Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google Redirect (Happili,etc)


  • Please log in to reply
9 replies to this topic

#1 Shigekii

Shigekii

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:38 PM

Posted 26 March 2012 - 11:36 PM

Hi!, about two days ago while i was browsing Google it just redirected me to happili or some other site after i clicked something at first it was only Happili but now it redirects to other sites to. Can someone help me get rid of this?

BC AdBot (Login to Remove)

 


#2 TheForgottenGod

TheForgottenGod

  • Members
  • 39 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:38 PM

Posted 26 March 2012 - 11:46 PM

hi what you have cought is a rootkit download tdsskiller from bleeping computers. a mod will be here to help your shortly

after scan is done run malwarebytes in safemode to clean up :D

Edited by TheForgottenGod, 26 March 2012 - 11:47 PM.


#3 Shigekii

Shigekii
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:38 PM

Posted 27 March 2012 - 12:14 AM

Cool cool, Also is there a way to find and remove hidden viruses and malware on my computer that malwarebytes doesnt detect? o.o

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,493 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:38 PM

Posted 27 March 2012 - 06:54 PM

After the SAS scan please run this.

Are you on a router? Are other machines on it,if so are they redirecting?

Do you use Firefox?


Please download TDSSKiller.zip and and extract it.
  • Run TDSSKiller.exe.
  • Click Start scan.
  • When it is finished the utility outputs a list of detected objects with description.
    The utility automatically selects an action (Cure or Delete) for malicious objects.
    The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click Continue
  • Let reboot if needed and tell me if the tool needed a reboot.
  • Click on Report and post the contents of the text file that will open.

    Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log has a name like: TDSSKiller.Version_Date_Time_log.txt.



If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to these[/color] instructions. In some cases it may be necessary to redownload TDSSKiller and randomly rename it before downloading and saving to the computer.


NOW...
Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

[color="#008000"] Note:
When using "Reset FF Proxy Settings" option Firefox should be closed.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Shigekii

Shigekii
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:38 PM

Posted 31 March 2012 - 12:55 AM

TDSS did not Detect anything but it still shows up I ran SAS and Minitoolbox too

I am on a router but no one else is redirecting and i am using firefox

Heres report of MiniToolbox

MiniToolBox by Farbar Version: 18-01-2012
Ran by Kevin (administrator) on 31-03-2012 at 00:52:57
Microsoft® Windows Vista™ Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

::1 localhost
127.0.0.1 localhost
127.0.0.1 localhost
127.0.0.1 localhost

========================= IP Configuration: ================================

Atheros AR5007EG Wireless Network Adapter = Wireless Network Connection (Connected)
VirtualBox Host-Only Ethernet Adapter = VirtualBox Host-Only Network (Connected)
Realtek RTL8102E Family PCI-E Fast Ethernet NIC (NDIS 6.0) = Local Area Connection (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
add address name="VirtualBox Host-Only Network" address=192.168.56.1


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : Kevin-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hsd1.mn.comcast.net.

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : hsd1.mn.comcast.net.
Description . . . . . . . . . . . : Atheros AR5007EG Wireless Network Adapter
Physical Address. . . . . . . . . : 00-24-D2-58-37-14
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::191a:3691:ffcc:a384%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.104(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Saturday, March 31, 2012 12:36:14 AM
Lease Expires . . . . . . . . . . : Sunday, April 01, 2012 12:41:17 AM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 75.75.76.76
75.75.75.75
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8102E Family PCI-E Fast Ethernet NIC (NDIS 6.0)
Physical Address. . . . . . . . . : 00-1E-33-B6-45-86
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter VirtualBox Host-Only Network:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VirtualBox Host-Only Ethernet Adapter
Physical Address. . . . . . . . . : 08-00-27-00-8C-FD
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::48bf:48f1:4dfb:f61a%15(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.56.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 6:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : hsd1.mn.comcast.net.
Description . . . . . . . . . . . : isatap.hsd1.mn.comcast.net.
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 7:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{C12D3495-9B83-4917-A534-5FCF1ED20B86}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 14:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{35226F80-4A82-4FCE-B7FD-AD5D9B0E7277}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 15:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 6TO4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: cdns02.comcast.net
Address: 75.75.76.76

Name: google.com
Addresses: 74.125.225.40
74.125.225.35
74.125.225.46
74.125.225.36
74.125.225.41
74.125.225.39
74.125.225.32
74.125.225.33
74.125.225.37
74.125.225.34
74.125.225.38



Pinging google.com [74.125.225.40] with 32 bytes of data:

Reply from 74.125.225.40: bytes=32 time=38ms TTL=52

Reply from 74.125.225.40: bytes=32 time=37ms TTL=52



Ping statistics for 74.125.225.40:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 37ms, Maximum = 38ms, Average = 37ms

Server: cdns02.comcast.net
Address: 75.75.76.76

Name: yahoo.com
Addresses: 72.30.38.140
98.139.183.24
209.191.122.70



Pinging yahoo.com [98.139.183.24] with 32 bytes of data:

Reply from 98.139.183.24: bytes=32 time=83ms TTL=48

Reply from 98.139.183.24: bytes=32 time=75ms TTL=47



Ping statistics for 98.139.183.24:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 75ms, Maximum = 83ms, Average = 79ms

Server: cdns02.comcast.net
Address: 75.75.76.76

Name: bleepingcomputer.com
Address: 208.43.87.2



Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:

Reply from 208.43.87.2: Destination host unreachable.

Reply from 208.43.87.2: Destination host unreachable.



Ping statistics for 208.43.87.2:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),



Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time=7ms TTL=128

Reply from 127.0.0.1: bytes=32 time=2ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 2ms, Maximum = 7ms, Average = 4ms

===========================================================================
Interface List
11 ...00 24 d2 58 37 14 ...... Atheros AR5007EG Wireless Network Adapter
10 ...00 1e 33 b6 45 86 ...... Realtek RTL8102E Family PCI-E Fast Ethernet NIC (NDIS 6.0)
15 ...08 00 27 00 8c fd ...... VirtualBox Host-Only Ethernet Adapter
1 ........................... Software Loopback Interface 1
18 ...00 00 00 00 00 00 00 e0 isatap.hsd1.mn.comcast.net.
19 ...00 00 00 00 00 00 00 e0 isatap.{C12D3495-9B83-4917-A534-5FCF1ED20B86}
12 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
16 ...00 00 00 00 00 00 00 e0 isatap.{35226F80-4A82-4FCE-B7FD-AD5D9B0E7277}
17 ...00 00 00 00 00 00 00 e0 6TO4 Adapter
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.104 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.104 281
192.168.1.104 255.255.255.255 On-link 192.168.1.104 281
192.168.1.255 255.255.255.255 On-link 192.168.1.104 281
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 192.168.1.104 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 192.168.1.104 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
15 276 fe80::/64 On-link
11 281 fe80::/64 On-link
11 281 fe80::191a:3691:ffcc:a384/128
On-link
15 276 fe80::48bf:48f1:4dfb:f61a/128
On-link
1 306 ff00::/8 On-link
15 276 ff00::/8 On-link
11 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [48128] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [50176] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [19968] (Microsoft Corporation)
Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [61440] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [62976] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [27648] (Microsoft Corporation)
x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (03/31/2012 00:37:38 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2012 10:24:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2012 10:21:38 PM) (Source: Winlogon) (User: )
Description: Windows license is invalid. Error 0xC004F027. Policy Value 0x00000000.

Error: (03/30/2012 10:21:28 PM) (Source: Winlogon) (User: )
Description: Windows license activation failed. Error 0x00000000.

Error: (03/30/2012 10:20:48 PM) (Source: Winlogon) (User: )
Description: Windows license is invalid. Error 0xC004F027. Policy Value 0x00000000.

Error: (03/30/2012 10:19:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2012 10:18:08 PM) (Source: Software Licensing Service) (User: )
Description: The Software Licensing service failed to start. hr=0xC004D401, [2, 6]

Error: (03/30/2012 07:36:45 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3027

Error: (03/30/2012 07:36:45 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3027

Error: (03/30/2012 07:36:45 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (03/31/2012 00:37:39 AM) (Source: Service Control Manager) (User: )
Description: lxecCATSCustConnectService%%1053

Error: (03/31/2012 00:37:39 AM) (Source: Service Control Manager) (User: )
Description: 30000lxecCATSCustConnectService

Error: (03/31/2012 00:36:10 AM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos

Error: (03/30/2012 10:24:42 PM) (Source: Service Control Manager) (User: )
Description: lxecCATSCustConnectService%%1053

Error: (03/30/2012 10:24:42 PM) (Source: Service Control Manager) (User: )
Description: 30000lxecCATSCustConnectService

Error: (03/30/2012 10:23:55 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos

Error: (03/30/2012 10:19:42 PM) (Source: Service Control Manager) (User: )
Description: lxecCATSCustConnectService%%1053

Error: (03/30/2012 10:19:42 PM) (Source: Service Control Manager) (User: )
Description: 30000lxecCATSCustConnectService

Error: (03/30/2012 10:19:42 PM) (Source: Service Control Manager) (User: )
Description: Software Licensing%%3221541889

Error: (03/30/2012 10:18:15 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos


Microsoft Office Sessions:
=========================

=========================== Installed Programs ============================

Apple Mobile Device Support (Version: 4.0.0.97)
Bonjour (Version: 3.0.0.10)
Hex Workshop v6.6 (Version: 6.6.1.5158)
Intel® Graphics Media Accelerator Driver
Intel® Matrix Storage Manager
iTunes (Version: 10.5.2.11)
Java™ 7 (64-bit) (Version: 7.0.0)
Java™ SE Development Kit 7 (64-bit) (Version: 1.7.0.0)
Lexmark Pro800-Pro900 Series
Lexmark Universal v2 Uninstaller
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
MySQL Server 5.5 (Version: 5.5.15)
NetBeans IDE 7.0.1 (Version: 7.0.1)
Oracle VM VirtualBox 4.1.6 (Version: 4.1.6)
SKTimeStamp (Version: 1.3.3)
SUPERAntiSpyware (Version: 5.0.1146)
Synaptics Pointing Device Driver (Version: 10.1.8.0)
TOSHIBA Disc Creator (Version: 2.0.1.3 for x64)
TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00)
TOSHIBA Face Recognition (Version: 2.0.2.64)
TOSHIBA Recovery Disc Creator (Version: 2.0.0.2 for x64)
TOSHIBA Software Modem (Version: 2.1.87 (SM2187ALS04))
TOSHIBA Value Added Package (Version: 1.1.24.64)
Windows Driver Package - TOSHIBA (FwLnk) System (11/19/2006 1.0.0.3) (Version: 11/19/2006 1.0.0.3)

========================= Memory info: ===================================

Percentage of memory in use: 39%
Total physical RAM: 3963.07 MB
Available physical RAM: 2394.95 MB
Total Pagefile: 8119.41 MB
Available Pagefile: 6039.82 MB
Total Virtual: 4095.88 MB
Available Virtual: 3999.11 MB

========================= Partitions: =====================================

1 Drive c: (SQ004817V03) (Fixed) (Total:139.51 GB) (Free:14.72 GB) NTFS

========================= Users: ========================================

User accounts for \\KEVIN-PC

Administrator Guest Kevin


**** End of log ****

Edited by Shigekii, 31 March 2012 - 12:56 AM.


#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,493 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:38 PM

Posted 01 April 2012 - 02:05 PM

Please download TDSSKiller.zip and and extract it.
  • Run TDSSKiller.exe.
  • Click Start scan.
  • When it is finished the utility outputs a list of detected objects with description.
    The utility automatically selects an action (Cure or Delete) for malicious objects.
    The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click Continue
  • Let reboot if needed and tell me if the tool needed a reboot.
  • Click on Report and post the contents of the text file that will open.

    Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log has a name like: TDSSKiller.Version_Date_Time_log.txt.



If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to these[/color] instructions. [color=green]In some cases it may be necessary to redownload TDSSKiller and randomly rename it before downloading and saving to the computer.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 Shigekii

Shigekii
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:38 PM

Posted 01 April 2012 - 06:29 PM

Still Didnt detect anything but here is the log
18:26:32.0396 5020 TDSS rootkit removing tool 2.7.23.0 Mar 26 2012 13:40:18
18:26:32.0816 5020 ============================================================
18:26:32.0816 5020 Current date / time: 2012/04/01 18:26:32.0816
18:26:32.0816 5020 SystemInfo:
18:26:32.0817 5020
18:26:32.0817 5020 OS Version: 6.0.6001 ServicePack: 1.0
18:26:32.0817 5020 Product type: Workstation
18:26:32.0817 5020 ComputerName: KEVIN-PC
18:26:32.0817 5020 UserName: Kevin
18:26:32.0817 5020 Windows directory: C:\Windows
18:26:32.0817 5020 System windows directory: C:\Windows
18:26:32.0817 5020 Running under WOW64
18:26:32.0817 5020 Processor architecture: Intel x64
18:26:32.0817 5020 Number of processors: 2
18:26:32.0817 5020 Page size: 0x1000
18:26:32.0817 5020 Boot type: Normal boot
18:26:32.0817 5020 ============================================================
18:26:33.0348 5020 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:26:33.0355 5020 \Device\Harddisk0\DR0:
18:26:33.0355 5020 MBR used
18:26:33.0355 5020 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x11705800
18:26:33.0387 5020 Initialize success
18:26:33.0388 5020 ============================================================
18:26:39.0200 4804 ============================================================
18:26:39.0200 4804 Scan started
18:26:39.0200 4804 Mode: Manual;
18:26:39.0200 4804 ============================================================
18:26:40.0115 4804 !SASCORE (7d9d615201a483d6fa99491c2e655a5a) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
18:26:40.0118 4804 !SASCORE - ok
18:26:40.0340 4804 ACPI (8c99ed256a889d647935a97c543b7b85) C:\Windows\system32\drivers\acpi.sys
18:26:40.0343 4804 ACPI - ok
18:26:40.0509 4804 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
18:26:40.0516 4804 adp94xx - ok
18:26:40.0689 4804 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
18:26:40.0695 4804 adpahci - ok
18:26:40.0855 4804 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
18:26:40.0858 4804 adpu160m - ok
18:26:40.0899 4804 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
18:26:40.0902 4804 adpu320 - ok
18:26:41.0024 4804 AdvancedSystemCareService (9eabd21316ccf59e508bd4662ad02843) C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
18:26:41.0027 4804 AdvancedSystemCareService - ok
18:26:41.0149 4804 AeLookupSvc (0f421175574bfe0bf2f4d8e910a253bb) C:\Windows\System32\aelupsvc.dll
18:26:41.0151 4804 AeLookupSvc - ok
18:26:41.0438 4804 AFD (9bb97042fa331a0fb4bdd98b9280a50a) C:\Windows\system32\drivers\afd.sys
18:26:41.0444 4804 AFD - ok
18:26:41.0529 4804 AgereModemAudio (8b0d8b5bafd4c9d57b41426bc68b32f9) C:\Windows\system32\agr64svc.exe
18:26:41.0531 4804 AgereModemAudio - ok
18:26:41.0642 4804 AgereSoftModem (3627a62b10284ffbf862bfd49928edf4) C:\Windows\system32\DRIVERS\agrsm64.sys
18:26:41.0651 4804 AgereSoftModem - ok
18:26:41.0780 4804 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
18:26:41.0781 4804 agp440 - ok
18:26:41.0908 4804 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
18:26:41.0910 4804 aic78xx - ok
18:26:41.0952 4804 ALG (5922f4f59b7868f3d74bbbbeb7b825a3) C:\Windows\System32\alg.exe
18:26:41.0954 4804 ALG - ok
18:26:42.0067 4804 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
18:26:42.0068 4804 aliide - ok
18:26:42.0184 4804 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
18:26:42.0186 4804 amdide - ok
18:26:42.0276 4804 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
18:26:42.0278 4804 AmdK8 - ok
18:26:42.0313 4804 Appinfo (9c37b3fd5615477cb9a0cd116cf43f5c) C:\Windows\System32\appinfo.dll
18:26:42.0314 4804 Appinfo - ok
18:26:42.0439 4804 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
18:26:42.0440 4804 Apple Mobile Device - ok
18:26:42.0579 4804 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
18:26:42.0581 4804 arc - ok
18:26:42.0713 4804 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
18:26:42.0715 4804 arcsas - ok
18:26:42.0862 4804 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys
18:26:42.0863 4804 aswFsBlk - ok
18:26:42.0958 4804 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys
18:26:42.0960 4804 aswMonFlt - ok
18:26:43.0092 4804 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys
18:26:43.0094 4804 aswRdr - ok
18:26:43.0222 4804 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys
18:26:43.0229 4804 aswSnx - ok
18:26:43.0396 4804 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys
18:26:43.0401 4804 aswSP - ok
18:26:43.0542 4804 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys
18:26:43.0543 4804 aswTdi - ok
18:26:43.0668 4804 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
18:26:43.0669 4804 AsyncMac - ok
18:26:43.0691 4804 atapi (f988bb0690cd660318037908e9b8dbf7) C:\Windows\system32\drivers\atapi.sys
18:26:43.0692 4804 atapi - ok
18:26:43.0839 4804 athr (45511c7e870d3adddd60049232ea96b3) C:\Windows\system32\DRIVERS\athrx.sys
18:26:43.0847 4804 athr - ok
18:26:43.0967 4804 AudioEndpointBuilder (2a54b6a48ab6d2166271b05e9469326e) C:\Windows\System32\Audiosrv.dll
18:26:43.0973 4804 AudioEndpointBuilder - ok
18:26:43.0983 4804 AudioSrv (2a54b6a48ab6d2166271b05e9469326e) C:\Windows\System32\Audiosrv.dll
18:26:43.0987 4804 AudioSrv - ok
18:26:44.0092 4804 avast! Antivirus (c76769f246250edad34a5581419e9d60) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:26:44.0093 4804 avast! Antivirus - ok
18:26:44.0208 4804 BFE (bc4737aaffa5964e4f8827c9b8c0eb8e) C:\Windows\System32\bfe.dll
18:26:44.0214 4804 BFE - ok
18:26:44.0412 4804 BITS (d896a0d43f8ab81ecb1fc6c24decfd58) C:\Windows\System32\qmgr.dll
18:26:44.0428 4804 BITS - ok
18:26:44.0557 4804 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
18:26:44.0558 4804 blbdrive - ok
18:26:44.0674 4804 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
18:26:44.0680 4804 Bonjour Service - ok
18:26:44.0821 4804 bowser (f0f035fcec3554cc1b70c5611bd87951) C:\Windows\system32\DRIVERS\bowser.sys
18:26:44.0823 4804 bowser - ok
18:26:44.0860 4804 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
18:26:44.0862 4804 BrFiltLo - ok
18:26:44.0906 4804 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
18:26:44.0907 4804 BrFiltUp - ok
18:26:45.0000 4804 Browser (a1b39de453433b115b4ea69ee0343816) C:\Windows\System32\browser.dll
18:26:45.0003 4804 Browser - ok
18:26:45.0123 4804 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
18:26:45.0125 4804 Brserid - ok
18:26:45.0272 4804 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
18:26:45.0274 4804 BrSerWdm - ok
18:26:45.0437 4804 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
18:26:45.0439 4804 BrUsbMdm - ok
18:26:45.0570 4804 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
18:26:45.0571 4804 BrUsbSer - ok
18:26:45.0710 4804 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
18:26:45.0754 4804 BTHMODEM - ok
18:26:45.0867 4804 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
18:26:45.0869 4804 cdfs - ok
18:26:46.0011 4804 cdrom (3b2fb35363423ed60c8fbf15fc8680bd) C:\Windows\system32\DRIVERS\cdrom.sys
18:26:46.0013 4804 cdrom - ok
18:26:46.0095 4804 CertPropSvc (edfffc8b6afb609bf33dbe0a900426b6) C:\Windows\System32\certprop.dll
18:26:46.0097 4804 CertPropSvc - ok
18:26:46.0165 4804 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
18:26:46.0167 4804 circlass - ok
18:26:46.0312 4804 CLFS (caeda2572b7042b11062f327f099251d) C:\Windows\system32\CLFS.sys
18:26:46.0317 4804 CLFS - ok
18:26:46.0537 4804 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:26:46.0539 4804 clr_optimization_v2.0.50727_32 - ok
18:26:46.0660 4804 clr_optimization_v2.0.50727_64 (fa58b51ed71c9133e141164eaa7c54eb) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:26:46.0663 4804 clr_optimization_v2.0.50727_64 - ok
18:26:46.0846 4804 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys
18:26:46.0847 4804 CmBatt - ok
18:26:46.0897 4804 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
18:26:46.0899 4804 cmdide - ok
18:26:47.0047 4804 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys
18:26:47.0049 4804 Compbatt - ok
18:26:47.0115 4804 COMSysApp - ok
18:26:47.0209 4804 ConfigFree Gadget Service (5ac8a997e8d9c131b5f90b4f3ccfae34) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
18:26:47.0211 4804 ConfigFree Gadget Service - ok
18:26:47.0221 4804 ConfigFree Service (d10d01b2dfcd8d2f32a32ed29e8da1c2) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
18:26:47.0223 4804 ConfigFree Service - ok
18:26:47.0325 4804 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
18:26:47.0327 4804 crcdisk - ok
18:26:47.0460 4804 CryptSvc (4374f784121d8b3bb466b03f5e5ebd33) C:\Windows\system32\cryptsvc.dll
18:26:47.0463 4804 CryptSvc - ok
18:26:47.0588 4804 DcomLaunch (52cdade8289ff21f1f2215ff51a5f36c) C:\Windows\system32\rpcss.dll
18:26:47.0599 4804 DcomLaunch - ok
18:26:47.0681 4804 DfsC (3725c43c9e90731eca651d506cc599a3) C:\Windows\system32\Drivers\dfsc.sys
18:26:47.0683 4804 DfsC - ok
18:26:47.0835 4804 DFSR (1781f99840979ee7b126c9073c377fd0) C:\Windows\system32\DFSR.exe
18:26:47.0956 4804 DFSR - ok
18:26:48.0055 4804 Dhcp (fdaa0edfcfb70cd529589ad654651b40) C:\Windows\System32\dhcpcsvc.dll
18:26:48.0057 4804 Dhcp - ok
18:26:48.0106 4804 disk (2dc415fc05fb8a079f896cbbacb19324) C:\Windows\system32\drivers\disk.sys
18:26:48.0107 4804 disk - ok
18:26:48.0206 4804 Dnscache (daf05293c1264e251d3a25e7e24b2ddf) C:\Windows\System32\dnsrslvr.dll
18:26:48.0209 4804 Dnscache - ok
18:26:48.0250 4804 dot3svc (cc661867677627f2911c2a4970dee0f1) C:\Windows\System32\dot3svc.dll
18:26:48.0255 4804 dot3svc - ok
18:26:48.0341 4804 DPS (1583b39790db3eaec7edb0cb0140c708) C:\Windows\system32\dps.dll
18:26:48.0344 4804 DPS - ok
18:26:48.0398 4804 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
18:26:48.0399 4804 drmkaud - ok
18:26:48.0531 4804 DXGKrnl (412964040ce920ff83aff6b5b551bf99) C:\Windows\System32\drivers\dxgkrnl.sys
18:26:48.0541 4804 DXGKrnl - ok
18:26:48.0687 4804 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
18:26:48.0689 4804 E1G60 - ok
18:26:48.0775 4804 EagleX64 - ok
18:26:48.0820 4804 EapHost (c2303883fd9be49dc36a6400643002ea) C:\Windows\System32\eapsvc.dll
18:26:48.0823 4804 EapHost - ok
18:26:48.0934 4804 Ecache (7343d950a34a95dcb7441642e3e6beef) C:\Windows\system32\drivers\ecache.sys
18:26:48.0937 4804 Ecache - ok
18:26:49.0051 4804 ehRecvr (14ce384d2e27b64c256bda4dc39c312d) C:\Windows\ehome\ehRecvr.exe
18:26:49.0055 4804 ehRecvr - ok
18:26:49.0073 4804 ehSched (b93159c1313d66fdfbbe876f5189cd52) C:\Windows\ehome\ehsched.exe
18:26:49.0076 4804 ehSched - ok
18:26:49.0150 4804 ehstart (f5ee2527d74449868e3c3227a59bcd28) C:\Windows\ehome\ehstart.dll
18:26:49.0150 4804 ehstart - ok
18:26:49.0232 4804 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
18:26:49.0237 4804 elxstor - ok
18:26:49.0345 4804 EMDMgmt (e4eb76d0a8fc43db7f36302e1f33791f) C:\Windows\system32\emdmgmt.dll
18:26:49.0351 4804 EMDMgmt - ok
18:26:49.0473 4804 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
18:26:49.0474 4804 ErrDev - ok
18:26:49.0612 4804 EventSystem (6b1a97bf9fefbdc83f3c7c7d0f826c66) C:\Windows\system32\es.dll
18:26:49.0618 4804 EventSystem - ok
18:26:49.0707 4804 exfat (2a546b9a84658b0554b1ec35cd9adaf5) C:\Windows\system32\drivers\exfat.sys
18:26:49.0710 4804 exfat - ok
18:26:49.0827 4804 fastfat (fe731d345ed9eeabbc72a59b35941834) C:\Windows\system32\drivers\fastfat.sys
18:26:49.0830 4804 fastfat - ok
18:26:49.0918 4804 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
18:26:49.0919 4804 fdc - ok
18:26:49.0973 4804 fdPHost (bb9267acacd8b7533dd936c34a0cba5e) C:\Windows\system32\fdPHost.dll
18:26:49.0975 4804 fdPHost - ok
18:26:50.0046 4804 FDResPub (300c80931eabbe1db7591c516efe8d0f) C:\Windows\system32\fdrespub.dll
18:26:50.0048 4804 FDResPub - ok
18:26:50.0088 4804 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
18:26:50.0090 4804 FileInfo - ok
18:26:50.0201 4804 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
18:26:50.0202 4804 Filetrace - ok
18:26:50.0312 4804 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
18:26:50.0314 4804 flpydisk - ok
18:26:50.0436 4804 FltMgr (7dacf1a3a4219575070c6dc7c957428a) C:\Windows\system32\drivers\fltmgr.sys
18:26:50.0439 4804 FltMgr - ok
18:26:50.0531 4804 FontCache3.0.0.0 (73d0f1d32edae3dcc4e84468bf910add) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:26:50.0533 4804 FontCache3.0.0.0 - ok
18:26:50.0607 4804 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
18:26:50.0609 4804 Fs_Rec - ok
18:26:50.0686 4804 FwLnk (6d06b5eebba23c16789efc820ee1f253) C:\Windows\system32\DRIVERS\FwLnk.sys
18:26:50.0688 4804 FwLnk - ok
18:26:50.0734 4804 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
18:26:50.0736 4804 gagp30kx - ok
18:26:50.0871 4804 GameConsoleService (9dcf7dfe5fdbb0a47f8ee01fe13c2876) C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe
18:26:50.0874 4804 GameConsoleService - ok
18:26:51.0008 4804 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:26:51.0010 4804 GEARAspiWDM - ok
18:26:51.0065 4804 Giraffic - ok
18:26:51.0188 4804 gpsvc (9e5b254d58232ec8921ec3c5a94c81ed) C:\Windows\System32\gpsvc.dll
18:26:51.0195 4804 gpsvc - ok
18:26:51.0280 4804 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:26:51.0286 4804 gupdate - ok
18:26:51.0323 4804 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:26:51.0326 4804 gupdatem - ok
18:26:51.0379 4804 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
18:26:51.0383 4804 gusvc - ok
18:26:51.0516 4804 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys
18:26:51.0520 4804 HdAudAddService - ok
18:26:51.0623 4804 HDAudBus (0c0d0f8a3ff09ecc81963d09ec6a0a84) C:\Windows\system32\DRIVERS\HDAudBus.sys
18:26:51.0624 4804 HDAudBus - ok
18:26:51.0666 4804 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
18:26:51.0668 4804 HidBth - ok
18:26:51.0767 4804 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
18:26:51.0768 4804 HidIr - ok
18:26:51.0827 4804 hidserv (0aa154538544e988429da2d5aa803a6c) C:\Windows\system32\hidserv.dll
18:26:51.0829 4804 hidserv - ok
18:26:51.0982 4804 HidUsb (128e2da8483fdd4dd0c7b3f9abd6f323) C:\Windows\system32\DRIVERS\hidusb.sys
18:26:51.0987 4804 HidUsb - ok
18:26:52.0099 4804 hkmsvc (b12f367ea39c0795fd57e31242ce1a5a) C:\Windows\system32\kmsvc.dll
18:26:52.0102 4804 hkmsvc - ok
18:26:52.0242 4804 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
18:26:52.0244 4804 HpCISSs - ok
18:26:52.0420 4804 HTTP (e690736da6c543f5d99c8fa27bea31db) C:\Windows\system32\drivers\HTTP.sys
18:26:52.0429 4804 HTTP - ok
18:26:52.0592 4804 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
18:26:52.0595 4804 i2omp - ok
18:26:52.0713 4804 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
18:26:52.0714 4804 i8042prt - ok
18:26:52.0780 4804 IAANTMON (cb686f44bf955ea02520710a56874fa4) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
18:26:52.0784 4804 IAANTMON - ok
18:26:52.0906 4804 iaStor (8d58627fef3f8767665d9f4dc91cbd97) C:\Windows\system32\DRIVERS\iaStor.sys
18:26:52.0909 4804 iaStor - ok
18:26:52.0998 4804 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
18:26:53.0003 4804 iaStorV - ok
18:26:53.0099 4804 IDriverT (daf66902f08796f9c694901660e5a64a) C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
18:26:53.0102 4804 IDriverT - ok
18:26:53.0219 4804 idsvc (76ea63cdb2d88dae7209691d089bef1d) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:26:53.0229 4804 idsvc - ok
18:26:53.0530 4804 igfx (663e7364f650a915d415eeb2da98d86a) C:\Windows\system32\DRIVERS\igdkmd64.sys
18:26:53.0725 4804 igfx - ok
18:26:53.0852 4804 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
18:26:53.0854 4804 iirsp - ok
18:26:53.0979 4804 IKEEXT (3a3b232140c33376e134e7b61a0eaa44) C:\Windows\System32\ikeext.dll
18:26:53.0987 4804 IKEEXT - ok
18:26:54.0155 4804 IntcAzAudAddService (1835b384d2d66752ed1460e9085230bd) C:\Windows\system32\drivers\RTKVHD64.sys
18:26:54.0171 4804 IntcAzAudAddService - ok
18:26:54.0328 4804 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
18:26:54.0330 4804 intelide - ok
18:26:54.0456 4804 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
18:26:54.0457 4804 intelppm - ok
18:26:54.0556 4804 IPBusEnum (5624bc1bc5eeb49c0ab76a8114f05ea3) C:\Windows\system32\ipbusenum.dll
18:26:54.0559 4804 IPBusEnum - ok
18:26:54.0677 4804 IpFilterDriver (99b821f5bebd6a3cc3fe564f802ae0fd) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:26:54.0679 4804 IpFilterDriver - ok
18:26:54.0783 4804 iphlpsvc (82efc3d6d161dd874f1203c5f60f623c) C:\Windows\System32\iphlpsvc.dll
18:26:54.0789 4804 iphlpsvc - ok
18:26:54.0865 4804 IpInIp - ok
18:26:54.0909 4804 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
18:26:54.0911 4804 IPMIDRV - ok
18:26:54.0954 4804 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
18:26:54.0987 4804 IPNAT - ok
18:26:55.0075 4804 iPod Service (46d249f9db7844cc01050a9345f0f61b) C:\Program Files\iPod\bin\iPodService.exe
18:26:55.0086 4804 iPod Service - ok
18:26:55.0197 4804 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
18:26:55.0198 4804 IRENUM - ok
18:26:55.0310 4804 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
18:26:55.0312 4804 isapnp - ok
18:26:55.0427 4804 iScsiPrt (49e4ccbf74783fce5d2cc1ff6480e1f4) C:\Windows\system32\DRIVERS\msiscsi.sys
18:26:55.0430 4804 iScsiPrt - ok
18:26:55.0554 4804 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
18:26:55.0555 4804 iteatapi - ok
18:26:55.0688 4804 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
18:26:55.0690 4804 iteraid - ok
18:26:55.0788 4804 jswpsapi (957135960e7533ea5c7ea0bfb34f8efd) C:\Program Files (x86)\Jumpstart\jswpsapi.exe
18:26:55.0799 4804 jswpsapi - ok
18:26:55.0954 4804 JSWPSLWF (9d86c5091209ca4bd3762bed6f654501) C:\Windows\system32\DRIVERS\jswpslwfx.sys
18:26:55.0956 4804 JSWPSLWF - ok
18:26:56.0080 4804 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
18:26:56.0082 4804 kbdclass - ok
18:26:56.0198 4804 kbdhid (bf8783a5066cfecf45095459e8010fa7) C:\Windows\system32\DRIVERS\kbdhid.sys
18:26:56.0199 4804 kbdhid - ok
18:26:56.0300 4804 KeyIso (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:26:56.0303 4804 KeyIso - ok
18:26:56.0390 4804 KR10I64 (7c999f96b239e214154db3c808e6736a) C:\Windows\system32\drivers\kr10i64.sys
18:26:56.0394 4804 KR10I64 - ok
18:26:56.0540 4804 KR10N64 (8cb9a9164d4e789424f943fa718fa3f2) C:\Windows\system32\drivers\kr10n64.sys
18:26:56.0544 4804 KR10N64 - ok
18:26:56.0667 4804 KSecDD (ccdcce6224e1e207e953af826b98a9d9) C:\Windows\system32\Drivers\ksecdd.sys
18:26:56.0674 4804 KSecDD - ok
18:26:56.0762 4804 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
18:26:56.0763 4804 ksthunk - ok
18:26:56.0856 4804 KtmRm (1faf6926f3416d3da05c5b265491bdae) C:\Windows\system32\msdtckrm.dll
18:26:56.0863 4804 KtmRm - ok
18:26:56.0982 4804 LanmanServer (3f27c9cdae606d74431e3ab39571a7f3) C:\Windows\system32\srvsvc.dll
18:26:56.0988 4804 LanmanServer - ok
18:26:57.0047 4804 LanmanWorkstation (6e25ffc6fead6544c6e9f1d23329570c) C:\Windows\System32\wkssvc.dll
18:26:57.0054 4804 LanmanWorkstation - ok
18:26:57.0155 4804 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
18:26:57.0157 4804 lltdio - ok
18:26:57.0252 4804 lltdsvc (961ccbd0b1ccb5675d64976fae37d092) C:\Windows\System32\lltdsvc.dll
18:26:57.0257 4804 lltdsvc - ok
18:26:57.0284 4804 lmhosts (a47f8080cacc23c91fe823ad19aa5612) C:\Windows\System32\lmhsvc.dll
18:26:57.0286 4804 lmhosts - ok
18:26:57.0399 4804 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
18:26:57.0402 4804 LSI_FC - ok
18:26:57.0529 4804 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
18:26:57.0531 4804 LSI_SAS - ok
18:26:57.0682 4804 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
18:26:57.0684 4804 LSI_SCSI - ok
18:26:57.0842 4804 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
18:26:57.0843 4804 luafv - ok
18:26:57.0938 4804 lxecCATSCustConnectService (1f02b554ddc4086d786537a3bf6488f1) C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe
18:26:57.0943 4804 lxecCATSCustConnectService - ok
18:26:58.0051 4804 lxec_device - ok
18:26:58.0251 4804 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
18:26:58.0253 4804 MBAMProtector - ok
18:26:58.0390 4804 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
18:26:58.0397 4804 MBAMService - ok
18:26:58.0520 4804 Mcx2Svc (76a58df02bd4ea29f189b82d0bef17f8) C:\Windows\system32\Mcx2Svc.dll
18:26:58.0524 4804 Mcx2Svc - ok
18:26:58.0674 4804 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
18:26:58.0675 4804 megasas - ok
18:26:58.0824 4804 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
18:26:58.0829 4804 MegaSR - ok
18:26:58.0971 4804 MMCSS (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
18:26:58.0976 4804 MMCSS - ok
18:26:59.0095 4804 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
18:26:59.0097 4804 Modem - ok
18:26:59.0215 4804 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
18:26:59.0216 4804 monitor - ok
18:26:59.0351 4804 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
18:26:59.0354 4804 mouclass - ok
18:26:59.0485 4804 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
18:26:59.0486 4804 mouhid - ok
18:26:59.0621 4804 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
18:26:59.0623 4804 MountMgr - ok
18:26:59.0746 4804 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
18:26:59.0749 4804 mpio - ok
18:26:59.0899 4804 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
18:26:59.0902 4804 mpsdrv - ok
18:27:00.0040 4804 MpsSvc (8a670648c755867a3aa38da50ba569aa) C:\Windows\system32\mpssvc.dll
18:27:00.0049 4804 MpsSvc - ok
18:27:00.0167 4804 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
18:27:00.0169 4804 Mraid35x - ok
18:27:00.0294 4804 MRxDAV (fe2706c15f8345c342820e4e4583fea0) C:\Windows\system32\drivers\mrxdav.sys
18:27:00.0297 4804 MRxDAV - ok
18:27:00.0419 4804 mrxsmb (b698eb9acc7ecd4927d99d268918f912) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:27:00.0422 4804 mrxsmb - ok
18:27:00.0549 4804 mrxsmb10 (9a797e27fd28500ee13d43000c931435) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:27:00.0553 4804 mrxsmb10 - ok
18:27:00.0682 4804 mrxsmb20 (f9425d610712533107a264e2d5b2154b) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:27:00.0684 4804 mrxsmb20 - ok
18:27:00.0798 4804 msahci (730b784962d22d2c6481eae2370e7c8c) C:\Windows\system32\drivers\msahci.sys
18:27:00.0799 4804 msahci - ok
18:27:00.0934 4804 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
18:27:00.0936 4804 msdsm - ok
18:27:01.0106 4804 MSDTC (7ec02ce772f068ed0beafa3da341a9bc) C:\Windows\System32\msdtc.exe
18:27:01.0109 4804 MSDTC - ok
18:27:01.0168 4804 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
18:27:01.0170 4804 Msfs - ok
18:27:01.0273 4804 msisadrv (e7204a02a42fc331e9ca9d9521105b14) C:\Windows\system32\drivers\msisadrv.sys
18:27:01.0275 4804 msisadrv - ok
18:27:01.0390 4804 MSiSCSI (366b0c1f4478b519c181e37d43dcda32) C:\Windows\system32\iscsiexe.dll
18:27:01.0395 4804 MSiSCSI - ok
18:27:01.0404 4804 msiserver - ok
18:27:01.0468 4804 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
18:27:01.0470 4804 MSKSSRV - ok
18:27:01.0597 4804 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
18:27:01.0599 4804 MSPCLOCK - ok
18:27:01.0710 4804 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
18:27:01.0711 4804 MSPQM - ok
18:27:01.0751 4804 MsRPC (b8e32e6103fbba9fbb1d0c11ff0d13b5) C:\Windows\system32\drivers\MsRPC.sys
18:27:01.0756 4804 MsRPC - ok
18:27:01.0866 4804 mssmbios (c68739cfa09401233c72b1047dbf0008) C:\Windows\system32\DRIVERS\mssmbios.sys
18:27:01.0867 4804 mssmbios - ok
18:27:01.0980 4804 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
18:27:01.0981 4804 MSTEE - ok
18:27:02.0155 4804 Mup (ddf133501f68d6988a0f55dfa88637b4) C:\Windows\system32\Drivers\mup.sys
18:27:02.0157 4804 Mup - ok
18:27:02.0244 4804 MySQL41 - ok
18:27:02.0337 4804 napagent (c25022cdd18980846973b598900915f8) C:\Windows\system32\qagentRT.dll
18:27:02.0345 4804 napagent - ok
18:27:02.0483 4804 NativeWifiP (73b99c98fa3a2ed1566e02d6fe1913a5) C:\Windows\system32\DRIVERS\nwifi.sys
18:27:02.0486 4804 NativeWifiP - ok
18:27:02.0609 4804 NDIS (2a2ee457af36c5c9a6808c768bd3a12b) C:\Windows\system32\drivers\ndis.sys
18:27:02.0617 4804 NDIS - ok
18:27:02.0689 4804 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
18:27:02.0691 4804 NdisTapi - ok
18:27:02.0803 4804 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
18:27:02.0805 4804 Ndisuio - ok
18:27:02.0925 4804 NdisWan (52e3e8e35101399be9b2938c992aa087) C:\Windows\system32\DRIVERS\ndiswan.sys
18:27:02.0928 4804 NdisWan - ok
18:27:03.0061 4804 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
18:27:03.0063 4804 NDProxy - ok
18:27:03.0175 4804 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
18:27:03.0176 4804 NetBIOS - ok
18:27:03.0303 4804 netbt (7a29ca243a629230799754162d80120f) C:\Windows\system32\DRIVERS\netbt.sys
18:27:03.0307 4804 netbt - ok
18:27:03.0423 4804 Netlogon (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:27:03.0425 4804 Netlogon - ok
18:27:03.0492 4804 Netman (9b63b29defc0f3115a559d2597bf5d75) C:\Windows\System32\netman.dll
18:27:03.0499 4804 Netman - ok
18:27:03.0550 4804 netprofm (7846d0136cc2b264926a73047ba7688a) C:\Windows\System32\netprofm.dll
18:27:03.0556 4804 netprofm - ok
18:27:03.0684 4804 NetTcpPortSharing (b84613b469b98e09f50a748c1d02e132) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:27:03.0686 4804 NetTcpPortSharing - ok
18:27:03.0779 4804 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
18:27:03.0781 4804 nfrd960 - ok
18:27:03.0909 4804 NlaSvc (f145bf4c4668e7e312069f81ef847cfc) C:\Windows\System32\nlasvc.dll
18:27:03.0915 4804 NlaSvc - ok
18:27:04.0053 4804 Npfs (b06154e2a2c91e9be5599fca53bc4cd0) C:\Windows\system32\drivers\Npfs.sys
18:27:04.0055 4804 Npfs - ok
18:27:04.0140 4804 nsi (acb62baa1c319b17752553df3026eeeb) C:\Windows\system32\nsisvc.dll
18:27:04.0143 4804 nsi - ok
18:27:04.0189 4804 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
18:27:04.0190 4804 nsiproxy - ok
18:27:04.0330 4804 Ntfs (fe86ba5ac3b50e2ca911e9c60c07b638) C:\Windows\system32\drivers\Ntfs.sys
18:27:04.0346 4804 Ntfs - ok
18:27:04.0453 4804 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
18:27:04.0454 4804 Null - ok
18:27:04.0584 4804 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
18:27:04.0586 4804 nvraid - ok
18:27:04.0701 4804 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
18:27:04.0704 4804 nvstor - ok
18:27:04.0829 4804 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
18:27:04.0832 4804 nv_agp - ok
18:27:04.0841 4804 NwlnkFlt - ok
18:27:04.0855 4804 NwlnkFwd - ok
18:27:04.0978 4804 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:27:04.0983 4804 odserv - ok
18:27:05.0091 4804 ohci1394 (7b58953e2f263421fdbb09a192712a85) C:\Windows\system32\drivers\ohci1394.sys
18:27:05.0093 4804 ohci1394 - ok
18:27:05.0174 4804 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:27:05.0176 4804 ose - ok
18:27:05.0292 4804 p2pimsvc (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:27:05.0304 4804 p2pimsvc - ok
18:27:05.0320 4804 p2psvc (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:27:05.0329 4804 p2psvc - ok
18:27:05.0395 4804 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
18:27:05.0397 4804 Parport - ok
18:27:05.0502 4804 partmgr (5ab40c36894f4c06bdab0c9a2fba282d) C:\Windows\system32\drivers\partmgr.sys
18:27:05.0505 4804 partmgr - ok
18:27:05.0566 4804 PcaSvc (9ab157b374192ff276c1628fbdba2b0e) C:\Windows\System32\pcasvc.dll
18:27:05.0570 4804 PcaSvc - ok
18:27:05.0660 4804 pci (7a3dc4201208437d7d5c426789e92054) C:\Windows\system32\drivers\pci.sys
18:27:05.0664 4804 pci - ok
18:27:05.0758 4804 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\DRIVERS\pciide.sys
18:27:05.0759 4804 pciide - ok
18:27:05.0793 4804 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
18:27:05.0797 4804 pcmcia - ok
18:27:05.0931 4804 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
18:27:05.0939 4804 PEAUTH - ok
18:27:06.0054 4804 PerfHost (0ed8727ea0172860f47258456c06caea) C:\Windows\SysWow64\perfhost.exe
18:27:06.0057 4804 PerfHost - ok
18:27:06.0181 4804 pla (e9e68c1a0f25cf4a7ac966eea74ee89e) C:\Windows\system32\pla.dll
18:27:06.0201 4804 pla - ok
18:27:06.0313 4804 PlugPlay (5aaa0c5534b05ed49919fcd9dbd11a5b) C:\Windows\system32\umpnpmgr.dll
18:27:06.0320 4804 PlugPlay - ok
18:27:06.0370 4804 PNRPAutoReg (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:27:06.0378 4804 PNRPAutoReg - ok
18:27:06.0412 4804 PNRPsvc (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:27:06.0423 4804 PNRPsvc - ok
18:27:06.0600 4804 PolicyAgent (eef3688d5e9592cbbbed00de71dda1ef) C:\Windows\System32\ipsecsvc.dll
18:27:06.0608 4804 PolicyAgent - ok
18:27:06.0705 4804 PptpMiniport (f5739f2c6db2534c384ad5150808e8f5) C:\Windows\system32\DRIVERS\raspptp.sys
18:27:06.0707 4804 PptpMiniport - ok
18:27:06.0792 4804 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
18:27:06.0793 4804 Processor - ok
18:27:06.0837 4804 ProfSvc (b21fe10dad3ab59e78df7aa3fbf41e70) C:\Windows\system32\profsvc.dll
18:27:06.0842 4804 ProfSvc - ok
18:27:06.0956 4804 ProtectedStorage (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:27:06.0959 4804 ProtectedStorage - ok
18:27:07.0083 4804 PSched (0e0e205a296095fe4c631e6a4775ad6c) C:\Windows\system32\DRIVERS\pacer.sys
18:27:07.0085 4804 PSched - ok
18:27:07.0283 4804 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
18:27:07.0297 4804 ql2300 - ok
18:27:07.0428 4804 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
18:27:07.0430 4804 ql40xx - ok
18:27:07.0555 4804 QWAVE (90574842c3da781e279061a3eff91f07) C:\Windows\system32\qwave.dll
18:27:07.0562 4804 QWAVE - ok
18:27:07.0690 4804 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
18:27:07.0692 4804 QWAVEdrv - ok
18:27:07.0820 4804 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
18:27:07.0822 4804 RasAcd - ok
18:27:07.0917 4804 RasAuto (b2ae18f847d07f0044404ddf7cb04497) C:\Windows\System32\rasauto.dll
18:27:07.0922 4804 RasAuto - ok
18:27:07.0987 4804 Rasl2tp (3b9085f91ef00abd15a6f36570e90e12) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:27:07.0989 4804 Rasl2tp - ok
18:27:08.0093 4804 RasMan (2a63d46b01685fd4be9778ca3c231c2d) C:\Windows\System32\rasmans.dll
18:27:08.0100 4804 RasMan - ok
18:27:08.0203 4804 RasPppoe (2ce1703c27196094fb6e4c6e439f2c21) C:\Windows\system32\DRIVERS\raspppoe.sys
18:27:08.0205 4804 RasPppoe - ok
18:27:08.0317 4804 RasSstp (fcd04fa67e8b40fa0ad361dd38593942) C:\Windows\system32\DRIVERS\rassstp.sys
18:27:08.0319 4804 RasSstp - ok
18:27:08.0473 4804 rdbss (33fa5b6136d92ee0f53f021c79091300) C:\Windows\system32\DRIVERS\rdbss.sys
18:27:08.0477 4804 rdbss - ok
18:27:08.0577 4804 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:27:08.0578 4804 RDPCDD - ok
18:27:08.0730 4804 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
18:27:08.0734 4804 rdpdr - ok
18:27:08.0866 4804 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
18:27:08.0868 4804 RDPENCDD - ok
18:27:09.0019 4804 RDPWD (7747082f672aa2846235c9cea42e2e72) C:\Windows\system32\drivers\RDPWD.sys
18:27:09.0023 4804 RDPWD - ok
18:27:09.0138 4804 RemoteAccess (c612b9557da73f70d41f8a6fbc8e5344) C:\Windows\System32\mprdim.dll
18:27:09.0141 4804 RemoteAccess - ok
18:27:09.0211 4804 RemoteRegistry (416c611369cbe49074b89cee2f83abef) C:\Windows\system32\regsvc.dll
18:27:09.0217 4804 RemoteRegistry - ok
18:27:09.0324 4804 RpcLocator (f46c457840d4b7a4daafee739ce04102) C:\Windows\system32\locator.exe
18:27:09.0326 4804 RpcLocator - ok
18:27:09.0433 4804 RpcSs (52cdade8289ff21f1f2215ff51a5f36c) C:\Windows\system32\rpcss.dll
18:27:09.0441 4804 RpcSs - ok
18:27:09.0549 4804 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
18:27:09.0551 4804 rspndr - ok
18:27:09.0606 4804 RTL8169 (bf55641fc2f759281b9bf59d5daa8fde) C:\Windows\system32\DRIVERS\Rtlh64.sys
18:27:09.0609 4804 RTL8169 - ok
18:27:09.0752 4804 RTSTOR (108729909ce285a352a1d1cb96bb1b2e) C:\Windows\system32\drivers\RTSTOR64.SYS
18:27:09.0754 4804 RTSTOR - ok
18:27:09.0856 4804 SamSs (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:27:09.0859 4804 SamSs - ok
18:27:09.0988 4804 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
18:27:09.0989 4804 SASDIFSV - ok
18:27:10.0011 4804 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
18:27:10.0011 4804 SASKUTIL - ok
18:27:10.0125 4804 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
18:27:10.0127 4804 sbp2port - ok
18:27:10.0181 4804 SCardSvr (f024d560fea06f8b56d673849eb89ae6) C:\Windows\System32\SCardSvr.dll
18:27:10.0186 4804 SCardSvr - ok
18:27:10.0312 4804 Schedule (ce75d26e0a1106129f4d156851e298ed) C:\Windows\system32\schedsvc.dll
18:27:10.0327 4804 Schedule - ok
18:27:10.0429 4804 SCPolicySvc (edfffc8b6afb609bf33dbe0a900426b6) C:\Windows\System32\certprop.dll
18:27:10.0430 4804 SCPolicySvc - ok
18:27:10.0552 4804 SDRSVC (4ff71b076a7760fe75ea5ae2d0ee0018) C:\Windows\System32\SDRSVC.dll
18:27:10.0557 4804 SDRSVC - ok
18:27:10.0621 4804 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
18:27:10.0623 4804 secdrv - ok
18:27:10.0710 4804 seclogon (5acdcbc67fcf894a1815b9f96d704490) C:\Windows\system32\seclogon.dll
18:27:10.0714 4804 seclogon - ok
18:27:10.0733 4804 SENS (90973a64b96cd647ff81c79443618eed) C:\Windows\System32\sens.dll
18:27:10.0737 4804 SENS - ok
18:27:10.0844 4804 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys
18:27:10.0845 4804 Serenum - ok
18:27:10.0970 4804 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys
18:27:10.0972 4804 Serial - ok
18:27:11.0098 4804 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
18:27:11.0099 4804 sermouse - ok
18:27:11.0223 4804 SessionEnv (a8e4a4407a09f35dccc3771af590b0c4) C:\Windows\system32\sessenv.dll
18:27:11.0228 4804 SessionEnv - ok
18:27:11.0364 4804 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
18:27:11.0365 4804 sffdisk - ok
18:27:11.0486 4804 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
18:27:11.0487 4804 sffp_mmc - ok
18:27:11.0584 4804 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
18:27:11.0586 4804 sffp_sd - ok
18:27:11.0661 4804 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
18:27:11.0662 4804 sfloppy - ok
18:27:11.0816 4804 SharedAccess (4c5aee179da7e1ee9a9ccb9da289af34) C:\Windows\System32\ipnathlp.dll
18:27:11.0821 4804 SharedAccess - ok
18:27:11.0986 4804 ShellHWDetection (9235ec680d3db17464b39c7c7decb4dd) C:\Windows\System32\shsvcs.dll
18:27:11.0994 4804 ShellHWDetection - ok
18:27:12.0144 4804 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
18:27:12.0146 4804 SiSRaid2 - ok
18:27:12.0195 4804 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
18:27:12.0197 4804 SiSRaid4 - ok
18:27:12.0365 4804 slsvc (a301d2cefb4747dfe0c24425dcbe0b78) C:\Windows\system32\SLsvc.exe
18:27:12.0392 4804 slsvc - ok
18:27:12.0500 4804 SLUINotify (f5ddf7c0af85eb72cb295171f8c3cb35) C:\Windows\system32\SLUINotify.dll
18:27:12.0506 4804 SLUINotify - ok
18:27:12.0616 4804 SmartFaceVWatchSrv (79ed2d6dec26e0fefb93ea21f09e6a51) C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe
18:27:12.0617 4804 SmartFaceVWatchSrv - ok
18:27:12.0726 4804 Smb (41eb2e8e005feedcafce301983eff932) C:\Windows\system32\DRIVERS\smb.sys
18:27:12.0728 4804 Smb - ok
18:27:12.0853 4804 SNMPTRAP (f8f47f38909823b1af28d60b96340cff) C:\Windows\System32\snmptrap.exe
18:27:12.0857 4804 SNMPTRAP - ok
18:27:12.0891 4804 spldr (f9cb0672162f7f04248e2b82c1ff4617) C:\Windows\system32\drivers\spldr.sys
18:27:12.0893 4804 spldr - ok
18:27:13.0003 4804 Spooler (92e6738d25c2123be9515c0eac0776cd) C:\Windows\System32\spoolsv.exe
18:27:13.0010 4804 Spooler - ok
18:27:13.0093 4804 srv (a8abd7d0d907b45cf3831f4dd8644349) C:\Windows\system32\DRIVERS\srv.sys
18:27:13.0099 4804 srv - ok
18:27:13.0252 4804 srv2 (6c72eea39e1c37b436a6d1532999f9ec) C:\Windows\system32\DRIVERS\srv2.sys
18:27:13.0255 4804 srv2 - ok
18:27:13.0371 4804 srvnet (7f69bcf9e6fa3d93c82ee6b87812666d) C:\Windows\system32\DRIVERS\srvnet.sys
18:27:13.0374 4804 srvnet - ok
18:27:13.0467 4804 SSDPSRV (192c74646ec5725aef3f80d19ff75f6a) C:\Windows\System32\ssdpsrv.dll
18:27:13.0473 4804 SSDPSRV - ok
18:27:13.0615 4804 SstpSvc (2ee3fa0308e6185ba64a9a7f2e74332b) C:\Windows\system32\sstpsvc.dll
18:27:13.0620 4804 SstpSvc - ok
18:27:13.0697 4804 stisvc (f14f7d7d68a66777fb999d5d0f21138d) C:\Windows\System32\wiaservc.dll
18:27:13.0708 4804 stisvc - ok
18:27:13.0838 4804 swenum (409f0882afbb34832b24370c23c550b2) C:\Windows\system32\DRIVERS\swenum.sys
18:27:13.0840 4804 swenum - ok
18:27:13.0979 4804 swprv (da34d6eb4a3154c0bebaeb0a2483ef3e) C:\Windows\System32\swprv.dll
18:27:13.0989 4804 swprv - ok
18:27:14.0109 4804 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
18:27:14.0111 4804 Symc8xx - ok
18:27:14.0234 4804 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
18:27:14.0235 4804 Sym_hi - ok
18:27:14.0358 4804 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
18:27:14.0360 4804 Sym_u3 - ok
18:27:14.0500 4804 SynTP (572438150fc79e41a0348e3dc56b1dd2) C:\Windows\system32\DRIVERS\SynTP.sys
18:27:14.0505 4804 SynTP - ok
18:27:14.0694 4804 SysMain (bea0d5521ed21df8f6ffeed86daede7b) C:\Windows\system32\sysmain.dll
18:27:14.0708 4804 SysMain - ok
18:27:14.0820 4804 TabletInputService (005ce42567f9113a3bccb3b20073b029) C:\Windows\System32\TabSvc.dll
18:27:14.0824 4804 TabletInputService - ok
18:27:14.0865 4804 TapiSrv (52091001caf20ae84cf47023ee21b4bb) C:\Windows\System32\tapisrv.dll
18:27:14.0872 4804 TapiSrv - ok
18:27:14.0987 4804 TBS (cdbe8d7c1e201b911cdc346d06617fb5) C:\Windows\System32\tbssvc.dll
18:27:14.0991 4804 TBS - ok
18:27:15.0170 4804 Tcpip (7d86275fb640011b372fd566c0eafa8d) C:\Windows\system32\drivers\tcpip.sys
18:27:15.0187 4804 Tcpip - ok
18:27:15.0337 4804 Tcpip6 (7d86275fb640011b372fd566c0eafa8d) C:\Windows\system32\DRIVERS\tcpip.sys
18:27:15.0347 4804 Tcpip6 - ok
18:27:15.0455 4804 tcpipreg (c29d4b3b08ad0b7e8564814e4ff6a57b) C:\Windows\system32\drivers\tcpipreg.sys
18:27:15.0457 4804 tcpipreg - ok
18:27:15.0588 4804 tdcmdpst (d45586a9facb2c9708b10e491ef748a6) C:\Windows\system32\DRIVERS\tdcmdpst.sys
18:27:15.0592 4804 tdcmdpst - ok
18:27:15.0742 4804 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
18:27:15.0743 4804 TDPIPE - ok
18:27:15.0857 4804 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
18:27:15.0859 4804 TDTCP - ok
18:27:15.0990 4804 tdx (8c39c72e0e853de04748c0337d9b9216) C:\Windows\system32\DRIVERS\tdx.sys
18:27:15.0993 4804 tdx - ok
18:27:16.0182 4804 TeamViewer6 (1c46c27e9f1938b9589859c70450d275) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
18:27:16.0208 4804 TeamViewer6 - ok
18:27:16.0319 4804 TermDD (134507aa0b5a2acf57f657d2f956f4e1) C:\Windows\system32\DRIVERS\termdd.sys
18:27:16.0320 4804 TermDD - ok
18:27:16.0424 4804 TermService (f870a5589d6a94b426efb13689023946) C:\Windows\System32\termsrv.dll
18:27:16.0435 4804 TermService - ok
18:27:16.0553 4804 Themes (9235ec680d3db17464b39c7c7decb4dd) C:\Windows\system32\shsvcs.dll
18:27:16.0559 4804 Themes - ok
18:27:16.0683 4804 THREADORDER (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
18:27:16.0686 4804 THREADORDER - ok
18:27:16.0753 4804 TMachInfo (e09caafb2b323a6ff120cefb96da0a44) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
18:27:16.0754 4804 TMachInfo - ok
18:27:16.0825 4804 TNaviSrv (89f74c86523f5e334628dbce66e6d165) C:\Program Files (x86)\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
18:27:16.0827 4804 TNaviSrv - ok
18:27:16.0928 4804 TODDSrv (19af3434564e973bc232bbd629ec2bf6) C:\Windows\system32\TODDSrv.exe
18:27:16.0933 4804 TODDSrv - ok
18:27:17.0045 4804 TosCoSrv (e17a81e6ad0e89630a3b0f2ed5cbbdf5) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
18:27:17.0050 4804 TosCoSrv - ok
18:27:17.0099 4804 TOSHIBA SMART Log Service (19d979b9f6373a7cb17ebb7594feb819) C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
18:27:17.0102 4804 TOSHIBA SMART Log Service - ok
18:27:17.0221 4804 tos_sps64 (dd50a5df5f7b29fdb6b5fea728c43dc3) C:\Windows\system32\DRIVERS\tos_sps64.sys
18:27:17.0228 4804 tos_sps64 - ok
18:27:17.0314 4804 TrkWks (f4689f05af472a651a7b1b7b02d200e7) C:\Windows\System32\trkwks.dll
18:27:17.0319 4804 TrkWks - ok
18:27:17.0359 4804 TrustedInstaller (ac6ff1df22ed90bad6417ee5a4c6e2f0) C:\Windows\servicing\TrustedInstaller.exe
18:27:17.0360 4804 TrustedInstaller - ok
18:27:17.0477 4804 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
18:27:17.0479 4804 tssecsrv - ok
18:27:17.0598 4804 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
18:27:17.0600 4804 tunmp - ok
18:27:17.0622 4804 tunnel (f6a4fba7c03ac2efd00f3301c0c1e067) C:\Windows\system32\DRIVERS\tunnel.sys
18:27:17.0624 4804 tunnel - ok
18:27:17.0785 4804 TVALZ (9a744cc3d804ec38a6c2c65bc3c6fcd8) C:\Windows\system32\DRIVERS\TVALZ_O.SYS
18:27:17.0787 4804 TVALZ - ok
18:27:17.0904 4804 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
18:27:17.0906 4804 uagp35 - ok
18:27:18.0020 4804 udfs (93edd10512c981d8f5189e1c048a4280) C:\Windows\system32\DRIVERS\udfs.sys
18:27:18.0024 4804 udfs - ok
18:27:18.0136 4804 UI0Detect (060507c4113391394478f6953a79eedc) C:\Windows\system32\UI0Detect.exe
18:27:18.0140 4804 UI0Detect - ok
18:27:18.0249 4804 UleadBurningHelper (332d341d92b933600d41953b08360dfb) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
18:27:18.0250 4804 UleadBurningHelper - ok
18:27:18.0399 4804 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
18:27:18.0401 4804 uliagpkx - ok
18:27:18.0445 4804 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
18:27:18.0449 4804 uliahci - ok
18:27:18.0576 4804 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
18:27:18.0579 4804 UlSata - ok
18:27:18.0700 4804 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
18:27:18.0703 4804 ulsata2 - ok
18:27:18.0825 4804 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
18:27:18.0827 4804 umbus - ok
18:27:18.0929 4804 upnphost (7093799ff80e9deca0680d2e3535be60) C:\Windows\System32\upnphost.dll
18:27:18.0937 4804 upnphost - ok
18:27:19.0036 4804 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
18:27:19.0038 4804 USBAAPL64 - ok
18:27:19.0143 4804 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
18:27:19.0146 4804 usbccgp - ok
18:27:19.0201 4804 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
18:27:19.0203 4804 usbcir - ok
18:27:19.0312 4804 usbehci (da6d8d8ed0a53c63ac6f4bd40fe83fbe) C:\Windows\system32\DRIVERS\usbehci.sys
18:27:19.0315 4804 usbehci - ok
18:27:19.0430 4804 usbhub (99045369ae3216216573d0775fd7ed56) C:\Windows\system32\DRIVERS\usbhub.sys
18:27:19.0434 4804 usbhub - ok
18:27:19.0563 4804 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
18:27:19.0565 4804 usbohci - ok
18:27:19.0710 4804 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
18:27:19.0712 4804 usbprint - ok
18:27:19.0846 4804 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
18:27:19.0848 4804 usbscan - ok
18:27:19.0977 4804 USBSTOR (586d9876a4945779c8eea926c0d16889) C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:27:19.0979 4804 USBSTOR - ok
18:27:20.0041 4804 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
18:27:20.0043 4804 usbuhci - ok
18:27:20.0153 4804 usbvideo (fc33099877790d51b0927b7039059855) C:\Windows\system32\Drivers\usbvideo.sys
18:27:20.0156 4804 usbvideo - ok
18:27:20.0264 4804 UVCFTR (060b7863943625e0193a3575c0c59e52) C:\Windows\system32\Drivers\UVCFTR_S.SYS
18:27:20.0266 4804 UVCFTR - ok
18:27:20.0354 4804 UxSms (9190f03c82547afa87367f1ceca88f3b) C:\Windows\System32\uxsms.dll
18:27:20.0358 4804 UxSms - ok
18:27:20.0424 4804 VBoxDrv (b6437a7c60c817a0d7bea1d994b01612) C:\Windows\system32\DRIVERS\VBoxDrv.sys
18:27:20.0428 4804 VBoxDrv - ok
18:27:20.0573 4804 VBoxNetAdp (9e607f6240eadc4c0b3570f3e5e0358c) C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
18:27:20.0576 4804 VBoxNetAdp - ok
18:27:20.0722 4804 VBoxNetFlt (9f7bc6d33a3aa4aff35c9dbd69c2bca0) C:\Windows\system32\DRIVERS\VBoxNetFlt.sys
18:27:20.0725 4804 VBoxNetFlt - ok
18:27:20.0876 4804 VBoxUSB (3cc7909465536d89551c2b5374a2f48a) C:\Windows\system32\Drivers\VBoxUSB.sys
18:27:20.0879 4804 VBoxUSB - ok
18:27:21.0054 4804 VBoxUSBMon (84b57b85a550476456ec5ab32fa99513) C:\Windows\system32\DRIVERS\VBoxUSBMon.sys
18:27:21.0058 4804 VBoxUSBMon - ok
18:27:21.0155 4804 vds (c15a4a550cba7b9f1f68b72528e04ce1) C:\Windows\System32\vds.exe
18:27:21.0166 4804 vds - ok
18:27:21.0319 4804 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
18:27:21.0321 4804 vga - ok
18:27:21.0442 4804 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
18:27:21.0444 4804 VgaSave - ok
18:27:21.0618 4804 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
18:27:21.0619 4804 viaide - ok
18:27:21.0755 4804 volmgr (28b52d1f950b36e03819013d0b7514bc) C:\Windows\system32\drivers\volmgr.sys
18:27:21.0757 4804 volmgr - ok
18:27:21.0920 4804 volmgrx (5aa217da5dc4ff5b9ac9ab86563b3223) C:\Windows\system32\drivers\volmgrx.sys
18:27:21.0926 4804 volmgrx - ok
18:27:22.0066 4804 volsnap (de4307412d98050239026e56a7dff3c0) C:\Windows\system32\drivers\volsnap.sys
18:27:22.0070 4804 volsnap - ok
18:27:22.0115 4804 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
18:27:22.0118 4804 vsmraid - ok
18:27:22.0246 4804 VSS (186bd53f8a408ad20f5a056c05678629) C:\Windows\system32\vssvc.exe
18:27:22.0268 4804 VSS - ok
18:27:22.0373 4804 W32Time (ba29f34a61cb55c0dee29e787542edf4) C:\Windows\system32\w32time.dll
18:27:22.0382 4804 W32Time - ok
18:27:22.0497 4804 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
18:27:22.0499 4804 WacomPen - ok
18:27:22.0571 4804 Wanarp (aea75207e443c8623c36b8d03596f84f) C:\Windows\system32\DRIVERS\wanarp.sys
18:27:22.0573 4804 Wanarp - ok
18:27:22.0587 4804 Wanarpv6 (aea75207e443c8623c36b8d03596f84f) C:\Windows\system32\DRIVERS\wanarp.sys
18:27:22.0589 4804 Wanarpv6 - ok
18:27:22.0675 4804 wcncsvc (055449247c490e24b968b44fe8a969eb) C:\Windows\System32\wcncsvc.dll
18:27:22.0686 4804 wcncsvc - ok
18:27:22.0848 4804 WcsPlugInService (ea4b369560e986f19d93f45a881484ac) C:\Windows\System32\WcsPlugInService.dll
18:27:22.0852 4804 WcsPlugInService - ok
18:27:22.0941 4804 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
18:27:22.0943 4804 Wd - ok
18:27:23.0097 4804 WDC_SAM (a3d04ebf5227886029b4532f20d026f7) C:\Windows\system32\DRIVERS\wdcsam64.sys
18:27:23.0099 4804 WDC_SAM - ok
18:27:23.0307 4804 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
18:27:23.0323 4804 Wdf01000 - ok
18:27:23.0415 4804 WdiServiceHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
18:27:23.0420 4804 WdiServiceHost - ok
18:27:23.0425 4804 WdiSystemHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
18:27:23.0430 4804 WdiSystemHost - ok
18:27:23.0450 4804 WebClient (3d4ab55f8178fd0cd3ca45cd0ec9cf5b) C:\Windows\System32\webclnt.dll
18:27:23.0457 4804 WebClient - ok
18:27:23.0573 4804 Wecsvc (8d40bc587993f876658bf9fb0f7d3462) C:\Windows\system32\wecsvc.dll
18:27:23.0579 4804 Wecsvc - ok
18:27:23.0682 4804 wercplsupport (9c980351d7e96288ea0c23ae232bd065) C:\Windows\System32\wercplsupport.dll
18:27:23.0687 4804 wercplsupport - ok
18:27:23.0743 4804 WerSvc (fc25242b3bcaf7e84d9184082274ae08) C:\Windows\System32\WerSvc.dll
18:27:23.0748 4804 WerSvc - ok
18:27:23.0792 4804 WinDefend - ok
18:27:23.0828 4804 WinHttpAutoProxySvc - ok
18:27:23.0976 4804 Winmgmt (ac98f38feab066a8f983d54ff3f4fd4c) C:\Windows\system32\wbem\WMIsvc.dll
18:27:23.0980 4804 Winmgmt - ok
18:27:24.0113 4804 WinRM (6cbb0c68f13b9c2ec1b16f5fa5e7c869) C:\Windows\system32\WsmSvc.dll
18:27:24.0140 4804 WinRM - ok
18:27:24.0296 4804 Wlansvc (0a69955261c1b54206adc9beb89517de) C:\Windows\System32\wlansvc.dll
18:27:24.0308 4804 Wlansvc - ok
18:27:24.0431 4804 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\drivers\wmiacpi.sys
18:27:24.0433 4804 WmiAcpi - ok
18:27:24.0568 4804 wmiApSrv (d303322dd577c3deda1251ed2e7a496c) C:\Windows\system32\wbem\WmiApSrv.exe
18:27:24.0572 4804 wmiApSrv - ok
18:27:24.0619 4804 WMPNetworkSvc - ok
18:27:24.0729 4804 WPCSvc (cbc156c913f099e6680d1df9307db7a8) C:\Windows\System32\wpcsvc.dll
18:27:24.0735 4804 WPCSvc - ok
18:27:24.0794 4804 WPDBusEnum (a27c8f92d84e2ddc151978e4692c978e) C:\Windows\system32\wpdbusenum.dll
18:27:24.0800 4804 WPDBusEnum - ok
18:27:24.0910 4804 WpdUsb (6329d1990db931073b86ab5946d8e317) C:\Windows\system32\DRIVERS\wpdusb.sys
18:27:24.0913 4804 WpdUsb - ok
18:27:24.0972 4804 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
18:27:24.0974 4804 ws2ifsl - ok
18:27:25.0048 4804 wscsvc (cb8ea6d95949384925ccfca21cc6dfd8) C:\Windows\System32\wscsvc.dll
18:27:25.0053 4804 wscsvc - ok
18:27:25.0070 4804 WSearch - ok
18:27:25.0208 4804 wuauserv (fb3796754fe00f0bdc87a36f164a5f4d) C:\Windows\system32\wuaueng.dll
18:27:25.0241 4804 wuauserv - ok
18:27:25.0354 4804 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
18:27:25.0357 4804 WUDFRd - ok
18:27:25.0451 4804 wudfsvc (6cbd51ff913c851d56ed9dc7f2a27dde) C:\Windows\System32\WUDFSvc.dll
18:27:25.0457 4804 wudfsvc - ok
18:27:25.0517 4804 MBR (0x1B8) (5b5e648d12fcadc244c1ec30318e1eb9) \Device\Harddisk0\DR0
18:27:25.0573 4804 \Device\Harddisk0\DR0 - ok
18:27:25.0577 4804 Boot (0x1200) (8f278fcace275e38e292f4ec41abe437) \Device\Harddisk0\DR0\Partition0
18:27:25.0578 4804 \Device\Harddisk0\DR0\Partition0 - ok
18:27:25.0580 4804 ============================================================
18:27:25.0580 4804 Scan finished
18:27:25.0580 4804 ============================================================
18:27:25.0599 1392 Detected object count: 0
18:27:25.0599 1392 Actual detected object count: 0
18:27:56.0171 4416 ============================================================
18:27:56.0171 4416 Scan started
18:27:56.0171 4416 Mode: Manual;
18:27:56.0171 4416 ============================================================
18:27:56.0664 4416 !SASCORE (7d9d615201a483d6fa99491c2e655a5a) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
18:27:56.0665 4416 !SASCORE - ok
18:27:56.0822 4416 ACPI (8c99ed256a889d647935a97c543b7b85) C:\Windows\system32\drivers\acpi.sys
18:27:56.0825 4416 ACPI - ok
18:27:56.0980 4416 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
18:27:56.0985 4416 adp94xx - ok
18:27:57.0138 4416 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
18:27:57.0143 4416 adpahci - ok
18:27:57.0291 4416 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
18:27:57.0293 4416 adpu160m - ok
18:27:57.0436 4416 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
18:27:57.0438 4416 adpu320 - ok
18:27:57.0528 4416 AdvancedSystemCareService (9eabd21316ccf59e508bd4662ad02843) C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
18:27:57.0530 4416 AdvancedSystemCareService - ok
18:27:57.0664 4416 AeLookupSvc (0f421175574bfe0bf2f4d8e910a253bb) C:\Windows\System32\aelupsvc.dll
18:27:57.0665 4416 AeLookupSvc - ok
18:27:57.0809 4416 AFD (9bb97042fa331a0fb4bdd98b9280a50a) C:\Windows\system32\drivers\afd.sys
18:27:57.0812 4416 AFD - ok
18:27:57.0923 4416 AgereModemAudio (8b0d8b5bafd4c9d57b41426bc68b32f9) C:\Windows\system32\agr64svc.exe
18:27:57.0924 4416 AgereModemAudio - ok
18:27:58.0079 4416 AgereSoftModem (3627a62b10284ffbf862bfd49928edf4) C:\Windows\system32\DRIVERS\agrsm64.sys
18:27:58.0087 4416 AgereSoftModem - ok
18:27:58.0228 4416 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
18:27:58.0229 4416 agp440 - ok
18:27:58.0379 4416 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
18:27:58.0380 4416 aic78xx - ok
18:27:58.0434 4416 ALG (5922f4f59b7868f3d74bbbbeb7b825a3) C:\Windows\System32\alg.exe
18:27:58.0435 4416 ALG - ok
18:27:58.0571 4416 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
18:27:58.0571 4416 aliide - ok
18:27:58.0711 4416 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
18:27:58.0712 4416 amdide - ok
18:27:58.0858 4416 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
18:27:58.0859 4416 AmdK8 - ok
18:27:58.0972 4416 Appinfo (9c37b3fd5615477cb9a0cd116cf43f5c) C:\Windows\System32\appinfo.dll
18:27:58.0973 4416 Appinfo - ok
18:27:59.0076 4416 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
18:27:59.0077 4416 Apple Mobile Device - ok
18:27:59.0239 4416 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
18:27:59.0240 4416 arc - ok
18:27:59.0373 4416 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
18:27:59.0374 4416 arcsas - ok
18:27:59.0421 4416 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys
18:27:59.0422 4416 aswFsBlk - ok
18:27:59.0461 4416 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys
18:27:59.0462 4416 aswMonFlt - ok
18:27:59.0596 4416 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys
18:27:59.0597 4416 aswRdr - ok
18:27:59.0738 4416 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys
18:27:59.0742 4416 aswSnx - ok
18:27:59.0878 4416 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys
18:27:59.0880 4416 aswSP - ok
18:27:59.0990 4416 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys
18:27:59.0991 4416 aswTdi - ok
18:28:00.0116 4416 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
18:28:00.0117 4416 AsyncMac - ok
18:28:00.0206 4416 atapi (f988bb0690cd660318037908e9b8dbf7) C:\Windows\system32\drivers\atapi.sys
18:28:00.0207 4416 atapi - ok
18:28:00.0277 4416 athr (45511c7e870d3adddd60049232ea96b3) C:\Windows\system32\DRIVERS\athrx.sys
18:28:00.0285 4416 athr - ok
18:28:00.0415 4416 AudioEndpointBuilder (2a54b6a48ab6d2166271b05e9469326e) C:\Windows\System32\Audiosrv.dll
18:28:00.0419 4416 AudioEndpointBuilder - ok
18:28:00.0436 4416 AudioSrv (2a54b6a48ab6d2166271b05e9469326e) C:\Windows\System32\Audiosrv.dll
18:28:00.0439 4416 AudioSrv - ok
18:28:00.0541 4416 avast! Antivirus (c76769f246250edad34a5581419e9d60) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:28:00.0542 4416 avast! Antivirus - ok
18:28:00.0678 4416 BFE (bc4737aaffa5964e4f8827c9b8c0eb8e) C:\Windows\System32\bfe.dll
18:28:00.0681 4416 BFE - ok
18:28:00.0850 4416 BITS (d896a0d43f8ab81ecb1fc6c24decfd58) C:\Windows\System32\qmgr.dll
18:28:00.0860 4416 BITS - ok
18:28:01.0005 4416 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
18:28:01.0006 4416 blbdrive - ok
18:28:01.0122 4416 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
18:28:01.0125 4416 Bonjour Service - ok
18:28:01.0258 4416 bowser (f0f035fcec3554cc1b70c5611bd87951) C:\Windows\system32\DRIVERS\bowser.sys
18:28:01.0259 4416 bowser - ok
18:28:01.0309 4416 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
18:28:01.0309 4416 BrFiltLo - ok
18:28:01.0454 4416 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
18:28:01.0455 4416 BrFiltUp - ok
18:28:01.0580 4416 Browser (a1b39de453433b115b4ea69ee0343816) C:\Windows\System32\browser.dll
18:28:01.0582 4416 Browser - ok
18:28:01.0660 4416 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
18:28:01.0661 4416 Brserid - ok
18:28:01.0853 4416 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
18:28:01.0855 4416 BrSerWdm - ok
18:28:02.0008 4416 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
18:28:02.0009 4416 BrUsbMdm - ok
18:28:02.0018 4416 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
18:28:02.0019 4416 BrUsbSer - ok
18:28:02.0058 4416 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
18:28:02.0058 4416 BTHMODEM - ok
18:28:02.0204 4416 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
18:28:02.0205 4416 cdfs - ok
18:28:02.0237 4416 cdrom (3b2fb35363423ed60c8fbf15fc8680bd) C:\Windows\system32\DRIVERS\cdrom.sys
18:28:02.0238 4416 cdrom - ok
18:28:02.0332 4416 CertPropSvc (edfffc8b6afb609bf33dbe0a900426b6) C:\Windows\System32\certprop.dll
18:28:02.0333 4416 CertPropSvc - ok
18:28:02.0425 4416 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
18:28:02.0425 4416 circlass - ok
18:28:02.0594 4416 CLFS (caeda2572b7042b11062f327f099251d) C:\Windows\system32\CLFS.sys
18:28:02.0597 4416 CLFS - ok
18:28:02.0730 4416 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:28:02.0731 4416 clr_optimization_v2.0.50727_32 - ok
18:28:02.0797 4416 clr_optimization_v2.0.50727_64 (fa58b51ed71c9133e141164eaa7c54eb) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:28:02.0799 4416 clr_optimization_v2.0.50727_64 - ok
18:28:02.0960 4416 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys
18:28:02.0961 4416 CmBatt - ok
18:28:03.0090 4416 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
18:28:03.0091 4416 cmdide - ok
18:28:03.0218 4416 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys
18:28:03.0219 4416 Compbatt - ok
18:28:03.0286 4416 COMSysApp - ok
18:28:03.0365 4416 ConfigFree Gadget Service (5ac8a997e8d9c131b5f90b4f3ccfae34) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
18:28:03.0366 4416 ConfigFree Gadget Service - ok
18:28:03.0405 4416 ConfigFree Service (d10d01b2dfcd8d2f32a32ed29e8da1c2) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
18:28:03.0406 4416 ConfigFree Service - ok
18:28:03.0585 4416 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
18:28:03.0586 4416 crcdisk - ok
18:28:03.0686 4416 CryptSvc (4374f784121d8b3bb466b03f5e5ebd33) C:\Windows\system32\cryptsvc.dll
18:28:03.0688 4416 CryptSvc - ok
18:28:03.0802 4416 DcomLaunch (52cdade8289ff21f1f2215ff51a5f36c) C:\Windows\system32\rpcss.dll
18:28:03.0810 4416 DcomLaunch - ok
18:28:03.0941 4416 DfsC (3725c43c9e90731eca651d506cc599a3) C:\Windows\system32\Drivers\dfsc.sys
18:28:03.0942 4416 DfsC - ok
18:28:04.0094 4416 DFSR (1781f99840979ee7b126c9073c377fd0) C:\Windows\system32\DFSR.exe
18:28:04.0122 4416 DFSR - ok
18:28:04.0236 4416 Dhcp (fdaa0edfcfb70cd529589ad654651b40) C:\Windows\System32\dhcpcsvc.dll
18:28:04.0240 4416 Dhcp - ok
18:28:04.0355 4416 disk (2dc415fc05fb8a079f896cbbacb19324) C:\Windows\system32\drivers\disk.sys
18:28:04.0356 4416 disk - ok
18:28:04.0465 4416 Dnscache (daf05293c1264e251d3a25e7e24b2ddf) C:\Windows\System32\dnsrslvr.dll
18:28:04.0467 4416 Dnscache - ok
18:28:04.0564 4416 dot3svc (cc661867677627f2911c2a4970dee0f1) C:\Windows\System32\dot3svc.dll
18:28:04.0567 4416 dot3svc - ok
18:28:04.0656 4416 DPS (1583b39790db3eaec7edb0cb0140c708) C:\Windows\system32\dps.dll
18:28:04.0659 4416 DPS - ok
18:28:04.0713 4416 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
18:28:04.0714 4416 drmkaud - ok
18:28:04.0857 4416 DXGKrnl (412964040ce920ff83aff6b5b551bf99) C:\Windows\System32\drivers\dxgkrnl.sys
18:28:04.0863 4416 DXGKrnl - ok
18:28:04.0980 4416 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
18:28:04.0981 4416 E1G60 - ok
18:28:05.0090 4416 EagleX64 - ok
18:28:05.0158 4416 EapHost (c2303883fd9be49dc36a6400643002ea) C:\Windows\System32\eapsvc.dll
18:28:05.0159 4416 EapHost - ok
18:28:05.0259 4416 Ecache (7343d950a34a95dcb7441642e3e6beef) C:\Windows\system32\drivers\ecache.sys
18:28:05.0261 4416 Ecache - ok
18:28:05.0344 4416 ehRecvr (14ce384d2e27b64c256bda4dc39c312d) C:\Windows\ehome\ehRecvr.exe
18:28:05.0347 4416 ehRecvr - ok
18:28:05.0366 4416 ehSched (b93159c1313d66fdfbbe876f5189cd52) C:\Windows\ehome\ehsched.exe
18:28:05.0368 4416 ehSched - ok
18:28:05.0442 4416 ehstart (f5ee2527d74449868e3c3227a59bcd28) C:\Windows\ehome\ehstart.dll
18:28:05.0443 4416 ehstart - ok
18:28:05.0534 4416 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
18:28:05.0537 4416 elxstor - ok
18:28:05.0649 4416 EMDMgmt (e4eb76d0a8fc43db7f36302e1f33791f) C:\Windows\system32\emdmgmt.dll
18:28:05.0653 4416 EMDMgmt - ok
18:28:05.0776 4416 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
18:28:05.0777 4416 ErrDev - ok
18:28:05.0883 4416 EventSystem (6b1a97bf9fefbdc83f3c7c7d0f826c66) C:\Windows\system32\es.dll
18:28:05.0886 4416 EventSystem - ok
18:28:06.0000 4416 exfat (2a546b9a84658b0554b1ec35cd9adaf5) C:\Windows\system32\drivers\exfat.sys
18:28:06.0001 4416 exfat - ok
18:28:06.0120 4416 fastfat (fe731d345ed9eeabbc72a59b35941834) C:\Windows\system32\drivers\fastfat.sys
18:28:06.0122 4416 fastfat - ok
18:28:06.0244 4416 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
18:28:06.0245 4416 fdc - ok
18:28:06.0354 4416 fdPHost (bb9267acacd8b7533dd936c34a0cba5e) C:\Windows\system32\fdPHost.dll
18:28:06.0356 4416 fdPHost - ok
18:28:06.0439 4416 FDResPub (300c80931eabbe1db7591c516efe8d0f) C:\Windows\system32\fdrespub.dll
18:28:06.0440 4416 FDResPub - ok
18:28:06.0504 4416 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
18:28:06.0505 4416 FileInfo - ok
18:28:06.0571 4416 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
18:28:06.0572 4416 Filetrace - ok
18:28:06.0639 4416 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
18:28:06.0639 4416 flpydisk - ok
18:28:06.0762 4416 FltMgr (7dacf1a3a4219575070c6dc7c957428a) C:\Windows\system32\drivers\fltmgr.sys
18:28:06.0764 4416 FltMgr - ok
18:28:06.0857 4416 FontCache3.0.0.0 (73d0f1d32edae3dcc4e84468bf910add) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:28:06.0858 4416 FontCache3.0.0.0 - ok
18:28:06.0945 4416 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
18:28:06.0946 4416 Fs_Rec - ok
18:28:07.0068 4416 FwLnk (6d06b5eebba23c16789efc820ee1f253) C:\Windows\system32\DRIVERS\FwLnk.sys
18:28:07.0069 4416 FwLnk - ok
18:28:07.0171 4416 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
18:28:07.0173 4416 gagp30kx - ok
18:28:07.0285 4416 GameConsoleService (9dcf7dfe5fdbb0a47f8ee01fe13c2876) C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe
18:28:07.0288 4416 GameConsoleService - ok
18:28:07.0423 4416 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:28:07.0424 4416 GEARAspiWDM - ok
18:28:07.0480 4416 Giraffic - ok
18:28:07.0603 4416 gpsvc (9e5b254d58232ec8921ec3c5a94c81ed) C:\Windows\System32\gpsvc.dll
18:28:07.0610 4416 gpsvc - ok
18:28:07.0695 4416 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:28:07.0696 4416 gupdate - ok
18:28:07.0702 4416 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:28:07.0704 4416 gupdatem - ok
18:28:07.0764 4416 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
18:28:07.0766 4416 gusvc - ok
18:28:07.0931 4416 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys
18:28:07.0933 4416 HdAudAddService - ok
18:28:07.0971 4416 HDAudBus (0c0d0f8a3ff09ecc81963d09ec6a0a84) C:\Windows\system32\DRIVERS\HDAudBus.sys
18:28:07.0972 4416 HDAudBus - ok
18:28:08.0081 4416 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
18:28:08.0082 4416 HidBth - ok
18:28:08.0159 4416 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
18:28:08.0160 4416 HidIr - ok
18:28:08.0219 4416 hidserv (0aa154538544e988429da2d5aa803a6c) C:\Windows\system32\hidserv.dll
18:28:08.0221 4416 hidserv - ok
18:28:08.0350 4416 HidUsb (128e2da8483fdd4dd0c7b3f9abd6f323) C:\Windows\system32\DRIVERS\hidusb.sys
18:28:08.0351 4416 HidUsb - ok
18:28:08.0436 4416 hkmsvc (b12f367ea39c0795fd57e31242ce1a5a) C:\Windows\system32\kmsvc.dll
18:28:08.0439 4416 hkmsvc - ok
18:28:08.0523 4416 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
18:28:08.0524 4416 HpCISSs - ok
18:28:08.0650 4416 HTTP (e690736da6c543f5d99c8fa27bea31db) C:\Windows\system32\drivers\HTTP.sys
18:28:08.0655 4416 HTTP - ok
18:28:08.0785 4416 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
18:28:08.0786 4416 i2omp - ok
18:28:08.0905 4416 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
18:28:08.0907 4416 i8042prt - ok
18:28:09.0006 4416 IAANTMON (cb686f44bf955ea02520710a56874fa4) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
18:28:09.0009 4416 IAANTMON - ok
18:28:09.0143 4416 iaStor (8d58627fef3f8767665d9f4dc91cbd97) C:\Windows\system32\DRIVERS\iaStor.sys
18:28:09.0146 4416 iaStor - ok
18:28:09.0258 4416 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
18:28:09.0260 4416 iaStorV - ok
18:28:09.0359 4416 IDriverT (daf66902f08796f9c694901660e5a64a) C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
18:28:09.0360 4416 IDriverT - ok
18:28:09.0478 4416 idsvc (76ea63cdb2d88dae7209691d089bef1d) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:28:09.0484 4416 idsvc - ok
18:28:09.0786 4416 igfx (663e7364f650a915d415eeb2da98d86a) C:\Windows\system32\DRIVERS\igdkmd64.sys
18:28:09.0840 4416 igfx - ok
18:28:09.0967 4416 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
18:28:09.0968 4416 iirsp - ok
18:28:10.0116 4416 IKEEXT (3a3b232140c33376e134e7b61a0eaa44) C:\Windows\System32\ikeext.dll
18:28:10.0120 4416 IKEEXT - ok
18:28:10.0281 4416 IntcAzAudAddService (1835b384d2d66752ed1460e9085230bd) C:\Windows\system32\drivers\RTKVHD64.sys
18:28:10.0291 4416 IntcAzAudAddService - ok
18:28:10.0421 4416 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
18:28:10.0422 4416 intelide - ok
18:28:10.0549 4416 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
18:28:10.0550 4416 intelppm - ok
18:28:10.0638 4416 IPBusEnum (5624bc1bc5eeb49c0ab76a8114f05ea3) C:\Windows\system32\ipbusenum.dll
18:28:10.0640 4416 IPBusEnum - ok
18:28:10.0704 4416 IpFilterDriver (99b821f5bebd6a3cc3fe564f802ae0fd) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:28:10.0705 4416 IpFilterDriver - ok
18:28:10.0798 4416 iphlpsvc (82efc3d6d161dd874f1203c5f60f623c) C:\Windows\System32\iphlpsvc.dll
18:28:10.0802 4416 iphlpsvc - ok
18:28:10.0835 4416 IpInIp - ok
18:28:10.0913 4416 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
18:28:10.0915 4416 IPMIDRV - ok
18:28:10.0958 4416 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
18:28:10.0959 4416 IPNAT - ok
18:28:11.0057 4416 iPod Service (46d249f9db7844cc01050a9345f0f61b) C:\Program Files\iPod\bin\iPodService.exe
18:28:11.0063 4416 iPod Service - ok
18:28:11.0179 4416 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
18:28:11.0180 4416 IRENUM - ok
18:28:11.0292 4416 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
18:28:11.0293 4416 isapnp - ok
18:28:11.0411 4416 iScsiPrt (49e4ccbf74783fce5d2cc1ff6480e1f4) C:\Windows\system32\DRIVERS\msiscsi.sys
18:28:11.0413 4416 iScsiPrt - ok
18:28:11.0447 4416 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
18:28:11.0448 4416 iteatapi - ok
18:28:11.0581 4416 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
18:28:11.0582 4416 iteraid - ok
18:28:11.0681 4416 jswpsapi (957135960e7533ea5c7ea0bfb34f8efd) C:\Program Files (x86)\Jumpstart\jswpsapi.exe
18:28:11.0688 4416 jswpsapi - ok
18:28:11.0814 4416 JSWPSLWF (9d86c5091209ca4bd3762bed6f654501) C:\Windows\system32\DRIVERS\jswpslwfx.sys
18:28:11.0815 4416 JSWPSLWF - ok
18:28:11.0917 4416 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
18:28:11.0918 4416 kbdclass - ok
18:28:12.0024 4416 kbdhid (bf8783a5066cfecf45095459e8010fa7) C:\Windows\system32\DRIVERS\kbdhid.sys
18:28:12.0025 4416 kbdhid - ok
18:28:12.0137 4416 KeyIso (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:28:12.0139 4416 KeyIso - ok
18:28:12.0216 4416 KR10I64 (7c999f96b239e214154db3c808e6736a) C:\Windows\system32\drivers\kr10i64.sys
18:28:12.0218 4416 KR10I64 - ok
18:28:12.0344 4416 KR10N64 (8cb9a9164d4e789424f943fa718fa3f2) C:\Windows\system32\drivers\kr10n64.sys
18:28:12.0346 4416 KR10N64 - ok
18:28:12.0482 4416 KSecDD (ccdcce6224e1e207e953af826b98a9d9) C:\Windows\system32\Drivers\ksecdd.sys
18:28:12.0486 4416 KSecDD - ok
18:28:12.0588 4416 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
18:28:12.0589 4416 ksthunk - ok
18:28:12.0704 4416 KtmRm (1faf6926f3416d3da05c5b265491bdae) C:\Windows\system32\msdtckrm.dll
18:28:12.0709 4416 KtmRm - ok
18:28:12.0819 4416 LanmanServer (3f27c9cdae606d74431e3ab39571a7f3) C:\Windows\system32\srvsvc.dll
18:28:12.0823 4416 LanmanServer - ok
18:28:12.0874 4416 LanmanWorkstation (6e25ffc6fead6544c6e9f1d23329570c) C:\Windows\System32\wkssvc.dll
18:28:12.0879 4416 LanmanWorkstation - ok
18:28:13.0015 4416 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
18:28:13.0016 4416 lltdio - ok
18:28:13.0100 4416 lltdsvc (961ccbd0b1ccb5675d64976fae37d092) C:\Windows\System32\lltdsvc.dll
18:28:13.0104 4416 lltdsvc - ok
18:28:13.0165 4416 lmhosts (a47f8080cacc23c91fe823ad19aa5612) C:\Windows\System32\lmhsvc.dll
18:28:13.0168 4416 lmhosts - ok
18:28:13.0281 4416 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
18:28:13.0282 4416 LSI_FC - ok
18:28:13.0411 4416 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
18:28:13.0412 4416 LSI_SAS - ok
18:28:13.0541 4416 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
18:28:13.0542 4416 LSI_SCSI - ok
18:28:13.0642 4416 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
18:28:13.0644 4416 luafv - ok
18:28:13.0742 4416 lxecCATSCustConnectService (1f02b554ddc4086d786537a3bf6488f1) C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe
18:28:13.0744 4416 lxecCATSCustConnectService - ok
18:28:13.0808 4416 lxec_device - ok
18:28:13.0866 4416 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
18:28:13.0867 4416 MBAMProtector - ok
18:28:13.0982 4416 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
18:28:13.0987 4416 MBAMService - ok
18:28:14.0097 4416 Mcx2Svc (76a58df02bd4ea29f189b82d0bef17f8) C:\Windows\system32\Mcx2Svc.dll
18:28:14.0099 4416 Mcx2Svc - ok
18:28:14.0178 4416 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
18:28:14.0179 4416 megasas - ok
18:28:14.0305 4416 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
18:28:14.0309 4416 MegaSR - ok
18:28:14.0397 4416 MMCSS (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
18:28:14.0400 4416 MMCSS - ok
18:28:14.0466 4416 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
18:28:14.0467 4416 Modem - ok
18:28:14.0574 4416 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
18:28:14.0575 4416 monitor - ok
18:28:14.0699 4416 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
18:28:14.0700 4416 mouclass - ok
18:28:14.0822 4416 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
18:28:14.0823 4416 mouhid - ok
18:28:14.0931 4416 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
18:28:14.0932 4416 MountMgr - ok
18:28:15.0061 4416 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
18:28:15.0063 4416 mpio - ok
18:28:15.0202 4416 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
18:28:15.0203 4416 mpsdrv - ok
18:28:15.0287 4416 MpsSvc (8a670648c755867a3aa38da50ba569aa) C:\Windows\system32\mpssvc.dll
18:28:15.0294 4416 MpsSvc - ok
18:28:15.0416 4416 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
18:28:15.0417 4416 Mraid35x - ok
18:28:15.0531 4416 MRxDAV (fe2706c15f8345c342820e4e4583fea0) C:\Windows\system32\drivers\mrxdav.sys
18:28:15.0533 4416 MRxDAV - ok
18:28:15.0645 4416 mrxsmb (b698eb9acc7ecd4927d99d268918f912) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:28:15.0647 4416 mrxsmb - ok
18:28:15.0763 4416 mrxsmb10 (9a797e27fd28500ee13d43000c931435) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:28:15.0766 4416 mrxsmb10 - ok
18:28:15.0886 4416 mrxsmb20 (f9425d610712533107a264e2d5b2154b) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:28:15.0887 4416 mrxsmb20 - ok
18:28:15.0981 4416 msahci (730b784962d22d2c6481eae2370e7c8c) C:\Windows\system32\drivers\msahci.sys
18:28:15.0984 4416 msahci - ok
18:28:16.0082 4416 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
18:28:16.0084 4416 msdsm - ok
18:28:16.0187 4416 MSDTC (7ec02ce772f068ed0beafa3da341a9bc) C:\Windows\System32\msdtc.exe
18:28:16.0191 4416 MSDTC - ok
18:28:16.0261 4416 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
18:28:16.0262 4416 Msfs - ok
18:28:16.0377 4416 msisadrv (e7204a02a42fc331e9ca9d9521105b14) C:\Windows\system32\drivers\msisadrv.sys
18:28:16.0378 4416 msisadrv - ok
18:28:16.0460 4416 MSiSCSI (366b0c1f4478b519c181e37d43dcda32) C:\Windows\system32\iscsiexe.dll
18:28:16.0463 4416 MSiSCSI - ok
18:28:16.0484 4416 msiserver - ok
18:28:16.0583 4416 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
18:28:16.0584 4416 MSKSSRV - ok
18:28:16.0712 4416 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
18:28:16.0713 4416 MSPCLOCK - ok
18:28:16.0825 4416 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
18:28:16.0826 4416 MSPQM - ok
18:28:16.0922 4416 MsRPC (b8e32e6103fbba9fbb1d0c11ff0d13b5) C:\Windows\system32\drivers\MsRPC.sys
18:28:16.0925 4416 MsRPC - ok
18:28:17.0014 4416 mssmbios (c68739cfa09401233c72b1047dbf0008) C:\Windows\system32\DRIVERS\mssmbios.sys
18:28:17.0015 4416 mssmbios - ok
18:28:17.0128 4416 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
18:28:17.0129 4416 MSTEE - ok
18:28:17.0258 4416 Mup (ddf133501f68d6988a0f55dfa88637b4) C:\Windows\system32\Drivers\mup.sys
18:28:17.0259 4416 Mup - ok
18:28:17.0303 4416 MySQL41 - ok
18:28:17.0396 4416 napagent (c25022cdd18980846973b598900915f8) C:\Windows\system32\qagentRT.dll
18:28:17.0402 4416 napagent - ok
18:28:17.0509 4416 NativeWifiP (73b99c98fa3a2ed1566e02d6fe1913a5) C:\Windows\system32\DRIVERS\nwifi.sys
18:28:17.0511 4416 NativeWifiP - ok
18:28:17.0646 4416 NDIS (2a2ee457af36c5c9a6808c768bd3a12b) C:\Windows\system32\drivers\ndis.sys
18:28:17.0651 4416 NDIS - ok
18:28:17.0771 4416 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
18:28:17.0772 4416 NdisTapi - ok
18:28:17.0874 4416 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
18:28:17.0875 4416 Ndisuio - ok
18:28:17.0962 4416 NdisWan (52e3e8e35101399be9b2938c992aa087) C:\Windows\system32\DRIVERS\ndiswan.sys
18:28:17.0963 4416 NdisWan - ok
18:28:18.0054 4416 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
18:28:18.0055 4416 NDProxy - ok
18:28:18.0156 4416 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
18:28:18.0157 4416 NetBIOS - ok
18:28:18.0262 4416 netbt (7a29ca243a629230799754162d80120f) C:\Windows\system32\DRIVERS\netbt.sys
18:28:18.0265 4416 netbt - ok
18:28:18.0349 4416 Netlogon (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:28:18.0351 4416 Netlogon - ok
18:28:18.0396 4416 Netman (9b63b29defc0f3115a559d2597bf5d75) C:\Windows\System32\netman.dll
18:28:18.0401 4416 Netman - ok
18:28:18.0487 4416 netprofm (7846d0136cc2b264926a73047ba7688a) C:\Windows\System32\netprofm.dll
18:28:18.0492 4416 netprofm - ok
18:28:18.0588 4416 NetTcpPortSharing (b84613b469b98e09f50a748c1d02e132) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:28:18.0589 4416 NetTcpPortSharing - ok
18:28:18.0672 4416 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
18:28:18.0673 4416 nfrd960 - ok
18:28:18.0835 4416 NlaSvc (f145bf4c4668e7e312069f81ef847cfc) C:\Windows\System32\nlasvc.dll
18:28:18.0839 4416 NlaSvc - ok
18:28:18.0935 4416 Npfs (b06154e2a2c91e9be5599fca53bc4cd0) C:\Windows\system32\drivers\Npfs.sys
18:28:18.0936 4416 Npfs - ok
18:28:19.0021 4416 nsi (acb62baa1c319b17752553df3026eeeb) C:\Windows\system32\nsisvc.dll
18:28:19.0024 4416 nsi - ok
18:28:19.0104 4416 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
18:28:19.0106 4416 nsiproxy - ok
18:28:19.0257 4416 Ntfs (fe86ba5ac3b50e2ca911e9c60c07b638) C:\Windows\system32\drivers\Ntfs.sys
18:28:19.0271 4416 Ntfs - ok
18:28:19.0368 4416 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
18:28:19.0369 4416 Null - ok
18:28:19.0477 4416 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
18:28:19.0478 4416 nvraid - ok
18:28:19.0594 4416 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
18:28:19.0596 4416 nvstor - ok
18:28:19.0680 4416 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
18:28:19.0682 4416 nv_agp - ok
18:28:19.0726 4416 NwlnkFlt - ok
18:28:19.0798 4416 NwlnkFwd - ok
18:28:19.0982 4416 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:28:19.0986 4416 odserv - ok
18:28:20.0128 4416 ohci1394 (7b58953e2f263421fdbb09a192712a85) C:\Windows\system32\drivers\ohci1394.sys
18:28:20.0129 4416 ohci1394 - ok
18:28:20.0222 4416 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:28:20.0223 4416 ose - ok
18:28:20.0363 4416 p2pimsvc (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:28:20.0371 4416 p2pimsvc - ok
18:28:20.0387 4416 p2psvc (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:28:20.0396 4416 p2psvc - ok
18:28:20.0466 4416 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
18:28:20.0467 4416 Parport - ok
18:28:20.0572 4416 partmgr (5ab40c36894f4c06bdab0c9a2fba282d) C:\Windows\system32\drivers\partmgr.sys
18:28:20.0574 4416 partmgr - ok
18:28:20.0692 4416 PcaSvc (9ab157b374192ff276c1628fbdba2b0e) C:\Windows\System32\pcasvc.dll
18:28:20.0696 4416 PcaSvc - ok
18:28:20.0753 4416 pci (7a3dc4201208437d7d5c426789e92054) C:\Windows\system32\drivers\pci.sys
18:28:20.0755 4416 pci - ok
18:28:20.0861 4416 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\DRIVERS\pciide.sys
18:28:20.0862 4416 pciide - ok
18:28:20.0909 4416 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
18:28:20.0910 4416 pcmcia - ok
18:28:20.0990 4416 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
18:28:20.0996 4416 PEAUTH - ok
18:28:21.0069 4416 PerfHost (0ed8727ea0172860f47258456c06caea) C:\Windows\SysWow64\perfhost.exe
18:28:21.0071 4416 PerfHost - ok
18:28:21.0207 4416 pla (e9e68c1a0f25cf4a7ac966eea74ee89e) C:\Windows\system32\pla.dll
18:28:21.0218 4416 pla - ok
18:28:21.0306 4416 PlugPlay (5aaa0c5534b05ed49919fcd9dbd11a5b) C:\Windows\system32\umpnpmgr.dll
18:28:21.0311 4416 PlugPlay - ok
18:28:21.0429 4416 PNRPAutoReg (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:28:21.0437 4416 PNRPAutoReg - ok
18:28:21.0453 4416 PNRPsvc (430f35c5592d253f43a26b4f5a523dbf) C:\Windows\system32\p2psvc.dll
18:28:21.0462 4416 PNRPsvc - ok
18:28:21.0515 4416 PolicyAgent (eef3688d5e9592cbbbed00de71dda1ef) C:\Windows\System32\ipsecsvc.dll
18:28:21.0520 4416 PolicyAgent - ok
18:28:21.0631 4416 PptpMiniport (f5739f2c6db2534c384ad5150808e8f5) C:\Windows\system32\DRIVERS\raspptp.sys
18:28:21.0633 4416 PptpMiniport - ok
18:28:21.0740 4416 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
18:28:21.0741 4416 Processor - ok
18:28:21.0785 4416 ProfSvc (b21fe10dad3ab59e78df7aa3fbf41e70) C:\Windows\system32\profsvc.dll
18:28:21.0790 4416 ProfSvc - ok
18:28:21.0849 4416 ProtectedStorage (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:28:21.0852 4416 ProtectedStorage - ok
18:28:21.0964 4416 PSched (0e0e205a296095fe4c631e6a4775ad6c) C:\Windows\system32\DRIVERS\pacer.sys
18:28:21.0966 4416 PSched - ok
18:28:22.0143 4416 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
18:28:22.0151 4416 ql2300 - ok
18:28:22.0287 4416 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
18:28:22.0289 4416 ql40xx - ok
18:28:22.0380 4416 QWAVE (90574842c3da781e279061a3eff91f07) C:\Windows\system32\qwave.dll
18:28:22.0385 4416 QWAVE - ok
18:28:22.0450 4416 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
18:28:22.0451 4416 QWAVEdrv - ok
18:28:22.0546 4416 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
18:28:22.0548 4416 RasAcd - ok
18:28:22.0621 4416 RasAuto (b2ae18f847d07f0044404ddf7cb04497) C:\Windows\System32\rasauto.dll
18:28:22.0625 4416 RasAuto - ok
18:28:22.0690 4416 Rasl2tp (3b9085f91ef00abd15a6f36570e90e12) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:28:22.0692 4416 Rasl2tp - ok
18:28:22.0775 4416 RasMan (2a63d46b01685fd4be9778ca3c231c2d) C:\Windows\System32\rasmans.dll
18:28:22.0780 4416 RasMan - ok
18:28:22.0873 4416 RasPppoe (2ce1703c27196094fb6e4c6e439f2c21) C:\Windows\system32\DRIVERS\raspppoe.sys
18:28:22.0875 4416 RasPppoe - ok
18:28:22.0999 4416 RasSstp (fcd04fa67e8b40fa0ad361dd38593942) C:\Windows\system32\DRIVERS\rassstp.sys
18:28:23.0000 4416 RasSstp - ok
18:28:23.0110 4416 rdbss (33fa5b6136d92ee0f53f021c79091300) C:\Windows\system32\DRIVERS\rdbss.sys
18:28:23.0113 4416 rdbss - ok
18:28:23.0248 4416 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:28:23.0249 4416 RDPCDD - ok
18:28:23.0378 4416 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
18:28:23.0380 4416 rdpdr - ok
18:28:23.0493 4416 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
18:28:23.0494 4416 RDPENCDD - ok
18:28:23.0612 4416 RDPWD (7747082f672aa2846235c9cea42e2e72) C:\Windows\system32\drivers\RDPWD.sys
18:28:23.0614 4416 RDPWD - ok
18:28:23.0708 4416 RemoteAccess (c612b9557da73f70d41f8a6fbc8e5344) C:\Windows\System32\mprdim.dll
18:28:23.0711 4416 RemoteAccess - ok
18:28:23.0793 4416 RemoteRegistry (416c611369cbe49074b89cee2f83abef) C:\Windows\system32\regsvc.dll
18:28:23.0797 4416 RemoteRegistry - ok
18:28:23.0827 4416 RpcLocator (f46c457840d4b7a4daafee739ce04102) C:\Windows\system32\locator.exe
18:28:23.0830 4416 RpcLocator - ok
18:28:23.0937 4416 RpcSs (52cdade8289ff21f1f2215ff51a5f36c) C:\Windows\system32\rpcss.dll
18:28:23.0945 4416 RpcSs - ok
18:28:23.0997 4416 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
18:28:23.0999 4416 rspndr - ok
18:28:24.0121 4416 RTL8169 (bf55641fc2f759281b9bf59d5daa8fde) C:\Windows\system32\DRIVERS\Rtlh64.sys
18:28:24.0123 4416 RTL8169 - ok
18:28:24.0222 4416 RTSTOR (108729909ce285a352a1d1cb96bb1b2e) C:\Windows\system32\drivers\RTSTOR64.SYS
18:28:24.0223 4416 RTSTOR - ok
18:28:24.0293 4416 SamSs (80f4593e92ff960e4763380d3168e498) C:\Windows\system32\lsass.exe
18:28:24.0296 4416 SamSs - ok
18:28:24.0381 4416 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
18:28:24.0382 4416 SASDIFSV - ok
18:28:24.0403 4416 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
18:28:24.0404 4416 SASKUTIL - ok
18:28:24.0529 4416 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
18:28:24.0530 4416 sbp2port - ok
18:28:24.0584 4416 SCardSvr (f024d560fea06f8b56d673849eb89ae6) C:\Windows\System32\SCardSvr.dll
18:28:24.0589 4416 SCardSvr - ok
18:28:24.0727 4416 Schedule (ce75d26e0a1106129f4d156851e298ed) C:\Windows\system32\schedsvc.dll
18:28:24.0736 4416 Schedule - ok
18:28:24.0833 4416 SCPolicySvc (edfffc8b6afb609bf33dbe0a900426b6) C:\Windows\System32\certprop.dll
18:28:24.0835 4416 SCPolicySvc - ok
18:28:24.0888 4416 SDRSVC (4ff71b076a7760fe75ea5ae2d0ee0018) C:\Windows\System32\SDRSVC.dll
18:28:24.0893 4416 SDRSVC - ok
18:28:25.0036 4416 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
18:28:25.0038 4416 secdrv - ok
18:28:25.0170 4416 seclogon (5acdcbc67fcf894a1815b9f96d704490) C:\Windows\system32\seclogon.dll
18:28:25.0175 4416 seclogon - ok
18:28:25.0214 4416 SENS (90973a64b96cd647ff81c79443618eed) C:\Windows\System32\sens.dll
18:28:25.0218 4416 SENS - ok
18:28:25.0359 4416 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys
18:28:25.0360 4416 Serenum - ok
18:28:25.0463 4416 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys
18:28:25.0464 4416 Serial - ok
18:28:25.0546 4416 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
18:28:25.0547 4416 sermouse - ok
18:28:25.0660 4416 SessionEnv (a8e4a4407a09f35dccc3771af590b0c4) C:\Windows\system32\sessenv.dll
18:28:25.0665 4416 SessionEnv - ok
18:28:25.0790 4416 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
18:28:25.0791 4416 sffdisk - ok
18:28:25.0856 4416 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
18:28:25.0857 4416 sffp_mmc - ok
18:28:25.0955 4416 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
18:28:25.0956 4416 sffp_sd - ok
18:28:26.0042 4416 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
18:28:26.0043 4416 sfloppy - ok
18:28:26.0119 4416 SharedAccess (4c5aee179da7e1ee9a9ccb9da289af34) C:\Windows\System32\ipnathlp.dll
18:28:26.0124 4416 SharedAccess - ok
18:28:26.0235 4416 ShellHWDetection (9235ec680d3db17464b39c7c7decb4dd) C:\Windows\System32\shsvcs.dll
18:28:26.0240 4416 ShellHWDetection - ok
18:28:26.0281 4416 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
18:28:26.0283 4416 SiSRaid2 - ok
18:28:26.0410 4416 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
18:28:26.0411 4416 SiSRaid4 - ok
18:28:26.0548 4416 slsvc (a301d2cefb4747dfe0c24425dcbe0b78) C:\Windows\system32\SLsvc.exe
18:28:26.0571 4416 slsvc - ok

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,493 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:38 PM

Posted 01 April 2012 - 07:15 PM

OK, I found something ti look at.
The problem may be an add-on in Firefox called "performance cache" or another one.

Try disabling them one at a time and see which one was at fault.

How to disable extensions and plugins

Keeping your third-party plugins up to date
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 Shigekii

Shigekii
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:38 PM

Posted 01 April 2012 - 07:42 PM

OK, I found something ti look at.
The problem may be an add-on in Firefox called "performance cache" or another one.

Try disabling them one at a time and see which one was at fault.

How to disable extensions and plugins

Keeping your third-party plugins up to date

The Performance cache like you said! Thanks i think its gone now o.o is there a way i can scan my whole computer? i think there are a few hidden ones.

#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,493 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:38 PM

Posted 01 April 2012 - 07:56 PM

Ok, good .. I do not see an antivorus on here,correct?

Use this,I do, . Download,install ,update and scan..
Avira Antivir
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users