Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Have never seen this before


  • Please log in to reply
5 replies to this topic

#1 reactionjd

reactionjd

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:57 AM

Posted 02 October 2012 - 04:27 PM

Ok so on my fiancees fathers computer he can turn it on and it boots normally untill after you login. Upon logging in it goes to desktop for about 10-20 seconds then locks everything and displays this picture you cannot do anything no ctl alt del nothing only thing i can think of is to do a restore. I really dont think this is real thing if it were the government they would lock the computer and come to his door and take it not ask for money to release it just seems like a scam. any ideas? anyone seen this before?


Posted Image

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:10:57 AM

Posted 02 October 2012 - 04:43 PM

Boot into safemode with networking

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here.If you get crashes in normal mode,run it in safemode with networking

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 reactionjd

reactionjd
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:57 AM

Posted 02 October 2012 - 09:16 PM

ok so here is the tdsskiller log:

20:24:11.0961 0484 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
20:24:13.0964 0484 ============================================================
20:24:13.0964 0484 Current date / time: 2012/10/02 20:24:13.0964
20:24:13.0964 0484 SystemInfo:
20:24:13.0964 0484
20:24:13.0964 0484 OS Version: 6.0.6002 ServicePack: 2.0
20:24:13.0964 0484 Product type: Workstation
20:24:13.0964 0484 ComputerName: ARVD24JKCT6
20:24:13.0964 0484 UserName: Victor
20:24:13.0964 0484 Windows directory: C:\Windows
20:24:13.0964 0484 System windows directory: C:\Windows
20:24:13.0964 0484 Processor architecture: Intel x86
20:24:13.0964 0484 Number of processors: 1
20:24:13.0964 0484 Page size: 0x1000
20:24:13.0964 0484 Boot type: Safe boot with network
20:24:13.0964 0484 ============================================================
20:24:19.0241 0484 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:24:19.0241 0484 ============================================================
20:24:19.0241 0484 \Device\Harddisk0\DR0:
20:24:19.0241 0484 MBR partitions:
20:24:19.0241 0484 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x14BE88B
20:24:19.0241 0484 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x14BE8CA, BlocksNum 0x1155A1F7
20:24:19.0241 0484 ============================================================
20:24:19.0256 0484 C: <-> \Device\Harddisk0\DR0\Partition2
20:24:19.0288 0484 D: <-> \Device\Harddisk0\DR0\Partition1
20:24:19.0288 0484 ============================================================
20:24:19.0288 0484 Initialize success
20:24:19.0288 0484 ============================================================
20:25:18.0064 1460 ============================================================
20:25:18.0064 1460 Scan started
20:25:18.0064 1460 Mode: Manual; TDLFS;
20:25:18.0064 1460 ============================================================
20:25:18.0985 1460 ================ Scan system memory ========================
20:25:18.0985 1460 System memory - ok
20:25:18.0985 1460 ================ Scan services =============================
20:25:19.0156 1460 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
20:25:19.0156 1460 ACPI - ok
20:25:19.0234 1460 [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
20:25:19.0234 1460 AdobeFlashPlayerUpdateSvc - ok
20:25:19.0281 1460 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
20:25:19.0312 1460 adp94xx - ok
20:25:19.0359 1460 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
20:25:19.0359 1460 adpahci - ok
20:25:19.0390 1460 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
20:25:19.0390 1460 adpu160m - ok
20:25:19.0421 1460 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
20:25:19.0421 1460 adpu320 - ok
20:25:19.0468 1460 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:25:19.0468 1460 AeLookupSvc - ok
20:25:19.0515 1460 [ A7B8A3A79D35215D798A300DF49ED23F ] Afc C:\Windows\system32\drivers\Afc.sys
20:25:19.0515 1460 Afc - ok
20:25:19.0562 1460 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
20:25:19.0562 1460 AFD - ok
20:25:19.0609 1460 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:25:19.0609 1460 agp440 - ok
20:25:19.0640 1460 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
20:25:19.0640 1460 aic78xx - ok
20:25:19.0671 1460 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
20:25:19.0671 1460 ALG - ok
20:25:19.0702 1460 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
20:25:19.0702 1460 aliide - ok
20:25:19.0718 1460 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
20:25:19.0733 1460 amdagp - ok
20:25:19.0765 1460 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
20:25:19.0765 1460 amdide - ok
20:25:19.0827 1460 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
20:25:19.0827 1460 AmdK7 - ok
20:25:19.0874 1460 [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
20:25:19.0874 1460 AmdK8 - ok
20:25:19.0967 1460 [ 85180CF88C5EBAD73B452A43A004CA51 ] AOL ACS C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
20:25:19.0967 1460 AOL ACS - ok
20:25:20.0014 1460 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
20:25:20.0014 1460 Appinfo - ok
20:25:20.0045 1460 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
20:25:20.0045 1460 arc - ok
20:25:20.0108 1460 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
20:25:20.0108 1460 arcsas - ok
20:25:20.0155 1460 [ F5DC168BF77572D51BE28BA261B30CB4 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
20:25:20.0155 1460 aswFsBlk - ok
20:25:20.0217 1460 [ F76E51561562AC4105DBBE53FC99BC10 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
20:25:20.0217 1460 aswMonFlt - ok
20:25:20.0248 1460 [ B7D5E4486BA658ED08624D8084ABB830 ] aswRdr C:\Windows\system32\drivers\aswRdr.sys
20:25:20.0248 1460 aswRdr - ok
20:25:20.0279 1460 [ 30E45AF8B4D83176CA850FC9699E860B ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
20:25:20.0311 1460 aswSnx - ok
20:25:20.0326 1460 [ F04BDBCB965C05C51F4A7DE7B62063D6 ] aswSP C:\Windows\system32\drivers\aswSP.sys
20:25:20.0357 1460 aswSP - ok
20:25:20.0404 1460 [ DFE9152ABFA89BB8CFDC057409B2D4DA ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
20:25:20.0404 1460 aswTdi - ok
20:25:20.0435 1460 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:25:20.0435 1460 AsyncMac - ok
20:25:20.0467 1460 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
20:25:20.0467 1460 atapi - ok
20:25:20.0529 1460 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:25:20.0545 1460 AudioEndpointBuilder - ok
20:25:20.0560 1460 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
20:25:20.0560 1460 Audiosrv - ok
20:25:20.0623 1460 [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
20:25:20.0623 1460 avast! Antivirus - ok
20:25:20.0669 1460 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
20:25:20.0669 1460 Beep - ok
20:25:20.0732 1460 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
20:25:20.0747 1460 BFE - ok
20:25:20.0794 1460 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
20:25:20.0872 1460 BITS - ok
20:25:20.0872 1460 blbdrive - ok
20:25:20.0903 1460 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:25:20.0919 1460 bowser - ok
20:25:20.0950 1460 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
20:25:20.0950 1460 BrFiltLo - ok
20:25:20.0981 1460 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
20:25:20.0981 1460 BrFiltUp - ok
20:25:21.0013 1460 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
20:25:21.0013 1460 Browser - ok
20:25:21.0044 1460 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
20:25:21.0044 1460 Brserid - ok
20:25:21.0059 1460 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
20:25:21.0059 1460 BrSerWdm - ok
20:25:21.0075 1460 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
20:25:21.0075 1460 BrUsbMdm - ok
20:25:21.0106 1460 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
20:25:21.0106 1460 BrUsbSer - ok
20:25:21.0122 1460 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
20:25:21.0122 1460 BTHMODEM - ok
20:25:21.0169 1460 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:25:21.0184 1460 cdfs - ok
20:25:21.0215 1460 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:25:21.0215 1460 cdrom - ok
20:25:21.0262 1460 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
20:25:21.0262 1460 CertPropSvc - ok
20:25:21.0293 1460 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
20:25:21.0293 1460 circlass - ok
20:25:21.0325 1460 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
20:25:21.0325 1460 CLFS - ok
20:25:21.0387 1460 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:25:21.0387 1460 clr_optimization_v2.0.50727_32 - ok
20:25:21.0449 1460 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:25:21.0481 1460 clr_optimization_v4.0.30319_32 - ok
20:25:21.0512 1460 [ 0FED59EDB4A83FF17F1778827B88AB1A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
20:25:21.0512 1460 CmBatt - ok
20:25:21.0559 1460 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:25:21.0559 1460 cmdide - ok
20:25:21.0574 1460 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
20:25:21.0574 1460 Compbatt - ok
20:25:21.0590 1460 COMSysApp - ok
20:25:21.0621 1460 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
20:25:21.0621 1460 crcdisk - ok
20:25:21.0637 1460 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
20:25:21.0637 1460 Crusoe - ok
20:25:21.0683 1460 [ 75C6A297E364014840B48ECCD7525E30 ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:25:21.0699 1460 CryptSvc - ok
20:25:21.0761 1460 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:25:21.0793 1460 DcomLaunch - ok
20:25:21.0824 1460 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:25:21.0824 1460 DfsC - ok
20:25:21.0917 1460 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
20:25:21.0949 1460 DFSR - ok
20:25:22.0011 1460 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
20:25:22.0011 1460 Dhcp - ok
20:25:22.0058 1460 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
20:25:22.0058 1460 disk - ok
20:25:22.0089 1460 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:25:22.0105 1460 Dnscache - ok
20:25:22.0120 1460 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:25:22.0136 1460 dot3svc - ok
20:25:22.0183 1460 [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
20:25:22.0183 1460 Dot4 - ok
20:25:22.0229 1460 [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
20:25:22.0229 1460 Dot4Print - ok
20:25:22.0245 1460 [ C55004CA6B419B6695970DFE849B122F ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
20:25:22.0245 1460 dot4usb - ok
20:25:22.0276 1460 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
20:25:22.0292 1460 DPS - ok
20:25:22.0323 1460 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:25:22.0323 1460 drmkaud - ok
20:25:22.0385 1460 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:25:22.0385 1460 DXGKrnl - ok
20:25:22.0448 1460 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
20:25:22.0448 1460 E1G60 - ok
20:25:22.0479 1460 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
20:25:22.0479 1460 EapHost - ok
20:25:22.0541 1460 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
20:25:22.0541 1460 Ecache - ok
20:25:22.0573 1460 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
20:25:22.0588 1460 elxstor - ok
20:25:22.0635 1460 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
20:25:22.0651 1460 EMDMgmt - ok
20:25:22.0697 1460 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
20:25:22.0713 1460 EventSystem - ok
20:25:22.0744 1460 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
20:25:22.0744 1460 exfat - ok
20:25:22.0775 1460 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:25:22.0775 1460 fastfat - ok
20:25:22.0807 1460 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:25:22.0807 1460 fdc - ok
20:25:22.0838 1460 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
20:25:22.0838 1460 fdPHost - ok
20:25:22.0869 1460 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
20:25:22.0869 1460 FDResPub - ok
20:25:22.0900 1460 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:25:22.0900 1460 FileInfo - ok
20:25:22.0931 1460 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:25:22.0931 1460 Filetrace - ok
20:25:22.0963 1460 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:25:22.0963 1460 flpydisk - ok
20:25:22.0994 1460 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:25:22.0994 1460 FltMgr - ok
20:25:23.0072 1460 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
20:25:23.0103 1460 FontCache - ok
20:25:23.0134 1460 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
20:25:23.0134 1460 FontCache3.0.0.0 - ok
20:25:23.0197 1460 [ D909075FA72C090F27AA926C32CB4612 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
20:25:23.0197 1460 fssfltr - ok
20:25:23.0306 1460 [ 4CE9DAC1518FF7E77BD213E6394B9D77 ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
20:25:23.0337 1460 fsssvc - ok
20:25:23.0353 1460 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:25:23.0353 1460 Fs_Rec - ok
20:25:23.0384 1460 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
20:25:23.0399 1460 gagp30kx - ok
20:25:23.0509 1460 [ E53EE18A21C025DEABCFE0F72FC481BB ] GameConsoleService C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe
20:25:23.0524 1460 GameConsoleService - ok
20:25:23.0587 1460 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\Drivers\GEARAspiWDM.sys
20:25:23.0587 1460 GEARAspiWDM - ok
20:25:23.0633 1460 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
20:25:23.0649 1460 gpsvc - ok
20:25:23.0743 1460 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
20:25:23.0743 1460 gupdate - ok
20:25:23.0758 1460 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
20:25:23.0758 1460 gupdatem - ok
20:25:23.0836 1460 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
20:25:23.0836 1460 gusvc - ok
20:25:23.0899 1460 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:25:23.0914 1460 HdAudAddService - ok
20:25:23.0945 1460 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
20:25:23.0961 1460 HDAudBus - ok
20:25:23.0992 1460 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
20:25:24.0008 1460 HidBth - ok
20:25:24.0023 1460 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
20:25:24.0023 1460 HidIr - ok
20:25:24.0055 1460 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
20:25:24.0055 1460 hidserv - ok
20:25:24.0101 1460 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:25:24.0101 1460 HidUsb - ok
20:25:24.0133 1460 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:25:24.0133 1460 hkmsvc - ok
20:25:24.0148 1460 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
20:25:24.0148 1460 HpCISSs - ok
20:25:24.0226 1460 [ 9EFA5FEC26CEC696A66A891AC90B412D ] HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys
20:25:24.0242 1460 HSF_DPV - ok
20:25:24.0273 1460 [ A3077D9ED7FF612A033536A6009DBEA5 ] HSXHWBS2 C:\Windows\system32\DRIVERS\HSXHWBS2.sys
20:25:24.0289 1460 HSXHWBS2 - ok
20:25:24.0320 1460 [ 0EEECA26C8D4BDE2A4664DB058A81937 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:25:24.0320 1460 HTTP - ok
20:25:24.0351 1460 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
20:25:24.0351 1460 i2omp - ok
20:25:24.0413 1460 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
20:25:24.0413 1460 i8042prt - ok
20:25:24.0507 1460 [ C134E69CE901422D1F2D7EA8D69098FE ] ialm C:\Windows\system32\DRIVERS\igdkmd32.sys
20:25:24.0554 1460 ialm - ok
20:25:24.0601 1460 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
20:25:24.0616 1460 iaStorV - ok
20:25:24.0694 1460 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
20:25:24.0694 1460 IDriverT - ok
20:25:24.0772 1460 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:25:24.0803 1460 idsvc - ok
20:25:24.0881 1460 [ C134E69CE901422D1F2D7EA8D69098FE ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
20:25:24.0897 1460 igfx - ok
20:25:24.0928 1460 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
20:25:24.0928 1460 iirsp - ok
20:25:24.0975 1460 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
20:25:24.0991 1460 IKEEXT - ok
20:25:25.0069 1460 [ 389F5D4859F4300D52EAD838F1A17131 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
20:25:25.0115 1460 IntcAzAudAddService - ok
20:25:25.0147 1460 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
20:25:25.0162 1460 intelide - ok
20:25:25.0178 1460 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:25:25.0193 1460 intelppm - ok
20:25:25.0225 1460 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:25:25.0225 1460 IPBusEnum - ok
20:25:25.0256 1460 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:25:25.0256 1460 IpFilterDriver - ok
20:25:25.0303 1460 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:25:25.0303 1460 iphlpsvc - ok
20:25:25.0303 1460 IpInIp - ok
20:25:25.0334 1460 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
20:25:25.0334 1460 IPMIDRV - ok
20:25:25.0365 1460 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
20:25:25.0365 1460 IPNAT - ok
20:25:25.0412 1460 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:25:25.0412 1460 IRENUM - ok
20:25:25.0427 1460 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:25:25.0427 1460 isapnp - ok
20:25:25.0459 1460 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
20:25:25.0459 1460 iScsiPrt - ok
20:25:25.0474 1460 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
20:25:25.0552 1460 iteatapi - ok
20:25:25.0568 1460 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
20:25:25.0568 1460 iteraid - ok
20:25:25.0615 1460 jblhpiax - ok
20:25:25.0615 1460 JL2005 - ok
20:25:25.0661 1460 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
20:25:25.0661 1460 kbdclass - ok
20:25:25.0693 1460 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
20:25:25.0693 1460 kbdhid - ok
20:25:25.0724 1460 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
20:25:25.0739 1460 KeyIso - ok
20:25:25.0833 1460 [ 27277A11DB52FEFAE5B01DC8FB570B28 ] Kodak AiO Network Discovery Service C:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe
20:25:25.0864 1460 Kodak AiO Network Discovery Service - ok
20:25:25.0895 1460 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:25:25.0911 1460 KSecDD - ok
20:25:25.0958 1460 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
20:25:25.0973 1460 KtmRm - ok
20:25:26.0020 1460 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
20:25:26.0036 1460 LanmanServer - ok
20:25:26.0083 1460 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:25:26.0114 1460 LanmanWorkstation - ok
20:25:26.0161 1460 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:25:26.0161 1460 lltdsvc - ok
20:25:26.0192 1460 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:25:26.0192 1460 lmhosts - ok
20:25:26.0207 1460 LMIInfo - ok
20:25:26.0239 1460 [ 4477689E2D8AE6B78BA34C9AF4CC1ED1 ] lmimirr C:\Windows\system32\DRIVERS\lmimirr.sys
20:25:26.0239 1460 lmimirr - ok
20:25:26.0254 1460 LMIRfsClientNP - ok
20:25:26.0270 1460 [ 3FAA563DDF853320F90259D455A01D79 ] LMIRfsDriver C:\Windows\system32\drivers\LMIRfsDriver.sys
20:25:26.0270 1460 LMIRfsDriver - ok
20:25:26.0301 1460 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
20:25:26.0301 1460 LSI_FC - ok
20:25:26.0332 1460 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
20:25:26.0332 1460 LSI_SAS - ok
20:25:26.0379 1460 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
20:25:26.0379 1460 LSI_SCSI - ok
20:25:26.0410 1460 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
20:25:26.0410 1460 luafv - ok
20:25:26.0426 1460 lxba_device - ok
20:25:26.0457 1460 lxct_device - ok
20:25:26.0551 1460 [ 2261D7CC31D0309F6ED72923FF82DF50 ] lxdxCATSCustConnectService C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
20:25:26.0582 1460 lxdxCATSCustConnectService - ok
20:25:26.0597 1460 lxdx_device - ok
20:25:26.0613 1460 [ 0CEA2D0D3FA284B85ED5B68365114F76 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
20:25:26.0613 1460 mdmxsdk - ok
20:25:26.0644 1460 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
20:25:26.0644 1460 megasas - ok
20:25:26.0675 1460 [ 41FE2F288E05A6C8AB85DD56770FFBAD ] mferkdk C:\Windows\system32\drivers\mferkdk.sys
20:25:26.0675 1460 mferkdk - ok
20:25:26.0722 1460 [ 096B52EA918AA909BA5903D79E129005 ] mfesmfk C:\Windows\system32\drivers\mfesmfk.sys
20:25:26.0722 1460 mfesmfk - ok
20:25:26.0753 1460 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
20:25:26.0753 1460 MMCSS - ok
20:25:26.0785 1460 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
20:25:26.0800 1460 Modem - ok
20:25:26.0831 1460 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:25:26.0831 1460 monitor - ok
20:25:26.0863 1460 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
20:25:26.0863 1460 mouclass - ok
20:25:26.0878 1460 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:25:26.0894 1460 mouhid - ok
20:25:26.0925 1460 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
20:25:26.0925 1460 MountMgr - ok
20:25:26.0972 1460 [ 4427878B91743C24565BA2E32968920D ] Mp3Tube Toolbar Service C:\Program Files\Mp3Tube Toolbar\Mp3TubeSvc.exe
20:25:26.0987 1460 Mp3Tube Toolbar Service - ok
20:25:27.0019 1460 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
20:25:27.0019 1460 mpio - ok
20:25:27.0050 1460 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:25:27.0050 1460 mpsdrv - ok
20:25:27.0081 1460 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
20:25:27.0097 1460 MpsSvc - ok
20:25:27.0112 1460 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
20:25:27.0128 1460 Mraid35x - ok
20:25:27.0159 1460 MREMP50 - ok
20:25:27.0175 1460 MREMPR5 - ok
20:25:27.0175 1460 MRENDIS5 - ok
20:25:27.0190 1460 MRESP50 - ok
20:25:27.0221 1460 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:25:27.0237 1460 MRxDAV - ok
20:25:27.0268 1460 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:25:27.0268 1460 mrxsmb - ok
20:25:27.0299 1460 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:25:27.0315 1460 mrxsmb10 - ok
20:25:27.0331 1460 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:25:27.0331 1460 mrxsmb20 - ok
20:25:27.0346 1460 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
20:25:27.0362 1460 msahci - ok
20:25:27.0377 1460 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:25:27.0377 1460 msdsm - ok
20:25:27.0409 1460 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
20:25:27.0409 1460 MSDTC - ok
20:25:27.0471 1460 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:25:27.0471 1460 Msfs - ok
20:25:27.0518 1460 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:25:27.0518 1460 msisadrv - ok
20:25:27.0596 1460 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:25:27.0596 1460 MSiSCSI - ok
20:25:27.0596 1460 msiserver - ok
20:25:27.0674 1460 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:25:27.0674 1460 MSKSSRV - ok
20:25:27.0705 1460 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:25:27.0705 1460 MSPCLOCK - ok
20:25:27.0736 1460 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:25:27.0736 1460 MSPQM - ok
20:25:27.0783 1460 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:25:27.0783 1460 MsRPC - ok
20:25:27.0799 1460 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
20:25:27.0814 1460 mssmbios - ok
20:25:27.0830 1460 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:25:27.0830 1460 MSTEE - ok
20:25:27.0845 1460 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
20:25:27.0861 1460 Mup - ok
20:25:27.0908 1460 [ 48D50D679D28E5C4BF5A67664CC56B41 ] MyWebSearchService C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwssvc.exe
20:25:27.0908 1460 MyWebSearchService - ok
20:25:27.0955 1460 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
20:25:27.0970 1460 napagent - ok
20:25:28.0001 1460 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:25:28.0001 1460 NativeWifiP - ok
20:25:28.0033 1460 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:25:28.0048 1460 NDIS - ok
20:25:28.0095 1460 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:25:28.0095 1460 NdisTapi - ok
20:25:28.0126 1460 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:25:28.0126 1460 Ndisuio - ok
20:25:28.0157 1460 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:25:28.0157 1460 NdisWan - ok
20:25:28.0189 1460 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:25:28.0189 1460 NDProxy - ok
20:25:28.0220 1460 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:25:28.0220 1460 NetBIOS - ok
20:25:28.0251 1460 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
20:25:28.0282 1460 netbt - ok
20:25:28.0282 1460 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
20:25:28.0282 1460 Netlogon - ok
20:25:28.0329 1460 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
20:25:28.0345 1460 Netman - ok
20:25:28.0376 1460 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
20:25:28.0376 1460 netprofm - ok
20:25:28.0423 1460 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:25:28.0438 1460 NetTcpPortSharing - ok
20:25:28.0532 1460 [ 6E9EDC1020B319E7676387B8CDF2398C ] NETw2v32 C:\Windows\system32\DRIVERS\NETw2v32.sys
20:25:28.0610 1460 NETw2v32 - ok
20:25:28.0641 1460 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
20:25:28.0641 1460 nfrd960 - ok
20:25:28.0672 1460 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:25:28.0672 1460 NlaSvc - ok
20:25:28.0703 1460 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:25:28.0703 1460 Npfs - ok
20:25:28.0750 1460 npkcrypt - ok
20:25:28.0797 1460 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
20:25:28.0797 1460 nsi - ok
20:25:28.0813 1460 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:25:28.0813 1460 nsiproxy - ok
20:25:28.0875 1460 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:25:28.0906 1460 Ntfs - ok
20:25:28.0922 1460 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
20:25:28.0922 1460 ntrigdigi - ok
20:25:28.0953 1460 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
20:25:28.0953 1460 Null - ok
20:25:28.0984 1460 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:25:28.0984 1460 nvraid - ok
20:25:29.0000 1460 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:25:29.0015 1460 nvstor - ok
20:25:29.0047 1460 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:25:29.0047 1460 nv_agp - ok
20:25:29.0047 1460 NwlnkFlt - ok
20:25:29.0062 1460 NwlnkFwd - ok
20:25:29.0140 1460 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
20:25:29.0140 1460 odserv - ok
20:25:29.0187 1460 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
20:25:29.0187 1460 ohci1394 - ok
20:25:29.0218 1460 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:25:29.0218 1460 ose - ok
20:25:29.0265 1460 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
20:25:29.0281 1460 p2pimsvc - ok
20:25:29.0296 1460 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
20:25:29.0312 1460 p2psvc - ok
20:25:29.0343 1460 [ 8A79FDF04A73428597E2CAF9D0D67850 ] Parport C:\Windows\system32\DRIVERS\parport.sys
20:25:29.0343 1460 Parport - ok
20:25:29.0359 1460 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:25:29.0359 1460 partmgr - ok
20:25:29.0390 1460 [ 6C580025C81CAF3AE9E3617C22CAD00E ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
20:25:29.0390 1460 Parvdm - ok
20:25:29.0421 1460 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
20:25:29.0421 1460 PcaSvc - ok
20:25:29.0468 1460 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
20:25:29.0468 1460 pci - ok
20:25:29.0499 1460 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\DRIVERS\pciide.sys
20:25:29.0499 1460 pciide - ok
20:25:29.0546 1460 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
20:25:29.0546 1460 pcmcia - ok
20:25:29.0593 1460 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:25:29.0608 1460 PEAUTH - ok
20:25:29.0702 1460 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
20:25:29.0733 1460 pla - ok
20:25:29.0764 1460 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:25:29.0780 1460 PlugPlay - ok
20:25:29.0858 1460 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
20:25:29.0858 1460 PNRPAutoReg - ok
20:25:29.0889 1460 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
20:25:29.0905 1460 PNRPsvc - ok
20:25:29.0936 1460 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:25:29.0936 1460 PolicyAgent - ok
20:25:29.0967 1460 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:25:29.0967 1460 PptpMiniport - ok
20:25:29.0998 1460 [ 6135B976E16F80C1B1363BE882344785 ] PrismXL C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
20:25:29.0998 1460 PrismXL - ok
20:25:30.0029 1460 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
20:25:30.0029 1460 Processor - ok
20:25:30.0061 1460 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
20:25:30.0076 1460 ProfSvc - ok
20:25:30.0092 1460 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
20:25:30.0092 1460 ProtectedStorage - ok
20:25:30.0170 1460 [ 64E413BA0C529AA40C3924BBCC4153DB ] ProtexisLicensing C:\Windows\system32\PSIService.exe
20:25:30.0170 1460 ProtexisLicensing - ok
20:25:30.0217 1460 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
20:25:30.0248 1460 ql2300 - ok
20:25:30.0263 1460 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
20:25:30.0263 1460 ql40xx - ok
20:25:30.0295 1460 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
20:25:30.0310 1460 QWAVE - ok
20:25:30.0341 1460 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:25:30.0341 1460 QWAVEdrv - ok
20:25:30.0388 1460 [ 6394B4274DE7749D05E4385DCDD1EF2B ] radpms C:\Windows\system32\DRIVERS\radpms.sys
20:25:30.0388 1460 radpms - ok
20:25:30.0419 1460 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:25:30.0419 1460 RasAcd - ok
20:25:30.0451 1460 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
20:25:30.0451 1460 RasAuto - ok
20:25:30.0482 1460 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:25:30.0482 1460 Rasl2tp - ok
20:25:30.0544 1460 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
20:25:30.0560 1460 RasMan - ok
20:25:30.0591 1460 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:25:30.0591 1460 RasPppoe - ok
20:25:30.0622 1460 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:25:30.0638 1460 RasSstp - ok
20:25:30.0669 1460 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:25:30.0685 1460 rdbss - ok
20:25:30.0716 1460 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:25:30.0716 1460 RDPCDD - ok
20:25:30.0747 1460 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
20:25:30.0763 1460 rdpdr - ok
20:25:30.0778 1460 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:25:30.0778 1460 RDPENCDD - ok
20:25:30.0825 1460 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:25:30.0825 1460 RDPWD - ok
20:25:30.0872 1460 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:25:30.0872 1460 RemoteAccess - ok
20:25:30.0903 1460 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:25:30.0919 1460 RemoteRegistry - ok
20:25:30.0950 1460 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
20:25:30.0950 1460 RpcLocator - ok
20:25:30.0997 1460 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
20:25:30.0997 1460 RpcSs - ok
20:25:31.0028 1460 [ 959EF612D2CCFDB6D9E443F8E3655013 ] RTL8023xp C:\Windows\system32\DRIVERS\Rtnicxp.sys
20:25:31.0028 1460 RTL8023xp - ok
20:25:31.0043 1460 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
20:25:31.0043 1460 SamSs - ok
20:25:31.0075 1460 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:25:31.0075 1460 sbp2port - ok
20:25:31.0106 1460 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:25:31.0106 1460 SCardSvr - ok
20:25:31.0153 1460 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
20:25:31.0184 1460 Schedule - ok
20:25:31.0231 1460 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
20:25:31.0231 1460 SCPolicySvc - ok
20:25:31.0262 1460 [ 4339A2585708C7D9B0C0CE5AAD3DD6FF ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
20:25:31.0262 1460 sdbus - ok
20:25:31.0293 1460 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:25:31.0293 1460 SDRSVC - ok
20:25:31.0371 1460 [ 16A252022535B680046F6E34E136D378 ] SeaPort C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
20:25:31.0371 1460 SeaPort - ok
20:25:31.0387 1460 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:25:31.0402 1460 secdrv - ok
20:25:31.0418 1460 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
20:25:31.0418 1460 seclogon - ok
20:25:31.0465 1460 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
20:25:31.0465 1460 SENS - ok
20:25:31.0480 1460 [ CE9EC966638EF0B10B864DDEDF62A099 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:25:31.0480 1460 Serenum - ok
20:25:31.0527 1460 [ 6D663022DB3E7058907784AE14B69898 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:25:31.0527 1460 Serial - ok
20:25:31.0558 1460 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
20:25:31.0558 1460 sermouse - ok
20:25:31.0605 1460 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
20:25:31.0605 1460 SessionEnv - ok
20:25:31.0636 1460 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:25:31.0636 1460 sffdisk - ok
20:25:31.0652 1460 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:25:31.0652 1460 sffp_mmc - ok
20:25:31.0667 1460 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:25:31.0667 1460 sffp_sd - ok
20:25:31.0699 1460 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
20:25:31.0699 1460 sfloppy - ok
20:25:31.0730 1460 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:25:31.0730 1460 SharedAccess - ok
20:25:31.0777 1460 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:25:31.0777 1460 ShellHWDetection - ok
20:25:31.0808 1460 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys
20:25:31.0808 1460 sisagp - ok
20:25:31.0823 1460 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
20:25:31.0823 1460 SiSRaid2 - ok
20:25:31.0839 1460 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
20:25:31.0855 1460 SiSRaid4 - ok
20:25:31.0901 1460 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
20:25:31.0901 1460 SkypeUpdate - ok
20:25:32.0011 1460 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
20:25:32.0089 1460 slsvc - ok
20:25:32.0120 1460 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
20:25:32.0120 1460 SLUINotify - ok
20:25:32.0167 1460 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:25:32.0167 1460 Smb - ok
20:25:32.0213 1460 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:25:32.0213 1460 SNMPTRAP - ok
20:25:32.0260 1460 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
20:25:32.0260 1460 spldr - ok
20:25:32.0307 1460 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
20:25:32.0307 1460 Spooler - ok
20:25:32.0323 1460 SQTECH9080 - ok
20:25:32.0354 1460 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
20:25:32.0354 1460 srv - ok
20:25:32.0385 1460 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:25:32.0385 1460 srv2 - ok
20:25:32.0416 1460 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:25:32.0432 1460 srvnet - ok
20:25:32.0447 1460 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:25:32.0447 1460 SSDPSRV - ok
20:25:32.0494 1460 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:25:32.0510 1460 SstpSvc - ok
20:25:32.0557 1460 [ EF70B3D22B4BFFDA6EA851ECB063EFAA ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
20:25:32.0557 1460 StillCam - ok
20:25:32.0588 1460 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
20:25:32.0603 1460 stisvc - ok
20:25:32.0650 1460 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
20:25:32.0650 1460 swenum - ok
20:25:32.0681 1460 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
20:25:32.0681 1460 swprv - ok
20:25:32.0728 1460 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
20:25:32.0728 1460 Symc8xx - ok
20:25:32.0744 1460 SymIMMP - ok
20:25:32.0759 1460 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
20:25:32.0759 1460 Sym_hi - ok
20:25:32.0775 1460 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
20:25:32.0775 1460 Sym_u3 - ok
20:25:32.0822 1460 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
20:25:32.0837 1460 SysMain - ok
20:25:32.0884 1460 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:25:32.0884 1460 TabletInputService - ok
20:25:32.0915 1460 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
20:25:32.0931 1460 TapiSrv - ok
20:25:32.0962 1460 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
20:25:32.0962 1460 TBS - ok
20:25:33.0009 1460 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:25:33.0025 1460 Tcpip - ok
20:25:33.0056 1460 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
20:25:33.0071 1460 Tcpip6 - ok
20:25:33.0103 1460 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:25:33.0103 1460 tcpipreg - ok
20:25:33.0134 1460 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:25:33.0134 1460 TDPIPE - ok
20:25:33.0165 1460 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:25:33.0165 1460 TDTCP - ok
20:25:33.0196 1460 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:25:33.0196 1460 tdx - ok
20:25:33.0227 1460 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
20:25:33.0227 1460 TermDD - ok
20:25:33.0259 1460 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
20:25:33.0274 1460 TermService - ok
20:25:33.0290 1460 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
20:25:33.0305 1460 Themes - ok
20:25:33.0321 1460 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
20:25:33.0321 1460 THREADORDER - ok
20:25:33.0368 1460 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
20:25:33.0368 1460 TrkWks - ok
20:25:33.0399 1460 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:25:33.0415 1460 TrustedInstaller - ok
20:25:33.0446 1460 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:25:33.0446 1460 tssecsrv - ok
20:25:33.0493 1460 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
20:25:33.0493 1460 tunmp - ok
20:25:33.0539 1460 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:25:33.0539 1460 tunnel - ok
20:25:33.0571 1460 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
20:25:33.0586 1460 uagp35 - ok
20:25:33.0602 1460 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:25:33.0617 1460 udfs - ok
20:25:33.0664 1460 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:25:33.0664 1460 UI0Detect - ok
20:25:33.0680 1460 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:25:33.0695 1460 uliagpkx - ok
20:25:33.0727 1460 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
20:25:33.0727 1460 uliahci - ok
20:25:33.0742 1460 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
20:25:33.0758 1460 UlSata - ok
20:25:33.0773 1460 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
20:25:33.0773 1460 ulsata2 - ok
20:25:33.0805 1460 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
20:25:33.0805 1460 umbus - ok
20:25:33.0851 1460 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
20:25:33.0867 1460 upnphost - ok
20:25:33.0898 1460 USBAAPL - ok
20:25:33.0929 1460 [ 32DB9517628FF0D070682AAB61E688F0 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
20:25:33.0929 1460 usbaudio - ok
20:25:33.0945 1460 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:25:33.0945 1460 usbccgp - ok
20:25:33.0976 1460 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:25:33.0976 1460 usbcir - ok
20:25:34.0023 1460 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:25:34.0023 1460 usbehci - ok
20:25:34.0039 1460 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:25:34.0039 1460 usbhub - ok
20:25:34.0054 1460 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
20:25:34.0054 1460 usbohci - ok
20:25:34.0101 1460 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
20:25:34.0101 1460 usbprint - ok
20:25:34.0148 1460 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
20:25:34.0148 1460 usbscan - ok
20:25:34.0179 1460 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:25:34.0179 1460 USBSTOR - ok
20:25:34.0210 1460 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
20:25:34.0210 1460 usbuhci - ok
20:25:34.0241 1460 [ 830D5D8456B822C1247C1E59B4C464FA ] USB_RNDIS_VISTA C:\Windows\system32\DRIVERS\usb8023.sys
20:25:34.0241 1460 USB_RNDIS_VISTA - ok
20:25:34.0288 1460 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
20:25:34.0304 1460 UxSms - ok
20:25:34.0335 1460 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
20:25:34.0351 1460 vds - ok
20:25:34.0382 1460 [ 7D92BE0028ECDEDEC74617009084B5EF ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:25:34.0382 1460 vga - ok
20:25:34.0413 1460 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
20:25:34.0413 1460 VgaSave - ok
20:25:34.0444 1460 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
20:25:34.0444 1460 viaagp - ok
20:25:34.0491 1460 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
20:25:34.0491 1460 ViaC7 - ok
20:25:34.0507 1460 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys
20:25:34.0507 1460 viaide - ok
20:25:34.0553 1460 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:25:34.0553 1460 volmgr - ok
20:25:34.0600 1460 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:25:34.0600 1460 volmgrx - ok
20:25:34.0647 1460 [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:25:34.0647 1460 volsnap - ok
20:25:34.0678 1460 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
20:25:34.0678 1460 vsmraid - ok
20:25:34.0725 1460 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
20:25:34.0741 1460 VSS - ok
20:25:34.0772 1460 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
20:25:34.0772 1460 W32Time - ok
20:25:34.0803 1460 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
20:25:34.0803 1460 WacomPen - ok
20:25:34.0834 1460 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
20:25:34.0834 1460 Wanarp - ok
20:25:34.0834 1460 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:25:34.0834 1460 Wanarpv6 - ok
20:25:34.0865 1460 [ 0A716C08CB13C3A8F4F51E882DBF7416 ] wanatw C:\Windows\system32\DRIVERS\wanatw4.sys
20:25:34.0865 1460 wanatw - ok
20:25:34.0912 1460 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:25:34.0928 1460 wcncsvc - ok
20:25:34.0975 1460 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:25:34.0975 1460 WcsPlugInService - ok
20:25:34.0990 1460 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
20:25:34.0990 1460 Wd - ok
20:25:35.0037 1460 [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:25:35.0053 1460 Wdf01000 - ok
20:25:35.0084 1460 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:25:35.0084 1460 WdiServiceHost - ok
20:25:35.0099 1460 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:25:35.0099 1460 WdiSystemHost - ok
20:25:35.0146 1460 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
20:25:35.0146 1460 WebClient - ok
20:25:35.0209 1460 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:25:35.0224 1460 Wecsvc - ok
20:25:35.0255 1460 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:25:35.0255 1460 wercplsupport - ok
20:25:35.0287 1460 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
20:25:35.0287 1460 WerSvc - ok
20:25:35.0333 1460 [ CF27EDAC75C87F2B776D9218F02F8301 ] winachsf C:\Windows\system32\DRIVERS\HSX_CNXT.sys
20:25:35.0349 1460 winachsf - ok
20:25:35.0411 1460 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
20:25:35.0411 1460 WinDefend - ok
20:25:35.0427 1460 WinHttpAutoProxySvc - ok
20:25:35.0489 1460 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:25:35.0489 1460 Winmgmt - ok
20:25:35.0552 1460 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
20:25:35.0614 1460 WinRM - ok
20:25:35.0661 1460 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
20:25:35.0677 1460 Wlansvc - ok
20:25:35.0801 1460 [ 0A70F4022EC2E14C159EFC4F69AA2477 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:25:35.0833 1460 wlidsvc - ok
20:25:35.0864 1460 [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:25:35.0864 1460 WmiAcpi - ok
20:25:35.0895 1460 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:25:35.0911 1460 wmiApSrv - ok
20:25:35.0973 1460 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
20:25:35.0989 1460 WMPNetworkSvc - ok
20:25:36.0035 1460 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:25:36.0035 1460 WPCSvc - ok
20:25:36.0067 1460 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:25:36.0067 1460 WPDBusEnum - ok
20:25:36.0113 1460 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
20:25:36.0113 1460 WpdUsb - ok
20:25:36.0223 1460 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
20:25:36.0238 1460 WPFFontCache_v0400 - ok
20:25:36.0269 1460 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:25:36.0269 1460 ws2ifsl - ok
20:25:36.0301 1460 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll
20:25:36.0301 1460 wscsvc - ok
20:25:36.0316 1460 WSearch - ok
20:25:36.0394 1460 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
20:25:36.0441 1460 wuauserv - ok
20:25:36.0472 1460 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:25:36.0472 1460 WUDFRd - ok
20:25:36.0503 1460 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:25:36.0503 1460 wudfsvc - ok
20:25:36.0535 1460 [ 5A7FF9A18FF6D7E0527FE3ABF9204EF8 ] XAudio C:\Windows\system32\DRIVERS\xaudio.sys
20:25:36.0535 1460 XAudio - ok
20:25:36.0550 1460 [ 28DC5D626E036A75A572556F0A6EB1F6 ] XAudioService C:\Windows\system32\DRIVERS\xaudio.exe
20:25:36.0581 1460 XAudioService - ok
20:25:36.0628 1460 [ 7D1F3B131D503EF43EE594B5A2B9B427 ] yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys
20:25:36.0628 1460 yukonwlh - ok
20:25:36.0940 1460 ================ Scan global ===============================
20:25:36.0971 1460 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
20:25:37.0003 1460 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
20:25:37.0034 1460 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
20:25:37.0065 1460 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
20:25:37.0081 1460 [Global] - ok
20:25:37.0081 1460 ================ Scan MBR ==================================
20:25:37.0096 1460 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
20:25:37.0330 1460 \Device\Harddisk0\DR0 - ok
20:25:37.0330 1460 ================ Scan VBR ==================================
20:25:37.0330 1460 [ 96E925ED7109027A01DD44E871699BFC ] \Device\Harddisk0\DR0\Partition1
20:25:37.0330 1460 \Device\Harddisk0\DR0\Partition1 - ok
20:25:37.0346 1460 [ 10F5F00832D28F88ED0AD8BDA8752A83 ] \Device\Harddisk0\DR0\Partition2
20:25:37.0346 1460 \Device\Harddisk0\DR0\Partition2 - ok
20:25:37.0346 1460 ============================================================
20:25:37.0346 1460 Scan finished
20:25:37.0346 1460 ============================================================
20:25:37.0361 0624 Detected object count: 0
20:25:37.0361 0624 Actual detected object count: 0
20:26:14.0361 1908 ============================================================
20:26:14.0361 1908 Scan started
20:26:14.0361 1908 Mode: Manual; TDLFS;
20:26:14.0361 1908 ============================================================
20:26:14.0458 1908 ================ Scan system memory ========================
20:26:14.0458 1908 System memory - ok
20:26:14.0462 1908 ================ Scan services =============================
20:26:14.0610 1908 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
20:26:14.0612 1908 ACPI - ok
20:26:14.0668 1908 [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
20:26:14.0670 1908 AdobeFlashPlayerUpdateSvc - ok
20:26:14.0708 1908 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
20:26:14.0712 1908 adp94xx - ok
20:26:14.0745 1908 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
20:26:14.0747 1908 adpahci - ok
20:26:14.0767 1908 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
20:26:14.0768 1908 adpu160m - ok
20:26:14.0798 1908 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
20:26:14.0799 1908 adpu320 - ok
20:26:14.0835 1908 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:26:14.0836 1908 AeLookupSvc - ok
20:26:14.0860 1908 [ A7B8A3A79D35215D798A300DF49ED23F ] Afc C:\Windows\system32\drivers\Afc.sys
20:26:14.0861 1908 Afc - ok
20:26:14.0899 1908 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
20:26:14.0901 1908 AFD - ok
20:26:14.0926 1908 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:26:14.0927 1908 agp440 - ok
20:26:14.0947 1908 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
20:26:14.0948 1908 aic78xx - ok
20:26:14.0978 1908 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
20:26:14.0979 1908 ALG - ok
20:26:15.0001 1908 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
20:26:15.0001 1908 aliide - ok
20:26:15.0019 1908 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
20:26:15.0020 1908 amdagp - ok
20:26:15.0039 1908 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
20:26:15.0040 1908 amdide - ok
20:26:15.0064 1908 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
20:26:15.0065 1908 AmdK7 - ok
20:26:15.0086 1908 [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
20:26:15.0087 1908 AmdK8 - ok
20:26:15.0183 1908 [ 85180CF88C5EBAD73B452A43A004CA51 ] AOL ACS C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
20:26:15.0183 1908 AOL ACS - ok
20:26:15.0215 1908 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
20:26:15.0215 1908 Appinfo - ok
20:26:15.0243 1908 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
20:26:15.0244 1908 arc - ok
20:26:15.0264 1908 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
20:26:15.0265 1908 arcsas - ok
20:26:15.0300 1908 [ F5DC168BF77572D51BE28BA261B30CB4 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
20:26:15.0301 1908 aswFsBlk - ok
20:26:15.0330 1908 [ F76E51561562AC4105DBBE53FC99BC10 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
20:26:15.0331 1908 aswMonFlt - ok
20:26:15.0359 1908 [ B7D5E4486BA658ED08624D8084ABB830 ] aswRdr C:\Windows\system32\drivers\aswRdr.sys
20:26:15.0360 1908 aswRdr - ok
20:26:15.0394 1908 [ 30E45AF8B4D83176CA850FC9699E860B ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
20:26:15.0399 1908 aswSnx - ok
20:26:15.0427 1908 [ F04BDBCB965C05C51F4A7DE7B62063D6 ] aswSP C:\Windows\system32\drivers\aswSP.sys
20:26:15.0430 1908 aswSP - ok
20:26:15.0455 1908 [ DFE9152ABFA89BB8CFDC057409B2D4DA ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
20:26:15.0456 1908 aswTdi - ok
20:26:15.0487 1908 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:26:15.0488 1908 AsyncMac - ok
20:26:15.0521 1908 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
20:26:15.0522 1908 atapi - ok
20:26:15.0561 1908 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:26:15.0564 1908 AudioEndpointBuilder - ok
20:26:15.0586 1908 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
20:26:15.0589 1908 Audiosrv - ok
20:26:15.0647 1908 [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
20:26:15.0647 1908 avast! Antivirus - ok
20:26:15.0694 1908 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
20:26:15.0694 1908 Beep - ok
20:26:15.0731 1908 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
20:26:15.0733 1908 BFE - ok
20:26:15.0779 1908 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
20:26:15.0793 1908 BITS - ok
20:26:15.0803 1908 blbdrive - ok
20:26:15.0845 1908 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:26:15.0847 1908 bowser - ok
20:26:15.0883 1908 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
20:26:15.0883 1908 BrFiltLo - ok
20:26:15.0906 1908 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
20:26:15.0906 1908 BrFiltUp - ok
20:26:15.0943 1908 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
20:26:15.0944 1908 Browser - ok
20:26:15.0967 1908 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
20:26:15.0968 1908 Brserid - ok
20:26:15.0997 1908 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
20:26:15.0997 1908 BrSerWdm - ok
20:26:16.0018 1908 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
20:26:16.0019 1908 BrUsbMdm - ok
20:26:16.0037 1908 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
20:26:16.0038 1908 BrUsbSer - ok
20:26:16.0060 1908 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
20:26:16.0061 1908 BTHMODEM - ok
20:26:16.0102 1908 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:26:16.0103 1908 cdfs - ok
20:26:16.0137 1908 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:26:16.0138 1908 cdrom - ok
20:26:16.0178 1908 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
20:26:16.0179 1908 CertPropSvc - ok
20:26:16.0200 1908 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
20:26:16.0201 1908 circlass - ok
20:26:16.0230 1908 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
20:26:16.0232 1908 CLFS - ok
20:26:16.0275 1908 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:26:16.0276 1908 clr_optimization_v2.0.50727_32 - ok
20:26:16.0338 1908 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:26:16.0339 1908 clr_optimization_v4.0.30319_32 - ok
20:26:16.0365 1908 [ 0FED59EDB4A83FF17F1778827B88AB1A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
20:26:16.0366 1908 CmBatt - ok
20:26:16.0389 1908 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:26:16.0390 1908 cmdide - ok
20:26:16.0430 1908 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
20:26:16.0430 1908 Compbatt - ok
20:26:16.0448 1908 COMSysApp - ok
20:26:16.0466 1908 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
20:26:16.0474 1908 crcdisk - ok
20:26:16.0502 1908 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
20:26:16.0503 1908 Crusoe - ok
20:26:16.0552 1908 [ 75C6A297E364014840B48ECCD7525E30 ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:26:16.0553 1908 CryptSvc - ok
20:26:16.0604 1908 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:26:16.0610 1908 DcomLaunch - ok
20:26:16.0655 1908 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:26:16.0656 1908 DfsC - ok
20:26:16.0733 1908 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
20:26:16.0748 1908 DFSR - ok
20:26:16.0786 1908 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
20:26:16.0788 1908 Dhcp - ok
20:26:16.0821 1908 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
20:26:16.0821 1908 disk - ok
20:26:16.0857 1908 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:26:16.0859 1908 Dnscache - ok
20:26:16.0894 1908 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:26:16.0896 1908 dot3svc - ok
20:26:16.0935 1908 [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
20:26:16.0937 1908 Dot4 - ok
20:26:16.0961 1908 [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
20:26:16.0962 1908 Dot4Print - ok
20:26:16.0988 1908 [ C55004CA6B419B6695970DFE849B122F ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
20:26:16.0988 1908 dot4usb - ok
20:26:17.0019 1908 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
20:26:17.0020 1908 DPS - ok
20:26:17.0054 1908 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:26:17.0054 1908 drmkaud - ok
20:26:17.0103 1908 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:26:17.0108 1908 DXGKrnl - ok
20:26:17.0136 1908 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
20:26:17.0137 1908 E1G60 - ok
20:26:17.0167 1908 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
20:26:17.0168 1908 EapHost - ok
20:26:17.0217 1908 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
20:26:17.0218 1908 Ecache - ok
20:26:17.0253 1908 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
20:26:17.0256 1908 elxstor - ok
20:26:17.0323 1908 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
20:26:17.0329 1908 EMDMgmt - ok
20:26:17.0395 1908 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
20:26:17.0398 1908 EventSystem - ok
20:26:17.0443 1908 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
20:26:17.0444 1908 exfat - ok
20:26:17.0480 1908 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:26:17.0482 1908 fastfat - ok
20:26:17.0503 1908 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:26:17.0504 1908 fdc - ok
20:26:17.0533 1908 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
20:26:17.0534 1908 fdPHost - ok
20:26:17.0562 1908 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
20:26:17.0563 1908 FDResPub - ok
20:26:17.0597 1908 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:26:17.0598 1908 FileInfo - ok
20:26:17.0629 1908 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:26:17.0630 1908 Filetrace - ok
20:26:17.0651 1908 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:26:17.0652 1908 flpydisk - ok
20:26:17.0682 1908 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:26:17.0684 1908 FltMgr - ok
20:26:17.0736 1908 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
20:26:17.0742 1908 FontCache - ok
20:26:17.0784 1908 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
20:26:17.0784 1908 FontCache3.0.0.0 - ok
20:26:17.0811 1908 [ D909075FA72C090F27AA926C32CB4612 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
20:26:17.0812 1908 fssfltr - ok
20:26:17.0901 1908 [ 4CE9DAC1518FF7E77BD213E6394B9D77 ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
20:26:17.0912 1908 fsssvc - ok
20:26:17.0943 1908 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:26:17.0944 1908 Fs_Rec - ok
20:26:17.0974 1908 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
20:26:17.0975 1908 gagp30kx - ok
20:26:18.0034 1908 [ E53EE18A21C025DEABCFE0F72FC481BB ] GameConsoleService C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe
20:26:18.0036 1908 GameConsoleService - ok
20:26:18.0062 1908 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\Drivers\GEARAspiWDM.sys
20:26:18.0063 1908 GEARAspiWDM - ok
20:26:18.0104 1908 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
20:26:18.0109 1908 gpsvc - ok
20:26:18.0175 1908 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
20:26:18.0176 1908 gupdate - ok
20:26:18.0191 1908 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
20:26:18.0193 1908 gupdatem - ok
20:26:18.0252 1908 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
20:26:18.0254 1908 gusvc - ok
20:26:18.0286 1908 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:26:18.0288 1908 HdAudAddService - ok
20:26:18.0333 1908 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
20:26:18.0337 1908 HDAudBus - ok
20:26:18.0378 1908 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
20:26:18.0378 1908 HidBth - ok
20:26:18.0397 1908 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
20:26:18.0397 1908 HidIr - ok
20:26:18.0438 1908 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
20:26:18.0439 1908 hidserv - ok
20:26:18.0470 1908 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:26:18.0471 1908 HidUsb - ok
20:26:18.0505 1908 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:26:18.0507 1908 hkmsvc - ok
20:26:18.0523 1908 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
20:26:18.0524 1908 HpCISSs - ok
20:26:18.0585 1908 [ 9EFA5FEC26CEC696A66A891AC90B412D ] HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys
20:26:18.0599 1908 HSF_DPV - ok
20:26:18.0618 1908 [ A3077D9ED7FF612A033536A6009DBEA5 ] HSXHWBS2 C:\Windows\system32\DRIVERS\HSXHWBS2.sys
20:26:18.0620 1908 HSXHWBS2 - ok
20:26:18.0659 1908 [ 0EEECA26C8D4BDE2A4664DB058A81937 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:26:18.0663 1908 HTTP - ok
20:26:18.0681 1908 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
20:26:18.0682 1908 i2omp - ok
20:26:18.0709 1908 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
20:26:18.0710 1908 i8042prt - ok
20:26:18.0795 1908 [ C134E69CE901422D1F2D7EA8D69098FE ] ialm C:\Windows\system32\DRIVERS\igdkmd32.sys
20:26:18.0810 1908 ialm - ok
20:26:18.0833 1908 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
20:26:18.0835 1908 iaStorV - ok
20:26:18.0909 1908 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
20:26:18.0910 1908 IDriverT - ok
20:26:18.0976 1908 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:26:18.0983 1908 idsvc - ok
20:26:19.0050 1908 [ C134E69CE901422D1F2D7EA8D69098FE ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
20:26:19.0065 1908 igfx - ok
20:26:19.0095 1908 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
20:26:19.0095 1908 iirsp - ok
20:26:19.0131 1908 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
20:26:19.0136 1908 IKEEXT - ok
20:26:19.0211 1908 [ 389F5D4859F4300D52EAD838F1A17131 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
20:26:19.0225 1908 IntcAzAudAddService - ok
20:26:19.0248 1908 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
20:26:19.0248 1908 intelide - ok
20:26:19.0281 1908 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:26:19.0281 1908 intelppm - ok
20:26:19.0311 1908 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:26:19.0313 1908 IPBusEnum - ok
20:26:19.0339 1908 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:26:19.0340 1908 IpFilterDriver - ok
20:26:19.0381 1908 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:26:19.0383 1908 iphlpsvc - ok
20:26:19.0394 1908 IpInIp - ok
20:26:19.0433 1908 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
20:26:19.0434 1908 IPMIDRV - ok
20:26:19.0462 1908 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
20:26:19.0470 1908 IPNAT - ok
20:26:19.0507 1908 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:26:19.0508 1908 IRENUM - ok
20:26:19.0534 1908 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:26:19.0535 1908 isapnp - ok
20:26:19.0556 1908 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
20:26:19.0558 1908 iScsiPrt - ok
20:26:19.0593 1908 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
20:26:19.0593 1908 iteatapi - ok
20:26:19.0610 1908 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
20:26:19.0610 1908 iteraid - ok
20:26:19.0621 1908 jblhpiax - ok
20:26:19.0631 1908 JL2005 - ok
20:26:19.0667 1908 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
20:26:19.0668 1908 kbdclass - ok
20:26:19.0695 1908 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
20:26:19.0695 1908 kbdhid - ok
20:26:19.0732 1908 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
20:26:19.0734 1908 KeyIso - ok
20:26:19.0833 1908 [ 27277A11DB52FEFAE5B01DC8FB570B28 ] Kodak AiO Network Discovery Service C:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe
20:26:19.0837 1908 Kodak AiO Network Discovery Service - ok
20:26:19.0875 1908 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:26:19.0879 1908 KSecDD - ok
20:26:19.0925 1908 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
20:26:19.0929 1908 KtmRm - ok
20:26:19.0959 1908 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
20:26:19.0969 1908 LanmanServer - ok
20:26:20.0004 1908 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:26:20.0007 1908 LanmanWorkstation - ok
20:26:20.0043 1908 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:26:20.0046 1908 lltdsvc - ok
20:26:20.0073 1908 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:26:20.0075 1908 lmhosts - ok
20:26:20.0083 1908 LMIInfo - ok
20:26:20.0119 1908 [ 4477689E2D8AE6B78BA34C9AF4CC1ED1 ] lmimirr C:\Windows\system32\DRIVERS\lmimirr.sys
20:26:20.0119 1908 lmimirr - ok
20:26:20.0130 1908 LMIRfsClientNP - ok
20:26:20.0143 1908 [ 3FAA563DDF853320F90259D455A01D79 ] LMIRfsDriver C:\Windows\system32\drivers\LMIRfsDriver.sys
20:26:20.0144 1908 LMIRfsDriver - ok
20:26:20.0181 1908 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
20:26:20.0182 1908 LSI_FC - ok
20:26:20.0205 1908 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
20:26:20.0206 1908 LSI_SAS - ok
20:26:20.0233 1908 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
20:26:20.0234 1908 LSI_SCSI - ok
20:26:20.0255 1908 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
20:26:20.0256 1908 luafv - ok
20:26:20.0266 1908 lxba_device - ok
20:26:20.0283 1908 lxct_device - ok
20:26:20.0368 1908 [ 2261D7CC31D0309F6ED72923FF82DF50 ] lxdxCATSCustConnectService C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
20:26:20.0369 1908 lxdxCATSCustConnectService - ok
20:26:20.0380 1908 lxdx_device - ok
20:26:20.0405 1908 [ 0CEA2D0D3FA284B85ED5B68365114F76 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
20:26:20.0406 1908 mdmxsdk - ok
20:26:20.0424 1908 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
20:26:20.0425 1908 megasas - ok
20:26:20.0449 1908 [ 41FE2F288E05A6C8AB85DD56770FFBAD ] mferkdk C:\Windows\system32\drivers\mferkdk.sys
20:26:20.0450 1908 mferkdk - ok
20:26:20.0481 1908 [ 096B52EA918AA909BA5903D79E129005 ] mfesmfk C:\Windows\system32\drivers\mfesmfk.sys
20:26:20.0482 1908 mfesmfk - ok
20:26:20.0510 1908 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
20:26:20.0512 1908 MMCSS - ok
20:26:20.0544 1908 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
20:26:20.0544 1908 Modem - ok
20:26:20.0576 1908 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:26:20.0577 1908 monitor - ok
20:26:20.0619 1908 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
20:26:20.0620 1908 mouclass - ok
20:26:20.0638 1908 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:26:20.0639 1908 mouhid - ok
20:26:20.0678 1908 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
20:26:20.0679 1908 MountMgr - ok
20:26:20.0732 1908 [ 4427878B91743C24565BA2E32968920D ] Mp3Tube Toolbar Service C:\Program Files\Mp3Tube Toolbar\Mp3TubeSvc.exe
20:26:20.0734 1908 Mp3Tube Toolbar Service - ok
20:26:20.0761 1908 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
20:26:20.0762 1908 mpio - ok
20:26:20.0795 1908 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:26:20.0795 1908 mpsdrv - ok
20:26:20.0831 1908 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
20:26:20.0842 1908 MpsSvc - ok
20:26:20.0863 1908 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
20:26:20.0864 1908 Mraid35x - ok
20:26:20.0907 1908 MREMP50 - ok
20:26:20.0916 1908 MREMPR5 - ok
20:26:20.0925 1908 MRENDIS5 - ok
20:26:20.0934 1908 MRESP50 - ok
20:26:20.0966 1908 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:26:20.0967 1908 MRxDAV - ok
20:26:20.0997 1908 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:26:20.0998 1908 mrxsmb - ok
20:26:21.0032 1908 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:26:21.0034 1908 mrxsmb10 - ok
20:26:21.0050 1908 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:26:21.0052 1908 mrxsmb20 - ok
20:26:21.0072 1908 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
20:26:21.0073 1908 msahci - ok
20:26:21.0096 1908 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:26:21.0097 1908 msdsm - ok
20:26:21.0131 1908 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
20:26:21.0133 1908 MSDTC - ok
20:26:21.0178 1908 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:26:21.0178 1908 Msfs - ok
20:26:21.0207 1908 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:26:21.0208 1908 msisadrv - ok
20:26:21.0241 1908 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:26:21.0243 1908 MSiSCSI - ok
20:26:21.0253 1908 msiserver - ok
20:26:21.0287 1908 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:26:21.0288 1908 MSKSSRV - ok
20:26:21.0313 1908 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:26:21.0314 1908 MSPCLOCK - ok
20:26:21.0348 1908 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:26:21.0349 1908 MSPQM - ok
20:26:21.0381 1908 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC

here is the aswmbr log:

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-10-02 20:28:28
-----------------------------
20:28:28.822 OS Version: Windows 6.0.6002 Service Pack 2
20:28:28.822 Number of processors: 1 586 0x1601
20:28:28.823 ComputerName: ARVD24JKCT6 UserName: Victor
20:28:49.451 Initialize success
20:28:51.713 AVAST engine defs: 12100300
20:29:18.641 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4
20:29:18.641 Disk 0 Vendor: WDC_WD1600AAJS-22PSA0 05.06H05 Size: 152627MB BusType: 3
20:29:18.656 Disk 0 MBR read successfully
20:29:18.656 Disk 0 MBR scan
20:29:19.046 Disk 0 Windows VISTA default MBR code
20:29:19.062 Disk 0 Partition 1 00 07 HPFS/NTFS NTFS 10621 MB offset 63
20:29:19.499 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 142004 MB offset 21752010
20:29:19.592 Disk 0 scanning sectors +312576705
20:29:20.029 Disk 0 scanning C:\Windows\system32\drivers
20:29:33.710 Service scanning
20:29:52.839 Modules scanning
20:29:58.923 Disk 0 trace - called modules:
20:29:58.954 ntoskrnl.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys
20:29:59.469 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85fe9780]
20:29:59.469 3 CLASSPNP.SYS[883808b3] -> nt!IofCallDriver -> [0x8565d918]
20:29:59.485 5 acpi.sys[87e466bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-4[0x85663b98]
20:29:59.875 AVAST engine scan C:\Windows
20:30:02.652 AVAST engine scan C:\Windows\system32
20:32:39.201 AVAST engine scan C:\Windows\system32\drivers
20:32:51.219 AVAST engine scan C:\Users\Victor
20:47:46.122 Disk 0 MBR has been saved successfully to "C:\Users\Victor\Desktop\MBR.dat"
20:47:46.153 The log file has been saved successfully to "C:\Users\Victor\Desktop\aswMBR.txt"

#4 reactionjd

reactionjd
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:57 AM

Posted 02 October 2012 - 09:17 PM

Both of those didnt find anything but the eset is still going and it found 36 infected files so far. I will post that when it is done. Oh and all of this is running them in safe mode as i cannot do anything with windows regularly

Edited by reactionjd, 02 October 2012 - 09:18 PM.


#5 reactionjd

reactionjd
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:57 AM

Posted 02 October 2012 - 10:31 PM

here is the eset log and it removed infected to quarantine and i deleted quarantined files:

C:\Program Files\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}\chrome\scanquery.jar Win32/Adware.OneStep application deleted - quarantined
C:\Program Files\Mozilla Firefox\extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096}\chrome\questscan.jar Win32/Adware.OneStep application deleted - quarantined
C:\Program Files\MSN Messenger\riched20.dll Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL Win32/FunWeb application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3HISTSW.DLL Win32/FunWeb application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3HTTPCT.DLL Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3IMSTUB.DLL Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3REGHK.DLL Win32/Toolbar.MyWebSearch.G application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL Win32/FunWeb application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\Search Toolbar\SearchToolbar.dll Win32/Toolbar.Zugo application cleaned by deleting - quarantined
C:\Program Files\Windows Live\Messenger\msimg32.dll Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Program Files\Windows Live\Messenger\riched20.dll Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Users\bby288\AppData\Roaming\Mozilla\Firefox\Profiles\35ks0nkf.default\extensions\plugin@yontoo.com\content\overlay.js Win32/Adware.Yontoo application cleaned by deleting - quarantined
C:\Users\bby288\Downloads\GraboidVideoSetup-2.1-Complete (1).exe Win32/Graboid application cleaned by deleting - quarantined
C:\Users\bby288\Downloads\GraboidVideoSetup-2.1-Complete.exe Win32/Graboid application cleaned by deleting - quarantined
C:\Users\bby288\Downloads\PlayItAll-Setup (1).exe Win32/Toolbar.Zugo application cleaned by deleting - quarantined
C:\Users\bby288\Downloads\PlayItAll-Setup (2).exe Win32/Toolbar.Zugo application cleaned by deleting - quarantined
C:\Users\bby288\Downloads\PlayItAll-Setup (3).exe Win32/Toolbar.Zugo application cleaned by deleting - quarantined
C:\Users\bby288\Downloads\PlayItAll-Setup.exe Win32/Toolbar.Zugo application cleaned by deleting - quarantined
C:\Users\bby288\Downloads\YontooClientSetup (1).exe multiple threats cleaned by deleting - quarantined
C:\Users\bby288\Downloads\YontooClientSetup.exe multiple threats cleaned by deleting - quarantined
C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Default\aadddigbdggggggddjdagbdadedidddi\background.html Win32/BHO.OEI trojan cleaned by deleting - quarantined
C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Default\aadfdjgedigegedgdgdbgfgededgdgdc\background.html Win32/BHO.OEI trojan cleaned by deleting - quarantined
C:\Users\Victor\AppData\Local\Temp\irb700.exe a variant of Win32/Injector.XEB trojan cleaned by deleting - quarantined
C:\Users\Victor\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\63c80051-63b8cf7a multiple threats deleted - quarantined
C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\xs506mb2.default\extensions\bsndyyskhz@bsndyyskhz.org.xpi JS/Redirector.NCA trojan deleted - quarantined
C:\Users\Victor\Downloads\GraboidVideoSetup-3.31.exe Win32/Graboid application cleaned by deleting - quarantined
C:\Windows\System32\f3PSSavr.scr Win32/Toolbar.MyWebSearch application cleaned by deleting - quarantined
C:\Windows\Temp\TMP00000001484DF4B7DE26CCED Win32/Toolbar.Zugo application cleaned by deleting - quarantined

#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:10:57 AM

Posted 02 October 2012 - 10:35 PM

Reboot to normal mode

Download

Malwarebytes

Install,update and run a full scan

Click on Show results.Right click on the list ,select all and remove them.

Post the generated log here

Download

mini toolbox

Checkmark following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List restore points

Click Go and post the result.

Download

Farbar service scanner

Checkmark all the boxes

Click on "Scan".
Please copy and paste the log to your reply.

Download

adware cleaner

Launch it click on Delete

A log should be generated after scan ,post it here

Download

Junkware removal tool

For vista and windows 7 right click on the tool and select run as administrator

After scan gets completed,post the generated log here.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users