5477D-8DC5-4B04-A5A6-B187C66CD5BF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{90FFCB75-D72E-41B8-A218-09E6CA8A41DD}] => (Allow) C:\Program Files (x86)\Acorah Software Products\TaxCalcHub\TaxCalcHub.exe

FirewallRules: [{FFDDF7E5-B8EB-4975-A5C7-D81AA95AB7C6}] => (Allow) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{467E6A07-709A-4B86-AAFF-CA99C65CCD98}] => (Allow) %ProgramFiles% (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe

FirewallRules: [{A58CDFB8-56AD-40DA-B6C8-E465B99DC752}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe

FirewallRules: [{ADF3BDAE-B133-4ECC-9F68-3C4704E7EA98}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe

FirewallRules: [{10910CDC-C8E9-4B06-8527-80C593DB49CF}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe

FirewallRules: [{E2BCBBCE-DD00-43F8-8AC1-84A252EE2995}] => (Allow) %ProgramFiles% (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe

FirewallRules: [{2CD1DF7B-6CC2-4ABB-89C9-55554C6608EC}] => (Allow) %ProgramFiles% (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

FirewallRules: [{2444E4A4-C21D-4A06-895F-DDD0DA1447C5}] => (Allow) %ProgramFiles%\Microsoft Silverlight\sllauncher.exe

FirewallRules: [{58EF1F75-6859-401D-B1C5-436075A54F8A}] => (Allow) %ProgramFiles%\Microsoft Silverlight\5.1.20913.0\Silverlight.Configuration.exe

FirewallRules: [{23121497-B02E-4FF9-9848-8B0D823DCE4D}] => (Allow) %ProgramFiles%\Microsoft Silverlight\5.1.20913.0\Silverlight.Configuration.exe

FirewallRules: [{24698B26-C70E-46DB-AD79-FC222779BC81}] => (Allow) %ProgramFiles%\Microsoft Silverlight\sllauncher.exe

FirewallRules: [{6D34C37A-30A6-4AFE-9F8A-E5B2D7096530}] => (Allow) C:\program files (x86)\kaspersky lab\kaspersky anti-virus 2013\avp.exe

FirewallRules: [{D166F14C-C20B-4520-845D-9511DEDA34EC}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

FirewallRules: [{2A5A0753-3F25-4295-B1DC-97CBBC09B3E9}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

FirewallRules: [{B5C76304-3E9E-468D-A308-A3A05C6E2773}] => (Allow) C:\Program Files (x86)\Internet Explorer\iexplore.exe

FirewallRules: [{1F55ECD6-49CC-4A59-A413-48A711C3D14F}] => (Allow) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{866CB03C-A52C-4BE5-94B2-84D1CF8B08A4}] => (Allow) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{F4D8749C-FED2-4263-B9EB-717531217398}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe

FirewallRules: [{0E6068C1-3F56-49EB-88D8-56EF5E16F56F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe

FirewallRules: [{160CBA5C-291C-4D61-8111-22E25A44EF70}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

FirewallRules: [{6BF8BEE8-F9CB-49CB-A597-708327EFE188}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

FirewallRules: [TCP Query User{DB31D691-A7D8-4F04-BF36-54875425991F}C:\khcoder\dep\mysql\bin\mysqld-nt.exe] => (Allow) C:\khcoder\dep\mysql\bin\mysqld-nt.exe

FirewallRules: [UDP Query User{4E6DA0C0-8B4D-47D3-B9DF-9933B759C613}C:\khcoder\dep\mysql\bin\mysqld-nt.exe] => (Allow) C:\khcoder\dep\mysql\bin\mysqld-nt.exe

FirewallRules: [TCP Query User{06C094CB-33AD-4DF3-B893-73E58BFF038C}C:\windows\syswow64\java.exe] => (Block) C:\windows\syswow64\java.exe

FirewallRules: [UDP Query User{E1B2FA41-719D-4FE6-978F-D7865521B3BB}C:\windows\syswow64\java.exe] => (Block) C:\windows\syswow64\java.exe

FirewallRules: [{B00FD89B-5FCE-4341-BD70-D49C9C4FB8D4}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [TCP Query User{7C305130-A050-40E4-A87F-A679767F92A2}D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe] => (Allow) D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe

FirewallRules: [UDP Query User{40EBEA0D-84BF-4CAA-8F94-91946EBF5326}D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe] => (Allow) D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe

FirewallRules: [{A810BC00-20C8-4942-B3CC-3BB1E1C83402}] => (Allow) C:\Program Files (x86)\Acorah Software Products\TaxCalcHub\TaxCalcHub.exe

FirewallRules: [{7F754988-491E-447F-A01F-97EB09EE4259}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{A4F14790-C578-4AC6-A93F-5BDC79A69079}] => (Block) C:\program files (x86)\acronis\trueimagehome\trueimage.exe

FirewallRules: [{21AAB52B-E23A-4D68-9CCC-AF0760B6F0FE}] => (Block) C:\program files (x86)\acronis\trueimagehome\trueimage.exe

==================== Faulty Device Manager Devices =============

Name: PS/2 Compatible Mouse

Description: PS/2 Compatible Mouse

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (06/13/2015 04:08:24 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/13/2015 04:03:23 PM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-06-13T16:03:23.486+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

 

Error: (06/13/2015 00:40:22 PM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-06-13T12:40:22.201+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (06/13/2015 11:46:50 AM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-06-13T11:46:50.392+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

 

Error: (05/05/2015 08:00:13 PM) (Source: SideBySide) (EventID: 63) (User: )

Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.

The value "x64" of attribute "processorArchitecture" in element "assemblyIdentity" is invalid.

 

Error: (05/05/2015 07:27:27 PM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-05-05T19:27:27.330+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (05/05/2015 07:06:03 PM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-05-05T19:06:03.005+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

 

Error: (04/16/2015 10:28:37 PM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-04-16T22:28:37.395+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (04/16/2015 10:06:54 PM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-04-16T22:06:54.530+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

 

Error: (04/10/2015 01:53:36 PM) (Source: vmauthd) (EventID: 1000) (User: )

Description: 2015-04-10T13:53:36.463+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

 

System errors:

=============

Error: (06/13/2015 04:03:15 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

anodlwf

 

Error: (06/13/2015 00:40:15 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

anodlwf

 

Error: (06/13/2015 11:46:41 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

anodlwf

 

Error: (05/11/2015 08:06:41 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {60A90A2F-858D-42AF-8929-82BE9D99E8A1}

Error: (05/05/2015 07:27:20 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

anodlwf

Error: (05/05/2015 07:05:55 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

anodlwf

Error: (05/05/2015 07:05:33 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 22:59:58 on ‎16/‎04/‎2015 was unexpected.

 

Error: (04/16/2015 10:28:25 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

anodlwf

 

Error: (04/16/2015 10:06:46 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

anodlwf

 

Error: (04/16/2015 10:06:22 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 13:53:07 on ‎10/‎04/‎2015 was unexpected.

 

Microsoft Office:

=========================

Error: (01/04/2015 02:32:03 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6713.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 24 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (01/04/2015 02:31:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6713.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 334245 seconds with 3960 seconds of active time.  This session ended with a crash.

 

Error: (01/04/2015 02:17:23 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6712.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 185350 seconds with 480 seconds of active time.  This session ended with a crash.

Error: (12/04/2014 01:55:29 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 758 seconds with 540 seconds of active time.  This session ended with a crash.

 

CodeIntegrity Errors:

===================================

  Date: 2015-06-13 16:02:44.101

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

  Date: 2015-06-13 16:02:44.054

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-06-13 12:39:30.444

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

  Date: 2015-06-13 12:39:30.397

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-06-13 11:46:13.758

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

  Date: 2015-06-13 11:46:13.711

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-05-05 19:26:55.492

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

  Date: 2015-05-05 19:26:55.446

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-05-05 19:05:14.682

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

  Date: 2015-05-05 19:05:14.636

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

==================== Memory info ===========================

 

Processor: Intel® Xeon® CPU X5450 @ 3.00GHz

Percentage of memory in use: 23%

Total physical RAM: 12287.34 MB

Available physical RAM: 9397.7 MB

Total Pagefile: 24572.86 MB

Available Pagefile: 21673.5 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:374.28 GB) NTFS

Drive d: (RAID5) (Fixed) (Total:1397.27 GB) (Free:855 GB) NTFS

Drive g: (Backup Disk) (Fixed) (Total:931.51 GB) (Free:168.99 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: D42AD42A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

 

========================================================

Disk: 1 (Size: 1397.3 GB) (Disk ID: 9AA59AA5)

Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

 

========================================================

Disk: 2 (Size: 931.5 GB) (Disk ID: 8667632D)

Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

 

==================== End of log ============================

*********************************

Malwarebytes Anti-Malware

*****************************************

www.malwarebytes.org

Scan Date: 03/04/2015

Scan Time: 11:29:37

Logfile: mbam030415-1600.txt

Administrator: Yes

 

Version: 2.00.4.1028

Malware Database: v2015.03.30.10

Rootkit Database: v2015.03.31.01

License: Premium

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

 

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: SUNDARS PC

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 492889

Time Elapsed: 44 min, 7 sec

 

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

 

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

 

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

 

Folders: 0

(No malicious items detected)

Files: 0

(No malicious items detected)

 

Physical Sectors: 0

(No malicious items detected)

 

(end)

 


  • 0

Advertisements


#2
SSri09

SSri09

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 144 posts

An update as of 15 June 2015

 

I retried using a couple of wireless cards. One of them is dead. The other says wifi connected but it is not actually connected to the router. All usual troubleshooting were of no use. 

 

I did a summer cleaning of the workstation. I am reposting the Farbar tool re-scan logs for convenience. 

 

Thanks

 

**********************

FRST

************

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by SUNDARS PC (administrator) on SUNDARSPC-PC on 15-06-2015 11:53:10
Running from D:\Users\SUNDARS PC\Desktop
Loaded Profiles: SUNDARS PC (Available Profiles: SUNDARS PC & Administrator & Guest)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Webroot) C:\Program Files\Webroot\WRSA.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
() C:\Windows\SysWOW64\ANIWConnService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Blue Ridge Networks) C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardAgent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe
() C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Windows\SysWOW64\NMSAccessU.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Telefónica) C:\Program Files (x86)\O2\Connection Manager\ImpWiFiSvc.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(BiniSoft.org) C:\Program Files\Windows Firewall Control\wfcs.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(NETGEAR) C:\Program Files (x86)\NETGEAR\A6210\A6210.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
(Dropbox, Inc.) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Webroot) C:\Program Files\Webroot\WRSA.exe
(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
(Blue Ridge Networks) C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardGUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [516960 2013-02-15] (Acronis)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6366264 2013-03-28] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1103440 2013-01-10] (Acronis)
HKLM-x32\...\Run: [WRSVC] => C:\Program Files\Webroot\WRSA.exe [757864 2013-12-10] (Webroot)
HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [508144 2013-11-14] (QFX Software Corporation)
HKLM-x32\...\Run: [AppGuardGUI] => C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardGUI.exe [2988256 2014-08-11] (Blue Ridge Networks)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473496 2013-11-29] (TomTom)
HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
Startup: D:\Users\SUNDARS PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-09-20]
ShortcutTarget: Dropbox.lnk -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-03-28] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-03-28] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-03-28] (Acronis)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-629275367-314371585-4215095554-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...d=ie&ar=msnhome
HKU\S-1-5-21-629275367-314371585-4215095554-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKU\S-1-5-21-629275367-314371585-4215095554-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?...U218DHP&pc=U218
HKU\S-1-5-21-629275367-314371585-4215095554-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE11ENUS/WOL_WCP
SearchScopes: HKLM-x32 -> DefaultScope value is missing
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-11] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-05-20] (Kaspersky Lab ZAO)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-22] (Oracle Corporation)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-11] (Kaspersky Lab ZAO)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-22] (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-11] (Kaspersky Lab ZAO)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-11] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-05-20] (Kaspersky Lab ZAO)
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-11] (Kaspersky Lab ZAO)
BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-11] (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\..\Interfaces\{D069F953-031D-4CCC-860A-9F8AD58B4496}: [NameServer] 127.0.0.1
 
FireFox:
========
FF ProfilePath: D:\Users\SUNDARS PC\AppData\Roaming\Mozilla\Firefox\Profiles\tc02jb7q.default-1409742926604
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll [2015-02-02] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll [2015-02-02] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-09-22] (CANON INC.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2014-08-01] (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-13] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-629275367-314371585-4215095554-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: D:\Users\SUNDARS PC\AppData\Roaming\mozilla\plugins\npatgpc.dll [2014-11-14] (Cisco WebEx LLC)
FF Extension: Download Status Bar - D:\Users\SUNDARS PC\AppData\Roaming\Mozilla\Firefox\Profiles\tc02jb7q.default-1409742926604\Extensions\{6c28e999-e900-4635-a39d-b1ec90ba0c0f}.xpi [2014-09-03]
FF Extension: Adblock Plus - D:\Users\SUNDARS PC\AppData\Roaming\Mozilla\Firefox\Profiles\tc02jb7q.default-1409742926604\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-15]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected]
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected] [2013-06-09]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected]
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected] [2013-06-09]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected]
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\[email protected] [2013-06-09]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Nightly\firefox.exe
 
Chrome: 
=======
CHR HomePage: Default -> 
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Entanglement Web App) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd [2014-11-01]
CHR Extension: (Google Docs) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-22]
CHR Extension: (Google Drive) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-22]
CHR Extension: (Google Voice Search Hotword (Beta)) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-25]
CHR Extension: (WOT) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-11-01]
CHR Extension: (YouTube) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-22]
CHR Extension: (Abine TACO) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cadbkmipeldjmjfcpcjibfjgflahmphk [2014-11-01]
CHR Extension: (Adblock Plus) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-01]
CHR Extension: (Google Search) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-22]
CHR Extension: (Kaspersky URL Advisor) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-02-03]
CHR Extension: (VTchromizer) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\efbjojhplkelaegfbieplglfidafgoka [2014-11-01]
CHR Extension: (Blur) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd [2014-11-01]
CHR Extension: (Kaspersky Protection) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2015-02-03]
CHR Extension: (Poppit!) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2014-11-01]
CHR Extension: (Google Mail Checker) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-11-01]
CHR Extension: (Google Wallet) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-25]
CHR Extension: (Gmail) - D:\Users\SUNDARS PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-22]
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.goog...ice/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\urladvisor.crx [2013-01-14]
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.googl...dnajaicnklhfplh
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 ANIWConnService; C:\Windows\SysWOW64\ANIWConnService.exe [147456 2009-02-11] () [File not signed]
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
R2 BRN_APPGUARD_SERVICE; C:\Program Files (x86)\Blue Ridge Networks\AppGuard\AppGuardAgent.exe [783072 2014-08-11] (Blue Ridge Networks)
S4 dnscrypt-proxy; C:\DNSCRYPT\dnscrypt-proxy.exe [258062 2013-12-05] () [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-08-01] (Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [418312 2014-08-01] ()
R2 NMSAccess; C:\Windows\SysWOW64\NMSAccessU.exe [71096 2009-01-12] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\O2\Connection Manager\ImpWiFiSvc.exe [201080 2011-06-14] (Telefónica)
R2 wfcs; C:\Program Files\Windows Firewall Control\wfcs.exe [78336 2013-12-24] (BiniSoft.org) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WRSVC; C:\Program Files\Webroot\WRSA.exe [757864 2013-12-10] (Webroot)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 A6210; C:\Windows\System32\DRIVERS\A6210.sys [2208984 2014-06-20] (Ralink Technology Corp.)
S1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] () [File not signed]
R1 BrnFileLock; c:\windows\system32\drivers\brnfilelock.sys [79648 2014-06-13] (Blue Ridge Networks)
R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-12-11] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [91008 2014-05-20] (Kaspersky Lab ZAO) [File not signed]
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628320 2014-05-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-12-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [177864 2015-04-02] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\34D465ED.sys [129752 2015-06-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
S3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2014-01-20] (CACE Technologies, Inc.)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2013-06-27] (Research In Motion Limited)
S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-12-06] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-12-06] (Acronis)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-04-03] ()
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-12-06] (Acronis International GmbH)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.)
R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [114720 2015-04-02] (Webroot)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-06-14 17:30 - 2015-06-15 11:50 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\34D465ED.sys
2015-06-14 09:40 - 2015-06-14 09:37 - 00004512 _____ C:\Windows\system32\Drivers\NtgrPwrTable_5.dat
2015-06-14 09:39 - 2015-06-14 09:39 - 00000000 ____D C:\Program Files (x86)\NETGEAR
2015-06-14 08:04 - 2009-06-01 14:23 - 00315392 _____ () C:\Windows\SysWOW64\ANIOApi.dll
2015-06-14 00:16 - 2015-06-14 00:16 - 00001271 _____ D:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-14 00:16 - 2015-06-14 00:16 - 00000000 ____D D:\Users\Guest\AppData\Roaming\Apple Computer
2015-06-14 00:16 - 2015-06-14 00:16 - 00000000 ____D D:\Users\Guest\AppData\Roaming\Adobe
2015-06-14 00:15 - 2015-06-14 00:16 - 00000000 ____D D:\Users\Guest
2015-06-14 00:15 - 2015-06-14 00:15 - 00000020 ___SH D:\Users\Guest\ntuser.ini
2015-06-14 00:15 - 2015-06-14 00:15 - 00000000 ____D D:\Users\Guest\Documents\MyPrivateFolder
2015-06-14 00:15 - 2015-06-14 00:15 - 00000000 ____D D:\Users\Guest\AppData\Roaming\blue ridge networks
2015-06-14 00:15 - 2014-02-12 15:41 - 00000000 ____D D:\Users\Guest\AppData\Roaming\Macromedia
2015-06-14 00:15 - 2013-05-02 09:33 - 00000000 ____D D:\Users\Guest\Documents\Visual Studio 2012
2015-06-14 00:15 - 2009-07-14 05:54 - 00000000 ___RD D:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-14 00:15 - 2009-07-14 05:49 - 00000000 ___RD D:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-06-13 21:00 - 2015-06-13 21:00 - 02357256 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-13 21:00 - 2015-06-13 21:00 - 00000344 _____ C:\Windows\PFRO.log
2015-06-13 20:40 - 2015-06-15 10:50 - 00000908 _____ C:\Windows\setupact.log
2015-06-13 20:40 - 2015-06-13 20:40 - 00000000 _____ C:\Windows\setuperr.log
2015-06-13 20:00 - 2015-06-13 20:00 - 00003310 _____ C:\Windows\System32\Tasks\{63AC1C16-B76F-4144-B0C7-389AC45CC56C}
2015-06-13 19:54 - 2014-11-22 10:57 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-06-13 19:26 - 2014-09-03 12:20 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-06-13 19:13 - 2015-06-13 19:13 - 00000000 ____D D:\Users\SUNDARS PC\AppData\Roaming\Nitro PDF
2015-06-13 16:32 - 2015-06-13 16:33 - 00053605 _____ D:\Users\SUNDARS PC\Desktop\Addition.txt
2015-06-13 16:31 - 2015-06-15 11:53 - 00024440 _____ D:\Users\SUNDARS PC\Desktop\FRST.txt
2015-06-13 16:31 - 2015-06-15 11:53 - 00000000 ____D C:\FRST
2015-06-13 16:26 - 2015-06-13 16:26 - 02109952 _____ (Farbar) D:\Users\SUNDARS PC\Desktop\FRST64.exe
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-06-15 11:53 - 2014-10-06 13:56 - 00000000 ____D C:\Windows TMP
2015-06-15 11:52 - 2013-11-27 19:57 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-15 11:51 - 2014-10-19 16:15 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-15 11:50 - 2014-10-06 13:56 - 00000000 ____D C:\Windows TEMP
2015-06-15 11:50 - 2013-06-09 11:59 - 01104740 _____ C:\Windows\WindowsUpdate.log
2015-06-15 11:26 - 2014-10-19 16:15 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-15 10:57 - 2009-07-14 05:45 - 00013760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-15 10:57 - 2009-07-14 05:45 - 00013760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-15 10:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-14 18:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-06-14 10:14 - 2014-04-20 00:30 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-14 09:59 - 2015-02-11 20:36 - 00010817 _____ C:\Windows\system32\RaCoInst.log
2015-06-14 09:39 - 2015-01-29 11:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-14 09:37 - 2013-11-28 13:13 - 00000000 ____D C:\Windows\Downloaded Installations
2015-06-13 23:30 - 2013-06-10 06:29 - 00000000 ____D D:\Users\SUNDARS PC
2015-06-13 21:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Registration
2015-06-13 20:22 - 2013-06-09 20:54 - 00000000 ____D C:\Windows\Panther
2015-06-13 20:21 - 2013-06-09 18:14 - 00000000 ____D C:\Windows\Minidump
2015-06-13 19:07 - 2014-02-12 15:41 - 00000000 ____D D:\Users\SUNDARS PC\AppData\Roaming\edu.media.mit.Scratch2Editor
2015-06-13 18:53 - 2013-09-29 00:07 - 00000000 ____D D:\Users\SUNDARS PC\.maitreya-7.0
2015-06-13 18:52 - 2013-06-11 11:38 - 00000000 ____D D:\Users\SUNDARS PC\AppData\Local\Apps\2.0
2015-06-13 12:30 - 2014-01-21 00:50 - 00000000 ___RD D:\Users\SUNDARS PC\Dropbox
2015-06-13 12:04 - 2014-01-21 00:47 - 00000000 ____D D:\Users\SUNDARS PC\AppData\Roaming\Dropbox
 
==================== Files in the root of some directories =======
 
2015-04-02 16:43 - 2015-04-02 16:43 - 0003284 _____ () D:\Users\SUNDARS PC\AppData\Roaming\ANIWZCS{57EBEEAA-7AB5-4156-B13C-0830C39151A4}
2015-01-29 11:58 - 2015-02-03 15:02 - 0003284 _____ () D:\Users\SUNDARS PC\AppData\Roaming\ANIWZCS{624826FE-7B9A-4414-9232-8E1185407EB2}
2013-12-29 14:06 - 2014-01-03 14:08 - 0000154 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Rim.Desktop.Exception.log
2013-12-29 14:04 - 2014-05-28 08:24 - 0002021 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2013-12-29 14:06 - 2014-01-03 14:08 - 0000154 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Rim.DesktopHelper.Exception.log
2015-03-26 13:26 - 2015-03-26 13:26 - 0000000 _____ () D:\Users\SUNDARS PC\AppData\Local\BITF9B1.tmp
2014-01-09 12:34 - 2015-01-16 19:59 - 0005296 _____ () D:\Users\SUNDARS PC\AppData\Local\tcNSISDump.Log
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-06-13 13:12
 
==================== End of log ============================
 
*****************************************************
additions
*****************************************************
Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by SUNDARS PC at 2015-06-15 11:53:38
Running from D:\Users\SUNDARS PC\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-629275367-314371585-4215095554-500 - Administrator - Enabled) => C:\Users\Administrator
Guest (S-1-5-21-629275367-314371585-4215095554-501 - Limited - Enabled) => D:\Users\Guest
SUNDARS PC (S-1-5-21-629275367-314371585-4215095554-1001 - Administrator - Enabled) => D:\Users\SUNDARS PC
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Kaspersky Anti-Virus (Disabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
AmiBroker 5.60.3 x64 (HKLM\...\AmiBroker64_is1) (Version: 5.60 - AmiBroker.com)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Blue Ridge Networks AppGuard (HKLM-x32\...\{B18537F1-B130-4C4B-A606-01128D45907E}) (Version: 4.1.45.1 - Blue Ridge Networks)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon MP Navigator 2.0 (HKLM-x32\...\MP Navigator 2.0) (Version:  - )
Canon MP800 (HKLM\...\{04F9B09E-CDB5-46fc-AC30-2E7E7C7A8A34}) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.08 - Piriform)
Cisco WebEx Meetings (HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
Connection Manager (HKLM-x32\...\O2UK) (Version: 8.7.6.800 - Connection Manager)
Dropbox (HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{32136776-FE3F-453D-80DA-CDD993BDB2A3}) (Version: 11.1.20810.00 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HomeplugAV (HKLM-x32\...\{2DFC446B-8A6E-4EF3-99DF-C89E37DB156D}) (Version:  - )
iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
IQFeed Client 5.1.0.5 (HKLM-x32\...\IQFeed Client) (Version: 5.1.0.5 - DTN)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Jagannatha Hora 7.66 (HKLM-x32\...\Jagannatha Hora_is1) (Version: 7.66 - PVR Narasimha Rao)
Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)
Jyotishya Deepika v5.0 (HKLM-x32\...\{40342A0E-7166-491B-A98C-3BEEBD7837A6}) (Version: 5.2.2 - Sridhara Software Technologies)
Kaspersky Anti-Virus 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab)
Kaspersky Anti-Virus 2013 (x32 Version: 13.0.1.4190 - Kaspersky Lab) Hidden
KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.3.0.0 - QFX Software Corporation)
Macromedia Contribute 3.11 (HKLM-x32\...\{4B9535BF-CC90-4158-AF32-CAF57A8820CA}) (Version: 3.11.0.2419 - Macromedia, Inc.)
Macromedia Dreamweaver 8 (HKLM-x32\...\{0837A661-FEC3-48B3-876C-91E7D32048A9}) (Version: 8.0.2 - Macromedia)
Macromedia Extension Manager (HKLM-x32\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)
Macromedia Fireworks 8 (HKLM-x32\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)
Macromedia Flash 8 (HKLM-x32\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)
Macromedia Flash 8 Video Encoder (HKLM-x32\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)
Macromedia Flash Player 8 (HKLM-x32\...\{885A63EA-382B-4DD4-A755-14809B8557D6}) (Version: 8.0.22.0 - Macromedia)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional 2007 (HKLM-x32\...\PROR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (11.1.20828.01) (HKLM-x32\...\{4F2B8233-35EE-4197-8C3B-EACCBF712029}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20828.01) (HKLM-x32\...\{FAE0523E-08A4-4717-8E8E-6EC6F32CBE88}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 for Windows Desktop - ENU (HKLM-x32\...\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}) (Version: 11.0.50727.42 - Microsoft Corporation)
MyDriveConnect 3.3.0.1342 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1342 - TomTom)
NETGEAR A6210 Genie (HKLM-x32\...\InstallShield_{F4C8CAD7-6E60-438A-8F2A-193C89C9171B}) (Version: 1.0.0.25 - NETGEAR)
NETGEAR A6210 Genie (x32 Version: 1.0.0.25 - NETGEAR) Hidden
Nightly 37.0a1 (x86 en-US) (HKLM-x32\...\Nightly 37.0a1 (x86 en-US)) (Version: 37.0a1 - Mozilla)
Nitro Pro 9 (HKLM-x32\...\{c5237a45-d0a0-4c12-9269-f59919377de1}) (Version: 9.5.3.8 - Nitro)
Nitro Pro 9 (Version: 9.5.3.8 - Nitro) Hidden
NVIDIA nView 136.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 136.53 - NVIDIA Corporation)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.210.0 - Tracker Software Products Ltd)
PDF-XChange Lite 4 (HKLM\...\{B860298B-CE03-4DE2-B92E-422F2C20A2D8}_is1) (Version: 4.0.214.2 - Tracker Software Products Ltd)
Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Python 3.3.3 (64-bit) (HKLM\...\{e9d90870-ab19-32a8-aa93-f8348ba21d05}) (Version: 3.3.3150 - Python Software Foundation)
Python 3.3.4 (HKLM-x32\...\{cc2659bc-d27d-3593-a0a0-9ac0de07a430}) (Version: 3.3.4150 - Python Software Foundation)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
R for Windows 3.1.1 (HKLM\...\R for Windows 3.1.1_is1) (Version: 3.1.1 - R Core Team)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)
Recuva (HKLM\...\Recuva) (Version: 1.49 - Piriform)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RStudio (HKLM-x32\...\RStudio) (Version: 0.98.1073 - RStudio)
SaxoTrader 2 (HKLM-x32\...\{024D66E9-D50C-44A7-92B4-2DFDDD95D228}) (Version: 2.85.31.0 - Saxo Bank)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SnapAPI (HKLM-x32\...\{D4830EE9-E795-4CCA-AA7A-612A4E565977}) (Version: 3.11.586 - Acronis)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
SyncBackPro (HKLM-x32\...\SyncBackPro_is1) (Version: 6.0.12.0 - 2BrightSparks)
TaxCalc (HKLM-x32\...\TaxCalcHub) (Version: 2 - Acorah Software Products)
TaxCalc 2010 (HKLM-x32\...\TaxCalc 2010) (Version:  - Acorah Software Products)
TaxCalc 2011 (HKLM-x32\...\TaxCalc 2011) (Version:  - )
TaxCalc 2012 (HKLM-x32\...\TaxCalc 2012) (Version:  - )
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
True Image 2013 (HKLM-x32\...\{A3FDA583-78E5-45B6-A14A-BCF99B8410FB}Visible) (Version: 16.0.6514 - Acronis)
True Image 2013 (x32 Version: 16.0.6514 - Acronis) Hidden
Undelete 360 (HKLM-x32\...\Undelete 360_is1) (Version:  - File Recovery Ltd.)
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
VMware Player (HKLM-x32\...\VMware_Player) (Version: 5.0.3 - VMware, Inc)
VMware Player (Version: 5.0.3 - VMware, Inc.) Hidden
Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 8.0.3.3 - Webroot)
WhoCrashed 4.01 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)
Windows Firewall Control (HKLM\...\Windows Firewall Control) (Version: 4.0.6.0 - BiniSoft.org)
Write-N-Cite (HKLM-x32\...\Write-N-Cite) (Version: III - Refworks)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-629275367-314371585-4215095554-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
 
==================== Restore Points =========================
 
13-06-2015 18:48:53 Revo Uninstaller's restore point - ANIWZCS2 Service
13-06-2015 18:50:10 Revo Uninstaller's restore point - BlackBerry Device Software Updater
13-06-2015 18:50:25 Removed BlackBerry Device Software Updater.
13-06-2015 18:53:09 Revo Uninstaller's restore point - Maitreya 7.0.3
13-06-2015 18:54:24 Revo Uninstaller's restore point - Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
13-06-2015 18:54:37 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
13-06-2015 18:56:00 Revo Uninstaller's restore point - Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
13-06-2015 18:56:14 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
13-06-2015 18:59:42 Revo Uninstaller's restore point - Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
13-06-2015 18:59:57 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
13-06-2015 19:02:05 Revo Uninstaller's restore point - Mozilla Maintenance Service
13-06-2015 19:03:08 Revo Uninstaller's restore point - QCollector Expert For DTN 4.0
13-06-2015 19:05:09 Revo Uninstaller's restore point - Scratch 2 Offline Editor
13-06-2015 19:05:23 Removed Scratch 2 Offline Editor
13-06-2015 19:08:11 Revo Uninstaller's restore point - SmartKpHorary
13-06-2015 19:08:30 Removed SmartKpHorary
13-06-2015 19:10:23 Revo Uninstaller's restore point - System Requirements Lab for Intel
13-06-2015 19:13:38 Removed Java 7 Update 67
13-06-2015 19:41:42 Removed Java 7 Update 67 (64-bit)
13-06-2015 19:55:24 Removed Microsoft Visual C++ 2005 Redistributable (x64)
13-06-2015 19:56:18 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
13-06-2015 19:57:18 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
13-06-2015 19:59:40 Installed Vigor N61 802.11n Wireless USB Adapter
13-06-2015 20:01:36 Installed Vigor N61 802.11n Wireless USB Adapter
14-06-2015 00:27:59 Windows Modules Installer
14-06-2015 08:04:00 Installed Vigor N61 802.11n Wireless USB Adapter
14-06-2015 08:04:37 Installed ANIWZCS2 Service
14-06-2015 08:39:54 Revo Uninstaller's restore point - Vigor N61 802.11n Wireless USB Adapter
14-06-2015 08:40:34 Removed ANIWZCS2 Service
14-06-2015 08:41:22 Removed Vigor N61 802.11n Wireless USB Adapter
14-06-2015 08:43:22 Revo Uninstaller's restore point - NETGEAR A6210 Genie
14-06-2015 08:45:13 Removed NETGEAR A6210 Genie
14-06-2015 08:52:26 Installed NETGEAR A6210 Genie
14-06-2015 09:30:05 Revo Uninstaller's restore point - NETGEAR A6210 Genie
14-06-2015 09:33:34 Removed NETGEAR A6210 Genie
14-06-2015 09:39:18 Installed NETGEAR A6210 Genie
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2015-04-04 11:09 - 2015-04-04 11:37 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {02070FD3-A44F-496A-9BF3-A329BE5124DD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: {04B57B4C-3522-46CB-A39F-D2610095338A} - System32\Tasks\{DF309475-A581-4165-936E-1EFF15E30CC2} => pcalua.exe -a "D:\Users\SUNDARS PC\Downloads\Shockwave_Installer_Slim.exe" -d "D:\Users\SUNDARS PC\Downloads"
Task: {0DB22FCF-CA6C-4D27-B97B-12B2C08D272F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {18400EFC-BD36-4A9B-ADB3-7398EDC0061C} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2013-06-10] (Microsoft Corporation)
Task: {190C2DC1-57A5-4E36-A1B1-2461F82D42C0} - System32\Tasks\{0067DF06-1CA4-4EB7-92AA-34A15C2A47A4} => pcalua.exe -a "D:\DownloadSW\Canon MP800\mp800win64111ej.exe" -d "D:\DownloadSW\Canon MP800"
Task: {28D12B95-450D-47A3-AB21-8BE4984A8260} - System32\Tasks\{49A434F2-4257-4659-B31A-D2F1735D8D9E} => pcalua.exe -a "C:\Windows TMP\Temp3_Vigor_N61+V5.0.2.1022.zip\Setup.exe"
Task: {4824DB31-F424-4D71-A2C0-788488D7BAA0} - System32\Tasks\{FBCC3706-EACD-40D1-8B3B-80B83C9F1C0D} => Chrome.exe http://ui.skype.com/...?LastError=1603
Task: {619CC783-587A-4D5A-A1D5-048A7C1396D9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {6C18733F-DF79-412E-B6F7-ED706CB8DA96} - System32\Tasks\{D973572D-16DB-4F0B-B03D-18B159F083FE} => Chrome.exe http://ui.skype.com/...all?page=tsBing
Task: {93C12D0C-319E-4D21-AD89-91BDFDF67E8D} - System32\Tasks\{45630174-9AFF-4037-9939-25D92277BC8F} => pcalua.exe -a "D:\DownloadSW\Canon MP800\mp800win64111ej.exe" -d "D:\DownloadSW\Canon MP800"
Task: {94F62351-CB41-46D0-A4A7-7B2F3F331DF2} - System32\Tasks\{63AC1C16-B76F-4144-B0C7-389AC45CC56C} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{272E80B6-9579-421F-8B8E-6E8855FA1F91}\setup.exe" -c -runfromtemp -l0x0009 -removeonly
Task: {B3FE7C04-6C76-47D7-B569-A09CAE1CFE71} - System32\Tasks\{0D0787EB-2131-49B4-B353-001FAF0936FA} => Chrome.exe http://ui.skype.com/...e=tsProgressBar
Task: {D2F35EE7-7FFC-4370-9BE2-60890CDA9D6E} - System32\Tasks\{B9DCA183-88F6-4390-A715-B64212C01F26} => pcalua.exe -a "D:\Users\SUNDARS PC\Desktop\wfc4setup.exe" -d "D:\Users\SUNDARS PC\Desktop"
Task: {D779A5C3-E00F-4DBA-9DD1-18E8375113F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-02] (Adobe Systems Incorporated)
Task: {DE846982-5DFD-4C6B-B900-8024031173FF} - System32\Tasks\{FDF79372-B4AC-404F-9714-C52B74B5B67D} => Chrome.exe http://ui.skype.com/...?LastError=1603
Task: {E2915503-5ED1-44CC-A4BC-58970E03C055} - System32\Tasks\{5E28E702-CF72-4DD8-B357-ECB39F446816} => pcalua.exe -a "C:\Windows TMP\Temp1_Vigor_N61+V5.0.2.1022.zip\Setup.exe"
Task: {F7366F50-15A1-4A45-B143-F86BDE7B197D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-04-02 16:41 - 2009-02-11 18:57 - 00147456 _____ () C:\Windows\SysWOW64\ANIWConnService.exe
2014-08-01 15:23 - 2014-08-01 15:23 - 00418312 _____ () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
2015-03-31 20:22 - 2009-01-12 08:15 - 00071096 _____ () C:\Windows\SysWOW64\NMSAccessU.exe
2013-03-27 23:39 - 2013-03-27 23:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-01-14 14:41 - 2013-01-14 14:41 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\kpcengine.2.2.dll
2013-11-05 22:05 - 2013-11-05 22:05 - 01261272 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2013-03-27 23:09 - 2013-03-27 23:09 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2013-11-29 10:29 - 2013-11-29 10:29 - 00026520 _____ () C:\Program Files (x86)\MyDrive Connect\DeviceDetection.dll
2013-11-29 10:28 - 2013-11-29 10:28 - 00082840 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterBase.dll
2013-11-29 10:28 - 2013-11-29 10:28 - 00344984 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterProxy.dll
2014-06-19 09:50 - 2014-06-19 09:50 - 00122880 _____ () C:\Program Files (x86)\NETGEAR\A6210\Ralink.dll
2012-11-21 18:26 - 2012-11-21 18:26 - 01204224 _____ () C:\Program Files (x86)\NETGEAR\A6210\RaWLAPI.dll
2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll
2012-08-17 21:40 - 2012-08-17 21:40 - 00068024 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\QtWebKit\qmlwebkitplugin4.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00750080 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-06-15 11:50 - 2015-06-15 11:50 - 00043008 _____ () c:\Windows TEMP\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx56iud.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00047616 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00865280 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:07 - 2015-03-04 23:07 - 00200704 _____ () D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2013-03-28 02:42 - 2013-03-28 02:42 - 13606944 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll
2013-01-10 14:43 - 2013-01-10 14:43 - 00014360 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\books24x7.com -> hxxps://books24x7.com
IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\skillport.com -> hxxps://skillport.com
IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\skillwsa.com -> hxxps://skillwsa.com
IE trusted site: HKU\S-1-5-21-629275367-314371585-4215095554-1001\...\ultimatix.net -> hxxps://icalms.ultimatix.net
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-629275367-314371585-4215095554-1001\Control Panel\Desktop\\Wallpaper -> D:\Users\SUNDARS PC\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Media is not connected to internet.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{8DBDF54A-6044-4280-BD95-A75FE5503C6F}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe
FirewallRules: [{FA99D32A-DFE9-4A49-8244-3AF34448FA84}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe
FirewallRules: [{9F5E6F7C-1BAE-48C0-906A-5B84CB0FF752}] => (Block) C:\Windows\system32\svchost.exe
FirewallRules: [{52F0BEC5-E727-493E-9ED9-8F53C11E1BA8}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE
FirewallRules: [{37173833-9E91-4523-BB2C-9D0F35330214}] => (Allow) %SystemRoot%\SysWOW64\svchost.exe
FirewallRules: [{76D7BFC5-DE32-4D2B-975E-BF311A970C2B}] => (Allow) %SystemRoot%\SysWOW64\svchost.exe
FirewallRules: [{C25FDC95-75C8-4B02-A680-A9683369255D}] => (Block) LPort=1900
FirewallRules: [{9768C54D-E186-418F-A875-D6E358FA8DBA}] => (Block) LPort=445
FirewallRules: [{6D1CA2F5-7CF0-46CA-AF7A-277C38B2754F}] => (Block) C:\Windows\System32\svchost.exe
FirewallRules: [{38A745CD-9C0B-481F-A0F6-2B55D409C8DE}] => (Allow) C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
FirewallRules: [{55A77A94-5B62-498A-9426-C02BAF3F977B}] => (Allow) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
FirewallRules: [{D1D6BDA2-327D-4124-A999-7B5CBC25EFBF}] => (Allow) LocalHost
FirewallRules: [{CB76087B-1BA0-4271-8CF5-6DD3F72E2E98}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe
FirewallRules: [{734788E0-AFAF-487E-AED0-9298930A1088}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqconnect.exe
FirewallRules: [{E231AF57-69BB-40B9-8E60-7AEA8D2AFCBF}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\IQLinkLauncher.exe
FirewallRules: [{FBA1FFFE-E890-4A05-A650-C5E74DF32FC9}] => (Allow) C:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe
FirewallRules: [{EFB25419-6427-4026-863D-0D0ABAF13106}] => (Allow) C:\program files\bonjour\mdnsresponder.exe
FirewallRules: [{A1DD282B-58C7-45B4-BEE7-752EA6D3906C}] => (Allow) C:\program files\bonjour\mdnsresponder.exe
FirewallRules: [{CB8C8985-DED2-4AD8-A6DB-9DACB7382757}] => (Allow) C:\windows\explorer.exe
FirewallRules: [{CED1BDAB-355B-43E1-AE4C-B6F2BDACD7D7}] => (Allow) C:\Program Files (x86)\Internet Explorer\iexplore.exe
FirewallRules: [{C7AF0FCA-D9E0-46CC-9560-CC3F6374000F}] => (Allow) C:\Windows\System32\ftp.exe
FirewallRules: [{3E10042F-FF69-4A2F-885D-593CF23AB8CB}] => (Allow) FTPCommand
FirewallRules: [{460D9863-B5A3-49C7-85EB-1B0A0DEAFF55}] => (Allow) FTPs
FirewallRules: [{691532FC-BDE4-4416-9D10-2D58CFF798D8}] => (Allow) FTPDataPass
FirewallRules: [{94A3740E-1CBD-4890-92D0-544398794671}] => (Allow) FTPData
FirewallRules: [{AEE2927D-0BE7-48AD-B84F-BB9420B413F7}] => (Allow) C:\program files (x86)\google\update\googleupdate.exe
FirewallRules: [{0080B179-9CEC-40A5-A462-0B82343768A9}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{55BD0BCC-0811-4876-A209-C948E128C403}] => (Allow) %ProgramFiles% (x86)\Common Files\Java\Java Update\jusched.exe
FirewallRules: [{A3E44110-D81C-4C40-97A6-AC370F8A58BC}] => (Allow) %ProgramFiles% (x86)\Common Files\Java\Java Update\jucheck.exe
FirewallRules: [{27BD713F-6845-4387-BBFF-E98D8C0B5B20}] => (Block) Any
FirewallRules: [{36E58820-6D9D-457A-B352-AF3F0CB53A5E}] => (Block) Any
FirewallRules: [{2E0D74DE-530B-4CB9-9F2C-7C2979EDDE73}] => (Allow) %ProgramFiles%\Tracker Software\Live Update\LiveUpdate.exe
FirewallRules: [{D0DA4E97-B166-4DE7-B464-648FA8FD55B0}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\EXCEL.EXE
FirewallRules: [{2F0D4201-BAD0-424A-8C73-E882B4F873AF}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\WINWORD.EXE
FirewallRules: [{9D9D968F-5989-4C63-9066-47179AFDD2B9}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\MSPUB.EXE
FirewallRules: [{AA452646-7D51-40D5-8305-9E680E329612}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\MSACCESS.EXE
FirewallRules: [{5AC02C1F-54F8-4DE5-817E-4FC269EDA339}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe
FirewallRules: [{7647472E-4DD4-4328-B47E-EFC512D8E11C}] => (Allow) LPort=5454
FirewallRules: [{9CDC55CE-0F8C-4329-8BB1-4E0ECEABF1EC}] => (Block) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE
FirewallRules: [{F37CA6CF-E3AE-4078-A751-D5B252818BCA}] => (Allow) %ProgramFiles% (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
FirewallRules: [{22146DC1-A30D-4580-8FD3-D6F5A139510E}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpress.exe
FirewallRules: [{AFF8CA93-2376-44AD-A58F-789CA3994AA1}] => (Allow) LPort=4481
FirewallRules: [{05B41AF1-335D-45C9-9F32-CBC3EE012287}] => (Allow) LPort=4481
FirewallRules: [{5E340545-F01E-49EE-926D-80FA8CDCAF10}] => (Allow) LPort=4482
FirewallRules: [{AB0463F1-4AC9-40C1-83E6-36DDD75867DB}] => (Allow) LPort=4482
FirewallRules: [{A57529DA-512C-4D19-9058-5138DEE08DAC}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\IQLinkLauncher.exe
FirewallRules: [{C5EAB85D-32A8-4BD0-A1EC-8B0EC2B3B0E5}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqlink.exe
FirewallRules: [{184F0E05-1A6E-4CE6-B5EE-0F747B1161BD}] => (Allow) %ProgramFiles% (x86)\DTN\IQFeed\iqlink.exe
FirewallRules: [{E0707014-1506-4E14-8D4F-A92B26385F9B}] => (Allow) C:\program files (x86)\kaspersky lab\kaspersky anti-virus 2013\avp.exe
FirewallRules: [TCP Query User{98C6E13A-351A-487D-AD44-5AF8D8D9F9F4}F:\windows temp\showmypc\smpc3152\smpcph.exe] => (Allow) F:\windows temp\showmypc\smpc3152\smpcph.exe
FirewallRules: [UDP Query User{700CA384-000C-4FFC-9A73-373A6F53B27B}F:\windows temp\showmypc\smpc3152\smpcph.exe] => (Allow) F:\windows temp\showmypc\smpc3152\smpcph.exe
FirewallRules: [{BB96FE9C-EF2E-4A88-BF14-7EB13465E357}] => (Allow) %SystemDrive%\SierraChart\SierraChart.exe
FirewallRules: [{552068C3-117F-412A-A9EE-668545D44F13}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{CC0EB99A-2F26-48FB-9F8D-5550D5243835}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{04442390-99C2-400E-A685-6AF12AB5ABF3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7B9D0D08-61D8-419D-B506-9B14F2A8BCAE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FA8BC656-9D70-46DD-94EC-B84F08F4FAF4}] => (Allow) %ProgramFiles% (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F5682E41-440F-4A19-8F7D-B5406E95F99B}] => (Allow) %ProgramFiles% (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{1FCFDF11-9AE4-43E0-A3E4-F583387E30CD}] => (Allow) %SystemDrive%\DNSCRYPT\dnscrypt-proxy.exe
FirewallRules: [{44BC45A3-350D-42B0-8C9C-71CD726B335B}] => (Allow) %ProgramFiles% (x86)\FileZilla FTP Client\filezilla.exe
FirewallRules: [{EDCDCB73-C6AD-43B0-AB3A-885E738B4187}] => (Allow) %ProgramFiles% (x86)\FileZilla FTP Client\filezilla.exe
FirewallRules: [{120895B4-34BF-4A89-9DCA-1B0D0571DF01}] => (Allow) C:\Program Files\Windows Firewall Control\wfc.exe
FirewallRules: [{394C8FE4-10B7-4A04-A2D2-010C1AA9E1BE}] => (Block) C:\Windows\system32\svchost.exe
FirewallRules: [{3338AFB7-9D11-44F4-A24C-922E4957757A}] => (Block) C:\Windows\system32\svchost.exe
FirewallRules: [{06D10F59-E785-4245-9DA1-D0DF91F4DCBE}] => (Block) C:\Windows\system32\svchost.exe
FirewallRules: [{0532C1C9-E221-40FA-A14A-8BDF388BFA5E}] => (Allow) %ProgramFiles% (x86)\MyDrive Connect\MyDriveConnect.exe
FirewallRules: [{9BE2F7CC-DC2C-49D4-A8B5-0C1E2FE04D32}] => (Block) C:\program files (x86)\kaspersky lab\kaspersky anti-virus 2013\avp.exe
FirewallRules: [{663AC72B-5D2D-4568-BCDD-B1EDEEEB51E6}] => (Allow) %ProgramFiles% (x86)\Skype\Phone\Skype.exe
FirewallRules: [{087C125B-FA62-48B1-9932-14876DAFE822}] => (Allow) %ProgramFiles% (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3CF4B9B8-DDC0-4B64-823C-278499389329}] => (Allow) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE
FirewallRules: [{4961CF2A-C1BE-446C-B570-F0685F0EA4AE}] => (Block) %ProgramFiles% (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2D78B49C-C263-4E58-96A5-439881217E78}] => (Block) %ProgramFiles% (x86)\Microsoft Office\Office12\OUTLOOK.EXE
FirewallRules: [{20DA01E8-28BF-4D5A-837F-AB59D75DB5A4}] => (Allow) %ProgramFiles% (x86)\Skype\Phone\Skype.exe
FirewallRules: [{86C5477D-8DC5-4B04-A5A6-B187C66CD5BF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{90FFCB75-D72E-41B8-A218-09E6CA8A41DD}] => (Allow) C:\Program Files (x86)\Acorah Software Products\TaxCalcHub\TaxCalcHub.exe
FirewallRules: [{FFDDF7E5-B8EB-4975-A5C7-D81AA95AB7C6}] => (Allow) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{467E6A07-709A-4B86-AAFF-CA99C65CCD98}] => (Allow) %ProgramFiles% (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
FirewallRules: [{A58CDFB8-56AD-40DA-B6C8-E465B99DC752}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe
FirewallRules: [{ADF3BDAE-B133-4ECC-9F68-3C4704E7EA98}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe
FirewallRules: [{10910CDC-C8E9-4B06-8527-80C593DB49CF}] => (Allow) %ProgramFiles% (x86)\iTunes\iTunes.exe
FirewallRules: [{E2BCBBCE-DD00-43F8-8AC1-84A252EE2995}] => (Allow) %ProgramFiles% (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
FirewallRules: [{2CD1DF7B-6CC2-4ABB-89C9-55554C6608EC}] => (Allow) %ProgramFiles% (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
FirewallRules: [{2444E4A4-C21D-4A06-895F-DDD0DA1447C5}] => (Allow) %ProgramFiles%\Microsoft Silverlight\sllauncher.exe
FirewallRules: [{24698B26-C70E-46DB-AD79-FC222779BC81}] => (Allow) %ProgramFiles%\Microsoft Silverlight\sllauncher.exe
FirewallRules: [{6D34C37A-30A6-4AFE-9F8A-E5B2D7096530}] => (Allow) C:\program files (x86)\kaspersky lab\kaspersky anti-virus 2013\avp.exe
FirewallRules: [{D166F14C-C20B-4520-845D-9511DEDA34EC}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{2A5A0753-3F25-4295-B1DC-97CBBC09B3E9}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{B5C76304-3E9E-468D-A308-A3A05C6E2773}] => (Allow) C:\Program Files (x86)\Internet Explorer\iexplore.exe
FirewallRules: [{1F55ECD6-49CC-4A59-A413-48A711C3D14F}] => (Allow) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{866CB03C-A52C-4BE5-94B2-84D1CF8B08A4}] => (Allow) D:\Users\SUNDARS PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F4D8749C-FED2-4263-B9EB-717531217398}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{0E6068C1-3F56-49EB-88D8-56EF5E16F56F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{160CBA5C-291C-4D61-8111-22E25A44EF70}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{6BF8BEE8-F9CB-49CB-A597-708327EFE188}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [TCP Query User{DB31D691-A7D8-4F04-BF36-54875425991F}C:\khcoder\dep\mysql\bin\mysqld-nt.exe] => (Allow) C:\khcoder\dep\mysql\bin\mysqld-nt.exe
FirewallRules: [UDP Query User{4E6DA0C0-8B4D-47D3-B9DF-9933B759C613}C:\khcoder\dep\mysql\bin\mysqld-nt.exe] => (Allow) C:\khcoder\dep\mysql\bin\mysqld-nt.exe
FirewallRules: [TCP Query User{06C094CB-33AD-4DF3-B893-73E58BFF038C}C:\windows\syswow64\java.exe] => (Block) C:\windows\syswow64\java.exe
FirewallRules: [UDP Query User{E1B2FA41-719D-4FE6-978F-D7865521B3BB}C:\windows\syswow64\java.exe] => (Block) C:\windows\syswow64\java.exe
FirewallRules: [{B00FD89B-5FCE-4341-BD70-D49C9C4FB8D4}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{7C305130-A050-40E4-A87F-A679767F92A2}D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe] => (Allow) D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe
FirewallRules: [UDP Query User{40EBEA0D-84BF-4CAA-8F94-91946EBF5326}D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe] => (Allow) D:\downloadsw\text mining\dep\mysql\bin\mysqld-nt.exe
FirewallRules: [{A810BC00-20C8-4942-B3CC-3BB1E1C83402}] => (Allow) C:\Program Files (x86)\Acorah Software Products\TaxCalcHub\TaxCalcHub.exe
FirewallRules: [{7F754988-491E-447F-A01F-97EB09EE4259}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A4F14790-C578-4AC6-A93F-5BDC79A69079}] => (Block) C:\program files (x86)\acronis\trueimagehome\trueimage.exe
FirewallRules: [{21AAB52B-E23A-4D68-9CCC-AF0760B6F0FE}] => (Block) C:\program files (x86)\acronis\trueimagehome\trueimage.exe
 
==================== Faulty Device Manager Devices =============
 
Name: PS/2 Compatible Mouse
Description: PS/2 Compatible Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (06/15/2015 11:24:09 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
The value "x64" of attribute "processorArchitecture" in element "assemblyIdentity" is invalid.
 
Error: (06/15/2015 11:22:50 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (06/15/2015 11:22:49 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (06/15/2015 11:22:49 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (06/15/2015 10:50:46 AM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2015-06-15T10:50:46.839+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0
 
Error: (06/15/2015 09:50:48 AM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2015-06-15T09:50:48.190+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0
 
Error: (06/14/2015 04:54:53 PM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2015-06-14T16:54:53.652+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0
 
Error: (06/14/2015 10:17:04 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (06/14/2015 10:14:55 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (06/14/2015 10:03:10 AM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2015-06-14T10:03:10.677+01:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0
 
 
System errors:
=============
Error: (06/15/2015 10:50:39 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
anodlwf
 
Error: (06/15/2015 09:50:41 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
anodlwf
 
Error: (06/14/2015 06:31:26 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
 
Error: (06/14/2015 04:54:42 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
anodlwf
 
Error: (06/14/2015 10:03:06 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
anodlwf
 
Error: (06/14/2015 10:00:35 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F32D97DF-E3E5-4CB9-9E3E-0EB5B4E49801}
 
Error: (06/14/2015 08:19:23 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
anodlwf
 
Error: (06/14/2015 07:44:10 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
anodlwf
 
Error: (06/14/2015 00:35:33 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The Background Intelligent Transfer Service service terminated with service-specific error %%-2147024864.
 
Error: (06/14/2015 00:35:33 AM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT AUTHORITY)
Description: The BITS service failed to start.  Error 2147942432.
 
 
Microsoft Office:
=========================
 
CodeIntegrity Errors:
===================================
  Date: 2015-06-15 10:50:00.439
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-15 10:50:00.408
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-15 09:50:13.708
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-15 09:50:13.661
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-14 16:54:14.598
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-14 16:54:14.552
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-14 10:02:37.389
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-14 10:02:37.358
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-14 08:18:48.223
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2015-06-14 08:18:48.192
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\anodlwfx.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Xeon® CPU X5450 @ 3.00GHz
Percentage of memory in use: 18%
Total physical RAM: 12287.34 MB
Available physical RAM: 10066.09 MB
Total Pagefile: 24572.86 MB
Available Pagefile: 21979.51 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:465.66 GB) (Free:374.6 GB) NTFS
Drive d: (RAID5) (Fixed) (Total:1397.27 GB) (Free:856.07 GB) NTFS
Drive e: (A6210) (CDROM) (Total:0.12 GB) (Free:0 GB) CDFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: D42AD42A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (Size: 1397.3 GB) (Disk ID: 9AA59AA5)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
 
==================== End of log ============================

 


  • 0

#3
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 19,990 posts

Hello SSri09,

Sorry for the delay.

I am not sure that the problem is malware. Maybe corruption or hardware related?

In any event let's try some things to see if they make a difference.

Firstly

Open notepad.

Please copy the contents of the code box below.

To do this highlight (click in the box and press Ctrl + A) the contents of the box and right click on it. Paste this into the open notepad. Save it to the Desktop as fixlist.txt.

Alternatively type the contents of the box into notepad and save it to your desktop as fixlist.txt.

NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-629275367-314371585-4215095554-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
C:\Program Files\McAfee Security Scan
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt  
CMD: bitsadmin /reset /allusers
EmptyTemp:

This script is specifically written for the infection on this person's computer. It should NOT to be used on another machine. It may cause serious damage even to the point of rendering the computer unusable.

Run FRST/FRST64 and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

Next

If you haven't already done so try System File Checker

1.Open an elevated command prompt. To do this, go to Start > All Programs > Accessories  right-click Command Prompt and click Run as administrator. If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.
 
2.At the command prompt, type the following command, and then press ENTER:
 
sfc /scannow

Note the gap between c and / it should be there.

The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions.

Tell me if that finds anything.

After that

Please run Chkdsk:
 


  • Right click on the Start > Open Windows Explorer.
  • Find the hard drive letter (usually local disk C)  for which you want to run the Chkdsk utility.
  • Right-click on the driver letter and select Properties > Tools.
  • Under the Error-Checking section of the window, click the Check Now button. If you have User Account Controls enabled, a window will pop up asking permission to continue. Click Continue.
  • Click to have Chkdsk Automatically fix file system errors and to Scan for and attempt recovery of bad sectors.
  • Click Start.
  • Chkdsk might take a very long time to run, depending on the number of files and folders, the size of the volume, disk performance, and available system resources (such as processor and memory).

Chkdsk will not run if the drive you wish to check is in use. You will be requested to schedule Chkdsk. Click Schedule Check Disk, it then will run the next time you boot your computer. Shut down your computer and then turn it back on, Chkdsk will run.
 
Tell me how it went.

Finally in this post

Please download Farbar Service Scanner and run.
 

  • Make sure the following options are checked:

     
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center/Action Center
  • Windows Update
  • Windows Defender
  • Other Services
  • Press Scan
  • A log (FSS.txt) will be created in the same directory the tool is run.
  • Copy and paste the log back here.

So when you return please post

  • Fixlog.txt
  • FSS.txt
  • and tell me how System File Checker and Chkdsk went

 


  • 0

#4
SSri09

SSri09

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 144 posts
Hi Emeraldnzd,

Thanks for the reply. I was planning to reformat and reinstall this week. I will hold. My schedule is quite crazy on both work and home fronts. Please bear with me and I will come back with a detailed post. Please keep the tread open.

Btw, I did check sfc.....scan now. It showed "windows found corrupt files, which cannot be repaired. I guess I need to reinstall or manually fix the corrupted files using windows original cd. Thinking reinstall is quicker.

I will let you know.

Cheers,
SSRI09

Edited by SSri09, 29 June 2015 - 11:54 AM.

  • 0

#5
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 19,990 posts

 

I did check sfc.....scan now. It showed "windows found corrupt files, which cannot be repaired.

 

The following links may be helpful:

 

Go to the link below for a tutorial on running System File Checker in Windows 7

http://www.sevenforu...le-checker.html

Go to the link below for a tutorial on how to extract and replace corrupt files using the Windows Installation DVD.

http://www.sevenforu...lation-dvd.html

 

 

Please bear with me and I will come back with a detailed post.

 

That's fine, look forward to hearing from you. :)


  • 0

#6
SSri09

SSri09

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 144 posts
Thanks.

Sorry. I have not managed to find time to execute your instructions. I plan to do it this week end and post the logs. Thanks for bearing with me. Cheers !
  • 0

#7
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 19,990 posts

No problem. :)


  • 0

#8
SSri09

SSri09

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 144 posts

Hi Emeraldnzd,

 

Thanks for your patience. 

 

SFC - Corrupt files found, which cannot be fixed. Too many corrupt files to bother fixing it manually. A full reinstall is most probably the best way forward.

CHKDSK - No issues here other than recovering some free spaces.

FSS.TXT- It is not going to be useful as windows and everything remain in disabled/no update mode for a few months.

Fix.LOG - please see the attached.

 

Regards,

SSri

 

--------------------------

FSS log

-------------------------

Farbar Service Scanner Version: 17-01-2015
Ran by SUNDARS PC (administrator) on 06-07-2015 at 11:20:22
Running from "D:\Users\SUNDARS PC\Desktop\GTGJune2015"
Microsoft Windows 7 Ultimate  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
 
Internet Services:
============
 
Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors
 
 
Windows Firewall:
=============
 
Firewall Disabled Policy: 
==================
 
 
System Restore:
============
 
System Restore Policy: 
========================
 
 
Action Center:
============
 
wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.
 
 
Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.
 
 
Windows Autoupdate Disabled Policy: 
============================
 
 
Windows Defender:
==============
 
Other Services:
==============
 
 
File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
 
 
**** End of log ****
 
---------------------
Fix Log
------------------
Fix result of Farbar Recovery Scan Tool (x64) Version:05-07-2015
Ran by SUNDARS PC at 2015-07-06 11:15:49 Run:1
Running from D:\Users\SUNDARS PC\Desktop\GTGJune2015
Loaded Profiles: SUNDARS PC (Available Profiles: SUNDARS PC & Administrator & Guest)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-629275367-314371585-4215095554-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
C:\Program Files\McAfee Security Scan
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt  
CMD: bitsadmin /reset /allusers
EmptyTemp:
*****************
 
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-629275367-314371585-4215095554-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}" => key removed successfully
C:\Program Files\McAfee Security Scan => moved successfully.
 
========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========
 
The operation completed successfully.
 
 
 
========= End of Reg: =========
 
 
========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========
 
The operation completed successfully.
 
 
 
========= End of Reg: =========
 
 
========= RemoveProxy: =========
 
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-629275367-314371585-4215095554-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-629275367-314371585-4215095554-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
 
 
========= End of RemoveProxy: =========
 
 
=========  netsh winsock reset catalog =========
 
 
Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.
 
 
========= End of CMD: =========
 
 
=========  netsh int ip reset c:\resetlog.txt =========
 
Reseting Global, OK!
Reseting Interface, OK!
Restart the computer to complete this action.
 
 
========= End of CMD: =========
 
 
=========  bitsadmin /reset /allusers =========
 
 
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.
 
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
 
Unable to cancel {C9357E87-D806-4C2B-A7F7-A7C4C1E0A209}.
Unable to cancel {CFB5D967-1B2A-479B-8AE5-0D2EF57DD238}.
Unable to cancel {D8552352-21C9-45E4-BEAD-C601BA77CE27}.
Unable to cancel {599B0E59-590E-4077-80DB-B96A1C0157B4}.
Unable to cancel {64EE77D0-DB92-4821-A149-A146A799A85E}.
Unable to cancel {84209C3F-78B7-49E6-8611-5B879D206ECF}.
Unable to cancel {099F362B-82B8-4512-9ED8-C4B61C90F0B6}.
Unable to cancel {A4A7F8F1-04A8-4DBA-9519-EC084E265FD9}.
Unable to cancel {D754DA4B-C312-4884-B46D-4151D8497D7F}.
Unable to cancel {BC1E4727-F86B-4665-B54F-C0D7AB80F9EC}.
Unable to cancel {2ED078EE-9E16-467A-A1D9-9F669F3AFFEC}.
Unable to cancel {38A7163F-0364-4034-99EE-8AB8A100CD91}.
Unable to cancel {825B2A70-6E55-4016-9472-56224A65D7E4}.
Unable to cancel {E6D1426D-563F-4229-BEB9-049FB523E99D}.
Unable to cancel {8280C619-FBF0-4136-A128-5B28F900F627}.
Unable to cancel {AEBA93C6-A90F-4EC7-8007-019CBEE6FCC1}.
Unable to cancel {D8383675-2750-48D9-BE9A-5E855DCF2D60}.
Unable to cancel {5E929EA2-E059-4A22-B517-CA6315F5B706}.
Unable to cancel {C1DD2845-3F78-48F6-B0F1-8CF1741A7C55}.
Unable to cancel {59D258E8-0DB6-463A-9CF5-7A751851A0D7}.
Unable to cancel {7C96C1FB-9E8A-43D3-ACF2-B0A92EF97088}.
Unable to cancel {2753110F-72FF-4BE9-9374-581F3CFB0716}.
Unable to cancel {751F25E0-47EA-4CBA-BD63-11B6FD285862}.
Unable to cancel {5A40CD8E-AE26-4BFE-9F3F-8257E426CDB9}.
Unable to cancel {65CC329C-1F47-4E36-9C82-514B42A91359}.
Unable to cancel {79003677-1FE8-4109-8A3A-850105434952}.
Unable to cancel {507B78AE-91AD-4C5C-B746-9674CF4C1C58}.
Unable to cancel {CC606A8E-D9F7-4722-B959-B44ACA48C055}.
Unable to cancel {BF5D8A63-6401-40A2-B4FE-8F1108766889}.
Unable to cancel {ECB8E859-DCBB-419A-9A37-552582FFEB12}.
Unable to cancel {D17D23BD-4D44-49A6-8DAB-F70A27EC4AF8}.
Unable to cancel {D443B117-70AD-4704-8462-EBE435E13C95}.
Unable to cancel {38AC05EE-D67C-43AF-806B-377B3A60A21E}.
Unable to cancel {A33ABA7D-CB39-48C7-9A74-4E3F97ED1A91}.
{592AC058-F601-4D04-9884-7C0F65857D25} canceled.
1 out of 35 jobs canceled.
 
========= End of CMD: =========
 
EmptyTemp: => 27.8 MB temporary data Removed.
 
 
The system needed a reboot.. 
 
==== End of Fixlog 11:16:02 ====

  • 0

#9
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 19,990 posts

 

A full reinstall is most probably the best way forward.

 

If it were me, I would try Start Up Repair first:

 

Go to Win 7 Startup Repair for instructions on how to carry out a Startup Repair.

 

And for a Repair Installation:

 

Go to Windows 7 Repair Installation for information about how to repair your machine.

 

For now though

 

You might try this one but if unsuccessful I think a re-install is the way to go.

 

Download Windows Repair (All In One) from here.

It will allow you to repair common issues with your computer such as firewall, file permission, and Windows Update problems.  When using this tool you can select the particular fixes you would like to launch and start the repair process.

Please download the tool to somewhere you can find it.

Double click to open and follow the prompts to install.

Once installed click on the tab Start Repairs and the button Start

At the list that presents put a check (tick) in the following:

• Reset Registry Permissions
• Reset File Permissions
• Register System Files
• Repair WMI
• Repair Windows Firewall
• Repair Internet Explorer
• Repair MDAC & MS Jet
• Repair Hosts File
• Remove Policies Set By Infections
• Repair Icons
• Repair Windows Updates


Also put a check in the Restart/Shutdown System When Finished (lower right) box.

and in Restart System

Then click on the Start button if it doesn't do it automatically

If it asks you to back up your system click No and continue

When it is finished come back and tell me how it went.

 


  • 0

#10
SSri09

SSri09

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 144 posts

When it is finished come back and tell me how it went.

 

 

 

The windows repair is running with ticks enabled as per your advice. I will post tomorrow. 


  • 0

#11
SSri09

SSri09

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 144 posts

Sorry....The windows repair did not solve the problem. Internet stays disconnected. A full reinstall seems inevitable, although I think motherboard is the culprit. Interestingly, I do get an error, some time at boot, that memory fan is not running. I had to reset the fan to make it work. 

 

I will try a full reinstall of the OS. If that fails, I am not going to spend a few hundred pounds to get the original motherboard from HP. I will source it from ebay, which may cost me just a few ten pounds :)

 

Thanks for your help, which is greatly appreciated. 


Edited by SSri09, 08 July 2015 - 04:19 PM.

  • 0

#12
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 19,990 posts

Thanks telling us.

 

As you say, I think you have a hardware problem.

 

Not palatable, but that's what you are faced with.

 

All the best with the replacements. :)


  • 0

#13
SSri09

SSri09

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 144 posts

I will do a reinstall before ditching the mobo. Thank you for the help. You may close the thread. Cheers


  • 0

#14
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 19,990 posts

Very best of luck. :)


  • 0

#15
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 19,990 posts

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP