Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Smart HDD aftermath problem


  • Please log in to reply
13 replies to this topic

#1 mstusick

mstusick

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 17 April 2012 - 08:26 AM

Hi, Smart HDD took over my machine like a bat out of Hell, and before I could even get to BleepingComputer, let me explain what I did (and likely shouldn't have done!)...

When I got Win 7 warning about suspicious .exe file trying to make changes to my computer, I noticed it was in TEMP folder. So I completely shut down machine (since warning could not be closed) and rebooted and realized I was already screwed to some extent.

My desktop was gone and I had to search for Internet Options manually...so then I DELETED everything in TEMP folder (along with cookies, etc). (I REALIZE NOW, ACCORDING TO SMART HDD UNINSTALL INSTRUCTIONS THAT THIS WAS A MISTAKE)

POSSIBLE NEXT MISTAKE OF MINE WAS since I had to power down again, Windows didn't like that and wanted to cycle through CHECKDISK (or whatever it's called). And I let it continue (by not hitting a key during countdown). It did A LOT OF STUFF that it doesn't normally do (yikes!). And, of course, I still had the virus when it was done.

THE GOOD NEWS is that I followed the UNINSTALL INSTRUCTIONS (except for first part about NOT DELETING TEMP FOLDER). I did the RKILL and MALWAREBYTE'S steps, and I think I'm limping okay now.

HOWEVER, I did NOT do the UNHIDE step since I think I'm in trouble from having deleting TEMP folder in the first place.

BOTTOM LINE IS THAT I still am living in a 'hidden world' (not seeing even half my stuff!) and don't know what to do next in the aftermath of Smart HDD.

Can you please advise? Thank you in advance!

BC AdBot (Login to Remove)

 


#2 bergerk

bergerk

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:34 AM

Posted 17 April 2012 - 08:43 AM

I also just got infected and I have not done anything yet. Where do I find the SMART HDD UNINSTALL INSTRUCTIONS ???

#3 mstusick

mstusick
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 17 April 2012 - 08:58 AM

Here 'ya go...

http://www.bleepingcomputer.com/virus-removal/remove-smart-hdd

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:34 AM

Posted 17 April 2012 - 10:41 AM

Ok,lets see if we can restore the empty startmenu first,

Press windows+R Key and type

%temp%
and click ok

If you have folder called SMTMP ,copy it to a safe location

or

Right click on your startmenu-properties

Check mark

store and display recently opened programs
store and display recently items


Click on customize

Click on Use default settings at the bottom

Now go to

c:\ProgramData\Microsoft\Windows

right click on startmenu folder,click on restore previous versions

Now select a snapshot before you were infected by the rogue,click on restore

You should get back the startmenu programs

Now go ahead and run the UNHIDE program

Let me know how it went

good luck

#5 mstusick

mstusick
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 17 April 2012 - 01:57 PM

narenxp, thanks for your great advice! It worked. I'll send you a private msg so I can thank you personally...cheers!

#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:34 AM

Posted 17 April 2012 - 08:52 PM

Great :thumbsup:

We still have to make sure PC is clean,smart HDD rogue always comes with a rootkit



Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)


Please download GMER from here(doesnot work on 64 bit OS)

http://www2.gmer.net/download.php

Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.

GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)

If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
Now click the Scan button. If you see a rootkit warning window, click OK.
When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
Click the Copy button and paste the results into your next reply.


Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

#7 mstusick

mstusick
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 18 April 2012 - 09:38 AM

Hi narenxp,

I followed your advice except for the GMER step since I'm on a 64 bit OS.

I'm copy/pasting the other 2 logs below...

LOG 1) TDSSKiller processed 462 objects and found ZERO threats. Here's the log:


09:15:37.0571 6368 TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
09:15:37.0822 6368 ============================================================
09:15:37.0822 6368 Current date / time: 2012/04/18 09:15:37.0822
09:15:37.0822 6368 SystemInfo:
09:15:37.0822 6368
09:15:37.0822 6368 OS Version: 6.1.7601 ServicePack: 1.0
09:15:37.0822 6368 Product type: Workstation
09:15:37.0822 6368 ComputerName: ERIK-VAIO
09:15:37.0822 6368 UserName: Erik
09:15:37.0822 6368 Windows directory: C:\Windows
09:15:37.0822 6368 System windows directory: C:\Windows
09:15:37.0822 6368 Running under WOW64
09:15:37.0822 6368 Processor architecture: Intel x64
09:15:37.0822 6368 Number of processors: 8
09:15:37.0822 6368 Page size: 0x1000
09:15:37.0822 6368 Boot type: Normal boot
09:15:37.0822 6368 ============================================================
09:15:38.0271 6368 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
09:15:38.0276 6368 Drive \Device\Harddisk1\DR2 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
09:15:38.0887 6368 \Device\Harddisk0\DR0:
09:15:38.0888 6368 MBR used
09:15:38.0888 6368 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1D3E800, BlocksNum 0x32000
09:15:38.0888 6368 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D70800, BlocksNum 0x38615000
09:15:38.0888 6368 \Device\Harddisk1\DR2:
09:15:38.0888 6368 MBR used
09:15:38.0888 6368 \Device\Harddisk1\DR2\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950A5C1
09:15:38.0938 6368 Initialize success
09:15:38.0938 6368 ============================================================
09:15:45.0360 3844 ============================================================
09:15:45.0360 3844 Scan started
09:15:45.0360 3844 Mode: Manual;
09:15:45.0360 3844 ============================================================
09:15:46.0454 3844 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
09:15:46.0461 3844 1394ohci - ok
09:15:46.0525 3844 ACDaemon (adc420616c501b45d26c0fd3ef1e54e4) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
09:15:46.0530 3844 ACDaemon - ok
09:15:46.0637 3844 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
09:15:46.0653 3844 ACPI - ok
09:15:46.0730 3844 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
09:15:46.0734 3844 AcpiPmi - ok
09:15:46.0850 3844 adfs (2f0683fd2df1d92e891caca14b45a8c1) C:\Windows\system32\drivers\adfs.sys
09:15:46.0852 3844 adfs - ok
09:15:46.0922 3844 AdobeActiveFileMonitor8.0 (4451cc2275b04043ec2bcc757af97291) c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
09:15:46.0939 3844 AdobeActiveFileMonitor8.0 - ok
09:15:47.0021 3844 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
09:15:47.0043 3844 adp94xx - ok
09:15:47.0082 3844 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
09:15:47.0089 3844 adpahci - ok
09:15:47.0136 3844 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
09:15:47.0141 3844 adpu320 - ok
09:15:47.0193 3844 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
09:15:47.0196 3844 AeLookupSvc - ok
09:15:47.0280 3844 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
09:15:47.0289 3844 AFD - ok
09:15:47.0381 3844 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
09:15:47.0396 3844 agp440 - ok
09:15:47.0438 3844 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
09:15:47.0441 3844 ALG - ok
09:15:47.0521 3844 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
09:15:47.0527 3844 aliide - ok
09:15:47.0568 3844 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
09:15:47.0570 3844 amdide - ok
09:15:47.0609 3844 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
09:15:47.0612 3844 AmdK8 - ok
09:15:47.0627 3844 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
09:15:47.0629 3844 AmdPPM - ok
09:15:47.0741 3844 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
09:15:47.0754 3844 amdsata - ok
09:15:47.0808 3844 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
09:15:47.0815 3844 amdsbs - ok
09:15:47.0853 3844 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
09:15:47.0854 3844 amdxata - ok
09:15:47.0923 3844 ApfiltrService (2d45f2dfbc3d8f53df7ebeffa8c9bc38) C:\Windows\system32\DRIVERS\Apfiltr.sys
09:15:47.0927 3844 ApfiltrService - ok
09:15:48.0024 3844 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
09:15:48.0065 3844 AppID - ok
09:15:48.0127 3844 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
09:15:48.0130 3844 AppIDSvc - ok
09:15:48.0218 3844 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
09:15:48.0226 3844 Appinfo - ok
09:15:48.0325 3844 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
09:15:48.0329 3844 Apple Mobile Device - ok
09:15:48.0385 3844 AppMgmt (4aba3e75a76195a3e38ed2766c962899) C:\Windows\System32\appmgmts.dll
09:15:48.0392 3844 AppMgmt - ok
09:15:48.0437 3844 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
09:15:48.0441 3844 arc - ok
09:15:48.0497 3844 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
09:15:48.0501 3844 arcsas - ok
09:15:48.0539 3844 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
09:15:48.0540 3844 ArcSoftKsUFilter - ok
09:15:48.0574 3844 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
09:15:48.0576 3844 AsyncMac - ok
09:15:48.0653 3844 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
09:15:48.0654 3844 atapi - ok
09:15:48.0760 3844 athr (08baaa2432e81031a6c3b11ad5a67e2b) C:\Windows\system32\DRIVERS\athrx.sys
09:15:48.0828 3844 athr - ok
09:15:48.0958 3844 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
09:15:48.0985 3844 AudioEndpointBuilder - ok
09:15:49.0016 3844 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
09:15:49.0023 3844 AudioSrv - ok
09:15:49.0129 3844 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
09:15:49.0133 3844 AxInstSV - ok
09:15:49.0184 3844 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
09:15:49.0202 3844 b06bdrv - ok
09:15:49.0252 3844 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
09:15:49.0260 3844 b57nd60a - ok
09:15:49.0304 3844 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
09:15:49.0308 3844 BDESVC - ok
09:15:49.0338 3844 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
09:15:49.0340 3844 Beep - ok
09:15:49.0462 3844 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
09:15:49.0488 3844 BFE - ok
09:15:49.0544 3844 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
09:15:49.0569 3844 BITS - ok
09:15:49.0600 3844 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\drivers\blbdrive.sys
09:15:49.0601 3844 blbdrive - ok
09:15:49.0648 3844 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
09:15:49.0659 3844 Bonjour Service - ok
09:15:49.0698 3844 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
09:15:49.0701 3844 bowser - ok
09:15:49.0746 3844 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
09:15:49.0748 3844 BrFiltLo - ok
09:15:49.0763 3844 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
09:15:49.0765 3844 BrFiltUp - ok
09:15:49.0844 3844 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
09:15:49.0848 3844 Browser - ok
09:15:49.0881 3844 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
09:15:49.0889 3844 Brserid - ok
09:15:49.0906 3844 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
09:15:49.0908 3844 BrSerWdm - ok
09:15:49.0928 3844 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
09:15:49.0931 3844 BrUsbMdm - ok
09:15:49.0948 3844 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
09:15:49.0950 3844 BrUsbSer - ok
09:15:50.0082 3844 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
09:15:50.0085 3844 BthEnum - ok
09:15:50.0103 3844 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
09:15:50.0105 3844 BTHMODEM - ok
09:15:50.0130 3844 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
09:15:50.0134 3844 BthPan - ok
09:15:50.0174 3844 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys
09:15:50.0194 3844 BTHPORT - ok
09:15:50.0226 3844 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
09:15:50.0229 3844 bthserv - ok
09:15:50.0259 3844 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\System32\Drivers\BTHUSB.sys
09:15:50.0262 3844 BTHUSB - ok
09:15:50.0314 3844 btwampfl (59e3510784548c6939c1b3b985c232e3) C:\Windows\system32\drivers\btwampfl.sys
09:15:50.0318 3844 btwampfl - ok
09:15:50.0360 3844 btwaudio (1872074ed0a3fb22e3f1e3197b984bfa) C:\Windows\system32\drivers\btwaudio.sys
09:15:50.0362 3844 btwaudio - ok
09:15:50.0400 3844 btwavdt (691cf076c33ab1c3a5b2fd5450300733) C:\Windows\system32\DRIVERS\btwavdt.sys
09:15:50.0402 3844 btwavdt - ok
09:15:50.0472 3844 btwdins (8ba6e93a182126781952a7895ec1e4b2) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
09:15:50.0497 3844 btwdins - ok
09:15:50.0520 3844 btwl2cap (07096d2bc22ccb6cea5a532df0be8a75) C:\Windows\system32\DRIVERS\btwl2cap.sys
09:15:50.0521 3844 btwl2cap - ok
09:15:50.0544 3844 btwrchid (c9273b20dec8ce38dbce5d29de63c907) C:\Windows\system32\DRIVERS\btwrchid.sys
09:15:50.0544 3844 btwrchid - ok
09:15:50.0588 3844 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
09:15:50.0593 3844 cdfs - ok
09:15:50.0665 3844 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
09:15:50.0669 3844 cdrom - ok
09:15:50.0756 3844 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
09:15:50.0762 3844 CertPropSvc - ok
09:15:50.0794 3844 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
09:15:50.0797 3844 circlass - ok
09:15:50.0841 3844 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
09:15:50.0850 3844 CLFS - ok
09:15:50.0905 3844 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:15:50.0909 3844 clr_optimization_v2.0.50727_32 - ok
09:15:50.0946 3844 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
09:15:50.0951 3844 clr_optimization_v2.0.50727_64 - ok
09:15:51.0057 3844 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
09:15:51.0094 3844 clr_optimization_v4.0.30319_32 - ok
09:15:51.0136 3844 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
09:15:51.0142 3844 clr_optimization_v4.0.30319_64 - ok
09:15:51.0195 3844 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys
09:15:51.0197 3844 CmBatt - ok
09:15:51.0286 3844 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
09:15:51.0289 3844 cmdide - ok
09:15:51.0393 3844 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
09:15:51.0410 3844 CNG - ok
09:15:51.0431 3844 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
09:15:51.0431 3844 Compbatt - ok
09:15:51.0521 3844 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
09:15:51.0523 3844 CompositeBus - ok
09:15:51.0540 3844 COMSysApp - ok
09:15:51.0567 3844 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
09:15:51.0569 3844 crcdisk - ok
09:15:51.0642 3844 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
09:15:51.0648 3844 CryptSvc - ok
09:15:51.0740 3844 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
09:15:51.0757 3844 CSC - ok
09:15:51.0850 3844 CscService (3ab183ab4d2c79dcf459cd2c1266b043) C:\Windows\System32\cscsvc.dll
09:15:51.0875 3844 CscService - ok
09:15:51.0959 3844 dc3d (7af9dac504fbd047cbc3e64ae52c92bf) C:\Windows\system32\DRIVERS\dc3d.sys
09:15:51.0961 3844 dc3d - ok
09:15:52.0053 3844 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
09:15:52.0076 3844 DcomLaunch - ok
09:15:52.0113 3844 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
09:15:52.0121 3844 defragsvc - ok
09:15:52.0203 3844 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
09:15:52.0208 3844 DfsC - ok
09:15:52.0248 3844 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
09:15:52.0256 3844 Dhcp - ok
09:15:52.0292 3844 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
09:15:52.0294 3844 discache - ok
09:15:52.0334 3844 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
09:15:52.0336 3844 Disk - ok
09:15:52.0372 3844 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
09:15:52.0378 3844 Dnscache - ok
09:15:52.0446 3844 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
09:15:52.0454 3844 dot3svc - ok
09:15:52.0542 3844 dot4 (b42ed0320c6e41102fde0005154849bb) C:\Windows\system32\DRIVERS\Dot4.sys
09:15:52.0546 3844 dot4 - ok
09:15:52.0630 3844 Dot4Print (e9f5969233c5d89f3c35e3a66a52a361) C:\Windows\system32\DRIVERS\Dot4Prt.sys
09:15:52.0633 3844 Dot4Print - ok
09:15:52.0665 3844 Dot4Scan (488669cd1cd3bdcfdd9a5fda72209069) C:\Windows\system32\DRIVERS\Dot4Scan.sys
09:15:52.0668 3844 Dot4Scan - ok
09:15:52.0707 3844 dot4usb (fd05a02b0370bc3000f402e543ca5814) C:\Windows\system32\DRIVERS\dot4usb.sys
09:15:52.0710 3844 dot4usb - ok
09:15:52.0805 3844 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
09:15:52.0810 3844 DPS - ok
09:15:52.0895 3844 DragonSvc (0b9d2b8d0c3955ef851a98155c349b59) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
09:15:52.0898 3844 DragonSvc - ok
09:15:52.0942 3844 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
09:15:52.0944 3844 drmkaud - ok
09:15:53.0040 3844 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
09:15:53.0051 3844 DXGKrnl - ok
09:15:53.0093 3844 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
09:15:53.0098 3844 EapHost - ok
09:15:53.0194 3844 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
09:15:53.0275 3844 ebdrv - ok
09:15:53.0350 3844 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
09:15:53.0352 3844 EFS - ok
09:15:53.0452 3844 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
09:15:53.0477 3844 ehRecvr - ok
09:15:53.0503 3844 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
09:15:53.0509 3844 ehSched - ok
09:15:53.0565 3844 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
09:15:53.0581 3844 elxstor - ok
09:15:53.0647 3844 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
09:15:53.0652 3844 ErrDev - ok
09:15:53.0695 3844 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
09:15:53.0702 3844 EventSystem - ok
09:15:53.0743 3844 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
09:15:53.0749 3844 exfat - ok
09:15:53.0772 3844 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
09:15:53.0777 3844 fastfat - ok
09:15:53.0883 3844 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
09:15:53.0906 3844 Fax - ok
09:15:53.0928 3844 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
09:15:53.0930 3844 fdc - ok
09:15:53.0954 3844 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
09:15:53.0956 3844 fdPHost - ok
09:15:54.0001 3844 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
09:15:54.0004 3844 FDResPub - ok
09:15:54.0034 3844 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
09:15:54.0037 3844 FileInfo - ok
09:15:54.0064 3844 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
09:15:54.0067 3844 Filetrace - ok
09:15:54.0135 3844 FLEXnet Licensing Service (abedfd48ac042c6aaad32452e77217a1) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
09:15:54.0161 3844 FLEXnet Licensing Service - ok
09:15:54.0194 3844 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
09:15:54.0196 3844 flpydisk - ok
09:15:54.0267 3844 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
09:15:54.0274 3844 FltMgr - ok
09:15:54.0388 3844 FontCache (b4447f606bb19fd8ad0bafb59b90f5d9) C:\Windows\system32\FntCache.dll
09:15:54.0422 3844 FontCache - ok
09:15:54.0483 3844 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
09:15:54.0484 3844 FontCache3.0.0.0 - ok
09:15:54.0634 3844 FreeAgentGoNext Service (9513b437b7adb1e6065b7f0d83d11ecf) C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe
09:15:54.0638 3844 FreeAgentGoNext Service - ok
09:15:54.0659 3844 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
09:15:54.0663 3844 FsDepends - ok
09:15:54.0697 3844 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
09:15:54.0698 3844 Fs_Rec - ok
09:15:54.0790 3844 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
09:15:54.0796 3844 fvevol - ok
09:15:54.0831 3844 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
09:15:54.0835 3844 gagp30kx - ok
09:15:54.0917 3844 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
09:15:54.0918 3844 GEARAspiWDM - ok
09:15:55.0047 3844 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
09:15:55.0072 3844 gpsvc - ok
09:15:55.0137 3844 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:15:55.0142 3844 gupdate - ok
09:15:55.0185 3844 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:15:55.0187 3844 gupdatem - ok
09:15:55.0219 3844 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
09:15:55.0224 3844 gusvc - ok
09:15:55.0303 3844 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
09:15:55.0306 3844 hcw85cir - ok
09:15:55.0396 3844 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
09:15:55.0405 3844 HdAudAddService - ok
09:15:55.0487 3844 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
09:15:55.0490 3844 HDAudBus - ok
09:15:55.0519 3844 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
09:15:55.0522 3844 HidBatt - ok
09:15:55.0538 3844 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
09:15:55.0541 3844 HidBth - ok
09:15:55.0573 3844 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
09:15:55.0576 3844 HidIr - ok
09:15:55.0607 3844 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
09:15:55.0610 3844 hidserv - ok
09:15:55.0678 3844 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
09:15:55.0680 3844 HidUsb - ok
09:15:55.0775 3844 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
09:15:55.0779 3844 hkmsvc - ok
09:15:55.0847 3844 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
09:15:55.0856 3844 HomeGroupListener - ok
09:15:55.0929 3844 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
09:15:55.0934 3844 HomeGroupProvider - ok
09:15:56.0002 3844 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
09:15:56.0006 3844 HpSAMD - ok
09:15:56.0086 3844 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
09:15:56.0110 3844 HTTP - ok
09:15:56.0181 3844 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
09:15:56.0181 3844 hwpolicy - ok
09:15:56.0259 3844 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
09:15:56.0262 3844 i8042prt - ok
09:15:56.0301 3844 iaStor (abbf174cb394f5c437410a788b7e404a) C:\Windows\system32\drivers\iaStor.sys
09:15:56.0307 3844 iaStor - ok
09:15:56.0364 3844 IAStorDataMgrSvc (31a0e93cdf29007d6c6fffb632f375ed) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
09:15:56.0365 3844 IAStorDataMgrSvc - ok
09:15:56.0411 3844 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
09:15:56.0428 3844 iaStorV - ok
09:15:56.0539 3844 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
09:15:56.0569 3844 idsvc - ok
09:15:56.0621 3844 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
09:15:56.0623 3844 iirsp - ok
09:15:56.0707 3844 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
09:15:56.0734 3844 IKEEXT - ok
09:15:56.0788 3844 Impcd (4b6363cd4610bb848531bb260b15dfcc) C:\Windows\system32\drivers\Impcd.sys
09:15:56.0793 3844 Impcd - ok
09:15:56.0891 3844 IntcAzAudAddService (526e482afb586cb1cdd687869decf686) C:\Windows\system32\drivers\RTKVHD64.sys
09:15:56.0916 3844 IntcAzAudAddService - ok
09:15:56.0982 3844 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
09:15:56.0986 3844 intelide - ok
09:15:57.0018 3844 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\drivers\intelppm.sys
09:15:57.0019 3844 intelppm - ok
09:15:57.0058 3844 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
09:15:57.0063 3844 IPBusEnum - ok
09:15:57.0174 3844 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
09:15:57.0177 3844 IpFilterDriver - ok
09:15:57.0271 3844 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
09:15:57.0293 3844 iphlpsvc - ok
09:15:57.0367 3844 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
09:15:57.0371 3844 IPMIDRV - ok
09:15:57.0401 3844 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
09:15:57.0406 3844 IPNAT - ok
09:15:57.0464 3844 iPod Service (46d249f9db7844cc01050a9345f0f61b) C:\Program Files\iPod\bin\iPodService.exe
09:15:57.0494 3844 iPod Service - ok
09:15:57.0524 3844 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
09:15:57.0526 3844 IRENUM - ok
09:15:57.0604 3844 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
09:15:57.0606 3844 isapnp - ok
09:15:57.0638 3844 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
09:15:57.0645 3844 iScsiPrt - ok
09:15:57.0681 3844 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
09:15:57.0682 3844 kbdclass - ok
09:15:57.0748 3844 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
09:15:57.0750 3844 kbdhid - ok
09:15:57.0831 3844 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
09:15:57.0833 3844 KeyIso - ok
09:15:57.0860 3844 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
09:15:57.0863 3844 KSecDD - ok
09:15:57.0944 3844 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
09:15:57.0948 3844 KSecPkg - ok
09:15:57.0988 3844 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
09:15:57.0990 3844 ksthunk - ok
09:15:58.0030 3844 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
09:15:58.0040 3844 KtmRm - ok
09:15:58.0120 3844 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
09:15:58.0128 3844 LanmanServer - ok
09:15:58.0199 3844 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
09:15:58.0206 3844 LanmanWorkstation - ok
09:15:58.0256 3844 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
09:15:58.0258 3844 lltdio - ok
09:15:58.0304 3844 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
09:15:58.0313 3844 lltdsvc - ok
09:15:58.0348 3844 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
09:15:58.0351 3844 lmhosts - ok
09:15:58.0392 3844 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
09:15:58.0397 3844 LSI_FC - ok
09:15:58.0416 3844 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
09:15:58.0419 3844 LSI_SAS - ok
09:15:58.0444 3844 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
09:15:58.0449 3844 LSI_SAS2 - ok
09:15:58.0470 3844 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
09:15:58.0473 3844 LSI_SCSI - ok
09:15:58.0503 3844 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
09:15:58.0507 3844 luafv - ok
09:15:58.0586 3844 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
09:15:58.0591 3844 Mcx2Svc - ok
09:15:58.0623 3844 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
09:15:58.0626 3844 megasas - ok
09:15:58.0655 3844 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
09:15:58.0661 3844 MegaSR - ok
09:15:58.0744 3844 MemeoBackgroundService (d184aa8d7a1b3aa94508ba6c0bcc3bd6) C:\Program Files (x86)\WD\WD Anywhere Backup\MemeoBackgroundService.exe
09:15:58.0745 3844 MemeoBackgroundService - ok
09:15:58.0783 3844 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
09:15:58.0788 3844 MMCSS - ok
09:15:58.0805 3844 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
09:15:58.0807 3844 Modem - ok
09:15:58.0831 3844 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
09:15:58.0832 3844 monitor - ok
09:15:58.0899 3844 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
09:15:58.0900 3844 mouclass - ok
09:15:58.0944 3844 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
09:15:58.0946 3844 mouhid - ok
09:15:59.0049 3844 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
09:15:59.0052 3844 mountmgr - ok
09:15:59.0142 3844 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
09:15:59.0147 3844 mpio - ok
09:15:59.0177 3844 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
09:15:59.0180 3844 mpsdrv - ok
09:15:59.0276 3844 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
09:15:59.0301 3844 MpsSvc - ok
09:15:59.0376 3844 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
09:15:59.0382 3844 MRxDAV - ok
09:15:59.0420 3844 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
09:15:59.0424 3844 mrxsmb - ok
09:15:59.0452 3844 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
09:15:59.0460 3844 mrxsmb10 - ok
09:15:59.0498 3844 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
09:15:59.0502 3844 mrxsmb20 - ok
09:15:59.0572 3844 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
09:15:59.0574 3844 msahci - ok
09:15:59.0601 3844 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
09:15:59.0605 3844 msdsm - ok
09:15:59.0640 3844 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
09:15:59.0645 3844 MSDTC - ok
09:15:59.0668 3844 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
09:15:59.0669 3844 Msfs - ok
09:15:59.0702 3844 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
09:15:59.0703 3844 mshidkmdf - ok
09:15:59.0727 3844 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
09:15:59.0727 3844 msisadrv - ok
09:15:59.0759 3844 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
09:15:59.0763 3844 MSiSCSI - ok
09:15:59.0776 3844 msiserver - ok
09:15:59.0805 3844 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
09:15:59.0808 3844 MSKSSRV - ok
09:15:59.0827 3844 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
09:15:59.0829 3844 MSPCLOCK - ok
09:15:59.0849 3844 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
09:15:59.0850 3844 MSPQM - ok
09:15:59.0928 3844 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
09:15:59.0936 3844 MsRPC - ok
09:15:59.0965 3844 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
09:15:59.0966 3844 mssmbios - ok
09:16:00.0007 3844 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
09:16:00.0010 3844 MSTEE - ok
09:16:00.0037 3844 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
09:16:00.0039 3844 MTConfig - ok
09:16:00.0067 3844 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
09:16:00.0069 3844 Mup - ok
09:16:00.0145 3844 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
09:16:00.0168 3844 napagent - ok
09:16:00.0194 3844 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
09:16:00.0202 3844 NativeWifiP - ok
09:16:00.0297 3844 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
09:16:00.0328 3844 NDIS - ok
09:16:00.0353 3844 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
09:16:00.0357 3844 NdisCap - ok
09:16:00.0383 3844 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
09:16:00.0384 3844 NdisTapi - ok
09:16:00.0481 3844 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
09:16:00.0484 3844 Ndisuio - ok
09:16:00.0552 3844 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
09:16:00.0557 3844 NdisWan - ok
09:16:00.0624 3844 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
09:16:00.0627 3844 NDProxy - ok
09:16:00.0658 3844 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
09:16:00.0661 3844 NetBIOS - ok
09:16:00.0746 3844 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
09:16:00.0753 3844 NetBT - ok
09:16:00.0845 3844 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
09:16:00.0848 3844 Netlogon - ok
09:16:00.0890 3844 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
09:16:00.0907 3844 Netman - ok
09:16:00.0931 3844 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
09:16:00.0954 3844 netprofm - ok
09:16:01.0014 3844 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:16:01.0019 3844 NetTcpPortSharing - ok
09:16:01.0066 3844 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
09:16:01.0071 3844 nfrd960 - ok
09:16:01.0181 3844 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
09:16:01.0197 3844 NlaSvc - ok
09:16:01.0221 3844 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
09:16:01.0223 3844 Npfs - ok
09:16:01.0258 3844 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
09:16:01.0262 3844 nsi - ok
09:16:01.0280 3844 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
09:16:01.0282 3844 nsiproxy - ok
09:16:01.0394 3844 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
09:16:01.0428 3844 Ntfs - ok
09:16:01.0451 3844 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
09:16:01.0453 3844 Null - ok
09:16:01.0497 3844 nusb3hub (285acec1b13a15ba520aae06bacb9cff) C:\Windows\system32\DRIVERS\nusb3hub.sys
09:16:01.0499 3844 nusb3hub - ok
09:16:01.0535 3844 nusb3xhc (f6d625ff7b56bb6ea063f0d3a5bbc996) C:\Windows\system32\drivers\nusb3xhc.sys
09:16:01.0538 3844 nusb3xhc - ok
09:16:01.0579 3844 NVHDA (857fb74754ebff94ee3ad40788740916) C:\Windows\system32\drivers\nvhda64v.sys
09:16:01.0581 3844 NVHDA - ok
09:16:01.0846 3844 nvlddmkm (fbe6ac1c3591cb67543fad15abd26bcb) C:\Windows\system32\DRIVERS\nvlddmkm.sys
09:16:01.0902 3844 nvlddmkm - ok
09:16:01.0978 3844 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
09:16:01.0983 3844 nvraid - ok
09:16:02.0030 3844 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
09:16:02.0037 3844 nvstor - ok
09:16:02.0121 3844 nvsvc (147b0d17255fd796f990cc6f745605c5) C:\Windows\system32\nvvsvc.exe
09:16:02.0154 3844 nvsvc - ok
09:16:02.0235 3844 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
09:16:02.0240 3844 nv_agp - ok
09:16:02.0314 3844 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
09:16:02.0318 3844 ohci1394 - ok
09:16:02.0409 3844 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:16:02.0414 3844 ose - ok
09:16:02.0598 3844 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
09:16:02.0709 3844 osppsvc - ok
09:16:02.0768 3844 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
09:16:02.0777 3844 p2pimsvc - ok
09:16:02.0824 3844 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
09:16:02.0840 3844 p2psvc - ok
09:16:02.0885 3844 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
09:16:02.0889 3844 Parport - ok
09:16:02.0961 3844 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
09:16:02.0965 3844 partmgr - ok
09:16:03.0006 3844 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
09:16:03.0013 3844 PcaSvc - ok
09:16:03.0104 3844 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
09:16:03.0109 3844 pci - ok
09:16:03.0175 3844 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
09:16:03.0177 3844 pciide - ok
09:16:03.0210 3844 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
09:16:03.0217 3844 pcmcia - ok
09:16:03.0240 3844 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
09:16:03.0241 3844 pcw - ok
09:16:03.0277 3844 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
09:16:03.0302 3844 PEAUTH - ok
09:16:03.0354 3844 PeerDistSvc (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
09:16:03.0394 3844 PeerDistSvc - ok
09:16:03.0461 3844 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
09:16:03.0465 3844 PerfHost - ok
09:16:03.0567 3844 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
09:16:03.0605 3844 pla - ok
09:16:03.0671 3844 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
09:16:03.0688 3844 PlugPlay - ok
09:16:03.0751 3844 PMBDeviceInfoProvider (80e85394d8cd7f84340b1c6f4b9d698f) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
09:16:03.0771 3844 PMBDeviceInfoProvider - ok
09:16:03.0822 3844 pneteth (8ac5649c9070674d4607301c180ab10b) C:\Windows\system32\DRIVERS\pneteth.sys
09:16:03.0824 3844 pneteth - ok
09:16:03.0866 3844 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
09:16:03.0870 3844 PNRPAutoReg - ok
09:16:03.0915 3844 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
09:16:03.0921 3844 PNRPsvc - ok
09:16:04.0010 3844 Point64 (4f0878fd62d5f7444c5f1c4c66d9d293) C:\Windows\system32\DRIVERS\point64.sys
09:16:04.0013 3844 Point64 - ok
09:16:04.0092 3844 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
09:16:04.0109 3844 PolicyAgent - ok
09:16:04.0148 3844 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
09:16:04.0155 3844 Power - ok
09:16:04.0231 3844 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
09:16:04.0235 3844 PptpMiniport - ok
09:16:04.0269 3844 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
09:16:04.0272 3844 Processor - ok
09:16:04.0304 3844 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
09:16:04.0312 3844 ProfSvc - ok
09:16:04.0374 3844 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
09:16:04.0376 3844 ProtectedStorage - ok
09:16:04.0447 3844 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
09:16:04.0451 3844 Psched - ok
09:16:04.0487 3844 PxHlpa64 (fbf4db6d53585437e41a113300002a2b) C:\Windows\system32\Drivers\PxHlpa64.sys
09:16:04.0488 3844 PxHlpa64 - ok
09:16:04.0553 3844 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
09:16:04.0596 3844 ql2300 - ok
09:16:04.0616 3844 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
09:16:04.0621 3844 ql40xx - ok
09:16:04.0658 3844 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
09:16:04.0667 3844 QWAVE - ok
09:16:04.0692 3844 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
09:16:04.0695 3844 QWAVEdrv - ok
09:16:04.0712 3844 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
09:16:04.0715 3844 RasAcd - ok
09:16:04.0746 3844 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
09:16:04.0748 3844 RasAgileVpn - ok
09:16:04.0767 3844 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
09:16:04.0772 3844 RasAuto - ok
09:16:04.0849 3844 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
09:16:04.0854 3844 Rasl2tp - ok
09:16:04.0930 3844 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
09:16:04.0946 3844 RasMan - ok
09:16:04.0966 3844 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
09:16:04.0969 3844 RasPppoe - ok
09:16:05.0006 3844 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
09:16:05.0009 3844 RasSstp - ok
09:16:05.0103 3844 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
09:16:05.0112 3844 rdbss - ok
09:16:05.0137 3844 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
09:16:05.0140 3844 rdpbus - ok
09:16:05.0167 3844 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
09:16:05.0169 3844 RDPCDD - ok
09:16:05.0253 3844 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
09:16:05.0259 3844 RDPDR - ok
09:16:05.0286 3844 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
09:16:05.0287 3844 RDPENCDD - ok
09:16:05.0316 3844 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
09:16:05.0318 3844 RDPREFMP - ok
09:16:05.0392 3844 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
09:16:05.0399 3844 RDPWD - ok
09:16:05.0487 3844 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
09:16:05.0493 3844 rdyboost - ok
09:16:05.0528 3844 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
09:16:05.0533 3844 RemoteAccess - ok
09:16:05.0576 3844 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
09:16:05.0583 3844 RemoteRegistry - ok
09:16:05.0615 3844 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
09:16:05.0620 3844 RFCOMM - ok
09:16:05.0668 3844 rimspci (fa6abc06b629da29634d31f1fe0347bd) C:\Windows\system32\drivers\rimssne64.sys
09:16:05.0671 3844 rimspci - ok
09:16:05.0707 3844 risdsnpe (8f8539a7f5c117d4407b2985995671f2) C:\Windows\system32\drivers\risdsne64.sys
09:16:05.0710 3844 risdsnpe - ok
09:16:05.0734 3844 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
09:16:05.0739 3844 RpcEptMapper - ok
09:16:05.0771 3844 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
09:16:05.0773 3844 RpcLocator - ok
09:16:05.0857 3844 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
09:16:05.0866 3844 RpcSs - ok
09:16:05.0907 3844 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
09:16:05.0910 3844 rspndr - ok
09:16:05.0988 3844 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
09:16:05.0992 3844 s3cap - ok
09:16:06.0082 3844 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
09:16:06.0083 3844 SamSs - ok
09:16:06.0114 3844 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
09:16:06.0118 3844 sbp2port - ok
09:16:06.0163 3844 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
09:16:06.0171 3844 SCardSvr - ok
09:16:06.0238 3844 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
09:16:06.0240 3844 scfilter - ok
09:16:06.0330 3844 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
09:16:06.0363 3844 Schedule - ok
09:16:06.0424 3844 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
09:16:06.0425 3844 SCPolicySvc - ok
09:16:06.0455 3844 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\Windows\system32\drivers\sdbus.sys
09:16:06.0459 3844 sdbus - ok
09:16:06.0528 3844 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
09:16:06.0535 3844 SDRSVC - ok
09:16:06.0577 3844 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
09:16:06.0580 3844 secdrv - ok
09:16:06.0645 3844 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
09:16:06.0650 3844 seclogon - ok
09:16:06.0690 3844 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
09:16:06.0695 3844 SENS - ok
09:16:06.0727 3844 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
09:16:06.0732 3844 SensrSvc - ok
09:16:06.0763 3844 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
09:16:06.0765 3844 Serenum - ok
09:16:06.0790 3844 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
09:16:06.0793 3844 Serial - ok
09:16:06.0860 3844 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
09:16:06.0862 3844 sermouse - ok
09:16:06.0934 3844 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
09:16:06.0940 3844 SessionEnv - ok
09:16:06.0974 3844 SFEP (286d3889e6ab5589646ff8a63cb928ae) C:\Windows\system32\DRIVERS\SFEP.sys
09:16:06.0977 3844 SFEP - ok
09:16:07.0051 3844 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
09:16:07.0053 3844 sffdisk - ok
09:16:07.0146 3844 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
09:16:07.0148 3844 sffp_mmc - ok
09:16:07.0172 3844 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
09:16:07.0174 3844 sffp_sd - ok
09:16:07.0205 3844 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
09:16:07.0207 3844 sfloppy - ok
09:16:07.0254 3844 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
09:16:07.0271 3844 SharedAccess - ok
09:16:07.0344 3844 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
09:16:07.0361 3844 ShellHWDetection - ok
09:16:07.0386 3844 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
09:16:07.0388 3844 SiSRaid2 - ok
09:16:07.0413 3844 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
09:16:07.0421 3844 SiSRaid4 - ok
09:16:07.0438 3844 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
09:16:07.0441 3844 Smb - ok
09:16:07.0497 3844 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
09:16:07.0502 3844 SNMPTRAP - ok
09:16:07.0607 3844 SOHCImp (c3e69db0a4e59564230e053232f39ac7) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
09:16:07.0626 3844 SOHCImp - ok
09:16:07.0676 3844 SOHDms (65cc4779a29c3e82b987bd4961790dff) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
09:16:07.0693 3844 SOHDms - ok
09:16:07.0716 3844 SOHDs (f47d75cee1844eef4a9ea6ee768828fb) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
09:16:07.0719 3844 SOHDs - ok
09:16:07.0789 3844 SpfService (5449fc97476f52e027409e703791e6a9) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
09:16:07.0796 3844 SpfService - ok
09:16:07.0862 3844 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
09:16:07.0862 3844 spldr - ok
09:16:07.0938 3844 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
09:16:07.0954 3844 Spooler - ok
09:16:08.0106 3844 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
09:16:08.0139 3844 sppsvc - ok
09:16:08.0179 3844 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
09:16:08.0182 3844 sppuinotify - ok
09:16:08.0224 3844 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
09:16:08.0235 3844 srv - ok
09:16:08.0267 3844 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
09:16:08.0284 3844 srv2 - ok
09:16:08.0313 3844 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
09:16:08.0318 3844 srvnet - ok
09:16:08.0346 3844 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
09:16:08.0354 3844 SSDPSRV - ok
09:16:08.0390 3844 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
09:16:08.0395 3844 SstpSvc - ok
09:16:08.0424 3844 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
09:16:08.0426 3844 stexstor - ok
09:16:08.0500 3844 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
09:16:08.0525 3844 stisvc - ok
09:16:08.0604 3844 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
09:16:08.0605 3844 storflt - ok
09:16:08.0625 3844 StorSvc (c40841817ef57d491f22eb103da587cc) C:\Windows\system32\storsvc.dll
09:16:08.0630 3844 StorSvc - ok
09:16:08.0669 3844 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
09:16:08.0673 3844 storvsc - ok
09:16:08.0744 3844 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
09:16:08.0745 3844 swenum - ok
09:16:08.0775 3844 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
09:16:08.0799 3844 swprv - ok
09:16:08.0913 3844 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
09:16:08.0964 3844 SysMain - ok
09:16:09.0058 3844 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
09:16:09.0064 3844 TabletInputService - ok
09:16:09.0147 3844 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
09:16:09.0164 3844 TapiSrv - ok
09:16:09.0194 3844 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
09:16:09.0198 3844 TBS - ok
09:16:09.0312 3844 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
09:16:09.0363 3844 Tcpip - ok
09:16:09.0433 3844 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
09:16:09.0449 3844 TCPIP6 - ok
09:16:09.0522 3844 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
09:16:09.0525 3844 tcpipreg - ok
09:16:09.0563 3844 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
09:16:09.0566 3844 TDPIPE - ok
09:16:09.0583 3844 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
09:16:09.0585 3844 TDTCP - ok
09:16:09.0662 3844 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
09:16:09.0666 3844 tdx - ok
09:16:09.0731 3844 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
09:16:09.0733 3844 TermDD - ok
09:16:09.0815 3844 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
09:16:09.0840 3844 TermService - ok
09:16:09.0862 3844 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
09:16:09.0867 3844 Themes - ok
09:16:09.0897 3844 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
09:16:09.0899 3844 THREADORDER - ok
09:16:09.0924 3844 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
09:16:09.0930 3844 TrkWks - ok
09:16:10.0005 3844 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
09:16:10.0011 3844 TrustedInstaller - ok
09:16:10.0079 3844 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
09:16:10.0082 3844 tssecsrv - ok
09:16:10.0176 3844 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
09:16:10.0179 3844 TsUsbFlt - ok
09:16:10.0258 3844 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
09:16:10.0262 3844 tunnel - ok
09:16:10.0299 3844 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
09:16:10.0302 3844 uagp35 - ok
09:16:10.0337 3844 uCamMonitor (63f6d08c54d5b3c1b12a6172032055c7) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
09:16:10.0340 3844 uCamMonitor - ok
09:16:10.0417 3844 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
09:16:10.0436 3844 udfs - ok
09:16:10.0473 3844 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
09:16:10.0478 3844 UI0Detect - ok
09:16:10.0548 3844 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
09:16:10.0551 3844 uliagpkx - ok
09:16:10.0581 3844 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
09:16:10.0584 3844 umbus - ok
09:16:10.0612 3844 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
09:16:10.0615 3844 UmPass - ok
09:16:10.0691 3844 UmRdpService (a293dcd756d04d8492a750d03b9a297c) C:\Windows\System32\umrdp.dll
09:16:10.0700 3844 UmRdpService - ok
09:16:10.0749 3844 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
09:16:10.0765 3844 upnphost - ok
09:16:10.0810 3844 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys
09:16:10.0814 3844 usbaudio - ok
09:16:10.0842 3844 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
09:16:10.0845 3844 usbccgp - ok
09:16:10.0885 3844 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
09:16:10.0890 3844 usbcir - ok
09:16:10.0924 3844 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
09:16:10.0927 3844 usbehci - ok
09:16:10.0971 3844 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
09:16:10.0981 3844 usbhub - ok
09:16:11.0033 3844 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
09:16:11.0036 3844 usbohci - ok
09:16:11.0070 3844 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
09:16:11.0073 3844 usbprint - ok
09:16:11.0097 3844 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
09:16:11.0100 3844 USBSTOR - ok
09:16:11.0127 3844 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
09:16:11.0130 3844 usbuhci - ok
09:16:11.0184 3844 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
09:16:11.0189 3844 usbvideo - ok
09:16:11.0222 3844 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
09:16:11.0228 3844 UxSms - ok
09:16:11.0306 3844 VAIO Event Service (a60605fc66552b421ee1f3d4ebb9a4e0) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
09:16:11.0312 3844 VAIO Event Service - ok
09:16:11.0368 3844 VAIO Power Management (d469be2723f79cf4b384680b1fdc577d) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
09:16:11.0390 3844 VAIO Power Management - ok
09:16:11.0461 3844 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
09:16:11.0464 3844 VaultSvc - ok
09:16:11.0548 3844 VCFw (96efa2698d6b9e2931609a3ea73fc5dc) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
09:16:11.0576 3844 VCFw - ok
09:16:11.0622 3844 VcmIAlzMgr (7bebf6a5285ffc03c34a7297a4e177cb) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
09:16:11.0647 3844 VcmIAlzMgr - ok
09:16:11.0693 3844 VcmINSMgr (e005b04dfca99f5880c5111933194ca9) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
09:16:11.0710 3844 VcmINSMgr - ok
09:16:11.0757 3844 VcmXmlIfHelper (829a32fd1334f72429ca0515760eb7a7) C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
09:16:11.0762 3844 VcmXmlIfHelper - ok
09:16:11.0868 3844 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
09:16:11.0869 3844 vdrvroot - ok
09:16:11.0953 3844 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
09:16:11.0975 3844 vds - ok
09:16:12.0035 3844 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
09:16:12.0037 3844 vga - ok
09:16:12.0059 3844 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
09:16:12.0061 3844 VgaSave - ok
09:16:12.0087 3844 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
09:16:12.0091 3844 vhdmp - ok
09:16:12.0158 3844 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
09:16:12.0160 3844 viaide - ok
09:16:12.0246 3844 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
09:16:12.0251 3844 vmbus - ok
09:16:12.0278 3844 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
09:16:12.0281 3844 VMBusHID - ok
09:16:12.0360 3844 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
09:16:12.0363 3844 volmgr - ok
09:16:12.0442 3844 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
09:16:12.0451 3844 volmgrx - ok
09:16:12.0530 3844 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
09:16:12.0538 3844 volsnap - ok
09:16:12.0567 3844 vpcbus (b4a73ca4ef9a02b9738cea9ad5fe5917) C:\Windows\system32\DRIVERS\vpchbus.sys
09:16:12.0570 3844 vpcbus - ok
09:16:12.0639 3844 vpcnfltr (e675fb2b48c54f09895482e2253b289c) C:\Windows\system32\DRIVERS\vpcnfltr.sys
09:16:12.0641 3844 vpcnfltr - ok
09:16:12.0670 3844 vpcusb (5fb42082b0d19a0268705f1dd343df20) C:\Windows\system32\DRIVERS\vpcusb.sys
09:16:12.0674 3844 vpcusb - ok
09:16:12.0754 3844 vpcvmm (207b6539799cc1c112661a9b620dd233) C:\Windows\system32\drivers\vpcvmm.sys
09:16:12.0759 3844 vpcvmm - ok
09:16:12.0794 3844 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
09:16:12.0799 3844 vsmraid - ok
09:16:12.0901 3844 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
09:16:12.0945 3844 VSS - ok
09:16:13.0032 3844 VUAgent (e55a44d8f9f713d5f5d5bbaef2ba0a34) C:\Program Files\Sony\VAIO Update 5\VUAgent.exe
09:16:13.0066 3844 VUAgent - ok
09:16:13.0100 3844 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
09:16:13.0102 3844 vwifibus - ok
09:16:13.0129 3844 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
09:16:13.0132 3844 vwififlt - ok
09:16:13.0165 3844 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
09:16:13.0167 3844 vwifimp - ok
09:16:13.0220 3844 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
09:16:13.0236 3844 W32Time - ok
09:16:13.0271 3844 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
09:16:13.0275 3844 WacomPen - ok
09:16:13.0375 3844 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
09:16:13.0378 3844 WANARP - ok
09:16:13.0385 3844 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
09:16:13.0386 3844 Wanarpv6 - ok
09:16:13.0469 3844 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
09:16:13.0503 3844 WatAdminSvc - ok
09:16:13.0602 3844 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
09:16:13.0645 3844 wbengine - ok
09:16:13.0678 3844 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
09:16:13.0684 3844 WbioSrvc - ok
09:16:13.0750 3844 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
09:16:13.0766 3844 wcncsvc - ok
09:16:13.0795 3844 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
09:16:13.0800 3844 WcsPlugInService - ok
09:16:13.0828 3844 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
09:16:13.0831 3844 Wd - ok
09:16:13.0953 3844 WDBtnMgrSvc.exe (da631fee06408776e52795ac7d2f8cef) C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
09:16:13.0956 3844 WDBtnMgrSvc.exe - ok
09:16:13.0987 3844 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
09:16:14.0004 3844 Wdf01000 - ok
09:16:14.0026 3844 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
09:16:14.0030 3844 WdiServiceHost - ok
09:16:14.0034 3844 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
09:16:14.0036 3844 WdiSystemHost - ok
09:16:14.0102 3844 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
09:16:14.0110 3844 WebClient - ok
09:16:14.0135 3844 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
09:16:14.0144 3844 Wecsvc - ok
09:16:14.0170 3844 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
09:16:14.0176 3844 wercplsupport - ok
09:16:14.0208 3844 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
09:16:14.0213 3844 WerSvc - ok
09:16:14.0244 3844 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
09:16:14.0246 3844 WfpLwf - ok
09:16:14.0272 3844 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
09:16:14.0274 3844 WIMMount - ok
09:16:14.0287 3844 WinDefend - ok
09:16:14.0295 3844 WinHttpAutoProxySvc - ok
09:16:14.0349 3844 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
09:16:14.0355 3844 Winmgmt - ok
09:16:14.0463 3844 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
09:16:14.0516 3844 WinRM - ok
09:16:14.0621 3844 WinUSB (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUSB.sys
09:16:14.0624 3844 WinUSB - ok
09:16:14.0676 3844 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
09:16:14.0710 3844 Wlansvc - ok
09:16:14.0870 3844 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
09:16:14.0921 3844 wlidsvc - ok
09:16:15.0012 3844 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
09:16:15.0012 3844 WmiAcpi - ok
09:16:15.0107 3844 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
09:16:15.0114 3844 wmiApSrv - ok
09:16:15.0140 3844 WMPNetworkSvc - ok
09:16:15.0196 3844 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
09:16:15.0202 3844 WPCSvc - ok
09:16:15.0303 3844 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
09:16:15.0311 3844 WPDBusEnum - ok
09:16:15.0382 3844 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
09:16:15.0385 3844 ws2ifsl - ok
09:16:15.0415 3844 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
09:16:15.0421 3844 wscsvc - ok
09:16:15.0437 3844 WSearch - ok
09:16:15.0584 3844 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
09:16:15.0661 3844 wuauserv - ok
09:16:15.0742 3844 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
09:16:15.0746 3844 WudfPf - ok
09:16:15.0794 3844 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
09:16:15.0798 3844 WUDFRd - ok
09:16:15.0881 3844 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
09:16:15.0890 3844 wudfsvc - ok
09:16:15.0931 3844 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
09:16:15.0948 3844 WwanSvc - ok
09:16:15.0997 3844 yukonw7 (5250193ef8e173aa7491250f00eb367f) C:\Windows\system32\DRIVERS\yk62x64.sys
09:16:16.0000 3844 yukonw7 - ok
09:16:16.0037 3844 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
09:16:16.0120 3844 \Device\Harddisk0\DR0 - ok
09:16:16.0126 3844 MBR (0x1B8) (bbb0a0725ad66f38b1a32135f3cb55d6) \Device\Harddisk1\DR2
09:16:16.0130 3844 \Device\Harddisk1\DR2 - ok
09:16:16.0144 3844 Boot (0x1200) (a709b29e0ac2877ddeef7b72d8fa471f) \Device\Harddisk0\DR0\Partition0
09:16:16.0146 3844 \Device\Harddisk0\DR0\Partition0 - ok
09:16:16.0151 3844 Boot (0x1200) (471cd2aef15f7ee8f5d4a6661dad4fbb) \Device\Harddisk0\DR0\Partition1
09:16:16.0153 3844 \Device\Harddisk0\DR0\Partition1 - ok
09:16:16.0156 3844 Boot (0x1200) (9ed924e3cfba57a1adf6c2cf392aedb6) \Device\Harddisk1\DR2\Partition0
09:16:16.0158 3844 \Device\Harddisk1\DR2\Partition0 - ok
09:16:16.0158 3844 ============================================================
09:16:16.0158 3844 Scan finished
09:16:16.0158 3844 ============================================================
09:16:16.0165 5464 Detected object count: 0
09:16:16.0165 5464 Actual detected object count: 0


LOG 2) From avast:

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-04-18 10:06:02
-----------------------------
10:06:02.650 OS Version: Windows x64 6.1.7601 Service Pack 1
10:06:02.650 Number of processors: 8 586 0x1E05
10:06:02.650 ComputerName: ERIK-VAIO UserName: Erik
10:06:14.888 Initialize success
10:15:20.783 AVAST engine defs: 12041800
10:16:49.157 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
10:16:49.163 Disk 0 Vendor: ST950042 0002 Size: 476940MB BusType: 3
10:16:49.213 Disk 0 MBR read successfully
10:16:49.216 Disk 0 MBR scan
10:16:49.221 Disk 0 Windows 7 default MBR code
10:16:49.270 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 14972 MB offset 2048
10:16:49.286 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 30664704
10:16:49.301 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461866 MB offset 30869504
10:16:49.337 Disk 0 scanning C:\Windows\system32\drivers
10:17:11.247 Service scanning
10:17:48.821 Modules scanning
10:17:48.833 Disk 0 trace - called modules:
10:17:48.898 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll
10:17:48.912 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006286790]
10:17:48.924 3 CLASSPNP.SYS[fffff88001a0143f] -> nt!IofCallDriver -> [0xfffffa8005ff3910]
10:17:48.934 5 ACPI.sys[fffff88000eea7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005ff6050]
10:17:52.252 AVAST engine scan C:\Windows
10:17:58.160 AVAST engine scan C:\Windows\system32
10:22:59.207 AVAST engine scan C:\Windows\system32\drivers
10:23:19.392 AVAST engine scan C:\Users\Erik
10:26:20.297 Disk 0 MBR has been saved successfully to "C:\Users\Erik\Desktop\MBR.dat"
10:26:20.306 The log file has been saved successfully to "C:\Users\Erik\Desktop\aswMBR.txt"


How am I looking at this point in your estimation? Thanks again for your GREAT HELP!

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:34 AM

Posted 18 April 2012 - 09:58 AM

PC looks clean,but we still have few scans left out :thumbup2:

Download

http://www.techspot.com/downloads/4716-malwarebytes-anti-malware.html

Install,update and run a full scan

Click on SHOW results.Select all infections and remove it

Reboot the PC and scan MBAM once in regular mode until you get a clean log


Download

ESET online scanner


Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply


Download

mini toolbox

Checkmark following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size

Click Go and post the result.

#9 mstusick

mstusick
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 18 April 2012 - 08:03 PM

Hi narenxp,

You're a great detective! While Malwarebytes came back clean (again), ESET found 7 threats. I'm pasting ESET first, followed by minitoolbox results. Just one question...are we there yet? :wacko:

Thanks again!



C:\Users\Erik\AppData\Local\Temp\C37.tmp a variant of Win32/Kryptik.ACYZ trojan cleaned by deleting - quarantined
C:\Users\Erik\AppData\Local\Temp\MRT.exe a variant of Win32/Kryptik.ACYZ trojan cleaned by deleting - quarantined
C:\Users\Erik\AppData\Local\Temp\ICReinstall\cnet2_avc-free_exe.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\Erik\AppData\Local\Temp\ICReinstall\cnet2_hjsplit_zip.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\Erik\AppData\Local\Temp\ICReinstall\cnet_flash_movie_player_exe.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\Erik\AppData\Local\Temp\is1598539481\zgInstaller.exe Win32/Toolbar.Zugo application deleted - quarantined
C:\Users\Erik\Downloads\cnet2_hjsplit_zip.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined





MiniToolBox by Farbar Version: 18-01-2012
Ran by Erik (administrator) on 18-04-2012 at 17:43:18
Microsoft Windows 7 Professional Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================



========================= IP Configuration: ================================

Atheros AR9287 Wireless Network Adapter = Wireless Network Connection (Connected)
Marvell Yukon 88E8057 PCI-E Gigabit Ethernet Controller = Local Area Connection (Media disconnected)
PdaNet Broadband Adapter = Local Area Connection 2 (Media disconnected)
Microsoft Virtual WiFi Miniport Adapter = Wireless Network Connection 2 (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set subinterface interface=?C) subinterface=ethernet_9 mtu=1477


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : Erik-VAIO
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : PdaNet Broadband Adapter
Physical Address. . . . . . . . . : 00-26-37-BD-39-42
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physical Address. . . . . . . . . : 62-DD-08-BD-BF-A4
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Atheros AR9287 Wireless Network Adapter
Physical Address. . . . . . . . . : 78-DD-08-BD-BF-A4
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::2930:809b:5f26:a31b%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.0.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Wednesday, April 18, 2012 2:05:12 PM
Lease Expires . . . . . . . . . . : Wednesday, April 18, 2012 6:22:32 PM
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DHCPv6 IAID . . . . . . . . . . . : 355238232
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-34-BD-B0-54-42-49-EB-60-6E
DNS Servers . . . . . . . . . . . : 75.75.76.76
75.75.75.75
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8057 PCI-E Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 54-42-49-EB-60-6E
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 12:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:38ca:bd5:3f57:fffd(Preferred)
Link-local IPv6 Address . . . . . : fe80::38ca:bd5:3f57:fffd%18(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{BBFB0497-1729-4163-BA41-4DE369A2010C}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{B3C3135E-53C6-4E89-9FEA-6587736F151B}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{1B5E2928-3CE9-4218-B31A-B947B4325E55}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{523F38E8-2651-41B1-9BBF-8E722BD6F211}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: cdns02.comcast.net
Address: 75.75.76.76

Name: google.com
Addresses: 74.125.225.71
74.125.225.70
74.125.225.69
74.125.225.66
74.125.225.78
74.125.225.67
74.125.225.73
74.125.225.68
74.125.225.72
74.125.225.65
74.125.225.64


Pinging google.com [74.125.225.103] with 32 bytes of data:
Reply from 74.125.225.103: bytes=32 time=42ms TTL=54
Reply from 74.125.225.103: bytes=32 time=33ms TTL=54

Ping statistics for 74.125.225.103:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 33ms, Maximum = 42ms, Average = 37ms
Server: cdns02.comcast.net
Address: 75.75.76.76

Name: yahoo.com
Addresses: 72.30.38.140
98.139.183.24
209.191.122.70


Pinging yahoo.com [209.191.122.70] with 32 bytes of data:
Reply from 209.191.122.70: bytes=32 time=58ms TTL=51
Reply from 209.191.122.70: bytes=32 time=59ms TTL=51

Ping statistics for 209.191.122.70:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 58ms, Maximum = 59ms, Average = 58ms
Server: cdns02.comcast.net
Address: 75.75.76.76

Name: bleepingcomputer.com
Address: 208.43.87.2


Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:
Reply from 208.43.87.2: Destination host unreachable.
Reply from 208.43.87.2: Destination host unreachable.

Ping statistics for 208.43.87.2:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
15...00 26 37 bd 39 42 ......PdaNet Broadband Adapter
14...62 dd 08 bd bf a4 ......Microsoft Virtual WiFi Miniport Adapter
11...78 dd 08 bd bf a4 ......Atheros AR9287 Wireless Network Adapter
10...54 42 49 eb 60 6e ......Marvell Yukon 88E8057 PCI-E Gigabit Ethernet Controller
1...........................Software Loopback Interface 1
18...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
39...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
40...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
41...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.2 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.0.0 255.255.255.0 On-link 192.168.0.2 281
192.168.0.2 255.255.255.255 On-link 192.168.0.2 281
192.168.0.255 255.255.255.255 On-link 192.168.0.2 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.0.2 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.0.2 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
18 58 ::/0 On-link
1 306 ::1/128 On-link
18 58 2001::/32 On-link
18 306 2001:0:4137:9e76:38ca:bd5:3f57:fffd/128
On-link
11 281 fe80::/64 On-link
18 306 fe80::/64 On-link
11 281 fe80::2930:809b:5f26:a31b/128
On-link
18 306 fe80::38ca:bd5:3f57:fffd/128
On-link
1 306 ff00::/8 On-link
18 306 ff00::/8 On-link
11 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog5 06 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog5 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 08 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 10 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog5 06 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)
x64-Catalog5 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 08 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.)
x64-Catalog5 10 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (04/18/2012 04:03:26 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/18/2012 04:02:52 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/17/2012 11:37:56 AM) (Source: Application Hang) (User: )
Description: The program PC Health Check v5.5.exe version 5.5.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 15f8

Start Time: 01cd1cafdd87f3ec

Termination Time: 4

Application Path: C:\Users\Erik\Desktop\PC Health Check v5.5.exe

Report Id: 44589f5d-88a3-11e1-ac55-c0cb38f20ea8

Error: (04/05/2012 08:33:07 AM) (Source: Application Error) (User: )
Description: Faulting application name: MindManager.exe, version: 9.2.504.0, time stamp: 0x4d55208d
Faulting module name: MmApplicationFramework.dll, version: 9.2.504.0, time stamp: 0x4d5518e0
Exception code: 0x40000015
Fault offset: 0x000d0d79
Faulting process id: 0xf34
Faulting application start time: 0xMindManager.exe0
Faulting application path: MindManager.exe1
Faulting module path: MindManager.exe2
Report Id: MindManager.exe3

Error: (04/04/2012 00:17:57 PM) (Source: Application Error) (User: )
Description: Faulting application name: MindManager.exe, version: 9.2.504.0, time stamp: 0x4d55208d
Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e211319
Exception code: 0xe06d7363
Fault offset: 0x0000b9bc
Faulting process id: 0xdec
Faulting application start time: 0xMindManager.exe0
Faulting application path: MindManager.exe1
Faulting module path: MindManager.exe2
Report Id: MindManager.exe3

Error: (04/01/2012 08:35:39 PM) (Source: Application Hang) (User: )
Description: The program CamtasiaStudio.exe version 7.1.0.1631 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 23bc

Start Time: 01cd1066809af8dd

Termination Time: 70

Application Path: C:\Program Files (x86)\TechSmith\Camtasia Studio 7\CamtasiaStudio.exe

Report Id: c1ae3dfb-7c5b-11e1-bf86-c0cb38f20ea8

Error: (04/01/2012 05:48:07 PM) (Source: Application Hang) (User: )
Description: The program MindManager.exe version 9.2.504.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1588

Start Time: 01cd104995eb54cd

Termination Time: 19

Application Path: C:\Program Files (x86)\Mindjet\MindManager 9\MindManager.exe

Report Id: 503d8b49-7c44-11e1-bf86-c0cb38f20ea8

Error: (03/31/2012 06:29:59 PM) (Source: Windows Search Service) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/31/2012 06:29:59 PM) (Source: Windows Search Service) (User: )
Description: The index cannot be initialized.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/31/2012 06:29:59 PM) (Source: Windows Search Service) (User: )
Description: The application cannot be initialized.

Context: Windows Application

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (04/18/2012 02:04:57 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/18/2012 10:03:15 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/18/2012 09:00:03 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/18/2012 07:14:51 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/17/2012 02:52:09 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/17/2012 00:57:10 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/17/2012 00:21:05 PM) (Source: Service Control Manager) (User: )
Description: The Windows Defender service terminated with the following error:
%%-2147024882

Error: (04/17/2012 00:16:59 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/17/2012 08:50:56 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/16/2012 11:42:34 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: SYSTEM)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126


Microsoft Office Sessions:
=========================
Error: (04/18/2012 04:03:26 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Erik\Downloads\esetsmartinstaller_enu.exe

Error: (04/18/2012 04:02:52 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Erik\Downloads\esetsmartinstaller_enu.exe

Error: (04/17/2012 11:37:56 AM) (Source: Application Hang)(User: )
Description: PC Health Check v5.5.exe5.5.0.015f801cd1cafdd87f3ec4C:\Users\Erik\Desktop\PC Health Check v5.5.exe44589f5d-88a3-11e1-ac55-c0cb38f20ea8

Error: (04/05/2012 08:33:07 AM) (Source: Application Error)(User: )
Description: MindManager.exe9.2.504.04d55208dMmApplicationFramework.dll9.2.504.04d5518e040000015000d0d79f3401cd131786375726C:\Program Files (x86)\Mindjet\MindManager 9\MindManager.exeC:\Program Files (x86)\Mindjet\MindManager 9\MmApplicationFramework.dll7e8a6db6-7f1b-11e1-a8ed-c0cb38f20ea8

Error: (04/04/2012 00:17:57 PM) (Source: Application Error)(User: )
Description: MindManager.exe9.2.504.04d55208dKERNELBASE.dll6.1.7601.176514e211319e06d73630000b9bcdec01cd126bda65bebbC:\Program Files (x86)\Mindjet\MindManager 9\MindManager.exeC:\Windows\syswow64\KERNELBASE.dllbcbd5c20-7e71-11e1-91f1-544249eb606e

Error: (04/01/2012 08:35:39 PM) (Source: Application Hang)(User: )
Description: CamtasiaStudio.exe7.1.0.163123bc01cd1066809af8dd70C:\Program Files (x86)\TechSmith\Camtasia Studio 7\CamtasiaStudio.exec1ae3dfb-7c5b-11e1-bf86-c0cb38f20ea8

Error: (04/01/2012 05:48:07 PM) (Source: Application Hang)(User: )
Description: MindManager.exe9.2.504.0158801cd104995eb54cd19C:\Program Files (x86)\Mindjet\MindManager 9\MindManager.exe503d8b49-7c44-11e1-bf86-c0cb38f20ea8

Error: (03/31/2012 06:29:59 PM) (Source: Windows Search Service)(User: )
Description: Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (03/31/2012 06:29:59 PM) (Source: Windows Search Service)(User: )
Description: Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/31/2012 06:29:59 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)


=========================== Installed Programs ============================

101 Law Forms
AccuWeather.com Cirrus (Version: 0.1.6)
Adobe Acrobat X Pro (Version: 10.1.3)
Adobe AIR (Version: 3.2.0.2070)
Adobe Anchor Service CS4 (Version: 2.0)
Adobe Bridge CS4 (Version: 3)
Adobe CMaps CS4 (Version: 2.0)
Adobe Color EU Extra Settings CS4 (Version: 2.0)
Adobe Color JA Extra Settings CS4 (Version: 2.0)
Adobe Color NA Recommended Settings CS4 (Version: 2.0)
Adobe CSI CS4 (Version: 1)
Adobe CSI CS4 x64 (Version: 1)
Adobe Default Language CS4 (Version: 2.0)
Adobe Digital Editions
Adobe Drive CS4 (Version: 1)
Adobe Drive CS4 x64 (Version: 1)
Adobe ExtendScript Toolkit CS4 (Version: 3.0.0)
Adobe Extension Manager CS4 (Version: 2.0)
Adobe Flash Player 11 ActiveX 64-bit (Version: 11.1.102.55)
Adobe Flash Player 11 Plugin 64-bit (Version: 11.1.102.55)
Adobe Fonts All (Version: 2.0)
Adobe InDesign CS4 (Version: 6.0)
Adobe InDesign CS4 Application Feature Set Files (Roman) (Version: 6.0)
Adobe InDesign CS4 Common Base Files (Version: 6.0)
Adobe InDesign CS4 Icon Handler (Version: 6.0)
Adobe InDesign CS4 Icon Handler x64 (Version: 6.0)
Adobe Linguistics CS4 (Version: 4.0.0)
Adobe Media Player (Version: 0.0.0)
Adobe Media Player (Version: 1.1)
Adobe Output Module (Version: 2.0)
Adobe PDF Library Files CS4 (Version: 9.0)
Adobe Photoshop Elements 8.0 (Version: 8.0)
Adobe Premiere Elements 8.0 (Version: 8.0)
Adobe Reader 9.5.0 (Version: 9.5.0)
Adobe Search for Help (Version: 1.0)
Adobe Service Manager Extension (Version: 1.0)
Adobe Setup (Version: 2.0)
Adobe SGM CS4 (Version: 3.0)
Adobe SING CS4 (Version: 2.0)
Adobe Type Support CS4 (Version: 9.0)
Adobe Update Manager CS4 (Version: 6.0.0)
Adobe Visual Communicator 3 (Version: 3.0.3129.0)
Adobe WinSoft Linguistics Plugin (Version: 1.1)
Adobe XMP Panels CS4 (Version: 2.0)
AdobeColorCommonSetCMYK (Version: 2.0)
AdobeColorCommonSetRGB (Version: 2.0)
Alarm Clock v1.0
Alps Pointing-device for VAIO
Anti-phishing Domain Advisor (Version: 1.0.0.0)
Any Video Converter 3.3.0
Apple Application Support (Version: 2.1.6)
Apple Mobile Device Support (Version: 4.0.0.97)
Apple Software Update (Version: 2.1.3.127)
Application Manager for VAIO
ArcSoft Magic-i Visual Effects 2 (Version: 2.0.1.115)
ArcSoft WebCam Companion 3 (Version: 3.0.21.368)
Bonjour (Version: 3.0.0.10)
Camtasia Studio 7 (Version: 7.1.0)
Comcast Desktop Software (v1.2.1) (Version: 24)
Connect (Version: 1.0.0.1)
D3DX10 (Version: 15.4.2368.0902)
Data Lifeguard Diagnostic for Windows (Version: 1.13)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Dragon NaturallySpeaking 11 (Version: 11.50.100)
Dropbox (Version: 1.2.52)
ESET Online Scanner v3
Evernote v. 4.1 (Version: 4.1.0.3431)
FileZilla Client 3.5.3 (Version: 3.5.3)
Flash Movie Player 1.5 (Version: 1.5)
focus booster (Version: 1.2)
Google Chrome (Version: 18.0.1025.162)
Google Earth (Version: 6.1.0.5001)
Google Talk Plugin (Version: 2.8.7.6830)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.3.2710.138)
Google Update Helper (Version: 1.3.21.111)
Intel® Control Center (Version: 1.2.1.1007)
Intel® Rapid Storage Technology (Version: 9.6.0.1014)
Intel® Turbo Boost Technology Driver (Version: 01.01.01.1007)
iTunes (Version: 10.5.2.11)
Java Auto Updater (Version: 2.0.6.1)
Java™ 6 Update 20 (64-bit) (Version: 6.0.200)
Java™ 6 Update 29 (Version: 6.0.290)
Jobulator (Version: 3.04)
Junk Mail filter update (Version: 15.4.3502.0922)
kuler (Version: 2.0)
Malwarebytes Anti-Malware version 1.61.0.1400 (Version: 1.61.0.1400)
Market Samurai (Version: 0.88.62)
Media Gallery (Version: 1.3.0)
Media Gallery (Version: 1.3.0.06230)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office Access MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000)
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Professional 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proofing (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Single Image 2010 (Version: 14.0.4763.1000)
Microsoft Office Word MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 4.1.10111.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server Compact 3.5 SP1 English (Version: 3.5.5692.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Mindjet MindManager 9 (Version: 9.2.504)
Motorola Installation Wizard (Version: 5.0.4)
Motorola Installation Wizard (Version: 5.0.4.19)
Mozilla Firefox 11.0 (x86 en-US) (Version: 11.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Music Manager
muvee Reveal Seagate Edition (Version: 7.0.41.11017)
NVIDIA Control Panel 266.72 (Version: 266.72)
NVIDIA Graphics Driver 266.72 (Version: 266.72)
NVIDIA HD Audio Driver 1.1.13.1 (Version: 1.1.13.1)
NVIDIA Install Application (Version: 2.265.39.0)
NVIDIA PhysX (Version: 9.10.0514)
NVIDIA PhysX System Software 9.10.0514 (Version: 9.10.0514)
Oasis2Service 1.0 (Version: 1.0.0)
Octoshape add-in for Adobe Flash Player
OOBE (Version: 3.10.0630)
PdaNet for Android 3.02
PDF-XChange 3
PDF Settings CS4 (Version: 9.0)
Photoshop Camera Raw (Version: 5.0)
PlayReady PC Runtime amd64 (Version: 1.3.0)
PMB (Version: 5.3.00.06040)
PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00)
PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00)
PVSonyDll (Version: 1.00.0001)
QuickTime (Version: 7.71.80.42)
Realtek High Definition Audio Driver (Version: 6.0.1.6098)
Remote Keyboard with PlayStation 3 (Version: 1.0.2.06170)
Remote Play with PlayStation 3 (Version: 1.0.2.06210)
Remote Play with PlayStation®3 (Version: 1.0.2.06210)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0)
Seagate Manager Installer (Version: 2.01.0600)
SEO PowerSuite
Skype™ 4.2 (Version: 4.2.146)
Small Business Legal Forms
SmartDraw 2012
SmartDraw VP
SmartSound Quicktracks for Premiere Elements 8.0 (Version: 3.11.3090)
SmartWi Connection Utility (Version: 4.11.4.20100722.2739)
Snagit 9.1 (Version: 9.1.0.206)
Spam Free Search Bar (Version: 1.0.0.12)
Suite Shared Configuration CS4 (Version: 1.0)
The Big Book of Real Estate Ads
The Big Book of Real Estate Ads (C:\Program Files (x86)\Big Book\)
The Paper Tiger Single User Version 3.0 (Version: 3.0.12)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition
Update for Microsoft Office 2010 (KB2202188)
Update for Microsoft Office 2010 (KB2413186)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2523113)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition
Update for Microsoft Outlook Social Connector (KB2583935)
VAIO - Media Gallery (Version: 1.3.0.06230)
VAIO - PMB VAIO Edition Guide (Version: 1.3.00.06040)
VAIO - PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00.06180)
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (Version: 1.3.00.06110)
VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00.06180)
VAIO Care (Version: 6.2.2.07150)
VAIO Control Center (Version: 4.3.0.05310)
VAIO Data Restore Tool (Version: 1.4.0.05240)
VAIO DVD Menu Data (Version: 2.2.00.05120)
VAIO Gate (Version: 2.4.0.06210)
VAIO Gate Default (Version: 2.2.0.07020)
VAIO Hardware Diagnostics (Version: 4.0.0.06230)
VAIO Help and Support (Version: 12.00.0622)
VAIO Manual (Version: 1.1.0.05280)
VAIO Media plus (Version: 2.1.0)
VAIO Media plus (Version: 2.1.0.18210)
VAIO Media plus Opening Movie (Version: 2.1.0.14080)
VAIO Messenger (Version: 2.0.202.0)
VAIO Movie Story Template Data (Version: 2.3.00.06040)
VAIO Sample Contents (Version: 1.2.0.16080)
VAIO Survey (Version: 6.00.1028)
VAIO Transfer Support (Version: 1.2.0.06230)
VAIO Update (Version: 5.2.0.05310)
Vegas Movie Studio Platinum 9.0 (Version: 9.0.85)
Visual C++ 9.0 Runtime for Dragon NaturallySpeaking 64bit (x64) (Version: 11.0.0)
VLC media player 1.1.11 (Version: 1.1.11)
WD Anywhere Backup
WD Drive Manager (x64) (Version: 2.107)
WIDCOMM Bluetooth Software (Version: 6.3.0.5600)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
WinPatrol (Version: 20.5.2011.0)
WinRAR 4.01 (64-bit) (Version: 4.01.0)

========================= Memory info: ===================================

Percentage of memory in use: 53%
Total physical RAM: 6124.93 MB
Available physical RAM: 2870.58 MB
Total Pagefile: 12248.05 MB
Available Pagefile: 8936.41 MB
Total Virtual: 4095.88 MB
Available Virtual: 3959.77 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:451.04 GB) (Free:61.76 GB) NTFS

========================= Users: ========================================

User accounts for \\ERIK-VAIO

Administrator boinc_master boinc_project
Erik Guest


**** End of log ****

#10 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:34 AM

Posted 18 April 2012 - 11:18 PM

That looks good

Download

TFC


Launch it,it will close all running programs

click on START,it should ask for reboot

Turn off your system restore,restart the PC,create a new restore point

http://windows.microsoft.com/en-US/windows7/Turn-System-Restore-on-or-off

Update your JAVA from here

http://java.com/en/download/inc/windows_upgrade_xpi.jsp


Update your antivirus frequently,do not click on suspicious links

Safe surfing :)

#11 mstusick

mstusick
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 19 April 2012 - 06:44 AM

Narenxp,

Thank you greatly!

I followed your advice to a tee and everything looks fine now.

Stupid question at this point, I know, but what antivirus program would you recommend?

Thanks much!

#12 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:34 AM

Posted 19 April 2012 - 08:32 AM

I would recommend avast,run a frequent scans with malwarebytes and super antispyware

good luck

#13 mstusick

mstusick
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 19 April 2012 - 09:29 AM

Thank you narenxp, you're the best!

#14 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:34 AM

Posted 19 April 2012 - 09:37 AM

You're welcome and safe surfing :thumbup2:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users