Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Problems with computer after removing infections identified by Malwarebytes


  • Please log in to reply
23 replies to this topic

#1 sanjayj

sanjayj

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 28 October 2012 - 07:51 PM

Hi,

I recently checked my computer for virus using Malwarebytes Antivirus and had it remove the infected files. Now my computer is not behaving like it should. So I am not sure if I got everything or not, or if the removal messed up some part of the Win 7 operating system.

1) I cannot run any .exe file from my account and have to run it as administrator by right clicking on it.
2) some exe files fail to install
3) I get error messages such as "No such interface supported" on several .exe files when I attempt to run them.

Thanks for any help you can provide.

sanjay.

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:07 PM

Posted 28 October 2012 - 07:52 PM

Can you post the screenshot of error message?

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here.If you get crashes in normal mode,run it in safemode with networking

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 28 October 2012 - 08:49 PM

Here is the TDSSkiller log.

20:55:18.0241 6656 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
20:55:18.0496 6656 ============================================================
20:55:18.0496 6656 Current date / time: 2012/10/28 20:55:18.0496
20:55:18.0496 6656 SystemInfo:
20:55:18.0496 6656
20:55:18.0496 6656 OS Version: 6.1.7601 ServicePack: 1.0
20:55:18.0496 6656 Product type: Workstation
20:55:18.0496 6656 ComputerName: JOSHI-01
20:55:18.0496 6656 UserName: Sanjay
20:55:18.0496 6656 Windows directory: C:\Windows
20:55:18.0497 6656 System windows directory: C:\Windows
20:55:18.0497 6656 Running under WOW64
20:55:18.0497 6656 Processor architecture: Intel x64
20:55:18.0497 6656 Number of processors: 4
20:55:18.0497 6656 Page size: 0x1000
20:55:18.0497 6656 Boot type: Normal boot
20:55:18.0497 6656 ============================================================
20:55:24.0150 6656 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0D00000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:55:24.0150 6656 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:55:24.0161 6656 Drive \Device\Harddisk2\DR2 - Size: 0xF4FC8000 (3.83 Gb), SectorSize: 0x200, Cylinders: 0x1F3, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
20:55:24.0175 6656 ============================================================
20:55:24.0175 6656 \Device\Harddisk0\DR0:
20:55:24.0175 6656 MBR partitions:
20:55:24.0175 6656 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74706000
20:55:24.0175 6656 \Device\Harddisk1\DR1:
20:55:24.0175 6656 MBR partitions:
20:55:24.0175 6656 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A383000
20:55:24.0175 6656 \Device\Harddisk2\DR2:
20:55:24.0177 6656 MBR partitions:
20:55:24.0177 6656 \Device\Harddisk2\DR2\Partition1: MBR, Type 0xB, StartLBA 0x3F, BlocksNum 0x7A0FC1
20:55:24.0177 6656 ============================================================
20:55:24.0195 6656 C: <-> \Device\Harddisk0\DR0\Partition1
20:55:24.0206 6656 D: <-> \Device\Harddisk1\DR1\Partition1
20:55:24.0207 6656 ============================================================
20:55:24.0207 6656 Initialize success
20:55:24.0207 6656 ============================================================
20:56:39.0021 1528 ============================================================
20:56:39.0021 1528 Scan started
20:56:39.0021 1528 Mode: Manual; TDLFS;
20:56:39.0021 1528 ============================================================
20:56:39.0691 1528 ================ Scan system memory ========================
20:56:39.0691 1528 System memory - ok
20:56:39.0692 1528 ================ Scan services =============================
20:56:39.0778 1528 [ 581D88B25C4D4121824FED2CA38E562F ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
20:56:39.0779 1528 !SASCORE - ok
20:56:39.0911 1528 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:56:39.0912 1528 1394ohci - ok
20:56:39.0943 1528 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:56:39.0961 1528 ACPI - ok
20:56:39.0987 1528 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:56:40.0011 1528 AcpiPmi - ok
20:56:40.0115 1528 [ F1F8520C5F43840C4082B520AA7F2D31 ] AcrSch2Svc C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
20:56:40.0124 1528 AcrSch2Svc - ok
20:56:40.0136 1528 [ D44BCAF639E4E45307C2BC80715273D5 ] adfs C:\Windows\system32\drivers\adfs.sys
20:56:40.0138 1528 adfs - ok
20:56:40.0213 1528 [ B1EA9681502EE57F87DB71D726288A5B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:56:40.0214 1528 AdobeARMservice - ok
20:56:40.0336 1528 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
20:56:40.0356 1528 AdobeFlashPlayerUpdateSvc - ok
20:56:40.0401 1528 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
20:56:40.0451 1528 adp94xx - ok
20:56:40.0483 1528 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
20:56:40.0524 1528 adpahci - ok
20:56:40.0544 1528 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
20:56:40.0557 1528 adpu320 - ok
20:56:40.0594 1528 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:56:40.0595 1528 AeLookupSvc - ok
20:56:40.0630 1528 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
20:56:40.0633 1528 AFD - ok
20:56:40.0648 1528 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:56:40.0649 1528 agp440 - ok
20:56:40.0681 1528 [ 44F360B65C37A42EB5B71C2E5179FDD5 ] aksdf C:\Windows\system32\DRIVERS\aksdf.sys
20:56:40.0683 1528 aksdf - ok
20:56:40.0733 1528 [ A56F1B0F967AEF8A82D7771E6D166DEF ] akshasp C:\Windows\system32\DRIVERS\akshasp.sys
20:56:40.0734 1528 akshasp - ok
20:56:40.0772 1528 [ B13237DDA02267B5D5B8A68780CB4817 ] aksusb C:\Windows\system32\DRIVERS\aksusb.sys
20:56:40.0786 1528 aksusb - ok
20:56:40.0819 1528 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
20:56:40.0821 1528 ALG - ok
20:56:40.0832 1528 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
20:56:40.0842 1528 aliide - ok
20:56:40.0856 1528 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
20:56:40.0870 1528 amdide - ok
20:56:40.0892 1528 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
20:56:40.0901 1528 AmdK8 - ok
20:56:40.0919 1528 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
20:56:40.0931 1528 AmdPPM - ok
20:56:40.0945 1528 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:56:40.0956 1528 amdsata - ok
20:56:40.0971 1528 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
20:56:40.0984 1528 amdsbs - ok
20:56:41.0021 1528 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:56:41.0021 1528 amdxata - ok
20:56:41.0089 1528 [ 59D01FA91962C9C1E9B4022B2D3B46DB ] AppHostSvc C:\Windows\system32\inetsrv\apphostsvc.dll
20:56:41.0090 1528 AppHostSvc - ok
20:56:41.0123 1528 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
20:56:41.0125 1528 AppID - ok
20:56:41.0136 1528 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:56:41.0144 1528 AppIDSvc - ok
20:56:41.0178 1528 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
20:56:41.0179 1528 Appinfo - ok
20:56:41.0261 1528 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
20:56:41.0262 1528 Apple Mobile Device - ok
20:56:41.0281 1528 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
20:56:41.0282 1528 AppMgmt - ok
20:56:41.0299 1528 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
20:56:41.0311 1528 arc - ok
20:56:41.0324 1528 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
20:56:41.0335 1528 arcsas - ok
20:56:41.0479 1528 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
20:56:41.0512 1528 aspnet_state - ok
20:56:41.0537 1528 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:56:41.0537 1528 AsyncMac - ok
20:56:41.0559 1528 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
20:56:41.0559 1528 atapi - ok
20:56:41.0610 1528 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:56:41.0627 1528 AudioEndpointBuilder - ok
20:56:41.0652 1528 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
20:56:41.0655 1528 AudioSrv - ok
20:56:41.0708 1528 [ 721409129AB3503B6C96404FE8D8CDF0 ] Automatic LiveUpdate Scheduler C:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe
20:56:41.0727 1528 Automatic LiveUpdate Scheduler - ok
20:56:41.0763 1528 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:56:41.0765 1528 AxInstSV - ok
20:56:41.0773 1528 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
20:56:41.0785 1528 b06bdrv - ok
20:56:41.0805 1528 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
20:56:41.0837 1528 b57nd60a - ok
20:56:41.0853 1528 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
20:56:41.0854 1528 BDESVC - ok
20:56:41.0870 1528 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
20:56:41.0871 1528 Beep - ok
20:56:41.0923 1528 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
20:56:41.0942 1528 BFE - ok
20:56:41.0961 1528 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
20:56:41.0978 1528 BITS - ok
20:56:41.0986 1528 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
20:56:41.0987 1528 blbdrive - ok
20:56:42.0043 1528 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
20:56:42.0045 1528 Bonjour Service - ok
20:56:42.0074 1528 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:56:42.0076 1528 bowser - ok
20:56:42.0089 1528 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:56:42.0096 1528 BrFiltLo - ok
20:56:42.0108 1528 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:56:42.0114 1528 BrFiltUp - ok
20:56:42.0146 1528 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
20:56:42.0148 1528 Browser - ok
20:56:42.0164 1528 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:56:42.0189 1528 Brserid - ok
20:56:42.0205 1528 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:56:42.0213 1528 BrSerWdm - ok
20:56:42.0224 1528 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:56:42.0231 1528 BrUsbMdm - ok
20:56:42.0245 1528 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:56:42.0251 1528 BrUsbSer - ok
20:56:42.0262 1528 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
20:56:42.0269 1528 BTHMODEM - ok
20:56:42.0289 1528 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
20:56:42.0289 1528 bthserv - ok
20:56:42.0317 1528 [ 399A7DF138D2110A3EB9BD64D6327F62 ] ccEvtMgr C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
20:56:42.0318 1528 ccEvtMgr - ok
20:56:42.0321 1528 [ 399A7DF138D2110A3EB9BD64D6327F62 ] ccSetMgr C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
20:56:42.0322 1528 ccSetMgr - ok
20:56:42.0335 1528 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:56:42.0343 1528 cdfs - ok
20:56:42.0362 1528 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:56:42.0363 1528 cdrom - ok
20:56:42.0397 1528 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
20:56:42.0398 1528 CertPropSvc - ok
20:56:42.0407 1528 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
20:56:42.0414 1528 circlass - ok
20:56:42.0448 1528 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
20:56:42.0463 1528 CLFS - ok
20:56:42.0497 1528 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:56:42.0498 1528 clr_optimization_v2.0.50727_32 - ok
20:56:42.0544 1528 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:56:42.0544 1528 clr_optimization_v2.0.50727_64 - ok
20:56:42.0596 1528 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:56:42.0634 1528 clr_optimization_v4.0.30319_32 - ok
20:56:42.0651 1528 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:56:42.0661 1528 clr_optimization_v4.0.30319_64 - ok
20:56:42.0675 1528 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
20:56:42.0681 1528 CmBatt - ok
20:56:42.0695 1528 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:56:42.0702 1528 cmdide - ok
20:56:42.0740 1528 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
20:56:42.0742 1528 CNG - ok
20:56:42.0768 1528 [ 2E1DFCD558B716323152B009B037CC42 ] COH_Mon C:\Windows\system32\Drivers\COH_Mon.sys
20:56:42.0776 1528 COH_Mon - ok
20:56:42.0787 1528 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
20:56:42.0794 1528 Compbatt - ok
20:56:42.0810 1528 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
20:56:42.0811 1528 CompositeBus - ok
20:56:42.0814 1528 COMSysApp - ok
20:56:42.0958 1528 [ A2E0A490F1F49ED6E3B83DB52679B036 ] CoordinatorServiceHost C:\Program Files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe
20:56:42.0967 1528 CoordinatorServiceHost - ok
20:56:42.0981 1528 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
20:56:42.0993 1528 crcdisk - ok
20:56:43.0046 1528 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:56:43.0048 1528 CryptSvc - ok
20:56:43.0084 1528 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
20:56:43.0106 1528 CSC - ok
20:56:43.0148 1528 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
20:56:43.0162 1528 CscService - ok
20:56:43.0205 1528 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:56:43.0227 1528 DcomLaunch - ok
20:56:43.0253 1528 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
20:56:43.0268 1528 defragsvc - ok
20:56:43.0297 1528 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:56:43.0299 1528 DfsC - ok
20:56:43.0324 1528 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
20:56:43.0334 1528 Dhcp - ok
20:56:43.0347 1528 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
20:56:43.0348 1528 discache - ok
20:56:43.0362 1528 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
20:56:43.0363 1528 Disk - ok
20:56:43.0393 1528 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:56:43.0403 1528 Dnscache - ok
20:56:43.0424 1528 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:56:43.0439 1528 dot3svc - ok
20:56:43.0464 1528 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
20:56:43.0466 1528 DPS - ok
20:56:43.0500 1528 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:56:43.0501 1528 drmkaud - ok
20:56:43.0538 1528 [ 3EEF0B3489EDBF725564E17C77CABAFD ] dsNcAdpt C:\Windows\system32\DRIVERS\dsNcAdpt.sys
20:56:43.0539 1528 dsNcAdpt - ok
20:56:43.0669 1528 [ 0E08704523EACACE8B2790114CC828AA ] dsNcService C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
20:56:43.0673 1528 dsNcService - ok
20:56:43.0698 1528 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:56:43.0703 1528 DXGKrnl - ok
20:56:43.0717 1528 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
20:56:43.0719 1528 EapHost - ok
20:56:43.0778 1528 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
20:56:43.0863 1528 ebdrv - ok
20:56:43.0906 1528 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
20:56:43.0934 1528 eeCtrl - ok
20:56:43.0961 1528 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
20:56:43.0962 1528 EFS - ok
20:56:44.0009 1528 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:56:44.0074 1528 ehRecvr - ok
20:56:44.0102 1528 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
20:56:44.0104 1528 ehSched - ok
20:56:44.0166 1528 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
20:56:44.0185 1528 elxstor - ok
20:56:44.0238 1528 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
20:56:44.0247 1528 EraserUtilRebootDrv - ok
20:56:44.0272 1528 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:56:44.0273 1528 ErrDev - ok
20:56:44.0313 1528 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
20:56:44.0334 1528 EventSystem - ok
20:56:44.0354 1528 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
20:56:44.0355 1528 exfat - ok
20:56:44.0369 1528 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:56:44.0370 1528 fastfat - ok
20:56:44.0402 1528 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
20:56:44.0406 1528 Fax - ok
20:56:44.0426 1528 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:56:44.0427 1528 fdc - ok
20:56:44.0438 1528 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
20:56:44.0439 1528 fdPHost - ok
20:56:44.0454 1528 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
20:56:44.0455 1528 FDResPub - ok
20:56:44.0468 1528 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:56:44.0469 1528 FileInfo - ok
20:56:44.0483 1528 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:56:44.0484 1528 Filetrace - ok
20:56:44.0487 1528 FLASHSYS - ok
20:56:44.0541 1528 [ 73081CF28F0AE20A52CA4F67CEE6E6B0 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
20:56:44.0563 1528 FLEXnet Licensing Service - ok
20:56:44.0666 1528 [ 5CEE6CD43AE5844C49300EA0B1E557EE ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
20:56:44.0717 1528 FLEXnet Licensing Service 64 - ok
20:56:44.0732 1528 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:56:44.0732 1528 flpydisk - ok
20:56:44.0765 1528 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:56:44.0767 1528 FltMgr - ok
20:56:44.0803 1528 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
20:56:44.0826 1528 FontCache - ok
20:56:44.0887 1528 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:56:44.0887 1528 FontCache3.0.0.0 - ok
20:56:44.0903 1528 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:56:44.0903 1528 FsDepends - ok
20:56:44.0930 1528 [ 6C06701BF1DB05405804D7EB610991CE ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
20:56:44.0938 1528 fssfltr - ok
20:56:45.0001 1528 [ 4CE9DAC1518FF7E77BD213E6394B9D77 ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
20:56:45.0035 1528 fsssvc - ok
20:56:45.0062 1528 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:56:45.0062 1528 Fs_Rec - ok
20:56:45.0079 1528 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:56:45.0080 1528 fvevol - ok
20:56:45.0103 1528 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
20:56:45.0111 1528 gagp30kx - ok
20:56:45.0140 1528 [ 6275303610285B57361F03A375062FBA ] gdrv C:\Windows\gdrv.sys
20:56:45.0147 1528 gdrv - ok
20:56:45.0168 1528 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:56:45.0169 1528 GEARAspiWDM - ok
20:56:45.0212 1528 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
20:56:45.0217 1528 gpsvc - ok
20:56:45.0252 1528 [ B9893A68032A6D9ADDB5B98287C630F7 ] grmnusb C:\Windows\system32\drivers\grmnusb.sys
20:56:45.0259 1528 grmnusb - ok
20:56:45.0338 1528 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:56:45.0342 1528 gupdate - ok
20:56:45.0350 1528 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:56:45.0351 1528 gupdatem - ok
20:56:45.0379 1528 [ 8126331FBD4ED29EB3B356F9C905064D ] GVTDrv64 C:\Windows\GVTDrv64.sys
20:56:45.0387 1528 GVTDrv64 - ok
20:56:45.0428 1528 [ D8BF3C594BD17A37960362E6C6739B90 ] Hardlock C:\Windows\system32\drivers\hardlock.sys
20:56:45.0452 1528 Hardlock - ok
20:56:45.0482 1528 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:56:45.0489 1528 hcw85cir - ok
20:56:45.0536 1528 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:56:45.0538 1528 HdAudAddService - ok
20:56:45.0570 1528 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
20:56:45.0571 1528 HDAudBus - ok
20:56:45.0581 1528 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
20:56:45.0587 1528 HidBatt - ok
20:56:45.0600 1528 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
20:56:45.0608 1528 HidBth - ok
20:56:45.0618 1528 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
20:56:45.0625 1528 HidIr - ok
20:56:45.0637 1528 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
20:56:45.0638 1528 hidserv - ok
20:56:45.0655 1528 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:56:45.0655 1528 HidUsb - ok
20:56:45.0685 1528 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:56:45.0687 1528 hkmsvc - ok
20:56:45.0704 1528 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:56:45.0706 1528 HomeGroupListener - ok
20:56:45.0740 1528 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:56:45.0742 1528 HomeGroupProvider - ok
20:56:45.0753 1528 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:56:45.0762 1528 HpSAMD - ok
20:56:45.0806 1528 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:56:45.0810 1528 HTTP - ok
20:56:45.0838 1528 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:56:45.0838 1528 hwpolicy - ok
20:56:45.0874 1528 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
20:56:45.0875 1528 i8042prt - ok
20:56:45.0899 1528 [ 7548066DF68A8A1A56B043359F915F37 ] IAANTMON C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
20:56:45.0902 1528 IAANTMON - ok
20:56:45.0922 1528 [ 1D004CB1DA6323B1F55CAEF7F94B61D9 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
20:56:45.0924 1528 iaStor - ok
20:56:45.0967 1528 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:56:45.0999 1528 iaStorV - ok
20:56:46.0071 1528 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
20:56:46.0083 1528 IDriverT - ok
20:56:46.0118 1528 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:56:46.0184 1528 idsvc - ok
20:56:46.0200 1528 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
20:56:46.0208 1528 iirsp - ok
20:56:46.0250 1528 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
20:56:46.0269 1528 IKEEXT - ok
20:56:46.0316 1528 [ 4A725CDDE1A0C3D1B1EACA0D9D0D95D0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
20:56:46.0349 1528 IntcAzAudAddService - ok
20:56:46.0373 1528 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
20:56:46.0384 1528 intelide - ok
20:56:46.0392 1528 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:56:46.0393 1528 intelppm - ok
20:56:46.0439 1528 [ 3DC635B66DD7412E1C9C3A77B8D78F25 ] IntuitUpdateService C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
20:56:46.0439 1528 IntuitUpdateService - ok
20:56:46.0465 1528 [ 1663A135865F0BA6E853353E98E67F2A ] IntuitUpdateServiceV4 C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
20:56:46.0466 1528 IntuitUpdateServiceV4 - ok
20:56:46.0503 1528 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:56:46.0504 1528 IPBusEnum - ok
20:56:46.0518 1528 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:56:46.0519 1528 IpFilterDriver - ok
20:56:46.0542 1528 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:56:46.0545 1528 iphlpsvc - ok
20:56:46.0561 1528 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:56:46.0569 1528 IPMIDRV - ok
20:56:46.0587 1528 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:56:46.0588 1528 IPNAT - ok
20:56:46.0646 1528 [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
20:56:46.0651 1528 iPod Service - ok
20:56:46.0666 1528 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:56:46.0667 1528 IRENUM - ok
20:56:46.0683 1528 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:56:46.0683 1528 isapnp - ok
20:56:46.0690 1528 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:56:46.0691 1528 iScsiPrt - ok
20:56:46.0707 1528 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
20:56:46.0708 1528 kbdclass - ok
20:56:46.0723 1528 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
20:56:46.0724 1528 kbdhid - ok
20:56:46.0735 1528 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
20:56:46.0736 1528 KeyIso - ok
20:56:46.0761 1528 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:56:46.0762 1528 KSecDD - ok
20:56:46.0802 1528 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:56:46.0803 1528 KSecPkg - ok
20:56:46.0815 1528 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
20:56:46.0815 1528 ksthunk - ok
20:56:46.0832 1528 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
20:56:46.0847 1528 KtmRm - ok
20:56:46.0863 1528 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
20:56:46.0865 1528 LanmanServer - ok
20:56:46.0903 1528 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:56:46.0917 1528 LanmanWorkstation - ok
20:56:47.0016 1528 [ 36375738DC0B3CD1F764268008E74FDF ] LiveUpdate C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
20:56:47.0033 1528 LiveUpdate - ok
20:56:47.0062 1528 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:56:47.0064 1528 lltdio - ok
20:56:47.0081 1528 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:56:47.0099 1528 lltdsvc - ok
20:56:47.0107 1528 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:56:47.0108 1528 lmhosts - ok
20:56:47.0131 1528 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
20:56:47.0139 1528 LSI_FC - ok
20:56:47.0159 1528 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
20:56:47.0168 1528 LSI_SAS - ok
20:56:47.0183 1528 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:56:47.0191 1528 LSI_SAS2 - ok
20:56:47.0203 1528 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:56:47.0212 1528 LSI_SCSI - ok
20:56:47.0241 1528 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
20:56:47.0242 1528 luafv - ok
20:56:47.0284 1528 [ 0C85B2B6FB74B36A251792D45E0EF860 ] LVRS64 C:\Windows\system32\DRIVERS\lvrs64.sys
20:56:47.0294 1528 LVRS64 - ok
20:56:47.0417 1528 [ FF3A488924B0032B1A9CA6948C1FA9E8 ] LVUVC64 C:\Windows\system32\DRIVERS\lvuvc64.sys
20:56:47.0494 1528 LVUVC64 - ok
20:56:47.0529 1528 [ 9CD90E6B7E335F7595C11526000382E3 ] mcamvusb C:\Windows\system32\DRIVERS\mcamvusb.sys
20:56:47.0530 1528 mcamvusb - ok
20:56:47.0561 1528 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:56:47.0563 1528 Mcx2Svc - ok
20:56:47.0630 1528 [ 7CF1B716372B89568AE4C0FE769F5869 ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
20:56:47.0632 1528 MDM - ok
20:56:47.0644 1528 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
20:56:47.0652 1528 megasas - ok
20:56:47.0666 1528 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
20:56:47.0697 1528 MegaSR - ok
20:56:47.0736 1528 Microsoft SharePoint Workspace Audit Service - ok
20:56:47.0755 1528 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
20:56:47.0756 1528 MMCSS - ok
20:56:47.0764 1528 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
20:56:47.0765 1528 Modem - ok
20:56:47.0784 1528 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:56:47.0784 1528 monitor - ok
20:56:47.0798 1528 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys
20:56:47.0799 1528 mouclass - ok
20:56:47.0814 1528 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:56:47.0829 1528 mouhid - ok
20:56:47.0856 1528 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:56:47.0857 1528 mountmgr - ok
20:56:47.0925 1528 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
20:56:47.0942 1528 MozillaMaintenance - ok
20:56:47.0952 1528 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
20:56:47.0954 1528 mpio - ok
20:56:47.0974 1528 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:56:47.0974 1528 mpsdrv - ok
20:56:48.0016 1528 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:56:48.0021 1528 MpsSvc - ok
20:56:48.0057 1528 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:56:48.0058 1528 MRxDAV - ok
20:56:48.0085 1528 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:56:48.0086 1528 mrxsmb - ok
20:56:48.0103 1528 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:56:48.0105 1528 mrxsmb10 - ok
20:56:48.0110 1528 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:56:48.0111 1528 mrxsmb20 - ok
20:56:48.0128 1528 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
20:56:48.0136 1528 msahci - ok
20:56:48.0149 1528 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:56:48.0150 1528 msdsm - ok
20:56:48.0170 1528 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
20:56:48.0178 1528 MSDTC - ok
20:56:48.0205 1528 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:56:48.0206 1528 Msfs - ok
20:56:48.0216 1528 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:56:48.0217 1528 mshidkmdf - ok
20:56:48.0227 1528 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:56:48.0227 1528 msisadrv - ok
20:56:48.0246 1528 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:56:48.0248 1528 MSiSCSI - ok
20:56:48.0251 1528 msiserver - ok
20:56:48.0272 1528 MSI_MSIBIOS_010507 - ok
20:56:48.0285 1528 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:56:48.0285 1528 MSKSSRV - ok
20:56:48.0308 1528 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:56:48.0309 1528 MSPCLOCK - ok
20:56:48.0315 1528 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:56:48.0316 1528 MSPQM - ok
20:56:48.0354 1528 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:56:48.0356 1528 MsRPC - ok
20:56:48.0369 1528 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
20:56:48.0370 1528 mssmbios - ok
20:56:48.0385 1528 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:56:48.0386 1528 MSTEE - ok
20:56:48.0399 1528 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
20:56:48.0407 1528 MTConfig - ok
20:56:48.0428 1528 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
20:56:48.0429 1528 Mup - ok
20:56:48.0482 1528 MySQL - ok
20:56:48.0512 1528 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
20:56:48.0516 1528 napagent - ok
20:56:48.0533 1528 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:56:48.0535 1528 NativeWifiP - ok
20:56:48.0636 1528 [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121027.007\ENG64.SYS
20:56:48.0638 1528 NAVENG - ok
20:56:48.0684 1528 [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15 C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121027.007\EX64.SYS
20:56:48.0708 1528 NAVEX15 - ok
20:56:48.0735 1528 [ 130B423AEE20EC478896B2031907F229 ] ncplelhp C:\Windows\system32\DRIVERS\ncplelhp.sys
20:56:48.0744 1528 ncplelhp - ok
20:56:48.0793 1528 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:56:48.0817 1528 NDIS - ok
20:56:48.0839 1528 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:56:48.0840 1528 NdisCap - ok
20:56:48.0853 1528 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:56:48.0854 1528 NdisTapi - ok
20:56:48.0882 1528 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:56:48.0884 1528 Ndisuio - ok
20:56:48.0919 1528 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:56:48.0926 1528 NdisWan - ok
20:56:48.0950 1528 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:56:48.0951 1528 NDProxy - ok
20:56:48.0966 1528 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:56:48.0967 1528 NetBIOS - ok
20:56:49.0002 1528 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:56:49.0012 1528 NetBT - ok
20:56:49.0018 1528 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
20:56:49.0020 1528 Netlogon - ok
20:56:49.0061 1528 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
20:56:49.0082 1528 Netman - ok
20:56:49.0128 1528 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:56:49.0130 1528 NetMsmqActivator - ok
20:56:49.0170 1528 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:56:49.0171 1528 NetPipeActivator - ok
20:56:49.0203 1528 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
20:56:49.0212 1528 netprofm - ok
20:56:49.0230 1528 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:56:49.0231 1528 NetTcpActivator - ok
20:56:49.0235 1528 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:56:49.0236 1528 NetTcpPortSharing - ok
20:56:49.0275 1528 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
20:56:49.0283 1528 nfrd960 - ok
20:56:49.0315 1528 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:56:49.0322 1528 NlaSvc - ok
20:56:49.0424 1528 [ B1EF4686961986DFFB7FE8F18E6FCB5B ] nlsX86cc C:\Windows\SysWOW64\nlssrv32.exe
20:56:49.0426 1528 nlsX86cc - ok
20:56:49.0445 1528 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:56:49.0446 1528 Npfs - ok
20:56:49.0452 1528 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
20:56:49.0453 1528 nsi - ok
20:56:49.0466 1528 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:56:49.0466 1528 nsiproxy - ok
20:56:49.0515 1528 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:56:49.0552 1528 Ntfs - ok
20:56:49.0556 1528 NTIOLib_1_0_4 - ok
20:56:49.0570 1528 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
20:56:49.0571 1528 Null - ok
20:56:49.0587 1528 [ 102806B360D0E6BC6E55BF47EF655D43 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
20:56:49.0593 1528 NVHDA - ok
20:56:49.0819 1528 [ BA0B4889C40380A01ECDF84C227A89C9 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
20:56:50.0023 1528 nvlddmkm - ok
20:56:50.0066 1528 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:56:50.0076 1528 nvraid - ok
20:56:50.0091 1528 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:56:50.0100 1528 nvstor - ok
20:56:50.0148 1528 [ 06633CF95BEA62164C3BFCA24BCE6B11 ] nvsvc C:\Windows\system32\nvvsvc.exe
20:56:50.0153 1528 nvsvc - ok
20:56:50.0216 1528 [ 53B629CE436B110C5689C2F6439E567B ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
20:56:50.0295 1528 nvUpdatusService - ok
20:56:50.0314 1528 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:56:50.0333 1528 nv_agp - ok
20:56:50.0347 1528 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:56:50.0347 1528 ohci1394 - ok
20:56:50.0391 1528 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:56:50.0421 1528 ose - ok
20:56:50.0544 1528 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:56:50.0569 1528 osppsvc - ok
20:56:50.0593 1528 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:56:50.0604 1528 p2pimsvc - ok
20:56:50.0636 1528 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
20:56:50.0657 1528 p2psvc - ok
20:56:50.0690 1528 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
20:56:50.0691 1528 Parport - ok
20:56:50.0724 1528 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:56:50.0726 1528 partmgr - ok
20:56:50.0735 1528 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:56:50.0738 1528 PcaSvc - ok
20:56:50.0748 1528 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
20:56:50.0749 1528 pci - ok
20:56:50.0760 1528 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
20:56:50.0760 1528 pciide - ok
20:56:50.0797 1528 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
20:56:50.0816 1528 pcmcia - ok
20:56:50.0834 1528 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
20:56:50.0835 1528 pcw - ok
20:56:50.0861 1528 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:56:50.0878 1528 PEAUTH - ok
20:56:50.0928 1528 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
20:56:50.0952 1528 PeerDistSvc - ok
20:56:50.0986 1528 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
20:56:50.0988 1528 PerfHost - ok
20:56:51.0041 1528 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
20:56:51.0074 1528 pla - ok
20:56:51.0106 1528 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:56:51.0121 1528 PlugPlay - ok
20:56:51.0133 1528 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:56:51.0135 1528 PNRPAutoReg - ok
20:56:51.0159 1528 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:56:51.0162 1528 PNRPsvc - ok
20:56:51.0190 1528 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:56:51.0193 1528 PolicyAgent - ok
20:56:51.0211 1528 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
20:56:51.0213 1528 Power - ok
20:56:51.0246 1528 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:56:51.0248 1528 PptpMiniport - ok
20:56:51.0256 1528 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
20:56:51.0263 1528 Processor - ok
20:56:51.0299 1528 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
20:56:51.0306 1528 ProfSvc - ok
20:56:51.0325 1528 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:56:51.0326 1528 ProtectedStorage - ok
20:56:51.0365 1528 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:56:51.0366 1528 Psched - ok
20:56:51.0398 1528 [ BC08F7F3C53CBEE68670ED1314E290FD ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
20:56:51.0399 1528 PxHlpa64 - ok
20:56:51.0434 1528 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
20:56:51.0494 1528 ql2300 - ok
20:56:51.0506 1528 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
20:56:51.0514 1528 ql40xx - ok
20:56:51.0534 1528 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
20:56:51.0544 1528 QWAVE - ok
20:56:51.0558 1528 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:56:51.0559 1528 QWAVEdrv - ok
20:56:51.0569 1528 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:56:51.0571 1528 RasAcd - ok
20:56:51.0615 1528 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:56:51.0616 1528 RasAgileVpn - ok
20:56:51.0625 1528 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
20:56:51.0628 1528 RasAuto - ok
20:56:51.0665 1528 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:56:51.0667 1528 Rasl2tp - ok
20:56:51.0702 1528 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
20:56:51.0710 1528 RasMan - ok
20:56:51.0724 1528 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:56:51.0726 1528 RasPppoe - ok
20:56:51.0739 1528 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:56:51.0740 1528 RasSstp - ok
20:56:51.0753 1528 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:56:51.0756 1528 rdbss - ok
20:56:51.0770 1528 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
20:56:51.0771 1528 rdpbus - ok
20:56:51.0775 1528 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:56:51.0775 1528 RDPCDD - ok
20:56:51.0806 1528 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
20:56:51.0808 1528 RDPDR - ok
20:56:51.0819 1528 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:56:51.0819 1528 RDPENCDD - ok
20:56:51.0830 1528 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:56:51.0830 1528 RDPREFMP - ok
20:56:51.0869 1528 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:56:51.0870 1528 RDPWD - ok
20:56:51.0893 1528 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:56:51.0900 1528 rdyboost - ok
20:56:52.0022 1528 [ 6713253B37D6DCFC442A286F1D7B5350 ] Remote Solver for Flow Simulation 2012 C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe
20:56:52.0031 1528 Remote Solver for Flow Simulation 2012 - ok
20:56:52.0047 1528 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:56:52.0050 1528 RemoteAccess - ok
20:56:52.0062 1528 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:56:52.0080 1528 RemoteRegistry - ok
20:56:52.0091 1528 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:56:52.0093 1528 RpcEptMapper - ok
20:56:52.0122 1528 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
20:56:52.0123 1528 RpcLocator - ok
20:56:52.0143 1528 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
20:56:52.0147 1528 RpcSs - ok
20:56:52.0162 1528 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:56:52.0164 1528 rspndr - ok
20:56:52.0193 1528 [ ABCB5A38A0D85BDF69B7877E1AD1EED5 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
20:56:52.0200 1528 RTL8167 - ok
20:56:52.0225 1528 [ D53C84EC99AB4D78A90001E5CE5386EC ] RTL8169 C:\Windows\system32\DRIVERS\Rtlh64.sys
20:56:52.0234 1528 RTL8169 - ok
20:56:52.0258 1528 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
20:56:52.0264 1528 s3cap - ok
20:56:52.0267 1528 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
20:56:52.0269 1528 SamSs - ok
20:56:52.0302 1528 [ 3289766038DB2CB14D07DC84392138D5 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
20:56:52.0303 1528 SASDIFSV - ok
20:56:52.0315 1528 [ 58A38E75F3316A83C23DF6173D41F2B5 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
20:56:52.0316 1528 SASKUTIL - ok
20:56:52.0334 1528 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:56:52.0343 1528 sbp2port - ok
20:56:52.0358 1528 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:56:52.0360 1528 SCardSvr - ok
20:56:52.0388 1528 [ 7FB7A7448D6D3609724C3E5BD7A90F8E ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
20:56:52.0390 1528 SCDEmu - ok
20:56:52.0415 1528 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:56:52.0416 1528 scfilter - ok
20:56:52.0440 1528 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
20:56:52.0447 1528 Schedule - ok
20:56:52.0463 1528 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:56:52.0464 1528 SCPolicySvc - ok
20:56:52.0476 1528 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:56:52.0478 1528 SDRSVC - ok
20:56:52.0544 1528 [ 16A252022535B680046F6E34E136D378 ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
20:56:52.0546 1528 SeaPort - ok
20:56:52.0566 1528 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:56:52.0567 1528 secdrv - ok
20:56:52.0579 1528 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
20:56:52.0581 1528 seclogon - ok
20:56:52.0594 1528 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
20:56:52.0595 1528 SENS - ok
20:56:52.0605 1528 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:56:52.0606 1528 SensrSvc - ok
20:56:52.0609 1528 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:56:52.0610 1528 Serenum - ok
20:56:52.0628 1528 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:56:52.0629 1528 Serial - ok
20:56:52.0642 1528 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
20:56:52.0642 1528 sermouse - ok
20:56:52.0678 1528 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
20:56:52.0680 1528 SessionEnv - ok
20:56:52.0695 1528 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:56:52.0696 1528 sffdisk - ok
20:56:52.0699 1528 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:56:52.0700 1528 sffp_mmc - ok
20:56:52.0710 1528 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:56:52.0711 1528 sffp_sd - ok
20:56:52.0728 1528 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
20:56:52.0735 1528 sfloppy - ok
20:56:52.0759 1528 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:56:52.0762 1528 SharedAccess - ok
20:56:52.0793 1528 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:56:52.0796 1528 ShellHWDetection - ok
20:56:52.0815 1528 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:56:52.0823 1528 SiSRaid2 - ok
20:56:52.0830 1528 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
20:56:52.0839 1528 SiSRaid4 - ok
20:56:52.0873 1528 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
20:56:53.0011 1528 SkypeUpdate - ok
20:56:53.0037 1528 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:56:53.0039 1528 Smb - ok
20:56:53.0104 1528 [ 4F7BFE128CBAA98966112A80628FA5FF ] SmcService C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
20:56:53.0122 1528 SmcService - ok
20:56:53.0156 1528 [ 51775446C5FFBDF10848F450301318EA ] SNAC C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE
20:56:53.0189 1528 SNAC - ok
20:56:53.0232 1528 [ 494B66CE489250CA957C94F904E00239 ] snapman C:\Windows\system32\DRIVERS\snapman.sys
20:56:53.0249 1528 snapman - ok
20:56:53.0263 1528 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:56:53.0265 1528 SNMPTRAP - ok
20:56:53.0315 1528 [ 4945020BC094C322571184A6E8056B3A ] SolidWorks Licensing Service C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
20:56:53.0325 1528 SolidWorks Licensing Service - ok
20:56:53.0341 1528 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
20:56:53.0342 1528 spldr - ok
20:56:53.0378 1528 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
20:56:53.0382 1528 Spooler - ok
20:56:53.0460 1528 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
20:56:53.0479 1528 sppsvc - ok
20:56:53.0492 1528 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:56:53.0493 1528 sppuinotify - ok
20:56:53.0523 1528 [ A6CFF1AF7664627A296B6A0A96CF876E ] sptd C:\Windows\System32\Drivers\sptd.sys
20:56:53.0524 1528 Suspicious file (NoAccess): C:\Windows\System32\Drivers\sptd.sys. md5: A6CFF1AF7664627A296B6A0A96CF876E
20:56:53.0525 1528 sptd ( LockedFile.Multi.Generic ) - warning
20:56:53.0525 1528 sptd - detected LockedFile.Multi.Generic (1)
20:56:53.0541 1528 [ C0691F43EA87761B67DF6384CFC30B8D ] SRTSP C:\Windows\system32\Drivers\SRTSP64.SYS
20:56:53.0557 1528 SRTSP - ok
20:56:53.0571 1528 [ B0304F6120848DB7D7709843E2294705 ] SRTSPL C:\Windows\system32\Drivers\SRTSPL64.SYS
20:56:53.0598 1528 SRTSPL - ok
20:56:53.0607 1528 [ 165FDE7386D792EFAC992EEA34D03BC1 ] SRTSPX C:\Windows\system32\Drivers\SRTSPX64.SYS
20:56:53.0608 1528 SRTSPX - ok
20:56:53.0626 1528 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
20:56:53.0628 1528 srv - ok
20:56:53.0636 1528 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:56:53.0639 1528 srv2 - ok
20:56:53.0653 1528 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:56:53.0654 1528 srvnet - ok
20:56:53.0672 1528 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:56:53.0674 1528 SSDPSRV - ok
20:56:53.0683 1528 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:56:53.0685 1528 SstpSvc - ok
20:56:53.0751 1528 [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
20:56:53.0753 1528 Stereo Service - ok
20:56:53.0762 1528 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
20:56:53.0775 1528 stexstor - ok
20:56:53.0804 1528 [ DECACB6921DED1A38642642685D77DAC ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
20:56:53.0805 1528 StillCam - ok
20:56:53.0843 1528 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
20:56:53.0847 1528 stisvc - ok
20:56:53.0865 1528 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
20:56:53.0866 1528 storflt - ok
20:56:53.0892 1528 [ C40841817EF57D491F22EB103DA587CC ] StorSvc C:\Windows\system32\storsvc.dll
20:56:53.0893 1528 StorSvc - ok
20:56:53.0920 1528 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
20:56:53.0943 1528 storvsc - ok
20:56:53.0955 1528 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
20:56:53.0955 1528 swenum - ok
20:56:54.0028 1528 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
20:56:54.0086 1528 SwitchBoard - ok
20:56:54.0106 1528 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
20:56:54.0109 1528 swprv - ok
20:56:54.0163 1528 [ 96900995907415FB4A8A18D97B3AA4A3 ] Symantec AntiVirus C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
20:56:54.0172 1528 Symantec AntiVirus - ok
20:56:54.0203 1528 [ D1F1A5E72E33D6BE449F5F1F4A513DD1 ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
20:56:54.0213 1528 SymEvent - ok
20:56:54.0246 1528 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
20:56:54.0256 1528 SysMain - ok
20:56:54.0292 1528 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:56:54.0294 1528 TabletInputService - ok
20:56:54.0308 1528 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
20:56:54.0311 1528 TapiSrv - ok
20:56:54.0326 1528 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
20:56:54.0328 1528 TBS - ok
20:56:54.0380 1528 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:56:54.0390 1528 Tcpip - ok
20:56:54.0452 1528 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:56:54.0462 1528 TCPIP6 - ok
20:56:54.0494 1528 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:56:54.0495 1528 tcpipreg - ok
20:56:54.0510 1528 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:56:54.0511 1528 TDPIPE - ok
20:56:54.0541 1528 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:56:54.0542 1528 TDTCP - ok
20:56:54.0554 1528 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:56:54.0555 1528 tdx - ok
20:56:54.0582 1528 [ 9856EB086557DC7E2287F81BE155B4B4 ] Teefer2 C:\Windows\system32\DRIVERS\teefer2.sys
20:56:54.0583 1528 Teefer2 - ok
20:56:54.0597 1528 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
20:56:54.0598 1528 TermDD - ok
20:56:54.0635 1528 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
20:56:54.0640 1528 TermService - ok
20:56:54.0654 1528 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
20:56:54.0656 1528 Themes - ok
20:56:54.0686 1528 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
20:56:54.0688 1528 THREADORDER - ok
20:56:54.0732 1528 [ FB4AE448F658FD45F9E2458E39B01B3C ] timounter C:\Windows\system32\DRIVERS\timntr.sys
20:56:54.0749 1528 timounter - ok
20:56:54.0758 1528 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
20:56:54.0760 1528 TrkWks - ok
20:56:54.0813 1528 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:56:54.0814 1528 TrustedInstaller - ok
20:56:54.0831 1528 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:56:54.0832 1528 tssecsrv - ok
20:56:54.0858 1528 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:56:54.0859 1528 TsUsbFlt - ok
20:56:54.0900 1528 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:56:54.0901 1528 tunnel - ok
20:56:54.0931 1528 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
20:56:54.0939 1528 uagp35 - ok
20:56:54.0974 1528 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:56:54.0976 1528 udfs - ok
20:56:54.0995 1528 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:56:54.0997 1528 UI0Detect - ok
20:56:55.0007 1528 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:56:55.0014 1528 uliagpkx - ok
20:56:55.0029 1528 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
20:56:55.0030 1528 umbus - ok
20:56:55.0048 1528 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
20:56:55.0054 1528 UmPass - ok
20:56:55.0068 1528 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
20:56:55.0070 1528 UmRdpService - ok
20:56:55.0122 1528 [ 67A95B9D129ED5399E7965CD09CF30E7 ] UMVPFSrv C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
20:56:55.0125 1528 UMVPFSrv - ok
20:56:55.0138 1528 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
20:56:55.0141 1528 upnphost - ok
20:56:55.0191 1528 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
20:56:55.0198 1528 USBAAPL64 - ok
20:56:55.0217 1528 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
20:56:55.0218 1528 usbaudio - ok
20:56:55.0247 1528 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:56:55.0247 1528 usbccgp - ok
20:56:55.0266 1528 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:56:55.0278 1528 usbcir - ok
20:56:55.0295 1528 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
20:56:55.0295 1528 usbehci - ok
20:56:55.0308 1528 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:56:55.0310 1528 usbhub - ok
20:56:55.0341 1528 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
20:56:55.0342 1528 usbohci - ok
20:56:55.0351 1528 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
20:56:55.0357 1528 usbprint - ok
20:56:55.0393 1528 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:56:55.0394 1528 USBSTOR - ok
20:56:55.0421 1528 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
20:56:55.0421 1528 usbuhci - ok
20:56:55.0432 1528 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
20:56:55.0434 1528 UxSms - ok
20:56:55.0442 1528 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
20:56:55.0443 1528 VaultSvc - ok
20:56:55.0454 1528 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:56:55.0455 1528 vdrvroot - ok
20:56:55.0492 1528 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
20:56:55.0496 1528 vds - ok
20:56:55.0512 1528 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:56:55.0519 1528 vga - ok
20:56:55.0530 1528 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
20:56:55.0530 1528 VgaSave - ok
20:56:55.0544 1528 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:56:55.0545 1528 vhdmp - ok
20:56:55.0568 1528 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
20:56:55.0575 1528 viaide - ok
20:56:55.0587 1528 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
20:56:55.0600 1528 vmbus - ok
20:56:55.0616 1528 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
20:56:55.0629 1528 VMBusHID - ok
20:56:55.0637 1528 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:56:55.0638 1528 volmgr - ok
20:56:55.0667 1528 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:56:55.0685 1528 volmgrx - ok
20:56:55.0701 1528 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:56:55.0703 1528 volsnap - ok
20:56:55.0723 1528 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
20:56:55.0733 1528 vsmraid - ok
20:56:55.0765 1528 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
20:56:55.0775 1528 VSS - ok
20:56:55.0784 1528 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
20:56:55.0785 1528 vwifibus - ok
20:56:55.0799 1528 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
20:56:55.0802 1528 W32Time - ok
20:56:55.0855 1528 [ B32009DB1972E7F2C227499289C4384A ] W3SVC C:\Windows\system32\inetsrv\iisw3adm.dll
20:56:55.0870 1528 W3SVC - ok
20:56:55.0884 1528 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
20:56:55.0895 1528 WacomPen - ok
20:56:55.0914 1528 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:56:55.0916 1528 WANARP - ok
20:56:55.0919 1528 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:56:55.0920 1528 Wanarpv6 - ok
20:56:55.0944 1528 [ B32009DB1972E7F2C227499289C4384A ] WAS C:\Windows\system32\inetsrv\iisw3adm.dll
20:56:55.0947 1528 WAS - ok
20:56:55.0991 1528 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
20:56:56.0023 1528 WatAdminSvc - ok
20:56:56.0052 1528 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
20:56:56.0096 1528 wbengine - ok
20:56:56.0110 1528 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:56:56.0112 1528 WbioSrvc - ok
20:56:56.0133 1528 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:56:56.0136 1528 wcncsvc - ok
20:56:56.0159 1528 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:56:56.0161 1528 WcsPlugInService - ok
20:56:56.0177 1528 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
20:56:56.0185 1528 Wd - ok
20:56:56.0201 1528 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys
20:56:56.0208 1528 WDC_SAM - ok
20:56:56.0224 1528 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:56:56.0227 1528 Wdf01000 - ok
20:56:56.0239 1528 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:56:56.0242 1528 WdiServiceHost - ok
20:56:56.0245 1528 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:56:56.0247 1528 WdiSystemHost - ok
20:56:56.0283 1528 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
20:56:56.0286 1528 WebClient - ok
20:56:56.0307 1528 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:56:56.0309 1528 Wecsvc - ok
20:56:56.0330 1528 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:56:56.0333 1528 wercplsupport - ok
20:56:56.0347 1528 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
20:56:56.0349 1528 WerSvc - ok
20:56:56.0362 1528 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:56:56.0362 1528 WfpLwf - ok
20:56:56.0376 1528 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:56:56.0377 1528 WIMMount - ok
20:56:56.0395 1528 WinDefend - ok
20:56:56.0414 1528 WinHttpAutoProxySvc - ok
20:56:56.0475 1528 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:56:56.0476 1528 Winmgmt - ok
20:56:56.0520 1528 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
20:56:56.0532 1528 WinRM - ok
20:56:56.0562 1528 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
20:56:56.0563 1528 WinUsb - ok
20:56:56.0589 1528 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
20:56:56.0595 1528 Wlansvc - ok
20:56:56.0695 1528 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:56:56.0708 1528 wlidsvc - ok
20:56:56.0727 1528 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:56:56.0728 1528 WmiAcpi - ok
20:56:56.0770 1528 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:56:56.0771 1528 wmiApSrv - ok
20:56:56.0782 1528 WMPNetworkSvc - ok
20:56:56.0792 1528 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:56:56.0794 1528 WPCSvc - ok
20:56:56.0825 1528 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:56:56.0827 1528 WPDBusEnum - ok
20:56:56.0842 1528 [ B8B1DE04C67489A5D0CBCB0CE2C3CD66 ] WPS C:\Windows\system32\drivers\wpsdrvnt.sys
20:56:56.0843 1528 WPS - ok
20:56:56.0861 1528 [ 49B9FA407586503D27D17DBDEAEAC970 ] WpsHelper C:\Windows\system32\drivers\WpsHelper.sys
20:56:56.0876 1528 WpsHelper - ok
20:56:56.0883 1528 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:56:56.0884 1528 ws2ifsl - ok
20:56:56.0894 1528 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
20:56:56.0896 1528 wscsvc - ok
20:56:56.0926 1528 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
20:56:56.0927 1528 WSDPrintDevice - ok
20:56:56.0930 1528 WSearch - ok
20:56:56.0992 1528 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
20:56:57.0006 1528 wuauserv - ok
20:56:57.0034 1528 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:56:57.0036 1528 WudfPf - ok
20:56:57.0055 1528 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:56:57.0061 1528 WUDFRd - ok
20:56:57.0075 1528 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:56:57.0077 1528 wudfsvc - ok
20:56:57.0098 1528 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
20:56:57.0101 1528 WwanSvc - ok
20:56:57.0172 1528 [ 3D47152CFBE400B1D2B9945164E0255D ] WysePocketCloud C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\PocketCloudService.exe
20:56:57.0174 1528 WysePocketCloud - ok
20:56:57.0188 1528 ================ Scan global ===============================
20:56:57.0227 1528 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
20:56:57.0262 1528 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
20:56:57.0269 1528 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
20:56:57.0285 1528 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
20:56:57.0317 1528 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
20:56:57.0319 1528 [Global] - ok
20:56:57.0320 1528 ================ Scan MBR ==================================
20:56:57.0328 1528 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
20:56:57.0565 1528 \Device\Harddisk0\DR0 - ok
20:56:57.0581 1528 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
20:56:57.0826 1528 \Device\Harddisk1\DR1 - ok
20:56:57.0832 1528 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR2
20:56:58.0104 1528 \Device\Harddisk2\DR2 - ok
20:56:58.0104 1528 ================ Scan VBR ==================================
20:56:58.0124 1528 [ 7BD92D0D856CDB021429A81749B5CBAE ] \Device\Harddisk0\DR0\Partition1
20:56:58.0125 1528 \Device\Harddisk0\DR0\Partition1 - ok
20:56:58.0128 1528 [ 8C1CF42319FB24C3ABE4FC35D04FABED ] \Device\Harddisk1\DR1\Partition1
20:56:58.0129 1528 \Device\Harddisk1\DR1\Partition1 - ok
20:56:58.0135 1528 [ DACAED06BA379F346DDEAB014A216648 ] \Device\Harddisk2\DR2\Partition1
20:56:58.0137 1528 \Device\Harddisk2\DR2\Partition1 - ok
20:56:58.0137 1528 ============================================================
20:56:58.0137 1528 Scan finished
20:56:58.0137 1528 ============================================================
20:56:58.0146 7116 Detected object count: 1
20:56:58.0147 7116 Actual detected object count: 1
20:57:27.0971 7116 C:\Windows\System32\Drivers\sptd.sys - copied to quarantine
20:57:27.0991 7116 sptd ( LockedFile.Multi.Generic ) - User select action: Quarantine
21:41:12.0254 6172 Deinitialize success

Here is the aswMBR log

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-10-28 20:58:34
-----------------------------
20:58:34.263 OS Version: Windows x64 6.1.7601 Service Pack 1
20:58:34.263 Number of processors: 4 586 0xF0B
20:58:34.264 ComputerName: JOSHI-01 UserName: Sanjay
20:58:37.471 Initialize success
20:59:29.050 AVAST engine defs: 12102801
20:59:49.935 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2
20:59:49.937 Disk 0 Vendor: Intel___ 1.0. Size: 953869MB BusType: 8
20:59:49.940 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IAAStorageDevice-1
20:59:49.943 Disk 1 Vendor: WDC_WD50 01.0 Size: 476940MB BusType: 8
20:59:49.946 Disk 2 \Device\Harddisk2\DR2 -> \Device\000000a3
20:59:49.950 Disk 2 Vendor: Size: 476940MB BusType: 0
20:59:49.970 Disk 0 MBR read successfully
20:59:49.974 Disk 0 MBR scan
20:59:49.981 Disk 0 Windows 7 default MBR code
20:59:49.985 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 953868 MB offset 2048
20:59:50.042 Disk 0 scanning C:\Windows\system32\drivers
21:00:01.640 Service scanning
21:00:31.563 Modules scanning
21:00:31.573 Disk 0 trace - called modules:
21:00:31.590 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys sptd.sys hal.dll
21:00:31.596 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8008543060]
21:00:31.602 3 CLASSPNP.SYS[fffff880017be43f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-2[0xfffffa800769b050]
21:00:35.457 AVAST engine scan C:\Windows
21:00:48.373 AVAST engine scan C:\Windows\system32
21:04:58.348 AVAST engine scan C:\Windows\system32\drivers
21:05:15.480 AVAST engine scan C:\Users\Sanjay
21:19:12.533 Disk 0 MBR has been saved successfully to "C:\MBR.dat"
21:19:12.543 The log file has been saved successfully to "C:\aswMBR.txt"

#4 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 28 October 2012 - 10:41 PM

Here is one example of the errors I am getting. To even upload this image, the only way I could do it is to start the FTP program with "run as administrator".

Posted Image

Edited by sanjayj, 28 October 2012 - 10:42 PM.


#5 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:07 PM

Posted 28 October 2012 - 10:55 PM

Download

System look

Launch it and copy this script
:reg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion

Click on LOOK,post the generated log

Copy malwarebytes to desktop.Reboot to normal mode and try to launch it.You will receive an error.Post the error here.

Edited by narenxp, 28 October 2012 - 11:09 PM.


#6 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 28 October 2012 - 11:05 PM

I cannot copy the log from look. I get the error message saying - "Your post was too long. Please go back and shorten it a little. "

#7 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:07 PM

Posted 28 October 2012 - 11:10 PM

Ok i dont need the entire thing.I have edited the SCRIPT CODE.Copy the new script and post the log.

#8 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 28 October 2012 - 11:11 PM

Copy malwarebytes to desktop.Reboot to normal mode and try to launch it.You will receive an error.Post the error here.


Here is what I get:

PROGRAM_ERROR_MISSING_FILE (2,0,mbam.dll)
The system cannot find the file specified.

#9 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 28 October 2012 - 11:12 PM

Here is the log from LOOK.

SystemLook 30.07.11 by jpshortstuff
Log created at 00:11 on 29/10/2012 by Sanjay
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== reg ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]
"SM_GamesName"="Games"
"SM_ConfigureProgramsName"="Set Program Access and Defaults"
"CommonFilesDir"="C:\Program Files (x86)\Common Files"
"CommonFilesDir (x86)"="C:\Program Files (x86)\Common Files"
"CommonW6432Dir"="C:\Program Files\Common Files"
"DevicePath"="%SystemRoot%\inf"
"MediaPathUnexpanded"="%SystemRoot%\Media"
"ProgramFilesDir"="C:\Program Files (x86)"
"ProgramFilesDir (x86)"="C:\Program Files (x86)"
"ProgramFilesPath"="%ProgramFiles(x86)%"
"ProgramW6432Dir"="C:\Program Files"
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Audio]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\EventCollector]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\EventForwarding]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Extensions]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Hints]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\HomeGroup]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\IME]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MSSHA]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Parental Controls]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PhotoPropertyHandler]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RenameFiles]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Sidebar]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\StructuredQuery]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Syncmgr]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SysPrepTapi]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ThemeManager]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\UserPictureChange]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WebCheck]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winevt]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wordpad]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WUSA]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\XWizards]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup]


-= EOF =-

#10 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:07 PM

Posted 29 October 2012 - 05:13 AM

Try to restore to previous point and let me know if that helps.

#11 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 29 October 2012 - 06:51 AM

I do not know how or why, but the System Restore is turned off.

#12 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 29 October 2012 - 08:08 AM

ESET scan results

C:\Users\Sanjay\Downloads\reginout_setup.exe multiple threats cleaned by deleting - quarantined
C:\Users\Sanjay\Downloads\Setup.exe a variant of Win32/Adware.iBryte.C application cleaned by deleting - quarantined
C:\Users\Sanjay\Downloads\vlcmediaplayer-setup.exe Win32/DownloadAdmin.A.Gen application cleaned by deleting - quarantined

#13 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:07 PM

Posted 29 October 2012 - 10:56 AM

Download

Windows repair tool

Extract and launch the Repair_Windows.exe file

Click on Start repairs tab-click on Start

check mark following options alone

Reset registry permissions
Reset file permissions
Register system files


Checkmark Restart System When Finished option
click the Start button

System should restart after repair

Let me know if that helps.

#14 sanjayj

sanjayj
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:07 PM

Posted 29 October 2012 - 03:47 PM

Did the windows repair.

No change.

#15 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:07 PM

Posted 29 October 2012 - 09:45 PM

Launch command prompt and run this command

FOR /R C:\ %G IN (*.dll) DO "%systemroot%\system32\regsvr32.exe" /s "%G"

You will receive errors,click ok and allow to run.After scan finishes restart the PC and try to launch the applications




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users