Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Posted 11 November 2012 - 01:55 AM
Posted 11 November 2012 - 05:28 AM
Posted 12 November 2012 - 01:06 AM
10:18:19.0296 2688 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
10:18:19.0748 2688 ============================================================
10:18:19.0748 2688 Current date / time: 2012/11/11 10:18:19.0748
10:18:19.0748 2688 SystemInfo:
10:18:19.0748 2688
10:18:19.0749 2688 OS Version: 6.1.7601 ServicePack: 1.0
10:18:19.0749 2688 Product type: Workstation
10:18:19.0749 2688 ComputerName: ZARROKK-PC
10:18:19.0749 2688 UserName: Zarrokk
10:18:19.0749 2688 Windows directory: C:\Windows
10:18:19.0749 2688 System windows directory: C:\Windows
10:18:19.0749 2688 Running under WOW64
10:18:19.0749 2688 Processor architecture: Intel x64
10:18:19.0749 2688 Number of processors: 2
10:18:19.0749 2688 Page size: 0x1000
10:18:19.0749 2688 Boot type: Normal boot
10:18:19.0749 2688 ============================================================
10:18:22.0250 2688 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:18:22.0259 2688 ============================================================
10:18:22.0260 2688 \Device\Harddisk0\DR0:
10:18:22.0284 2688 GPT partitions:
10:18:22.0284 2688 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {45B7370E-D4F5-4CC1-A4C0-ECC4D578A8F8}, Name: EFI System Partition, StartLBA 0x28, BlocksNum 0x64000
10:18:22.0284 2688 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {48465300-0000-11AA-AA11-00306543ECAC}, UniqueGUID: {F8258305-43DB-4E56-8590-DB90E9388551}, Name: P1, StartLBA 0x64028, BlocksNum 0x11588BC0
10:18:22.0284 2688 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {942F0D69-246D-4595-9893-0C454B98F3A3}, Name: BOOTCAMP, StartLBA 0x1162D000, BlocksNum 0xBB98800
10:18:22.0284 2688 MBR partitions:
10:18:22.0284 2688 \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x1162D000, BlocksNum 0xBB98800
10:18:22.0284 2688 ============================================================
10:18:22.0351 2688 C: <-> \Device\Harddisk0\DR0\Partition4
10:18:22.0351 2688 ============================================================
10:18:22.0351 2688 Initialize success
10:18:22.0351 2688 ============================================================
10:18:23.0697 3996 ============================================================
10:18:23.0697 3996 Scan started
10:18:23.0697 3996 Mode: Manual;
10:18:23.0697 3996 ============================================================
10:18:25.0644 3996 ================ Scan system memory ========================
10:18:25.0644 3996 System memory - ok
10:18:25.0645 3996 ================ Scan services =============================
10:18:26.0433 3996 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
10:18:26.0436 3996 1394ohci - ok
10:18:26.0548 3996 [ 61A581E5481E22A76A88490C57015105 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
10:18:26.0550 3996 ACDaemon - ok
10:18:26.0594 3996 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
10:18:26.0600 3996 ACPI - ok
10:18:26.0644 3996 [ 12C5274CD87449A2A37A607CDB321922 ] acpials C:\Windows\system32\DRIVERS\acpials.sys
10:18:26.0645 3996 acpials - ok
10:18:26.0692 3996 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
10:18:26.0692 3996 AcpiPmi - ok
10:18:26.0781 3996 [ 62B7936F9036DD6ED36E6A7EFA805DC0 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
10:18:26.0783 3996 AdobeARMservice - ok
10:18:26.0937 3996 [ 0CB0AA071C7B86A64F361DCFDF357329 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
10:18:26.0938 3996 AdobeFlashPlayerUpdateSvc - ok
10:18:26.0996 3996 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
10:18:27.0003 3996 adp94xx - ok
10:18:27.0065 3996 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
10:18:27.0070 3996 adpahci - ok
10:18:27.0090 3996 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
10:18:27.0092 3996 adpu320 - ok
10:18:27.0132 3996 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
10:18:27.0134 3996 AeLookupSvc - ok
10:18:27.0187 3996 [ 6CCD1135320109D6B219F1A6E04AD9F6 ] Afc C:\Windows\syswow64\drivers\Afc.sys
10:18:27.0188 3996 Afc - ok
10:18:27.0246 3996 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
10:18:27.0252 3996 AFD - ok
10:18:27.0299 3996 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
10:18:27.0301 3996 agp440 - ok
10:18:27.0339 3996 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
10:18:27.0340 3996 ALG - ok
10:18:27.0375 3996 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
10:18:27.0375 3996 aliide - ok
10:18:27.0388 3996 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
10:18:27.0389 3996 amdide - ok
10:18:27.0427 3996 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
10:18:27.0428 3996 AmdK8 - ok
10:18:27.0453 3996 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
10:18:27.0455 3996 AmdPPM - ok
10:18:27.0510 3996 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
10:18:27.0570 3996 amdsata - ok
10:18:27.0597 3996 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
10:18:27.0600 3996 amdsbs - ok
10:18:27.0625 3996 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
10:18:27.0626 3996 amdxata - ok
10:18:27.0703 3996 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
10:18:27.0704 3996 AppID - ok
10:18:27.0734 3996 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
10:18:27.0735 3996 AppIDSvc - ok
10:18:27.0753 3996 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
10:18:27.0755 3996 Appinfo - ok
10:18:27.0841 3996 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
10:18:27.0843 3996 Apple Mobile Device - ok
10:18:27.0902 3996 [ F65D10A8637F5EB0C6F7811548B06770 ] AppleBtBc C:\Windows\system32\DRIVERS\AppleBtBc.sys
10:18:27.0902 3996 AppleBtBc - ok
10:18:27.0944 3996 [ B3D07AC99E35AADD1EEC5669CDC15CC6 ] AppleHFS C:\Windows\system32\drivers\AppleHFS.sys
10:18:27.0945 3996 AppleHFS - ok
10:18:27.0981 3996 [ 6882A29F98BAD0C7E77D6773B072B462 ] AppleMNT C:\Windows\system32\drivers\AppleMNT.sys
10:18:27.0982 3996 AppleMNT - ok
10:18:28.0031 3996 [ A0A045A7CC583E1B024ABA3E9B38E2C0 ] applemtm C:\Windows\system32\DRIVERS\applemtm.sys
10:18:28.0032 3996 applemtm - ok
10:18:28.0067 3996 [ ACEADB1A68DCA39B055C32ABC192197A ] applemtp C:\Windows\system32\DRIVERS\applemtp.sys
10:18:28.0068 3996 applemtp - ok
10:18:28.0138 3996 [ 0039E9279A22BAA91F4EDEA153BBDAFF ] AppleOSSMgr C:\Windows\system32\AppleOSSMgr.exe
10:18:28.0141 3996 AppleOSSMgr - ok
10:18:28.0186 3996 [ F3C77C2B1D5613AECF3D75B68B538102 ] AppleTimeSrv C:\Windows\system32\AppleTimeSrv.exe
10:18:28.0188 3996 AppleTimeSrv - ok
10:18:28.0258 3996 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
10:18:28.0260 3996 arc - ok
10:18:28.0281 3996 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
10:18:28.0283 3996 arcsas - ok
10:18:28.0325 3996 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
10:18:28.0326 3996 AsyncMac - ok
10:18:28.0342 3996 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
10:18:28.0342 3996 atapi - ok
10:18:28.0393 3996 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:18:28.0402 3996 AudioEndpointBuilder - ok
10:18:28.0420 3996 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
10:18:28.0423 3996 AudioSrv - ok
10:18:28.0449 3996 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
10:18:28.0451 3996 AxInstSV - ok
10:18:28.0515 3996 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
10:18:28.0521 3996 b06bdrv - ok
10:18:28.0584 3996 [ BFD70BEA3F8398F6B8B44E5CDED3249C ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
10:18:28.0589 3996 b57nd60a - ok
10:18:28.0736 3996 [ 64032CA1644A336BD98ACFA5601E925E ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys
10:18:28.0848 3996 BCM43XX - ok
10:18:28.0911 3996 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
10:18:28.0913 3996 BDESVC - ok
10:18:28.0984 3996 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
10:18:28.0984 3996 Beep - ok
10:18:29.0035 3996 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
10:18:29.0045 3996 BFE - ok
10:18:29.0094 3996 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
10:18:29.0107 3996 BITS - ok
10:18:29.0149 3996 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
10:18:29.0169 3996 blbdrive - ok
10:18:29.0311 3996 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
10:18:29.0318 3996 Bonjour Service - ok
10:18:29.0357 3996 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
10:18:29.0359 3996 bowser - ok
10:18:29.0394 3996 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
10:18:29.0394 3996 BrFiltLo - ok
10:18:29.0429 3996 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
10:18:29.0430 3996 BrFiltUp - ok
10:18:29.0470 3996 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
10:18:29.0471 3996 BridgeMP - ok
10:18:29.0524 3996 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
10:18:29.0526 3996 Browser - ok
10:18:29.0552 3996 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
10:18:29.0556 3996 Brserid - ok
10:18:29.0585 3996 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
10:18:29.0586 3996 BrSerWdm - ok
10:18:29.0622 3996 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
10:18:29.0623 3996 BrUsbMdm - ok
10:18:29.0641 3996 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
10:18:29.0642 3996 BrUsbSer - ok
10:18:29.0729 3996 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
10:18:29.0730 3996 BthEnum - ok
10:18:29.0761 3996 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
10:18:29.0762 3996 BTHMODEM - ok
10:18:29.0828 3996 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
10:18:29.0830 3996 BthPan - ok
10:18:29.0855 3996 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
10:18:29.0862 3996 BTHPORT - ok
10:18:29.0907 3996 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
10:18:29.0908 3996 bthserv - ok
10:18:29.0945 3996 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
10:18:29.0947 3996 BTHUSB - ok
10:18:29.0984 3996 catchme - ok
10:18:30.0023 3996 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
10:18:30.0025 3996 cdfs - ok
10:18:30.0061 3996 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
10:18:30.0066 3996 cdrom - ok
10:18:30.0109 3996 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
10:18:30.0111 3996 CertPropSvc - ok
10:18:30.0142 3996 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
10:18:30.0143 3996 circlass - ok
10:18:30.0187 3996 [ 11DA0CCBCE49E7A4C6A4F9F2B4E858F8 ] CirrusFilter C:\Windows\system32\DRIVERS\CS420x64.sys
10:18:30.0188 3996 CirrusFilter - ok
10:18:30.0213 3996 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
10:18:30.0219 3996 CLFS - ok
10:18:30.0288 3996 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:18:30.0309 3996 clr_optimization_v2.0.50727_32 - ok
10:18:30.0428 3996 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
10:18:30.0430 3996 clr_optimization_v2.0.50727_64 - ok
10:18:30.0570 3996 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:18:30.0572 3996 clr_optimization_v4.0.30319_32 - ok
10:18:30.0632 3996 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
10:18:30.0635 3996 clr_optimization_v4.0.30319_64 - ok
10:18:30.0699 3996 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
10:18:30.0700 3996 CmBatt - ok
10:18:30.0725 3996 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
10:18:30.0726 3996 cmdide - ok
10:18:30.0780 3996 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
10:18:30.0786 3996 CNG - ok
10:18:30.0833 3996 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
10:18:30.0834 3996 Compbatt - ok
10:18:30.0868 3996 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
10:18:30.0869 3996 CompositeBus - ok
10:18:30.0885 3996 COMSysApp - ok
10:18:30.0907 3996 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
10:18:30.0908 3996 crcdisk - ok
10:18:30.0979 3996 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
10:18:30.0982 3996 CryptSvc - ok
10:18:31.0028 3996 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
10:18:31.0038 3996 DcomLaunch - ok
10:18:31.0087 3996 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
10:18:31.0092 3996 defragsvc - ok
10:18:31.0136 3996 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
10:18:31.0138 3996 DfsC - ok
10:18:31.0185 3996 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
10:18:31.0190 3996 Dhcp - ok
10:18:31.0222 3996 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
10:18:31.0223 3996 discache - ok
10:18:31.0271 3996 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
10:18:31.0273 3996 Disk - ok
10:18:31.0323 3996 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
10:18:31.0326 3996 Dnscache - ok
10:18:31.0364 3996 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
10:18:31.0369 3996 dot3svc - ok
10:18:31.0391 3996 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
10:18:31.0393 3996 DPS - ok
10:18:31.0421 3996 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
10:18:31.0421 3996 drmkaud - ok
10:18:31.0460 3996 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
10:18:31.0464 3996 dtsoftbus01 - ok
10:18:31.0523 3996 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
10:18:31.0536 3996 DXGKrnl - ok
10:18:31.0581 3996 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
10:18:31.0603 3996 EapHost - ok
10:18:31.0701 3996 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
10:18:31.0793 3996 ebdrv - ok
10:18:31.0839 3996 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
10:18:31.0841 3996 EFS - ok
10:18:31.0922 3996 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
10:18:31.0932 3996 ehRecvr - ok
10:18:31.0945 3996 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
10:18:31.0947 3996 ehSched - ok
10:18:32.0002 3996 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
10:18:32.0009 3996 elxstor - ok
10:18:32.0028 3996 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
10:18:32.0051 3996 ErrDev - ok
10:18:32.0119 3996 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
10:18:32.0125 3996 EventSystem - ok
10:18:32.0168 3996 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
10:18:32.0171 3996 exfat - ok
10:18:32.0219 3996 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
10:18:32.0222 3996 fastfat - ok
10:18:32.0275 3996 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
10:18:32.0287 3996 Fax - ok
10:18:32.0305 3996 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
10:18:32.0306 3996 fdc - ok
10:18:32.0351 3996 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
10:18:32.0353 3996 fdPHost - ok
10:18:32.0364 3996 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
10:18:32.0368 3996 FDResPub - ok
10:18:32.0407 3996 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
10:18:32.0424 3996 FileInfo - ok
10:18:32.0454 3996 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
10:18:32.0455 3996 Filetrace - ok
10:18:32.0587 3996 [ BB0667B0171B632B97EA759515476F07 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
10:18:32.0595 3996 FLEXnet Licensing Service - ok
10:18:32.0613 3996 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
10:18:32.0614 3996 flpydisk - ok
10:18:32.0652 3996 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
10:18:32.0657 3996 FltMgr - ok
10:18:32.0736 3996 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
10:18:32.0752 3996 FontCache - ok
10:18:32.0822 3996 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
10:18:32.0823 3996 FontCache3.0.0.0 - ok
10:18:32.0847 3996 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
10:18:32.0851 3996 FsDepends - ok
10:18:32.0892 3996 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
10:18:32.0893 3996 Fs_Rec - ok
10:18:32.0942 3996 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
10:18:32.0946 3996 fvevol - ok
10:18:32.0979 3996 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
10:18:32.0980 3996 gagp30kx - ok
10:18:33.0029 3996 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
10:18:33.0030 3996 GEARAspiWDM - ok
10:18:33.0416 3996 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
10:18:33.0464 3996 gpsvc - ok
10:18:33.0510 3996 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
10:18:33.0511 3996 hcw85cir - ok
10:18:33.0569 3996 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:18:33.0574 3996 HdAudAddService - ok
10:18:33.0624 3996 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
10:18:33.0626 3996 HDAudBus - ok
10:18:33.0662 3996 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
10:18:33.0663 3996 HidBatt - ok
10:18:33.0684 3996 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
10:18:33.0686 3996 HidBth - ok
10:18:33.0719 3996 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
10:18:33.0720 3996 HidIr - ok
10:18:33.0758 3996 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
10:18:33.0760 3996 hidserv - ok
10:18:33.0809 3996 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
10:18:33.0810 3996 HidUsb - ok
10:18:33.0868 3996 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
10:18:33.0871 3996 hkmsvc - ok
10:18:33.0893 3996 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:18:33.0897 3996 HomeGroupListener - ok
10:18:33.0936 3996 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:18:33.0940 3996 HomeGroupProvider - ok
10:18:33.0973 3996 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
10:18:33.0975 3996 HpSAMD - ok
10:18:34.0008 3996 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
10:18:34.0018 3996 HTTP - ok
10:18:34.0052 3996 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
10:18:34.0053 3996 hwpolicy - ok
10:18:34.0111 3996 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
10:18:34.0113 3996 i8042prt - ok
10:18:34.0175 3996 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
10:18:34.0181 3996 iaStorV - ok
10:18:34.0275 3996 [ DAF66902F08796F9C694901660E5A64A ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
10:18:34.0276 3996 IDriverT - ok
10:18:34.0348 3996 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
10:18:34.0360 3996 idsvc - ok
10:18:34.0408 3996 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
10:18:34.0409 3996 iirsp - ok
10:18:34.0463 3996 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
10:18:34.0478 3996 IKEEXT - ok
10:18:34.0514 3996 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
10:18:34.0515 3996 intelide - ok
10:18:34.0555 3996 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
10:18:34.0556 3996 intelppm - ok
10:18:34.0602 3996 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
10:18:34.0604 3996 IPBusEnum - ok
10:18:34.0635 3996 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:18:34.0637 3996 IpFilterDriver - ok
10:18:34.0672 3996 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
10:18:34.0680 3996 iphlpsvc - ok
10:18:34.0715 3996 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
10:18:34.0716 3996 IPMIDRV - ok
10:18:34.0742 3996 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
10:18:34.0744 3996 IPNAT - ok
10:18:34.0803 3996 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
10:18:34.0815 3996 iPod Service - ok
10:18:34.0865 3996 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
10:18:34.0866 3996 IRENUM - ok
10:18:34.0896 3996 [ A2EA52F7140D9439EF0ECA7A9E2940C9 ] IRRemoteFlt C:\Windows\system32\DRIVERS\IRFilter.sys
10:18:34.0897 3996 IRRemoteFlt - ok
10:18:34.0931 3996 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
10:18:34.0932 3996 isapnp - ok
10:18:34.0959 3996 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
10:18:34.0963 3996 iScsiPrt - ok
10:18:34.0991 3996 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
10:18:34.0993 3996 kbdclass - ok
10:18:35.0023 3996 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
10:18:35.0024 3996 kbdhid - ok
10:18:35.0095 3996 [ D807B0B9549705D0536458CBBC8A0857 ] KeyAgent C:\Windows\system32\drivers\KeyAgent.sys
10:18:35.0096 3996 KeyAgent - ok
10:18:35.0118 3996 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
10:18:35.0120 3996 KeyIso - ok
10:18:35.0207 3996 [ C307A605C49D21592B6C9BB41FBE893B ] KeyMagic C:\Windows\system32\DRIVERS\KeyMagic.sys
10:18:35.0208 3996 KeyMagic - ok
10:18:35.0246 3996 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
10:18:35.0248 3996 KSecDD - ok
10:18:35.0274 3996 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
10:18:35.0276 3996 KSecPkg - ok
10:18:35.0321 3996 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
10:18:35.0322 3996 ksthunk - ok
10:18:35.0361 3996 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
10:18:35.0367 3996 KtmRm - ok
10:18:35.0419 3996 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
10:18:35.0424 3996 LanmanServer - ok
10:18:35.0482 3996 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:18:35.0488 3996 LanmanWorkstation - ok
10:18:35.0527 3996 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
10:18:35.0529 3996 lltdio - ok
10:18:35.0581 3996 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
10:18:35.0588 3996 lltdsvc - ok
10:18:35.0613 3996 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
10:18:35.0614 3996 lmhosts - ok
10:18:35.0665 3996 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
10:18:35.0669 3996 LSI_FC - ok
10:18:35.0677 3996 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
10:18:35.0679 3996 LSI_SAS - ok
10:18:35.0720 3996 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
10:18:35.0722 3996 LSI_SAS2 - ok
10:18:35.0737 3996 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
10:18:35.0740 3996 LSI_SCSI - ok
10:18:35.0762 3996 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
10:18:35.0764 3996 luafv - ok
10:18:35.0803 3996 [ 2E08DEE5F6D31FAFA758D42D7DC83884 ] MacHALDriver C:\Windows\system32\drivers\MacHALDriver.sys
10:18:35.0804 3996 MacHALDriver - ok
10:18:35.0837 3996 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
10:18:35.0839 3996 Mcx2Svc - ok
10:18:35.0864 3996 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
10:18:35.0866 3996 megasas - ok
10:18:35.0908 3996 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
10:18:35.0913 3996 MegaSR - ok
10:18:35.0953 3996 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
10:18:35.0955 3996 MMCSS - ok
10:18:35.0978 3996 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
10:18:35.0980 3996 Modem - ok
10:18:36.0009 3996 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
10:18:36.0010 3996 monitor - ok
10:18:36.0048 3996 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
10:18:36.0050 3996 mouclass - ok
10:18:36.0081 3996 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
10:18:36.0086 3996 mouhid - ok
10:18:36.0127 3996 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
10:18:36.0129 3996 mountmgr - ok
10:18:36.0153 3996 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
10:18:36.0156 3996 mpio - ok
10:18:36.0187 3996 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
10:18:36.0189 3996 mpsdrv - ok
10:18:36.0250 3996 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
10:18:36.0264 3996 MpsSvc - ok
10:18:36.0311 3996 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
10:18:36.0314 3996 MRxDAV - ok
10:18:36.0357 3996 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
10:18:36.0359 3996 mrxsmb - ok
10:18:36.0387 3996 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:18:36.0391 3996 mrxsmb10 - ok
10:18:36.0411 3996 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:18:36.0413 3996 mrxsmb20 - ok
10:18:36.0453 3996 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
10:18:36.0454 3996 msahci - ok
10:18:36.0525 3996 [ 8E46A7BAC823DD82D4FB2A34C3DF4C1D ] MSCSPTISRV C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
10:18:36.0527 3996 MSCSPTISRV - ok
10:18:36.0547 3996 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
10:18:36.0549 3996 msdsm - ok
10:18:36.0589 3996 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
10:18:36.0592 3996 MSDTC - ok
10:18:36.0620 3996 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
10:18:36.0621 3996 Msfs - ok
10:18:36.0669 3996 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
10:18:36.0670 3996 mshidkmdf - ok
10:18:36.0677 3996 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
10:18:36.0678 3996 msisadrv - ok
10:18:36.0713 3996 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
10:18:36.0716 3996 MSiSCSI - ok
10:18:36.0724 3996 msiserver - ok
10:18:36.0769 3996 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
10:18:36.0770 3996 MSKSSRV - ok
10:18:36.0789 3996 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
10:18:36.0790 3996 MSPCLOCK - ok
10:18:36.0808 3996 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
10:18:36.0809 3996 MSPQM - ok
10:18:36.0853 3996 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
10:18:36.0859 3996 MsRPC - ok
10:18:36.0903 3996 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
10:18:36.0904 3996 mssmbios - ok
10:18:36.0917 3996 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
10:18:36.0919 3996 MSTEE - ok
10:18:36.0939 3996 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
10:18:36.0940 3996 MTConfig - ok
10:18:37.0087 3996 [ 04B41B25CAC82D7A2F7C4FA8975E2817 ] MT_TRACKPAD C:\Windows\system32\drivers\MT_Trackpad.sys
10:18:37.0088 3996 MT_TRACKPAD - ok
10:18:37.0123 3996 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
10:18:37.0124 3996 Mup - ok
10:18:37.0174 3996 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
10:18:37.0182 3996 napagent - ok
10:18:37.0242 3996 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
10:18:37.0247 3996 NativeWifiP - ok
10:18:37.0346 3996 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
10:18:37.0360 3996 NDIS - ok
10:18:37.0386 3996 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
10:18:37.0388 3996 NdisCap - ok
10:18:37.0432 3996 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
10:18:37.0433 3996 NdisTapi - ok
10:18:37.0464 3996 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
10:18:37.0465 3996 Ndisuio - ok
10:18:37.0488 3996 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
10:18:37.0491 3996 NdisWan - ok
10:18:37.0508 3996 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
10:18:37.0509 3996 NDProxy - ok
10:18:37.0558 3996 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
10:18:37.0559 3996 NetBIOS - ok
10:18:37.0584 3996 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
10:18:37.0589 3996 NetBT - ok
10:18:37.0617 3996 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
10:18:37.0619 3996 Netlogon - ok
10:18:37.0660 3996 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
10:18:37.0665 3996 Netman - ok
10:18:37.0681 3996 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
10:18:37.0689 3996 netprofm - ok
10:18:37.0725 3996 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
10:18:37.0727 3996 NetTcpPortSharing - ok
10:18:37.0778 3996 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
10:18:37.0779 3996 nfrd960 - ok
10:18:37.0828 3996 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
10:18:37.0833 3996 NlaSvc - ok
10:18:37.0851 3996 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
10:18:37.0854 3996 Npfs - ok
10:18:37.0879 3996 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
10:18:37.0881 3996 nsi - ok
10:18:37.0896 3996 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
10:18:37.0897 3996 nsiproxy - ok
10:18:37.0987 3996 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
10:18:38.0011 3996 Ntfs - ok
10:18:38.0043 3996 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
10:18:38.0044 3996 Null - ok
10:18:38.0087 3996 [ 786DB821BFD57C0551DBBE4F75384A7D ] nusb3hub C:\Windows\system32\drivers\nusb3hub.sys
10:18:38.0088 3996 nusb3hub - ok
10:18:38.0127 3996 [ DAA8005CAF745042BB427A1ED7433354 ] nusb3xhc C:\Windows\system32\drivers\nusb3xhc.sys
10:18:38.0130 3996 nusb3xhc - ok
10:18:38.0221 3996 [ E20ABD5B229760158F753CA90B97E090 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
10:18:38.0265 3996 NVHDA - ok
10:18:38.0796 3996 [ 4A05684DA143D35F67431C0C5246BC29 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
10:18:39.0121 3996 nvlddmkm - ok
10:18:39.0171 3996 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
10:18:39.0174 3996 nvraid - ok
10:18:39.0235 3996 [ 61A59FB62864EB3F32D24985A505CE03 ] nvsmu C:\Windows\system32\DRIVERS\nvsmu.sys
10:18:39.0236 3996 nvsmu - ok
10:18:39.0280 3996 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
10:18:39.0283 3996 nvstor - ok
10:18:39.0334 3996 [ 528E6E96492FA403951AFFD3F30134DE ] nvsvc C:\Windows\system32\nvvsvc.exe
10:18:39.0339 3996 nvsvc - ok
10:18:39.0411 3996 [ 7E22DE30E222BFDFCEC7E77032BAF3CD ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
10:18:39.0442 3996 nvUpdatusService - ok
10:18:39.0465 3996 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
10:18:39.0467 3996 nv_agp - ok
10:18:39.0475 3996 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
10:18:39.0477 3996 ohci1394 - ok
10:18:39.0523 3996 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
10:18:39.0528 3996 p2pimsvc - ok
10:18:39.0550 3996 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
10:18:39.0559 3996 p2psvc - ok
10:18:39.0629 3996 [ 753A8F339F231D2B857E2CCD51A6E6CA ] PACSPTISVR C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
10:18:39.0643 3996 PACSPTISVR - ok
10:18:39.0680 3996 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
10:18:39.0682 3996 Parport - ok
10:18:39.0721 3996 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
10:18:39.0723 3996 partmgr - ok
10:18:39.0762 3996 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
10:18:39.0765 3996 PcaSvc - ok
10:18:39.0781 3996 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
10:18:39.0832 3996 pci - ok
10:18:39.0849 3996 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
10:18:39.0850 3996 pciide - ok
10:18:39.0884 3996 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
10:18:39.0889 3996 pcmcia - ok
10:18:39.0911 3996 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
10:18:39.0912 3996 pcw - ok
10:18:39.0966 3996 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
10:18:39.0977 3996 PEAUTH - ok
10:18:40.0075 3996 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
10:18:40.0077 3996 PerfHost - ok
10:18:40.0177 3996 [ 6CC2AC7172F4AA215DB3FA3D5DB0F90E ] PhyMem C:\Program Files\PowerPlanAssistant\ppa_x64.sys
10:18:40.0178 3996 PhyMem - ok
10:18:40.0249 3996 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
10:18:40.0273 3996 pla - ok
10:18:40.0326 3996 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
10:18:40.0333 3996 PlugPlay - ok
10:18:40.0360 3996 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
10:18:40.0362 3996 PNRPAutoReg - ok
10:18:40.0390 3996 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
10:18:40.0392 3996 PNRPsvc - ok
10:18:40.0441 3996 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
10:18:40.0448 3996 PolicyAgent - ok
10:18:40.0483 3996 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
10:18:40.0488 3996 Power - ok
10:18:40.0523 3996 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
10:18:40.0525 3996 PptpMiniport - ok
10:18:40.0543 3996 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
10:18:40.0544 3996 Processor - ok
10:18:40.0581 3996 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
10:18:40.0585 3996 ProfSvc - ok
10:18:40.0595 3996 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
10:18:40.0596 3996 ProtectedStorage - ok
10:18:40.0670 3996 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
10:18:40.0672 3996 Psched - ok
10:18:40.0705 3996 [ 5D6C8E778F0218FCD2CCA0EFBC9766CA ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
10:18:40.0706 3996 PxHlpa64 - ok
10:18:40.0784 3996 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
10:18:40.0808 3996 ql2300 - ok
10:18:40.0844 3996 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
10:18:40.0846 3996 ql40xx - ok
10:18:40.0892 3996 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
10:18:40.0896 3996 QWAVE - ok
10:18:40.0907 3996 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
10:18:40.0908 3996 QWAVEdrv - ok
10:18:40.0933 3996 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
10:18:40.0934 3996 RasAcd - ok
10:18:40.0979 3996 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
10:18:40.0980 3996 RasAgileVpn - ok
10:18:40.0997 3996 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
10:18:41.0000 3996 RasAuto - ok
10:18:41.0018 3996 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
10:18:41.0022 3996 Rasl2tp - ok
10:18:41.0057 3996 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
10:18:41.0064 3996 RasMan - ok
10:18:41.0101 3996 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
10:18:41.0103 3996 RasPppoe - ok
10:18:41.0146 3996 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
10:18:41.0148 3996 RasSstp - ok
10:18:41.0173 3996 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
10:18:41.0178 3996 rdbss - ok
10:18:41.0201 3996 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
10:18:41.0202 3996 rdpbus - ok
10:18:41.0242 3996 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
10:18:41.0243 3996 RDPCDD - ok
10:18:41.0256 3996 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
10:18:41.0257 3996 RDPENCDD - ok
10:18:41.0303 3996 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
10:18:41.0304 3996 RDPREFMP - ok
10:18:41.0352 3996 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
10:18:41.0355 3996 RDPWD - ok
10:18:41.0415 3996 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
10:18:41.0419 3996 rdyboost - ok
10:18:41.0458 3996 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
10:18:41.0460 3996 RemoteAccess - ok
10:18:41.0496 3996 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
10:18:41.0500 3996 RemoteRegistry - ok
10:18:41.0544 3996 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
10:18:41.0547 3996 RFCOMM - ok
10:18:41.0562 3996 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
10:18:41.0565 3996 RpcEptMapper - ok
10:18:41.0595 3996 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
10:18:41.0597 3996 RpcLocator - ok
10:18:41.0629 3996 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
10:18:41.0633 3996 RpcSs - ok
10:18:41.0672 3996 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
10:18:41.0674 3996 rspndr - ok
10:18:41.0695 3996 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
10:18:41.0696 3996 SamSs - ok
10:18:41.0723 3996 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
10:18:41.0725 3996 sbp2port - ok
10:18:41.0774 3996 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
10:18:41.0778 3996 SCardSvr - ok
10:18:41.0792 3996 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
10:18:41.0793 3996 scfilter - ok
10:18:41.0828 3996 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
10:18:41.0845 3996 Schedule - ok
10:18:41.0910 3996 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
10:18:41.0910 3996 SCPolicySvc - ok
10:18:41.0947 3996 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
10:18:41.0950 3996 SDRSVC - ok
10:18:42.0006 3996 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
10:18:42.0008 3996 secdrv - ok
10:18:42.0022 3996 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
10:18:42.0024 3996 seclogon - ok
10:18:42.0039 3996 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
10:18:42.0042 3996 SENS - ok
10:18:42.0089 3996 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
10:18:42.0091 3996 SensrSvc - ok
10:18:42.0127 3996 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
10:18:42.0128 3996 Serenum - ok
10:18:42.0157 3996 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
10:18:42.0159 3996 Serial - ok
10:18:42.0186 3996 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
10:18:42.0220 3996 sermouse - ok
10:18:42.0265 3996 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
10:18:42.0268 3996 SessionEnv - ok
10:18:42.0275 3996 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
10:18:42.0277 3996 sffdisk - ok
10:18:42.0303 3996 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
10:18:42.0304 3996 sffp_mmc - ok
10:18:42.0316 3996 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
10:18:42.0318 3996 sffp_sd - ok
10:18:42.0326 3996 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
10:18:42.0327 3996 sfloppy - ok
10:18:42.0371 3996 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
10:18:42.0377 3996 SharedAccess - ok
10:18:42.0400 3996 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:18:42.0408 3996 ShellHWDetection - ok
10:18:42.0440 3996 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
10:18:42.0442 3996 SiSRaid2 - ok
10:18:42.0480 3996 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
10:18:42.0482 3996 SiSRaid4 - ok
10:18:42.0568 3996 [ A37740568718F245E818D0C5575B9AA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
10:18:42.0570 3996 SkypeUpdate - ok
10:18:42.0598 3996 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
10:18:42.0600 3996 Smb - ok
10:18:42.0642 3996 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
10:18:42.0644 3996 SNMPTRAP - ok
10:18:42.0689 3996 [ 977AAA4398D7D6FA65D973F5B3F54E40 ] SonicStage Back-End Service C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe
10:18:42.0691 3996 SonicStage Back-End Service - ok
10:18:42.0719 3996 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
10:18:42.0720 3996 spldr - ok
10:18:42.0765 3996 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
10:18:42.0776 3996 Spooler - ok
10:18:42.0892 3996 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
10:18:42.0984 3996 sppsvc - ok
10:18:43.0007 3996 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
10:18:43.0010 3996 sppuinotify - ok
10:18:43.0039 3996 [ E3E6C96B0EF4492C3C8FD0DEEF4E35A1 ] SPTISRV C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe
10:18:43.0041 3996 SPTISRV - ok
10:18:43.0083 3996 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
10:18:43.0092 3996 srv - ok
10:18:43.0114 3996 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
10:18:43.0120 3996 srv2 - ok
10:18:43.0142 3996 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
10:18:43.0144 3996 srvnet - ok
10:18:43.0184 3996 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
10:18:43.0188 3996 SSDPSRV - ok
10:18:43.0211 3996 [ 756E371B3B86A3D3039926D32EAC0E8D ] SSScsiSV C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe
10:18:43.0212 3996 SSScsiSV - ok
10:18:43.0242 3996 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
10:18:43.0245 3996 SstpSvc - ok
10:18:43.0267 3996 Steam Client Service - ok
10:18:43.0299 3996 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
10:18:43.0300 3996 stexstor - ok
10:18:43.0363 3996 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
10:18:43.0372 3996 stisvc - ok
10:18:43.0384 3996 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
10:18:43.0385 3996 swenum - ok
10:18:43.0439 3996 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
10:18:43.0448 3996 swprv - ok
10:18:43.0504 3996 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
10:18:43.0533 3996 SysMain - ok
10:18:43.0599 3996 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
10:18:43.0602 3996 TabletInputService - ok
10:18:43.0827 3996 [ C4C20CFA4F42E9B7454E895C5C47BCD3 ] TabletServicePen C:\Program Files\Tablet\Pen\Pen_Tablet.exe
10:18:43.0973 3996 TabletServicePen - ok
10:18:44.0021 3996 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
10:18:44.0029 3996 TapiSrv - ok
10:18:44.0041 3996 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
10:18:44.0044 3996 TBS - ok
10:18:44.0126 3996 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip C:\Windows\system32\drivers\tcpip.sys
10:18:44.0159 3996 Tcpip - ok
10:18:44.0214 3996 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
10:18:44.0227 3996 TCPIP6 - ok
10:18:44.0273 3996 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
10:18:44.0275 3996 tcpipreg - ok
10:18:44.0291 3996 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
10:18:44.0295 3996 TDPIPE - ok
10:18:44.0338 3996 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
10:18:44.0341 3996 TDTCP - ok
10:18:44.0369 3996 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
10:18:44.0371 3996 tdx - ok
10:18:44.0410 3996 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
10:18:44.0411 3996 TermDD - ok
10:18:44.0464 3996 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
10:18:44.0474 3996 TermService - ok
10:18:44.0490 3996 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
10:18:44.0493 3996 Themes - ok
10:18:44.0531 3996 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
10:18:44.0533 3996 THREADORDER - ok
10:18:44.0591 3996 [ 7625DCF246E488E523DC1F64C38ABDA2 ] TouchServicePen C:\Program Files\Tablet\Pen\Pen_TouchService.exe
10:18:44.0598 3996 TouchServicePen - ok
10:18:44.0697 3996 [ 6257446EF7ACCF676C8BE386F9B4F67F ] trackpad_plus_plus_x64 C:\Windows\system32\DRIVERS\trackpad_plus_plus_x64.sys
10:18:44.0698 3996 trackpad_plus_plus_x64 - ok
10:18:44.0736 3996 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
10:18:44.0770 3996 TrkWks - ok
10:18:44.0833 3996 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:18:44.0836 3996 TrustedInstaller - ok
10:18:44.0861 3996 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
10:18:44.0862 3996 tssecsrv - ok
10:18:44.0901 3996 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
10:18:44.0902 3996 TsUsbFlt - ok
10:18:44.0925 3996 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
10:18:44.0926 3996 TsUsbGD - ok
10:18:44.0969 3996 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
10:18:44.0972 3996 tunnel - ok
10:18:44.0998 3996 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
10:18:45.0000 3996 uagp35 - ok
10:18:45.0118 3996 [ F7DF6654663AD07DAB615A7AF513D90C ] UCManSvc C:\Program Files (x86)\SoftDenchi\UCManSvc.exe
10:18:45.0121 3996 UCManSvc - ok
10:18:45.0148 3996 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
10:18:45.0152 3996 udfs - ok
10:18:45.0216 3996 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
10:18:45.0218 3996 UI0Detect - ok
10:18:45.0230 3996 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
10:18:45.0231 3996 uliagpkx - ok
10:18:45.0268 3996 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
10:18:45.0269 3996 umbus - ok
10:18:45.0307 3996 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
10:18:45.0308 3996 UmPass - ok
10:18:45.0363 3996 [ 8F387A1CC015A3F5020700C657A0FC85 ] UnsignedThemes C:\Windows\UnsignedThemesSvc.exe
10:18:45.0364 3996 UnsignedThemes - ok
10:18:45.0398 3996 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
10:18:45.0404 3996 upnphost - ok
10:18:45.0475 3996 [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
10:18:45.0476 3996 USBAAPL64 - ok
10:18:45.0530 3996 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
10:18:45.0532 3996 usbccgp - ok
10:18:45.0558 3996 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
10:18:45.0560 3996 usbcir - ok
10:18:45.0597 3996 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
10:18:45.0599 3996 usbehci - ok
10:18:45.0619 3996 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
10:18:45.0626 3996 usbhub - ok
10:18:45.0645 3996 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
10:18:45.0646 3996 usbohci - ok
10:18:45.0671 3996 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
10:18:45.0672 3996 usbprint - ok
10:18:45.0725 3996 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
10:18:45.0727 3996 usbscan - ok
10:18:45.0750 3996 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:18:45.0755 3996 USBSTOR - ok
10:18:45.0784 3996 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
10:18:45.0786 3996 usbuhci - ok
10:18:45.0826 3996 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
10:18:45.0829 3996 usbvideo - ok
10:18:45.0874 3996 [ 297EE9C666FC8BB96A232DB0DDBA1E49 ] uxpatch C:\Windows\system32\drivers\uxpatch.sys
10:18:45.0875 3996 uxpatch - ok
10:18:45.0908 3996 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
10:18:45.0911 3996 UxSms - ok
10:18:45.0929 3996 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
10:18:45.0930 3996 VaultSvc - ok
10:18:45.0972 3996 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
10:18:45.0976 3996 vdrvroot - ok
10:18:46.0019 3996 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
10:18:46.0030 3996 vds - ok
10:18:46.0059 3996 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
10:18:46.0060 3996 vga - ok
10:18:46.0074 3996 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
10:18:46.0076 3996 VgaSave - ok
10:18:46.0097 3996 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
10:18:46.0100 3996 vhdmp - ok
10:18:46.0169 3996 [ BE1A073F1315E79125450AB6A8DC2F0C ] vhidmini C:\Windows\system32\DRIVERS\vjoy.sys
10:18:46.0170 3996 vhidmini - ok
10:18:46.0211 3996 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
10:18:46.0212 3996 viaide - ok
10:18:46.0238 3996 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
10:18:46.0242 3996 volmgr - ok
10:18:46.0270 3996 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
10:18:46.0277 3996 volmgrx - ok
10:18:46.0298 3996 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
10:18:46.0302 3996 volsnap - ok
10:18:46.0335 3996 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
10:18:46.0338 3996 vsmraid - ok
10:18:46.0403 3996 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
10:18:46.0428 3996 VSS - ok
10:18:46.0441 3996 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
10:18:46.0442 3996 vwifibus - ok
10:18:46.0483 3996 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
10:18:46.0484 3996 vwififlt - ok
10:18:46.0528 3996 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
10:18:46.0534 3996 W32Time - ok
10:18:46.0586 3996 [ E04D43C7D1641E95D35CAE6086C7E350 ] wacommousefilter C:\Windows\system32\DRIVERS\wacommousefilter.sys
10:18:46.0630 3996 wacommousefilter - ok
10:18:46.0649 3996 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
10:18:46.0650 3996 WacomPen - ok
10:18:46.0677 3996 [ EC1CEB237E365330C1FCFC4876AA0AC0 ] wacomvhid C:\Windows\system32\DRIVERS\wacomvhid.sys
10:18:46.0678 3996 wacomvhid - ok
10:18:46.0778 3996 [ 788FE050FF7601088783C95C83313E56 ] wampapache c:\wamp\bin\apache\apache2.2.22\bin\httpd.exe
10:18:46.0778 3996 wampapache - ok
10:18:46.0812 3996 wampmysqld - ok
10:18:46.0884 3996 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
10:18:46.0886 3996 WANARP - ok
10:18:46.0898 3996 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
10:18:46.0899 3996 Wanarpv6 - ok
10:18:46.0982 3996 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
10:18:46.0999 3996 WatAdminSvc - ok
10:18:47.0072 3996 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
10:18:47.0094 3996 wbengine - ok
10:18:47.0118 3996 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
10:18:47.0123 3996 WbioSrvc - ok
10:18:47.0161 3996 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
10:18:47.0168 3996 wcncsvc - ok
10:18:47.0179 3996 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:18:47.0182 3996 WcsPlugInService - ok
10:18:47.0238 3996 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
10:18:47.0239 3996 Wd - ok
10:18:47.0288 3996 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys
10:18:47.0289 3996 WDC_SAM - ok
10:18:47.0413 3996 [ 1AE37B32FBDD81A912FA9D681DD9B697 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
10:18:47.0428 3996 Wdf01000 - ok
10:18:47.0470 3996 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
10:18:47.0487 3996 WdiServiceHost - ok
10:18:47.0498 3996 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
10:18:47.0500 3996 WdiSystemHost - ok
10:18:47.0577 3996 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
10:18:47.0588 3996 WebClient - ok
10:18:47.0682 3996 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
10:18:47.0711 3996 Wecsvc - ok
10:18:47.0797 3996 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
10:18:47.0845 3996 wercplsupport - ok
10:18:48.0006 3996 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
10:18:48.0117 3996 WerSvc - ok
10:18:48.0526 3996 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
10:18:48.0568 3996 WfpLwf - ok
10:18:48.0655 3996 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
10:18:48.0656 3996 WIMMount - ok
10:18:48.0720 3996 WinDefend - ok
10:18:48.0728 3996 WinHttpAutoProxySvc - ok
10:18:48.0854 3996 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
10:18:48.0867 3996 Winmgmt - ok
10:18:49.0349 3996 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
10:18:49.0423 3996 WinRM - ok
10:18:49.0604 3996 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
10:18:49.0654 3996 Wlansvc - ok
10:18:49.0688 3996 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
10:18:49.0690 3996 WmiAcpi - ok
10:18:49.0735 3996 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
10:18:49.0739 3996 wmiApSrv - ok
10:18:49.0805 3996 WMPNetworkSvc - ok
10:18:49.0880 3996 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
10:18:49.0899 3996 WPCSvc - ok
10:18:49.0934 3996 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
10:18:49.0945 3996 WPDBusEnum - ok
10:18:50.0065 3996 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
10:18:50.0086 3996 ws2ifsl - ok
10:18:50.0187 3996 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
10:18:50.0235 3996 wscsvc - ok
10:18:50.0244 3996 WSearch - ok
10:18:50.0831 3996 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
10:18:50.0904 3996 wuauserv - ok
10:18:50.0952 3996 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
10:18:50.0966 3996 WudfPf - ok
10:18:51.0063 3996 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
10:18:51.0075 3996 WUDFRd - ok
10:18:51.0149 3996 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
10:18:51.0152 3996 wudfsvc - ok
10:18:51.0174 3996 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
10:18:51.0199 3996 WwanSvc - ok
10:18:51.0259 3996 ================ Scan global ===============================
10:18:51.0298 3996 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
10:18:51.0356 3996 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
10:18:51.0401 3996 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
10:18:51.0435 3996 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
10:18:51.0575 3996 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
10:18:51.0585 3996 [Global] - ok
10:18:51.0587 3996 ================ Scan MBR ==================================
10:18:51.0630 3996 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
10:18:52.0183 3996 \Device\Harddisk0\DR0 - ok
10:18:52.0183 3996 ================ Scan VBR ==================================
10:18:52.0218 3996 [ D5F93CDBED5FEEA3A8ECDD61CC8F1D08 ] \Device\Harddisk0\DR0\Partition1
10:18:52.0219 3996 \Device\Harddisk0\DR0\Partition1 - ok
10:18:52.0272 3996 [ 85ACDA496EE5C3428A6849C5E264D9CF ] \Device\Harddisk0\DR0\Partition2
10:18:52.0272 3996 \Device\Harddisk0\DR0\Partition2 - ok
10:18:52.0304 3996 [ 9DE8919803958F0282085D893097F857 ] \Device\Harddisk0\DR0\Partition3
10:18:52.0358 3996 \Device\Harddisk0\DR0\Partition3 - ok
10:18:52.0365 3996 [ 9DE8919803958F0282085D893097F857 ] \Device\Harddisk0\DR0\Partition4
10:18:52.0366 3996 \Device\Harddisk0\DR0\Partition4 - ok
10:18:52.0371 3996 ============================================================
10:18:52.0371 3996 Scan finished
10:18:52.0371 3996 ============================================================
10:18:52.0392 6312 Detected object count: 0
10:18:52.0392 6312 Actual detected object count: 0
10:20:20.0536 1704 Deinitialize successaswMBRaswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software Run date: 2012-11-11 10:20:29 ----------------------------- 10:20:29.393 OS Version: Windows x64 6.1.7601 Service Pack 1 10:20:29.393 Number of processors: 2 586 0x170A 10:20:29.394 ComputerName: ZARROKK-PC UserName: Zarrokk 10:20:29.983 Initialize success 10:22:30.227 AVAST engine defs: 12111100 10:22:35.214 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 10:22:35.221 Disk 0 Vendor: Hitachi_HTS545025B9SA02 PB2AC60W Size: 238475MB BusType: 3 10:22:35.320 Disk 0 MBR read successfully 10:22:35.322 Disk 0 MBR scan 10:22:35.365 Disk 0 Windows 7 default MBR code 10:22:35.384 Disk 0 Partition 1 00 EE GPT 200 MB offset 1 10:22:35.417 Disk 0 Partition 2 00 AF HFS / HFS+ 142097 MB offset 409640 10:22:35.448 Disk 0 Partition 3 80 (A) 07 HPFS/NTFS NTFS 96049 MB offset 291688448 10:22:35.493 Disk 0 scanning C:\Windows\system32\drivers 10:23:00.433 Service scanning 10:23:50.708 Modules scanning 10:23:51.093 Disk 0 trace - called modules: 10:23:51.121 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys 10:23:51.125 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004be9060] 10:23:51.130 3 CLASSPNP.SYS[fffff8800199943f] -> nt!IofCallDriver -> [0xfffffa80048bd520] 10:23:51.134 5 ACPI.sys[fffff88000d777a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80047b8060] 10:23:53.357 AVAST engine scan C:\Windows 10:23:56.324 AVAST engine scan C:\Windows\system32 10:27:18.188 AVAST engine scan C:\Windows\system32\drivers 10:27:31.024 AVAST engine scan C:\Users\Zarrokk 10:34:31.034 AVAST engine scan C:\ProgramData 10:48:36.101 Scan finished successfully 10:59:56.061 Disk 0 MBR has been saved successfully to "C:\Users\Zarrokk\Desktop\MBR.dat" 10:59:56.070 The log file has been saved successfully to "C:\Users\Zarrokk\Desktop\aswMBR.txt"ESET
C:\Users\Zarrokk\Downloads\cbsidlm-tr1_7-Flash_Compiler__Decompiler-SEO2-10317140 (1).exe Win32/DownloadAdmin.D application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\cbsidlm-tr1_7-Flash_Compiler__Decompiler-SEO2-10317140.exe Win32/DownloadAdmin.D application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\iLividSetupV1 (1).exe Win32/Toolbar.SearchSuite application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\iLividSetupV1 (2).exe Win32/Toolbar.SearchSuite application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\iLividSetupV1.exe Win32/Toolbar.SearchSuite application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\installer_navicat_for_mysql_10_1_3_English.exe Win32/Toolbar.Babylon application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\SoftonicDownloader_for_color-cop.exe Win32/SoftonicDownloader.C application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\SoftonicDownloader_for_dofus (1).exe a variant of Win32/SoftonicDownloader.E application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\SoftonicDownloader_for_dofus.exe a variant of Win32/SoftonicDownloader.E application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\SoftonicDownloader_pour_navicat.exe a variant of Win32/SoftonicDownloader.E application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\video_downloader.exe a variant of Win32/InstallCore.T application cleaned by deleting - quarantined C:\Users\Zarrokk\Downloads\zlash_downloader_133.exe a variant of Win32/YourFileDownloader application cleaned by deleting - quarantined
Posted 12 November 2012 - 07:04 AM
Posted 12 November 2012 - 02:56 PM
Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Database version: v2012.11.12.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Zarrokk :: ZARROKK-PC [administrator] 11/12/2012 10:55:40 AM mbam-log-2012-11-12 (10-55-40).txt Scan type: Full scan (C:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 458379 Time elapsed: 51 minute(s), Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)Farbar
Farbar Service Scanner Version: 09-11-2012 Ran by Zarrokk (administrator) on 12-11-2012 at 10:54:05 Running from "C:\Users\Zarrokk\Downloads" Windows 7 Home Premium Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo IP is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall"=DWORD:0 System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== Other Services: ============== File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\wscsvc.dll => MD5 is legit C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\System32\wuaueng.dll => MD5 is legit C:\Windows\System32\qmgr.dll => MD5 is legit C:\Windows\System32\es.dll => MD5 is legit C:\Windows\System32\cryptsvc.dll => MD5 is legit C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit C:\Windows\System32\ipnathlp.dll => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit **** End of log ****wCleaner
wCleaner v2.007 - Logfile created 11/12/2012 at 10:41:39
# Updated 06/11/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Zarrokk - ZARROKK-PC
# Boot Mode : Normal
# Running from : C:\Users\Zarrokk\Downloads\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Folder Deleted : C:\Program Files (x86)\Viral_Tube
Folder Deleted : C:\Users\Zarrokk\AppData\LocalLow\Viral_Tube
Folder Deleted : C:\Users\Zarrokk\AppData\LocalLow\Vuze_Remote
Folder Deleted : C:\Users\Zarrokk\AppData\LocalLow\Vuze_Remote
***** [Registry] *****
Key Deleted : HKCU\Software\AppDataLow\Software\Viral_Tube
Key Deleted : HKCU\Software\AppDataLow\Software\Vuze_Remote
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{93C338DE-5FB5-4FB5-AB4E-0EEDC0BD9F3A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{93C338DE-5FB5-4FB5-AB4E-0EEDC0BD9F3A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Somoto Toolbar
Key Deleted : HKCU\Software\wecarereminder
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4FBBF769-ECEB-420A-B536-133B1D505C36}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IEHelperv2.5.0.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder
Key Deleted : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3150609
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B12920CF-BE13-4C09-890D-1B6EFFFE2FBE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{51D7490A-D9C7-47DF-91F3-23FB36D5204B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E30ED111-BD63-48C2-A6CB-AB3C9FFFB07C}
Key Deleted : HKLM\Software\Viral_Tube
Key Deleted : HKLM\Software\Vuze_Remote
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{51D7490A-D9C7-47DF-91F3-23FB36D5204B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{93C338DE-5FB5-4FB5-AB4E-0EEDC0BD9F3A}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E30ED111-BD63-48C2-A6CB-AB3C9FFFB07C}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F773BB94-6C19-4643-A570-0E429103D1C3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F773BB94-6C19-4643-A570-0E429103D1C3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{401F109E-C866-42A2-9C88-5F1D09E1890E}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{43F716E2-4237-4638-898C-EF11BB78C69E}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E8CCE5A-FD73-4F05-AFC9-E62319063527}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC5B6CDA-8F90-4740-9A8C-28AC5D3C73FE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB39F767-0CF9-452F-AB3A-EFA5AE886649}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Viral_Tube Toolbar
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vuze_Remote Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKU\S-1-5-21-1314334504-1386473340-3554175909-1003\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{93C338DE-5FB5-4FB5-AB4E-0EEDC0BD9F3A}]
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Registry is clean.
-\\ Google Chrome v23.0.1271.64
File : C:\Users\Zarrokk\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[S1].txt - [4783 octets] - [12/11/2012 10:41:39]
########## EOF - C:\AdwCleaner[S1].txt - [4843 octets] ##########
MinitoolboxMiniToolBox by Farbar Version: 10-11-2012 02
Ran by Zarrokk (administrator) on 12-11-2012 at 10:54:30
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
========================= Flush DNS: ===================================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========================= IE Proxy Settings: ==============================
Proxy is not enabled.
No Proxy Server is set.
"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================
127.0.0.1 localhost
========================= IP Configuration: ================================
Broadcom 802.11n Network Adapter = Wireless Network Connection (Connected)
Broadcom NetXtreme Gigabit Ethernet = Local Area Connection (Media disconnected)
Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)
# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
reset
set global
popd
# End of IPv4 configuration
Windows IP Configuration
Host Name . . . . . . . . . . . . : Zarrokk-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Bluetooth Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : 5C-59-48-CE-68-0D
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 802.11n Network Adapter
Physical Address. . . . . . . . . : 78-CA-39-B0-19-78
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::493d:b977:87a6:9b34%12(Preferred)
IPv4 Address. . . . . . . . . . . : 10.0.0.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, November 12, 2012 10:46:16 AM
Lease Expires . . . . . . . . . . : Tuesday, November 13, 2012 10:46:16 AM
Default Gateway . . . . . . . . . : 10.0.0.1
DHCP Server . . . . . . . . . . . : 10.0.0.1
DHCPv6 IAID . . . . . . . . . . . : 226019897
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-77-1C-96-C4-2C-03-2F-C5-4A
DNS Servers . . . . . . . . . . . : 10.0.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : C4-2C-03-2F-C5-4A
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:953c:287c:d010:bc9a:2be8(Preferred)
Link-local IPv6 Address . . . . . : fe80::287c:d010:bc9a:2be8%19(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter isatap.{35524A1D-BC64-4F51-88F6-8751D453B4E5}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 12:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Reusable ISATAP Interface {1A4DE7DF-0185-4CB1-899C-BD2F121E17D6}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #5
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: UnKnown
Address: 10.0.0.1
Name: google.com
Addresses: 2607:f8b0:4004:803::1006
74.125.228.110
74.125.228.97
74.125.228.102
74.125.228.101
74.125.228.104
74.125.228.96
74.125.228.105
74.125.228.100
74.125.228.103
74.125.228.99
74.125.228.98
Pinging google.com [74.125.228.98] with 32 bytes of data:
Reply from 74.125.228.98: bytes=32 time=89ms TTL=53
Reply from 74.125.228.98: bytes=32 time=90ms TTL=53
Ping statistics for 74.125.228.98:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 89ms, Maximum = 90ms, Average = 89ms
Server: UnKnown
Address: 10.0.0.1
Name: yahoo.com
Addresses: 98.138.253.109
98.139.183.24
72.30.38.140
Pinging yahoo.com [72.30.38.140] with 32 bytes of data:
Reply from 72.30.38.140: bytes=32 time=32ms TTL=53
Reply from 72.30.38.140: bytes=32 time=110ms TTL=53
Ping statistics for 72.30.38.140:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 32ms, Maximum = 110ms, Average = 71ms
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
14...5c 59 48 ce 68 0d ......Bluetooth Device (Personal Area Network)
12...78 ca 39 b0 19 78 ......Broadcom 802.11n Network Adapter
11...c4 2c 03 2f c5 4a ......Broadcom NetXtreme Gigabit Ethernet
1...........................Software Loopback Interface 1
19...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.0.1 10.0.0.3 25
10.0.0.0 255.255.255.0 On-link 10.0.0.3 281
10.0.0.3 255.255.255.255 On-link 10.0.0.3 281
10.0.0.255 255.255.255.255 On-link 10.0.0.3 281
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.0.0.3 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.0.0.3 281
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
19 58 ::/0 On-link
1 306 ::1/128 On-link
19 58 2001::/32 On-link
19 306 2001:0:9d38:953c:287c:d010:bc9a:2be8/128
On-link
12 281 fe80::/64 On-link
19 306 fe80::/64 On-link
19 306 fe80::287c:d010:bc9a:2be8/128
On-link
12 281 fe80::493d:b977:87a6:9b34/128
On-link
1 306 ff00::/8 On-link
19 306 ff00::/8 On-link
12 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================
Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
========================= Event log errors: ===============================
Application errors:
==================
Error: (11/12/2012 10:47:45 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/12/2012 10:46:19 AM) (Source: Bonjour Service) (User: )
Description: Local Hostname Zarrokk-PC.local already in use; will try Zarrokk-PC-2.local instead
Error: (11/12/2012 10:46:19 AM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Zarrokk-PC.local. Addr 10.0.0.3
Error: (11/12/2012 10:46:19 AM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.0.0.2:5353 4 Zarrokk-PC.local. Addr 10.0.0.2
Error: (11/12/2012 09:06:20 AM) (Source: Bonjour Service) (User: )
Description: Local Hostname Zarrokk-PC.local already in use; will try Zarrokk-PC-2.local instead
Error: (11/12/2012 09:06:20 AM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Zarrokk-PC.local. Addr 10.0.0.3
Error: (11/12/2012 09:06:20 AM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.0.0.2:5353 4 Zarrokk-PC.local. Addr 10.0.0.2
Error: (11/12/2012 09:06:17 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 35534423
Error: (11/12/2012 09:06:17 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 35534423
Error: (11/12/2012 09:06:17 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
System errors:
=============
Error: (11/12/2012 10:46:17 AM) (Source: NetBT) (User: )
Description: The name "ZARROKK-PC :20" could not be registered on the interface with IP address 10.0.0.3.
The computer with the IP address 10.0.0.2 did not allow the name to be claimed by
this computer.
Error: (11/12/2012 10:46:17 AM) (Source: NetBT) (User: )
Description: The name "ZARROKK-PC :0" could not be registered on the interface with IP address 10.0.0.3.
The computer with the IP address 10.0.0.2 did not allow the name to be claimed by
this computer.
Error: (11/12/2012 10:46:17 AM) (Source: Server) (User: )
Description: The server could not bind to the transport \Device\NetBT_Tcpip_{35524A1D-BC64-4F51-88F6-8751D453B4E5} because another computer on the network has the same name. The server could not start.
Error: (11/12/2012 09:16:45 AM) (Source: NetBT) (User: )
Description: The name "ZARROKK-PC :0" could not be registered on the interface with IP address 10.0.0.3.
The computer with the IP address 10.0.0.2 did not allow the name to be claimed by
this computer.
Error: (11/12/2012 09:16:44 AM) (Source: NetBT) (User: )
Description: The name "ZARROKK-PC :0" could not be registered on the interface with IP address 10.0.0.3.
The computer with the IP address 10.0.0.2 did not allow the name to be claimed by
this computer.
Error: (11/12/2012 09:06:19 AM) (Source: NetBT) (User: )
Description: The name "ZARROKK-PC :20" could not be registered on the interface with IP address 10.0.0.3.
The computer with the IP address 10.0.0.2 did not allow the name to be claimed by
this computer.
Error: (11/12/2012 09:06:19 AM) (Source: NetBT) (User: )
Description: The name "ZARROKK-PC :0" could not be registered on the interface with IP address 10.0.0.3.
The computer with the IP address 10.0.0.2 did not allow the name to be claimed by
this computer.
Error: (11/12/2012 09:06:19 AM) (Source: Server) (User: )
Description: The server could not bind to the transport \Device\NetBT_Tcpip_{35524A1D-BC64-4F51-88F6-8751D453B4E5} because another computer on the network has the same name. The server could not start.
Error: (11/12/2012 09:06:14 AM) (Source: Tcpip) (User: )
Description: The system detected an address conflict for IP address 10.0.0.2 with the system
having network hardware address 78-2B-CB-AA-7A-0F. Network operations on this system may
be disrupted as a result.
Error: (11/12/2012 09:06:05 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Microsoft Office Sessions:
=========================
Error: (11/12/2012 10:47:45 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/12/2012 10:46:19 AM) (Source: Bonjour Service)(User: )
Description: Local Hostname Zarrokk-PC.local already in use; will try Zarrokk-PC-2.local instead
Error: (11/12/2012 10:46:19 AM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Zarrokk-PC.local. Addr 10.0.0.3
Error: (11/12/2012 10:46:19 AM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: Received from 10.0.0.2:5353 4 Zarrokk-PC.local. Addr 10.0.0.2
Error: (11/12/2012 09:06:20 AM) (Source: Bonjour Service)(User: )
Description: Local Hostname Zarrokk-PC.local already in use; will try Zarrokk-PC-2.local instead
Error: (11/12/2012 09:06:20 AM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Zarrokk-PC.local. Addr 10.0.0.3
Error: (11/12/2012 09:06:20 AM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: Received from 10.0.0.2:5353 4 Zarrokk-PC.local. Addr 10.0.0.2
Error: (11/12/2012 09:06:17 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 35534423
Error: (11/12/2012 09:06:17 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 35534423
Error: (11/12/2012 09:06:17 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
CodeIntegrity Errors:
===================================
Date: 2012-11-10 12:35:54.024
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\trackpad_plus_plus_x64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-11-10 12:35:53.992
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\trackpad_plus_plus_x64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-11-07 20:25:56.118
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-11-07 20:25:56.087
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-11-07 20:25:56.071
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-11-07 20:25:56.040
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-04-14 04:32:59.999
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-04-14 04:32:59.999
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
=========================== Installed Programs ============================
3.4.0.9271.1
ABBYY FineReader 6.0 Sprint (Version: 6.00.1395.4512)
Adobe AIR (Version: 3.4.0.2710)
Adobe Flash Player 11 ActiveX (Version: 11.5.502.110)
Adobe Flash Player 11 Plugin (Version: 11.5.502.110)
Adobe Reader X (10.1.2) (Version: 10.1.2)
Adobe SWF Investigator (Version: 0.6.3)
Apple Application Support (Version: 2.1.9)
Apple Mobile Device Support (Version: 5.2.0.6)
Apple Software Update (Version: 2.1.3.127)
ArcSoft MediaImpression
ATI Catalyst Install Manager (Version: 3.0.708.0)
Bamboo (Version: 5.2.5-5)
Bamboo Dock (Version: 4.0)
Bamboo Dock (Version: 4.0.0)
Bamboo Tablets Tutorial (Version: 3.0.20)
Bonjour (Version: 3.0.0.10)
Boot Camp Services (Version: 4.0.4033)
Borderlands 2
Bytescout Movies Extractor Scout (Version: 3.18)
CCleaner (Version: 3.24)
Coupon Companion (Version: 1.24.151.151)
Curse Client (Version: 5.1.1.502)
CWA Reminder by We-Care.com v4.1.17.3 (Version: 4.1.17.3)
DAEMON Tools Lite (Version: 4.45.2.0287)
Decompile Flash Free Version 2.1.3.20
Dexpot (Version: 1.6.4)
Diablo II
Dofus 1.28.0 (Version: 1.28.0)
Dota 2
Driver Manager (Version: 7)
DVD or CD Sharing (Version: 1.4.0.4)
eMule
Epson Copy Utility 3.5 (Version: 3.5.0.0)
Epson Event Manager (Version: 2.30.01)
EPSON Perfection V30/V300 Photo Scanner Driver Update
EPSON Scan
ESET Online Scanner v3
Flash Decompiler Trillix (Version: 5.3)
FlashDevelop 3.3.4 (Version: 3.3.4-RTM)
FlashDigger Plus
foobar2000 v1.1.13 (Version: 1.1.13)
Google Chrome (Version: 23.0.1271.64)
Gtk# 2.10 Runtime (Version: 2.10.4)
ImgBurn (Version: 2.5.7.0)
inSSIDer (Version: 2.1.5)
iTunes (Version: 10.6.3.25)
J2SE Runtime Environment 5.0 Update 21 (Version: 1.5.0.210)
Java 7 Update 7 (64-bit) (Version: 7.0.70)
Java Auto Updater (Version: 2.0.6.1)
Java(TM) 6 Update 30 (Version: 6.0.300)
Java(TM) 7 (64-bit) (Version: 7.0.0)
join.me (Version: 1.2.1.374)
Katawa Shoujo
Magic ISO Maker v5.5 (build 0281)
Malwarebytes Anti-Malware version 1.65.1.1000 (Version: 1.65.1.1000)
Manga Studio EX 4.0
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
MiniBuilder (Version: 1.1.2-alpha)
MiniBuilder (Version: 1.1.2)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NVIDIA 3D Vision Driver 285.62 (Version: 285.62)
NVIDIA Control Panel 285.62 (Version: 285.62)
NVIDIA Display Control Panel (Version: 6.14.12.6141)
NVIDIA Drivers (Version: 1.10.62.40)
NVIDIA Graphics Driver 285.62 (Version: 285.62)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA PhysX (Version: 9.11.0621)
NVIDIA PhysX System Software 9.11.0621 (Version: 9.11.0621)
NVIDIA Update 1.5.20 (Version: 1.5.20)
NVIDIA Update Components (Version: 1.5.20)
Open Dialect (Version: 0.6.0)
OpenMG Limited Patch 4.7-07-14-05-01
OpenMG Secure Module 4.7.00 (Version: 4.7.00.12140)
osu! (Version: 0.0.0.0)
PJP's JoyIDs
PlanetSide 2 Beta
Power Plan Assistant version 3.0b (Version: 3.0b)
PremiumSoft Navicat Premium 10.1 (Version: 10.1.6)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealPlayer
Realtek High Definition Audio Driver (Version: 6.0.1.5936)
RealUpgrade 1.1 (Version: 1.1.0)
Resource Hacker Version 3.6.0
Roblox for Zarrokk
Rosetta Stone Version 3 (Version: 3.3.5.2)
SdRt4200 (Version: 4.2.8.0)
SE|PY ActionScript Editor 1.5.3.6
Sins of a Solar Empire
Sins of a Solar Empire (Version: 1.00.00)
Skype(TM) 5.10 (Version: 5.10.116)
SonicStage 4.3 (Version: 4.3)
Sothink SWF Decompiler (Version: 7.1)
Sothink SWF Editor (Version: 1.3)
Sothink SWF Quicker (Version: 5.4)
Star Wars: The Old Republic (Version: 1.00)
Steam (Version: 1.0.0.0)
STEINS;GATE (Version: 1.00.000)
SWFSOFT Flash Compiler & Decompiler
Taskbar Hide
Team Fortress 2
TreeSize Free V2.7 (Version: 2.7)
Unlocker 1.9.1-x64 (Version: 1.9.1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
UxStyle Core Beta (Version: 0.2.1.1)
VJoy 1.2
VJoy Virtual Joystick Driver 1.2
Vuze (Version: 4.7)
Vuze Trial FileBulldog Toolbar
WampServer 2.2
WebTablet FB Plugin (Version: 2.0.0.1)
WebTablet IE Plugin (Version: 1.1.0.12)
WebTablet Netscape Plugin (Version: 1.1.0.10)
Winamp (Version: 5.63 )
Winamp Detector Plug-in (Version: 1.0.0.1)
Windows Driver Package - Apple Inc. (AppleUSBEthernet) Net (01/11/2008 3.10.3.9) (Version: 01/11/2008 3.10.3.9)
Windows Driver Package - Apple Inc. (AppleUSBEthernet) Net (02/01/2008 3.10.3.10) (Version: 02/01/2008 3.10.3.10)
Windows Driver Package - Apple Inc. Apple Bluetooth (01/19/2009 2.1.2.1) (Version: 01/19/2009 2.1.2.1)
Windows Driver Package - Apple Inc. Apple Bluetooth (03/01/2010 3.0.0.5) (Version: 03/01/2010 3.0.0.5)
Windows Driver Package - Apple Inc. Apple Bluetooth Enabler (06/27/2007 2.0.0.1) (Version: 06/27/2007 2.0.0.1)
Windows Driver Package - Apple Inc. Apple Broadcom Bluetooth (03/01/2010 3.1.0.3) (Version: 03/01/2010 3.1.0.3)
Windows Driver Package - Apple Inc. Apple Broadcom Bluetooth (10/05/2010 3.2.0.1) (Version: 10/05/2010 3.2.0.1)
Windows Driver Package - Apple Inc. Apple Built-in iSight (10/25/2007 2.0.1.0) (Version: 10/25/2007 2.0.1.0)
Windows Driver Package - Apple Inc. Apple Display (01/23/2009 3.0.0.0) (Version: 01/23/2009 3.0.0.0)
Windows Driver Package - Apple Inc. Apple IR Receiver (02/21/2008 2.0.4.0) (Version: 02/21/2008 2.0.4.0)
Windows Driver Package - Apple Inc. Apple Keyboard (01/12/2010 3.1.0.2) (Version: 01/12/2010 3.1.0.2)
Windows Driver Package - Apple Inc. Apple Keyboard (03/05/2009 3.0.0.0) (Version: 03/05/2009 3.0.0.0)
Windows Driver Package - Apple Inc. Apple Keyboard (05/05/2011 4.0.0.1) (Version: 05/05/2011 4.0.0.1)
Windows Driver Package - Apple Inc. Apple Multitouch (02/11/2010 3.1.0.0) (Version: 02/11/2010 3.1.0.0)
Windows Driver Package - Apple Inc. Apple Multitouch (03/25/2009 2.1.2.112) (Version: 03/25/2009 2.1.2.112)
Windows Driver Package - Apple Inc. Apple Multitouch (05/05/2011 4.0.0.1) (Version: 05/05/2011 4.0.0.1)
Windows Driver Package - Apple Inc. Apple Multitouch (09/10/2009 3.0.0.0) (Version: 09/10/2009 3.0.0.0)
Windows Driver Package - Apple Inc. Apple Multitouch (10/05/2010 3.2.0.1) (Version: 10/05/2010 3.2.0.1)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (02/11/2010 3.1.0.0) (Version: 02/11/2010 3.1.0.0)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (03/25/2009 2.1.2.112) (Version: 03/25/2009 2.1.2.112)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (05/05/2011 4.0.0.1) (Version: 05/05/2011 4.0.0.1)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (10/05/2010 3.2.0.1) (Version: 10/05/2010 3.2.0.1)
Windows Driver Package - Apple Inc. Apple ODD (01/17/2008 2.0.2.2) (Version: 01/17/2008 2.0.2.2)
Windows Driver Package - Apple Inc. Apple ODD (05/17/2010 3.1.0.0) (Version: 05/17/2010 3.1.0.0)
Windows Driver Package - Apple Inc. Apple System Device (04/05/2011 3.2.0.8) (Version: 04/05/2011 3.2.0.8)
Windows Driver Package - Apple Inc. Apple Trackpad (03/05/2009 3.0.0.0) (Version: 03/05/2009 3.0.0.0)
Windows Driver Package - Apple Inc. Apple Trackpad (07/13/2009 3.0.0.1) (Version: 07/13/2009 3.0.0.1)
Windows Driver Package - Apple Inc. Apple Trackpad Enabler (02/19/2009 3.0.0.0) (Version: 02/19/2009 3.0.0.0)
Windows Driver Package - Apple Inc. Apple Trackpad Enabler (07/13/2009 3.0.0.1) (Version: 07/13/2009 3.0.0.1)
Windows Driver Package - Apple Inc. Apple Wireless Mouse (06/01/2011 4.0.0.1) (Version: 06/01/2011 4.0.0.1)
Windows Driver Package - Apple Inc. Apple Wireless Mouse (11/30/2009 3.0.0.6) (Version: 11/30/2009 3.0.0.6)
Windows Driver Package - Apple Inc. Apple Wireless Trackpad (01/17/2011 3.2.0.0) (Version: 01/17/2011 3.2.0.0)
Windows Driver Package - Apple Inc. Apple Wireless Trackpad (08/24/2010 3.1.0.7) (Version: 08/24/2010 3.1.0.7)
Windows Driver Package - Apple Inc. System (08/22/2008 2.1.1.1) (Version: 08/22/2008 2.1.1.1)
Windows Driver Package - Atheros Communications Inc. (athr) Net (11/13/2010 9.2.0.113) (Version: 11/13/2010 9.2.0.113)
Windows Driver Package - Broadcom (b57nd60a) Net (12/02/2010 14.4.2.2) (Version: 12/02/2010 14.4.2.2)
Windows Driver Package - Broadcom (BCM43XX) Net (04/06/2011 5.100.198.22) (Version: 04/06/2011 5.100.198.22)
Windows Driver Package - Broadcom (BCM43XX) Net (10/22/2008 5.10.38.26) (Version: 10/22/2008 5.10.38.26)
Windows Driver Package - Broadcom Corporation (bScsiSDa) SDHost (01/18/2011 1.0.0.220) (Version: 01/18/2011 1.0.0.220)
Windows Driver Package - Cirrus Logic, Inc. (CirrusFilter) MEDIA (04/29/2009 6.6001.1.8) (Version: 04/29/2009 6.6001.1.8)
Windows Driver Package - Cirrus Logic, Inc. (CirrusFilter) MEDIA (07/22/2009 6.6001.1.13) (Version: 07/22/2009 6.6001.1.13)
Windows Driver Package - Cirrus Logic, Inc. (CirrusFilter) MEDIA (12/03/2010 6.6001.1.30) (Version: 12/03/2010 6.6001.1.30)
Windows Driver Package - Intel (e1express) Net (02/06/2008 9.12.17.0) (Version: 02/06/2008 9.12.17.0)
Windows Driver Package - Intel (e1express) Net (03/26/2010 9.13.41.0) (Version: 03/26/2010 9.13.41.0)
Windows Driver Package - Intel (E1G60) Net (01/08/2008 8.3.9.0) (Version: 01/08/2008 8.3.9.0)
Windows Driver Package - Intel (e1kexpress) Net (04/12/2010 11.6.92.0) (Version: 04/12/2010 11.6.92.0)
Windows Driver Package - Intel (e1kexpress) Net (07/22/2008 10.3.45.0) (Version: 07/22/2008 10.3.45.0)
Windows Driver Package - Intel (e1qexpress) Net (08/05/2008 10.3.49.0) (Version: 08/05/2008 10.3.49.0)
Windows Driver Package - Intel (e1qexpress) Net (12/04/2009 11.4.7.0) (Version: 12/04/2009 11.4.7.0)
Windows Driver Package - Intel (e1rexpress) Net (01/07/2010 11.4.16.0) (Version: 01/07/2010 11.4.16.0)
Windows Driver Package - Intel (e1yexpress) Net (04/07/2010 10.1.9.0) (Version: 04/07/2010 10.1.9.0)
Windows Driver Package - Intel (e1yexpress) Net (07/16/2008 9.52.10.0) (Version: 07/16/2008 9.52.10.0)
Windows Driver Package - Intel Net (02/06/2008 9.12.18.0) (Version: 02/06/2008 9.12.18.0)
Windows Driver Package - Intel Net (06/13/2008 9.52.9.0) (Version: 06/13/2008 9.52.9.0)
Windows Driver Package - Intel Net (07/22/2008 10.3.45.0) (Version: 07/22/2008 10.3.45.0)
Windows Driver Package - Intel Net (08/05/2008 10.3.49.0) (Version: 08/05/2008 10.3.49.0)
Windows Driver Package - Intel Net (11/07/2007 8.10.1.0) (Version: 11/07/2007 8.10.1.0)
Windows Driver Package - Intel System (07/20/2007 1.2.76.0) (Version: 07/20/2007 1.2.76.0)
Windows Driver Package - Marvell (yukonx64) Net (12/06/2007 10.51.1.3) (Version: 12/06/2007 10.51.1.3)
Windows Driver Package - Vladimir Plenskiy Software (trackpad_plus_plus_x64) Mouse (10/24/2012 2.3.4.0) (Version: 10/24/2012 2.3.4.0)
WinRAR 4.10 (32-bit) (Version: 4.10.0)
World of Warcraft (Version: 5.0.5.16057)
World of Warcraft Beta (Version: )
Xiph.Org Open Codecs 0.85.17777 (Version: 0.85.17777)
Zlash 1.0
========================= Memory info: ===================================
Percentage of memory in use: 43%
Total physical RAM: 3830.6 MB
Available physical RAM: 2171.62 MB
Total Pagefile: 7659.39 MB
Available Pagefile: 5777.49 MB
Total Virtual: 4095.88 MB
Available Virtual: 3953.5 MB
========================= Partitions: =====================================
1 Drive c: (BOOTCAMP) (Fixed) (Total:93.8 GB) (Free:11.82 GB) NTFS
3 Drive e: (Macintosh HD) (Fixed) (Total:138.77 GB) (Free:25.69 GB) HFS
========================= Users: ========================================
User accounts for \\ZARROKK-PC
Administrator Guest UpdatusUser
Yuki Zarrokk
========================= Restore Points ==================================
11-11-2012 06:16:47 Removed Java 7 Update 7 (64-bit)
**** End of log ****
Posted 12 November 2012 - 08:54 PM
Posted 13 November 2012 - 01:07 AM
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 3.0.4 (11.12.2012) OS: Windows 7 Home Premium x64 Ran by Zarrokk on 11/12/2012 Mon at 10:55:15.04 Blog: http://thisisudax.blogspot.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\Zarrokk\appdata\locallow\somototoolbar" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 11/12/2012 Mon at 11:00:23.73 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Rkill
Rkill 2.4.5 by Lawrence Abrams (Grinler) http://www.bleepingcomputer.com/ Copyright 2008-2012 BleepingComputer.com More Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 11/12/2012 10:02:58 PM in x64 mode. Windows Version: Windows 7 Home Premium Service Pack 1 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * C:\Users\Zarrokk\AppData\Local\Temp\Rar$EXa0.055\autoruns.exe (PID: 5260) [T-HEUR] 1 proccess terminated! Possibly Patched Files. * C:\Windows\Explorer.EXE Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Windows Firewall Disabled [HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = dword:00000000 Checking Windows Service Integrity: * No issues found. Searching for Missing Digital Signatures: * C:\Windows\explorer.exe [NoSig] +-> C:\Windows\ERDNT\cache86\explorer.exe : 2,871,808 : 02/24/2011 10:19 PM : 332feab1435662fc6c672e25beb37be3 [Pos Repl] +-> C:\Windows\SysWOW64\explorer.exe : 2,616,320 : 02/24/2011 09:30 PM : 8b88ebbb05a0e56b7dcc708498c02b3e [Pos Repl] +-> C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe : 2,872,320 : 11/20/2010 07:24 PM : ac4c51eb24aa95b77f705ab159189e24 [Pos Repl] +-> C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe : 2,871,808 : 02/24/2011 10:19 PM : 332feab1435662fc6c672e25beb37be3 [Pos Repl] +-> C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe : 2,871,808 : 02/25/2011 10:14 PM : 3b69712041f3d63605529bd66dc00c48 [Pos Repl] +-> C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe : 2,616,320 : 11/20/2010 07:24 PM : 40d777b7a95e00593eb1568c68514493 [Pos Repl] +-> C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe : 2,616,320 : 02/24/2011 09:30 PM : 8b88ebbb05a0e56b7dcc708498c02b3e [Pos Repl] +-> C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe : 2,616,320 : 02/25/2011 09:19 PM : 0fb9c74046656d1579a64660ad67b746 [Pos Repl] Checking HOSTS File: * HOSTS file entries found: 127.0.0.1 localhost Program finished at: 11/12/2012 10:03:21 PM Execution time: 0 hours(s), 0 minute(s), and 23 seconds(s)Autoruns
"HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms" "" "" ""
+ "rdpclip" "" "" "File not found: rdpclip"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "Apple_KbdMgr" "Boot Camp Manager" "Apple Inc." "c:\program files\boot camp\bootcamp.exe"
+ "DVD or CD Sharing" "DVD or CD Sharing Agent" "Apple Inc." "c:\program files\dvd or cd sharing\odsagent.exe"
+ "POWER PLAN ASSISTANT" "Power Plan Assistant Launcher" "" "c:\program files\powerplanassistant\powerplanassistantlauncher.exe"
+ "TRACKPADPLUSPLUS" "" "" "File not found: C:\Program Files\TrackpadPlusPlus\Trackpad++ Control Module.exe"
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "Adobe ARM" "Adobe Reader and Acrobat Manager" "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe"
+ "APSDaemon" "Apple Push" "Apple Inc." "c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe"
+ "ArcSoft Connection Service" "ArcSoft Connect Daemon" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\connection service\bin\acdaemon.exe"
+ "BambooCore" "BambooDock back-end application" "" "c:\program files (x86)\bamboo dock\bamboocore.exe"
+ "EEventManager" "EEventManager Application" "SEIKO EPSON CORPORATION" "c:\program files (x86)\epson software\event manager\eeventmanager.exe"
+ "iTunesHelper" "iTunesHelper" "Apple Inc." "c:\program files (x86)\itunes\ituneshelper.exe"
+ "TkBellExe" "RealNetworks Scheduler" "RealNetworks, Inc." "c:\program files (x86)\real\realplayer\update\realsched.exe"
"C:\Users\Zarrokk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" "" "" ""
+ "CurseClientStartup.ccip" "" "" "c:\users\zarrokk\appdata\roaming\microsoft\windows\start menu\programs\startup\curseclientstartup.ccip"
"HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" "" "" ""
+ "Microsoft Windows" "Windows Mail" "Microsoft Corporation" "c:\program files\windows mail\winmail.exe"
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components" "" "" ""
+ "Microsoft Windows" "Windows Mail" "Microsoft Corporation" "c:\program files (x86)\windows mail\winmail.exe"
"HKCU\Software\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "DAEMON Tools Lite" "DAEMON Tools Lite" "DT Soft Ltd" "c:\program files (x86)\daemon tools lite\dtlite.exe"
+ "Dexpot" "Dexpot - Virtual desktops for Windows" "Dexpot GbR" "c:\program files (x86)\dexpot\dexpot.exe"
+ "Steam" "Steam" "Valve Corporation" "c:\program files (x86)\steam\steam.exe"
+ "Taskbar Hide" "" "" "c:\program files (x86)\taskbar hide\taskbar.exe"
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" ""
+ "MagicISO" "MagicISO Shell Extension Module" "MagicISO, Inc." "c:\program files (x86)\magiciso\misosh64.dll"
+ "WinRAR" "" "" "c:\program files (x86)\winrar\rarext64.dll"
"HKLM\Software\Wow6432Node\Classes\*\ShellEx\ContextMenuHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files (x86)\winrar\rarext.dll"
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" ""
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll"
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" ""
+ "MagicISO" "MagicISO Shell Extension Module" "MagicISO, Inc." "c:\program files (x86)\magiciso\misosh64.dll"
+ "WinRAR" "" "" "c:\program files (x86)\winrar\rarext64.dll"
"HKLM\Software\Wow6432Node\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files (x86)\winrar\rarext.dll"
"HKLM\Software\Classes\Directory\Shellex\DragDropHandlers" "" "" ""
+ "WinRAR" "" "" "c:\program files (x86)\winrar\rarext64.dll"
"HKLM\Software\Wow6432Node\Classes\Directory\Shellex\DragDropHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files (x86)\winrar\rarext.dll"
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" ""
+ "Gadgets" "Sidebar droptarget" "Microsoft Corporation" "c:\program files\windows sidebar\sbdrop.dll"
+ "NvCplDesktopContext" "" "NVIDIA Corporation" "c:\windows\system32\nvshext.dll"
"HKLM\Software\Wow6432Node\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" ""
+ "Gadgets" "Sidebar droptarget" "Microsoft Corporation" "c:\program files (x86)\windows sidebar\sbdrop.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\Shellex\ColumnHandlers" "" "" ""
+ "PDF Shell Extension" "PDF Shell Extension" "Adobe Systems, Inc." "c:\program files (x86)\common files\adobe\acrobat\activex\pdfshell.dll"
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" ""
+ "MagicISO" "MagicISO Shell Extension Module" "MagicISO, Inc." "c:\program files (x86)\magiciso\misosh64.dll"
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll"
+ "WinRAR" "" "" "c:\program files (x86)\winrar\rarext64.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files (x86)\winrar\rarext.dll"
"HKLM\Software\Classes\Folder\ShellEx\DragDropHandlers" "" "" ""
+ "WinRAR" "" "" "c:\program files (x86)\winrar\rarext64.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\DragDropHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files (x86)\winrar\rarext.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "Java(tm) Plug-In 2 SSV Helper" "Java(TM) Platform SE binary" "Oracle Corporation" "c:\program files\java\jre7\bin\jp2ssv.dll"
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "YouTube Downloader" "YouTube Downloader" "HotSummerWind Software" "c:\program files (x86)\youtube downloader\youtube downloader.dll"
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" "" "" ""
+ "YouTube Downloader" "YouTube Downloader" "HotSummerWind Software" "c:\program files (x86)\youtube downloader\youtube downloader.dll"
"Task Scheduler" "" "" ""
+ "\Apple\AppleSoftwareUpdate" "Apple Software Update" "Apple Inc." "c:\program files (x86)\apple software update\softwareupdate.exe"
+ "\CCleanerSkipUAC" "CCleaner" "Piriform Ltd" "c:\program files\ccleaner\ccleaner.exe"
+ "\Dexpot\1" "Dexpot Task Scheduling Helper" "Dexpot GbR" "c:\program files (x86)\dexpot\autodex.exe"
+ "\GoogleUpdateTaskUserS-1-5-21-1314334504-1386473340-3554175909-1001Core" "Google Installer" "Google Inc." "c:\users\zarrokk\appdata\local\google\update\googleupdate.exe"
+ "\GoogleUpdateTaskUserS-1-5-21-1314334504-1386473340-3554175909-1001UA" "Google Installer" "Google Inc." "c:\users\zarrokk\appdata\local\google\update\googleupdate.exe"
+ "\Microsoft\Windows Defender\MP Scheduled Scan" "Microsoft Malware Protection Command Line Utility" "Microsoft Corporation" "c:\program files\windows defender\mpcmdrun.exe"
+ "\Microsoft\Windows Defender\MpIdleTask" "Microsoft Malware Protection Command Line Utility" "Microsoft Corporation" "c:\program files\windows defender\mpcmdrun.exe"
+ "\Microsoft\Windows\NetTrace\GatherNetworkInfo" "" "" "c:\windows\system32\gathernetworkinfo.vbs"
+ "\Microsoft\Windows\TabletPC\InputPersonalization" "" "" "File not found: C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
+ "\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" "Windows Media Player Network Sharing Service Configuration Application" "Microsoft Corporation" "c:\program files\windows media player\wmpnscfg.exe"
+ "\PowerPlanAssistantLibrary\PowerPlanAssistantStart" "Power Plan Assistant" "www.powerplan7.com" "c:\program files\powerplanassistant\powerplanassistant.exe"
+ "\RealUpgradeLogonTaskS-1-5-21-1314334504-1386473340-3554175909-1001" "RealUpgrade Launcher" "RealNetworks, Inc." "c:\program files (x86)\real\realupgrade\realupgrade.exe"
+ "\RealUpgradeScheduledTaskS-1-5-21-1314334504-1386473340-3554175909-1001" "RealUpgrade Launcher" "RealNetworks, Inc." "c:\program files (x86)\real\realupgrade\realupgrade.exe"
+ "\TrackpadPlusPlusLibrary\TrackpadPlusPlusStart" "" "" "File not found: C:\Program Files\TrackpadPlusPlus\Trackpad++ Control Module Initializer.exe"
+ "\{14933BEE-779B-4460-8ACE-6BA1FC09C94D}" "OpenDialect" "Open Dialect Developers" "c:\program files (x86)\open dialect developers\open dialect\opendialect.exe"
+ "\{59570EB3-F2DE-4014-BC26-4D4C77B842AF}" "" "" "File not found: F:\NeverwinterNights\NWN\nwn.exe"
+ "\{5A8BF503-3811-4516-83E1-784B08D27563}" "" "" "File not found: F:\NeverwinterNights\NWN\nwmain.exe"
+ "\{7081296E-73BD-4C8A-B884-403A3EB86C95}" "" "" "File not found: F:\NeverwinterNights\NWN\nwn.exe"
+ "\{7FA2BE6A-05E0-485B-B342-559530122362}" "" "" "e:\boot camp\drivers\apple\applebluetoothenablerinstaller.exe"
+ "\{889E2D6B-1495-4390-B6A3-648DFFF1FDB2}" "" "" "e:\boot camp\drivers\apple\applebluetoothenablerinstaller.exe"
+ "\{8B8F76B0-6ED3-4361-99A4-9D6E122D14B9}" "" "" "File not found: F:\NeverwinterNights\NWN\nwn.exe"
+ "\{AEE2927E-91C2-4F26-A954-EFD6C0D05665}" "" "" "File not found: C:\Program Files (x86)\Diablo II\Diablo II.exe"
+ "\{F5101979-4E69-4B90-9F3B-F4FF16DDAE4D}" "Google Chrome" "Google Inc." "c:\users\zarrokk\appdata\local\google\chrome\application\chrome.exe"
"HKLM\System\CurrentControlSet\Services" "" "" ""
+ "ACDaemon" "ArcSoft Connect Service" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\connection service\bin\acservice.exe"
+ "AdobeARMservice" "Adobe Acrobat Updater keeps your Adobe software up to date." "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe"
+ "AdobeFlashPlayerUpdateSvc" "This service keeps your Adobe Flash Player installation up to date with the latest enhancements and security fixes." "Adobe Systems Incorporated" "c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe"
+ "Apple Mobile Device" "Provides the interface to Apple mobile devices." "Apple Inc." "c:\program files (x86)\common files\apple\mobile device support\applemobiledeviceservice.exe"
+ "AppleOSSMgr" "Provides support for switching between Mac OS X and Windows" "" "c:\windows\system32\appleossmgr.exe"
+ "AppleTimeSrv" "Maintains time and date when switching between Mac OS X and Windows" "Apple Inc." "c:\windows\system32\appletimesrv.exe"
+ "Bonjour Service" "Enables hardware devices and software services to automatically configure themselves on the network and advertise their presence." "Apple Inc." "c:\program files\bonjour\mdnsresponder.exe"
+ "FLEXnet Licensing Service" "This service performs licensing functions on behalf of FLEXnet enabled products." "Acresso Software Inc." "c:\program files (x86)\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe"
+ "IDriverT" "Provides support for the Running Object Table for InstallShield Drivers" "Macrovision Corporation" "c:\program files (x86)\common files\installshield\driver\1150\intel 32\idrivert.exe"
+ "iPod Service" "iPod hardware management services" "Apple Inc." "c:\program files\ipod\bin\ipodservice.exe"
+ "MSCSPTISRV" "MSCSPTISRV Module" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\mscsptisrv.exe"
+ "nvsvc" "Provides system and desktop level support to the NVIDIA display driver" "NVIDIA Corporation" "c:\windows\system32\nvvsvc.exe"
+ "nvUpdatusService" "NVIDIA Settings Update Manager service, used to check new updates from NVIDIA server." "NVIDIA Corporation" "c:\program files (x86)\nvidia corporation\nvidia updatus\daemonu.exe"
+ "PACSPTISVR" "PACSPTISVR Module" "" "c:\program files (x86)\common files\sony shared\avlib\pacsptisvr.exe"
+ "SkypeUpdate" "Enables the detection, download and installation of updates for Skype." "Skype Technologies" "c:\program files (x86)\skype\updater\updater.exe"
+ "SonicStage Back-End Service" "SonicStage Back-End Service Module" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\ssbesvc.exe"
+ "SPTISRV" "SPTISRV Module" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\sptisrv.exe"
+ "SSScsiSV" "SonicStage Scsi I/F Server" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\ssscsisv.exe"
+ "Steam Client Service" "Steam Client Service monitors and updates Steam content" "Valve Corporation" "c:\program files (x86)\common files\steam\steamservice.exe"
+ "TabletServicePen" "Tablet Service for consumer driver" "Wacom Technology, Corp." "c:\program files\tablet\pen\pen_tablet.exe"
+ "TouchServicePen" "Touch Service" "Wacom Technology, Corp." "c:\program files\tablet\pen\pen_touchservice.exe"
+ "UCManSvc" "ソフト電池マネージャ" "Paltiosoft Inc." "c:\program files (x86)\softdenchi\ucmansvc.exe"
+ "UnsignedThemes" "Enables the use of unsigned themes." "The Within Network, LLC" "c:\windows\unsignedthemessvc.exe"
+ "wampapache" "Apache/2.2.22 (Win64) PHP/5.3.13" "Apache Software Foundation" "c:\wamp\bin\apache\apache2.2.22\bin\httpd.exe"
+ "wampmysqld" "" "" "c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe"
+ "WinDefend" "Protection against spyware and potentially unwanted software" "Microsoft Corporation" "c:\program files\windows defender\mpsvc.dll"
+ "WMPNetworkSvc" "Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play" "Microsoft Corporation" "c:\program files\windows media player\wmpnetwk.exe"
"HKLM\System\CurrentControlSet\Services" "" "" ""
+ "adp94xx" "Adaptec Windows SAS/SATA Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\adp94xx.sys"
+ "adpahci" "Adaptec Windows SATA Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\adpahci.sys"
+ "adpu320" "Adaptec StorPort Ultra320 SCSI Driver (X64)" "Adaptec, Inc." "c:\windows\system32\drivers\adpu320.sys"
+ "Afc" "Arcsoft(R) ASPI Shell" "Arcsoft, Inc." "c:\windows\syswow64\drivers\afc.sys"
+ "aliide" "ALi mini IDE Driver" "Acer Laboratories Inc." "c:\windows\system32\drivers\aliide.sys"
+ "amdsata" "AHCI 1.2 Device Driver" "Advanced Micro Devices" "c:\windows\system32\drivers\amdsata.sys"
+ "amdsbs" "AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform" "AMD Technologies Inc." "c:\windows\system32\drivers\amdsbs.sys"
+ "amdxata" "Storage Filter Driver" "Advanced Micro Devices" "c:\windows\system32\drivers\amdxata.sys"
+ "AppleBtBc" "Apple Broadcom Bluetooth" "Apple Inc." "c:\windows\system32\drivers\applebtbc.sys"
+ "AppleHFS" "Apple HFS" "Apple Inc." "c:\windows\system32\drivers\applehfs.sys"
+ "AppleMNT" "Apple Mount Manager" "Apple Inc." "c:\windows\system32\drivers\applemnt.sys"
+ "applemtm" "Apple Multitouch Mouse Driver" "Apple Inc." "c:\windows\system32\drivers\applemtm.sys"
+ "applemtp" "Apple Multitouch Trackpad Driver" "Apple Inc." "c:\windows\system32\drivers\applemtp.sys"
+ "arc" "Adaptec RAID Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\arc.sys"
+ "arcsas" "Adaptec SAS RAID WS03 Driver" "Adaptec, Inc." "c:\windows\system32\drivers\arcsas.sys"
+ "b06bdrv" "Broadcom NetXtreme II GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\bxvbda.sys"
+ "b57nd60a" "Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver." "Broadcom Corporation" "c:\windows\system32\drivers\b57nd60a.sys"
+ "BCM43XX" "Broadcom 802.11 Network Adapter wireless driver" "Broadcom Corporation" "c:\windows\system32\drivers\bcmwl664.sys"
+ "BrFiltLo" "Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltlo.sys"
+ "BrFiltUp" "Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltup.sys"
+ "Brserid" "Brotehr Serial I/F Driver (WDM)" "Brother Industries Ltd." "c:\windows\system32\drivers\brserid.sys"
+ "BrSerWdm" "Brother Serial driver (WDM version)" "Brother Industries Ltd." "c:\windows\system32\drivers\brserwdm.sys"
+ "BrUsbMdm" "Brother USB MDM Driver " "Brother Industries Ltd." "c:\windows\system32\drivers\brusbmdm.sys"
+ "BrUsbSer" "Brother USB Serial Driver" "Brother Industries Ltd." "c:\windows\system32\drivers\brusbser.sys"
+ "catchme" "" "" "File not found: C:\ComboFix\catchme.sys"
+ "CirrusFilter" "Hdaudio.sys Customization Filter " "Cirrus Logic" "c:\windows\system32\drivers\cs420x64.sys"
+ "cmdide" "CMD PCI IDE Bus Driver" "CMD Technology, Inc." "c:\windows\system32\drivers\cmdide.sys"
+ "dtsoftbus01" "DAEMON Tools Virtual Bus Driver" "DT Soft Ltd" "c:\windows\system32\drivers\dtsoftbus01.sys"
+ "ebdrv" "Broadcom NetXtreme II 10 GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\evbda.sys"
+ "elxstor" "Storport Miniport Driver for LightPulse HBAs" "Emulex" "c:\windows\system32\drivers\elxstor.sys"
+ "GEARAspiWDM" "CD DVD Filter" "GEAR Software Inc." "c:\windows\system32\drivers\gearaspiwdm.sys"
+ "hcw85cir" "Hauppauge WinTV 885 Consumer IR Driver for eHome" "Hauppauge Computer Works, Inc." "c:\windows\system32\drivers\hcw85cir.sys"
+ "HpSAMD" "Smart Array SAS/SATA Controller Media Driver" "Hewlett-Packard Company" "c:\windows\system32\drivers\hpsamd.sys"
+ "iaStorV" "Intel Matrix Storage Manager driver - x64" "Intel Corporation" "c:\windows\system32\drivers\iastorv.sys"
+ "iirsp" "Intel/ICP Raid Storport Driver" "Intel Corp./ICP vortex GmbH" "c:\windows\system32\drivers\iirsp.sys"
+ "IRRemoteFlt" "IR Receiver Driver" "Apple Inc." "c:\windows\system32\drivers\irfilter.sys"
+ "KeyAgent" "Apple KeyAgent Driver" "Apple Inc." "c:\windows\system32\drivers\keyagent.sys"
+ "KeyMagic" "Apple Keyboard Driver" "Apple Inc." "c:\windows\system32\drivers\keymagic.sys"
+ "LSI_FC" "LSI Fusion-MPT FC Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_fc.sys"
+ "LSI_SAS" "LSI Fusion-MPT SAS Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_sas.sys"
+ "LSI_SAS2" "LSI SAS Gen2 Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_sas2.sys"
+ "LSI_SCSI" "LSI Fusion-MPT SCSI Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_scsi.sys"
+ "MacHALDriver" "Mac HAL Driver" "Apple Inc." "c:\windows\system32\drivers\machaldriver.sys"
+ "megasas" "MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for x64" "LSI Corporation" "c:\windows\system32\drivers\megasas.sys"
+ "MegaSR" "LSI MegaRAID Software RAID Driver" "LSI Corporation, Inc." "c:\windows\system32\drivers\megasr.sys"
+ "MT_TRACKPAD" "MT_Trackpad Filter Driver" "n/a" "c:\windows\system32\drivers\mt_trackpad.sys"
+ "nfrd960" "IBM ServeRAID Controller Driver" "IBM Corporation" "c:\windows\system32\drivers\nfrd960.sys"
+ "nusb3hub" "USB 3.0 Hub Driver" "Renesas Electronics Corporation" "c:\windows\system32\drivers\nusb3hub.sys"
+ "nusb3xhc" "USB 3.0 Host Controller Driver" "Renesas Electronics Corporation" "c:\windows\system32\drivers\nusb3xhc.sys"
+ "NVHDA" "NVIDIA HDMI Audio Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvhda64v.sys"
+ "nvlddmkm" "NVIDIA Windows Kernel Mode Driver, Version 261.41 " "NVIDIA Corporation" "c:\windows\system32\drivers\nvlddmkm.sys"
+ "nvraid" "NVIDIA® nForce(TM) RAID Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvraid.sys"
+ "nvsmu" "NVIDIA nForce(TM) SMU Microcontroller Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvsmu.sys"
+ "nvstor" "NVIDIA® nForce(TM) Sata Performance Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvstor.sys"
+ "PhyMem" "" "" "c:\program files\powerplanassistant\ppa_x64.sys"
+ "PxHlpa64" "Px Engine Device Driver for 64-bit Windows" "Sonic Solutions" "c:\windows\system32\drivers\pxhlpa64.sys"
+ "ql2300" "QLogic Fibre Channel Stor Miniport Driver" "QLogic Corporation" "c:\windows\system32\drivers\ql2300.sys"
+ "ql40xx" "QLogic iSCSI Storport Miniport Driver" "QLogic Corporation" "c:\windows\system32\drivers\ql40xx.sys"
+ "secdrv" "Macrovision SECURITY Driver" "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K." "c:\windows\system32\drivers\secdrv.sys"
+ "Serial" "Brotehr Serial I/F Driver (WDM)" "Brother Industries Ltd." "c:\windows\system32\drivers\serial.sys"
+ "SiSRaid2" "SiS RAID Stor Miniport Driver" "Silicon Integrated Systems Corp." "c:\windows\system32\drivers\sisraid2.sys"
+ "SiSRaid4" "SiS AHCI Stor-Miniport Driver" "Silicon Integrated Systems" "c:\windows\system32\drivers\sisraid4.sys"
+ "stexstor" "Promise SuperTrak EX Series Driver for Windows " "Promise Technology" "c:\windows\system32\drivers\stexstor.sys"
+ "trackpad_plus_plus_x64" "Mouse Filter Driver" "Windows (R) Win 7 DDK provider" "c:\windows\system32\drivers\trackpad_plus_plus_x64.sys"
+ "USBAAPL64" "Apple Mobile Device USB Driver" "Apple, Inc." "c:\windows\system32\drivers\usbaapl64.sys"
+ "uxpatch" "" "" "c:\windows\system32\drivers\uxpatch.sys"
+ "vhidmini" "VJoy Virtual Joystick Driver" "Headsoft" "c:\windows\system32\drivers\vjoy.sys"
+ "viaide" "VIA Generic PCI IDE Bus Driver" "VIA Technologies, Inc." "c:\windows\system32\drivers\viaide.sys"
+ "vsmraid" "VIA RAID DRIVER FOR AMD-X86-64" "VIA Technologies Inc.,Ltd" "c:\windows\system32\drivers\vsmraid.sys"
+ "wacommousefilter" "Wacom Mouse Filter Driver" "Wacom Technology" "c:\windows\system32\drivers\wacommousefilter.sys"
+ "wacomvhid" "Virtual Hid Device" "Wacom Technology" "c:\windows\system32\drivers\wacomvhid.sys"
+ "WDC_SAM" "Manages WD external storage products." "Western Digital Technologies" "c:\windows\system32\drivers\wdcsam64.sys"
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" ""
+ "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codeca.acm"
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" ""
+ "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\syswow64\l3codeca.acm"
+ "vidc.cvid" "Cinepak® Codec" "Radius Inc." "c:\windows\syswow64\iccvid.dll"
"HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" ""
+ "Theora Encode Filter" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsftheoraencoder.dll"
+ "WebM Muxer Filter" "WebM Multiplexer Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\x64\webmmux.dll"
+ "WebM Splitter Filter" "Webm Splitter Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\x64\webmsplit.dll"
+ "WebM VP8 Decoder Filter" "WebM VP8 Decoder Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\x64\vp8decoder.dll"
+ "WebM VP8 Encoder Filter" "WebM VP8 Encoder Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\x64\vp8encoder.dll"
+ "Xiph.Org FLAC Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfflacdecoder.dll"
+ "Xiph.Org FLAC Encoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfflacencoder.dll"
+ "Xiph.Org Native FLAC Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfnativeflacsource.dll"
+ "Xiph.Org Ogg Demuxer" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfoggdemux2.dll"
+ "Xiph.Org Ogg Muxer" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfoggmux.dll"
+ "Xiph.Org Speex Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfspeexdecoder.dll"
+ "Xiph.Org Speex Encoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfspeexencoder.dll"
+ "Xiph.Org Theora Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsftheoradecoder.dll"
+ "Xiph.Org Vorbis Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfvorbisdecoder.dll"
+ "Xiph.Org Vorbis Encoder" "" "" "c:\program files (x86)\xiph.org\open codecs\x64\dsfvorbisencoder.dll"
"HKLM\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" ""
+ "ArcGetDataSample" "ArcGetDataSample" "arcsoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\arcgetdatasample.ax"
+ "ArcPutDataSample" "ArcGetDataSample" "arcsoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\arcputdatasample.ax"
+ "ArcSoft 3GP Splitter" "ArcSoft 3GP/3G2 Splitter Filter " "ArcSoft Co. " "c:\program files (x86)\common files\arcsoft\mpeg engine\3gpsplitter.ax"
+ "ArcSoft AMR/AAC Reader" "ArcSoft AMR/AAC Reader" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\amraacreader.ax"
+ "ArcSoft Audio Decoder" "ArcSoft Audio Decoder" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\asaudio.ax"
+ "ArcSoft Avi Writer Filter" "ArcSoft AVI Writer Filter" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\uaviwriter.ax"
+ "ArcSoft Convert DVD Filter" "ConvertDVDFilter" "ArcSoft, Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\convertdvdfilter.ax"
+ "ArcSoft Deinterlace" "deinterlace" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\deinterlace.ax"
+ "Arcsoft Frame Player Source" "" "" "c:\program files (x86)\common files\arcsoft\mpeg engine\fpsource.ax"
+ "ArcSoft H.264 Splitter" "ArcSoft H.264 Splitter (Filter)" "Arcsoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\h264splitter.ax"
+ "ArcSoft H263 Encoder" "ArcSoft H263 Encoder Filter" "ArcSoft Co. (hangzhou, PRC)" "c:\program files (x86)\common files\arcsoft\mpeg engine\h263encoder.ax"
+ "ArcSoft L3 Decoder" "ArcACMDecoder" "ArcSoft, Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\arcl3decoder.ax"
+ "ArcSoft L3 Encoder" "ArcACMEncoder" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\arcl3encoder.ax"
+ "Arcsoft LPCM Decoder" "LPCM Decoder" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\lpcmdec.ax"
+ "ArcSoft MP4 Splitter" "ArcSoft MP4 Splitter Filter" "ArcSoft Co. (hangzhou, PRC)" "c:\program files (x86)\common files\arcsoft\mpeg engine\mp4splitter.ax"
+ "ArcSoft MP4Muxer" "ArcSoft 3GP/3G2 Muxer Filter" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\u3gpmux.ax"
+ "ArcSoft MP4Muxer" "ArcSoft MP4 Muxer Filter" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\mp4muxer.ax"
+ "ArcSoft MPEG Audio Decoder" "ArcSoft Audio Decoder" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\mpgaudio.ax"
+ "ArcSoft Mpeg Encoder Filter" "" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\arcmpegcodec.ax"
+ "ArcSoft Mpeg Mplex Filter" "MplexFilter" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\arcmplexfilter.ax"
+ "Arcsoft Mpeg Mplex Filter" "MplexFilter" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\mplexfilter.ax"
+ "ArcSoft MPEG Splitter" "MPGSplitter Filter" "ArcSoft, Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\arcspl.ax"
+ "Arcsoft Mpeg2Audio Encoder" "Mpeg2AudioEncoder" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\mpeg2audioencoder.ax"
+ "ArcSoft MPEG4 Decoder" "ArcSoft H.263 Video Decoder (Filter)" "Arcsoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\h263dec.ax"
+ "ArcSoft Null Render" "NULL Render" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\arcnullrender.ax"
+ "ArcSoft QCELP 13K Encoder" "ArcSoft QCELP 13K Encoder" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\qcelpencoder.ax"
+ "Arcsoft QCELPDecoder" "ArcSoft QCELP Decoder" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\qcelpdecoder.ax"
+ "ArcSoft RealMedia Audio Decoder" "RealAudioDecoder" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\realaudiodecoder.ax"
+ "ArcSoft RealMedia Splitter" "RealMediaSplitter" "Arcsoft, Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\realmediasplitter.ax"
+ "ArcSoft RealMedia Video Decoder" "RealVideoDecoder" "ArcSoft" "c:\program files (x86)\common files\arcsoft\mpeg engine\realvideodecoder.ax"
+ "Arcsoft Source Buffer Filter" "Device Source Buffer Filter" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\srcbuffer.ax"
+ "ArcSoft TimeShift2.0 Client Filter" "Timeshift2.0 Filter" "Arcsoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\timeshift2.ax"
+ "ArcSoft TimeShift2.0 Server Filter" "Timeshift2.0 Filter" "Arcsoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\timeshift2.ax"
+ "ArcSoft TS Stream" "MPGSplitter Filter" "ArcSoft, Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\arctsspl.ax"
+ "ArcSoft Video Decoder" "ArcSoft Video Decoder" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\asvid.ax"
+ "ArcSoft VideoEffect" "Arcsoft Video Effect Filter 1.0" "Arcsoft Corporation" "c:\program files (x86)\common files\arcsoft\mpeg engine\arcvideoeffect.ax"
+ "Arcsoft WMV/ASF Splitter" "ArcWmvSpl" "Arcsoft, Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\arcwmvspl.ax"
+ "File Dump" "FileDump DLL" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\mpeg engine\filedump.ax"
+ "File Source (Soft-denchi.)" "SdMedia direct-show-filter Module" "Paltiosoft Inc." "c:\program files (x86)\softdenchi\sdmedia.ax"
+ "OMG TRANSFORM" "OmgTransform Filter " "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\omgtrans.ax"
+ "OmgDsee Filter" "" "" "c:\program files (x86)\common files\sony shared\openmg\omgdseefilter.ax"
+ "OmgGenericSrcFilter" "OmgGenericSrcFilter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\omggenericsrcfilter.ax"
+ "OmgMP4Decoder2" "OmgMP4Decoder2" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\omgmp4decoder2.ax"
+ "OmgPushSrc" "OmgPushSrc" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\omgpushsrc.ax"
+ "OpenMG Async. File Source" "OpenMG Async. File Source" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\omgafs.ax"
+ "OpenMG Audio Decrypt" "OpenMG Decrypt Filter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\omgdec.ax"
+ "OpenMG OmgSource Filter" "OpenMG OmgSource Filter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\omgsrc.ax"
+ "RealPlayer Audio Filter" "Audio Filter Plugin" "RealNetworks, Inc." "c:\program files (x86)\real\realplayer\rdsf3260.dll"
+ "RealPlayer Transcode Filter" "Audio Filter Plugin" "RealNetworks, Inc." "c:\program files (x86)\real\realplayer\rdsf3260.dll"
+ "RealPlayer Video Filter" "Audio Filter Plugin" "RealNetworks, Inc." "c:\program files (x86)\real\realplayer\rdsf3260.dll"
+ "SAL Input Converter" "SAL Input Converter Source Filter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\saliconv.ax"
+ "SAL Output Converter" "SAL Output Converter RendererFilter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\saloconv.ax"
+ "Seamless Play" "Seamless-Play Filter (Sample)" "Sony Corporation" "c:\program files (x86)\common files\sony shared\openmg\seamlessfilter.ax"
+ "Snapshot" "Arcsoft Snapshot Filter 1.0" "Arcsoft Corporation" "c:\program files (x86)\common files\arcsoft\mpeg engine\arcsnap.ax"
+ "Sony Audio CD Source Filter" "OpenMG CdSource Filter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\cdsrc.ax"
+ "SonyMSAConv" "OpenMG Converter Filter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\sonycdsrcwriter.ax"
+ "SonyMSAConv" "OpenMG Converter Filter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\sonymsaconverter3.ax"
+ "SonyWavWriter" "SonyWavWriter" "Sony Corporation" "c:\program files (x86)\common files\sony shared\avlib\sonywavwriter.ax"
+ "Theora Encode Filter" "" "" "c:\program files (x86)\xiph.org\open codecs\dsftheoraencoder.dll"
+ "WebM Muxer Filter" "WebM Multiplexer Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\webmmux.dll"
+ "WebM Splitter Filter" "Webm Splitter Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\webmsplit.dll"
+ "WebM VP8 Decoder Filter" "WebM VP8 Decoder Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\vp8decoder.dll"
+ "WebM VP8 Encoder Filter" "WebM VP8 Encoder Filter" "Google" "c:\program files (x86)\xiph.org\open codecs\vp8encoder.dll"
+ "Xiph.Org FLAC Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfflacdecoder.dll"
+ "Xiph.Org FLAC Encoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfflacencoder.dll"
+ "Xiph.Org Native FLAC Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfnativeflacsource.dll"
+ "Xiph.Org Ogg Demuxer" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfoggdemux2.dll"
+ "Xiph.Org Ogg Muxer" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfoggmux.dll"
+ "Xiph.Org Speex Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfspeexdecoder.dll"
+ "Xiph.Org Speex Encoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfspeexencoder.dll"
+ "Xiph.Org Theora Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsftheoradecoder.dll"
+ "Xiph.Org Vorbis Decoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfvorbisdecoder.dll"
+ "Xiph.Org Vorbis Encoder" "" "" "c:\program files (x86)\xiph.org\open codecs\dsfvorbisencoder.dll"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls" "" "" ""
+ "C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll" "" "" "File not found: C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries" "" "" ""
+ "mdnsNSP" "Bonjour Namespace Provider" "Apple Inc." "c:\program files (x86)\bonjour\mdnsnsp.dll"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64" "" "" ""
+ "mdnsNSP" "Bonjour Namespace Provider" "Apple Inc." "c:\program files\bonjour\mdnsnsp.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" ""
+ "PCL hpz3lw71" "LanguageMonitor" "Hewlett-Packard Corporation" "c:\windows\system32\hpz3lw71.dll"
Posted 13 November 2012 - 01:11 AM
Posted 13 November 2012 - 11:58 AM
Posted 13 November 2012 - 08:58 PM
Posted 22 December 2012 - 12:00 PM
0 members, 0 guests, 0 anonymous users