Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PUM.Hijack.StartMenu


  • Please log in to reply
5 replies to this topic

#1 a_tep23

a_tep23

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:02:34 PM

Posted 19 November 2012 - 11:36 PM

My little brother just got his laptop back from BestBuy after it stopped working for some reason. I opened up his laptop and updated Malwarebytes and ran a quick scan and found "PUM.Hijack.StartMenu." I really have no clue what this is. Should I just remove it or ignore it?

- Thank you. Alex T.

BC AdBot (Login to Remove)

 


#2 Sightless

Sightless

  • Members
  • 435 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Up in the Clouds
  • Local time:03:34 PM

Posted 19 November 2012 - 11:38 PM

Download TDSSkiller
  • Right Click it Run as Admin.
  • Click on Change parameters
  • Select TDLFS file system
  • Click the Scan button
  • Post the LOG In your next reply

    Do not change the default options on scan results


Some types of malware will disable MBAM and other security tools. If MBAM will not install, try renaming it.

  • Before saving any of your security programs, rename them first. For example, before you save Malwarebytes', rename it to something like MBblah.exe and then click on Save and save it to your desktop. Same thing after you install it. Before running it, rename the main executable file first

    Right-click on the mbam-setup.exe file and change the .exe extension to .bat, .com, .pif, or .scr and then double-click on it to run.

    If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files, right-click on mbam.exe and change the .exe as noted above. Then double-click on it to run..
  • Another work around is by not using the mouse to install it, Just use the arrow keys, tab, and enter keys.



Please download Malwarebytes Anti-Malware and save it to your desktop.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here or here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.
For a complete visual tutorial of MBAM, see http://thespykiller.co.uk/index.php/topic,5946.0.html

Please include the following in your reply:
MBAM log
TDSSKiller log

#3 a_tep23

a_tep23
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:02:34 PM

Posted 19 November 2012 - 11:56 PM

If the results are the "log", then this is what I see.
=========================================================
Duration: 00.00.24
Processed: 447 objects, details
Found: 0 threats
Neutralized: 0 threats
Quarantined: 0 objects
=========================================================
Disregard the top. Sorry I'm new to this. Here is the TDSSKiller log.
=========================================================
23:44:16.0234 3952 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
23:44:16.0534 3952 ============================================================
23:44:16.0534 3952 Current date / time: 2012/11/19 23:44:16.0534
23:44:16.0534 3952 SystemInfo:
23:44:16.0534 3952
23:44:16.0534 3952 OS Version: 6.1.7601 ServicePack: 1.0
23:44:16.0534 3952 Product type: Workstation
23:44:16.0534 3952 ComputerName: NICK-PC
23:44:16.0534 3952 UserName: Nick
23:44:16.0534 3952 Windows directory: C:\windows
23:44:16.0534 3952 System windows directory: C:\windows
23:44:16.0534 3952 Running under WOW64
23:44:16.0534 3952 Processor architecture: Intel x64
23:44:16.0534 3952 Number of processors: 1
23:44:16.0534 3952 Page size: 0x1000
23:44:16.0534 3952 Boot type: Normal boot
23:44:16.0534 3952 ============================================================
23:44:17.0204 3952 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:44:17.0204 3952 ============================================================
23:44:17.0204 3952 \Device\Harddisk0\DR0:
23:44:17.0204 3952 MBR partitions:
23:44:17.0204 3952 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x1BA79000
23:44:17.0204 3952 ============================================================
23:44:17.0234 3952 C: <-> \Device\Harddisk0\DR0\Partition1
23:44:17.0234 3952 ============================================================
23:44:17.0234 3952 Initialize success
23:44:17.0234 3952 ============================================================
23:44:58.0666 3856 ============================================================
23:44:58.0666 3856 Scan started
23:44:58.0666 3856 Mode: Manual; TDLFS;
23:44:58.0666 3856 ============================================================
23:44:59.0156 3856 ================ Scan system memory ========================
23:44:59.0156 3856 System memory - ok
23:44:59.0166 3856 ================ Scan services =============================
23:44:59.0446 3856 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys
23:44:59.0456 3856 1394ohci - ok
23:44:59.0536 3856 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys
23:44:59.0556 3856 ACPI - ok
23:44:59.0606 3856 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys
23:44:59.0616 3856 AcpiPmi - ok
23:44:59.0876 3856 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:44:59.0886 3856 AdobeFlashPlayerUpdateSvc - ok
23:44:59.0966 3856 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\DRIVERS\adp94xx.sys
23:44:59.0986 3856 adp94xx - ok
23:45:00.0026 3856 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\DRIVERS\adpahci.sys
23:45:00.0046 3856 adpahci - ok
23:45:00.0076 3856 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\DRIVERS\adpu320.sys
23:45:00.0106 3856 adpu320 - ok
23:45:00.0136 3856 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll
23:45:00.0146 3856 AeLookupSvc - ok
23:45:00.0236 3856 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys
23:45:00.0246 3856 AFD - ok
23:45:00.0296 3856 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys
23:45:00.0306 3856 agp440 - ok
23:45:00.0336 3856 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe
23:45:00.0346 3856 ALG - ok
23:45:00.0416 3856 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys
23:45:00.0436 3856 aliide - ok
23:45:00.0446 3856 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys
23:45:00.0456 3856 amdide - ok
23:45:00.0506 3856 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\DRIVERS\amdk8.sys
23:45:00.0516 3856 AmdK8 - ok
23:45:00.0556 3856 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\DRIVERS\amdppm.sys
23:45:00.0566 3856 AmdPPM - ok
23:45:00.0626 3856 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys
23:45:00.0636 3856 amdsata - ok
23:45:00.0656 3856 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\DRIVERS\amdsbs.sys
23:45:00.0676 3856 amdsbs - ok
23:45:00.0686 3856 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys
23:45:00.0696 3856 amdxata - ok
23:45:00.0866 3856 [ 1B7D1F0A0DFADBC797C16364792A7AA5 ] Amsp C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
23:45:00.0886 3856 Amsp - ok
23:45:00.0957 3856 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys
23:45:00.0997 3856 AppID - ok
23:45:01.0027 3856 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll
23:45:01.0047 3856 AppIDSvc - ok
23:45:01.0097 3856 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll
23:45:01.0107 3856 Appinfo - ok
23:45:01.0197 3856 [ D8E18021F91AD79CA8491CB5A5DA22D4 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:45:01.0197 3856 Apple Mobile Device - ok
23:45:01.0237 3856 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\DRIVERS\arc.sys
23:45:01.0247 3856 arc - ok
23:45:01.0257 3856 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\DRIVERS\arcsas.sys
23:45:01.0277 3856 arcsas - ok
23:45:01.0387 3856 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:45:01.0437 3856 aspnet_state - ok
23:45:01.0487 3856 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
23:45:01.0507 3856 AsyncMac - ok
23:45:01.0557 3856 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys
23:45:01.0567 3856 atapi - ok
23:45:01.0637 3856 [ D6CAD7E5B05055BB8226BDCB1644DA27 ] athr C:\windows\system32\DRIVERS\athrx.sys
23:45:01.0677 3856 athr - ok
23:45:01.0727 3856 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
23:45:01.0747 3856 AudioEndpointBuilder - ok
23:45:01.0767 3856 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll
23:45:01.0767 3856 AudioSrv - ok
23:45:01.0827 3856 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll
23:45:01.0837 3856 AxInstSV - ok
23:45:01.0887 3856 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\DRIVERS\bxvbda.sys
23:45:02.0097 3856 b06bdrv - ok
23:45:02.0137 3856 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys
23:45:02.0157 3856 b57nd60a - ok
23:45:02.0217 3856 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll
23:45:02.0227 3856 BDESVC - ok
23:45:02.0257 3856 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys
23:45:02.0267 3856 Beep - ok
23:45:02.0327 3856 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll
23:45:02.0347 3856 BFE - ok
23:45:02.0377 3856 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\System32\qmgr.dll
23:45:02.0407 3856 BITS - ok
23:45:02.0467 3856 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
23:45:02.0477 3856 blbdrive - ok
23:45:02.0547 3856 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
23:45:02.0557 3856 Bonjour Service - ok
23:45:02.0587 3856 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys
23:45:02.0617 3856 bowser - ok
23:45:02.0667 3856 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\DRIVERS\BrFiltLo.sys
23:45:02.0667 3856 BrFiltLo - ok
23:45:02.0687 3856 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\DRIVERS\BrFiltUp.sys
23:45:02.0697 3856 BrFiltUp - ok
23:45:02.0737 3856 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll
23:45:02.0747 3856 Browser - ok
23:45:02.0767 3856 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys
23:45:02.0787 3856 Brserid - ok
23:45:02.0847 3856 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
23:45:02.0857 3856 BrSerWdm - ok
23:45:02.0877 3856 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
23:45:02.0887 3856 BrUsbMdm - ok
23:45:02.0907 3856 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
23:45:02.0917 3856 BrUsbSer - ok
23:45:02.0947 3856 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\DRIVERS\bthmodem.sys
23:45:02.0967 3856 BTHMODEM - ok
23:45:03.0027 3856 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll
23:45:03.0037 3856 bthserv - ok
23:45:03.0057 3856 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
23:45:03.0067 3856 cdfs - ok
23:45:03.0147 3856 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
23:45:03.0157 3856 cdrom - ok
23:45:03.0217 3856 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll
23:45:03.0237 3856 CertPropSvc - ok
23:45:03.0287 3856 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\DRIVERS\circlass.sys
23:45:03.0297 3856 circlass - ok
23:45:03.0337 3856 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys
23:45:03.0347 3856 CLFS - ok
23:45:03.0407 3856 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:45:03.0407 3856 clr_optimization_v2.0.50727_32 - ok
23:45:03.0467 3856 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
23:45:03.0467 3856 clr_optimization_v2.0.50727_64 - ok
23:45:03.0547 3856 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:45:03.0547 3856 clr_optimization_v4.0.30319_32 - ok
23:45:03.0567 3856 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
23:45:03.0607 3856 clr_optimization_v4.0.30319_64 - ok
23:45:03.0647 3856 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
23:45:03.0657 3856 CmBatt - ok
23:45:03.0677 3856 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys
23:45:03.0697 3856 cmdide - ok
23:45:03.0737 3856 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\windows\system32\Drivers\cng.sys
23:45:03.0757 3856 CNG - ok
23:45:03.0827 3856 [ 25C58EE97BE0416A373E3E4F855206B5 ] CnxtHdAudService C:\windows\system32\drivers\CHDRT64.sys
23:45:03.0847 3856 CnxtHdAudService - ok
23:45:03.0887 3856 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\DRIVERS\compbatt.sys
23:45:03.0897 3856 Compbatt - ok
23:45:03.0928 3856 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\drivers\CompositeBus.sys
23:45:03.0938 3856 CompositeBus - ok
23:45:03.0958 3856 COMSysApp - ok
23:45:03.0988 3856 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\DRIVERS\crcdisk.sys
23:45:04.0008 3856 crcdisk - ok
23:45:04.0058 3856 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll
23:45:04.0078 3856 CryptSvc - ok
23:45:04.0228 3856 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
23:45:04.0248 3856 cvhsvc - ok
23:45:04.0298 3856 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll
23:45:04.0308 3856 DcomLaunch - ok
23:45:04.0348 3856 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll
23:45:04.0358 3856 defragsvc - ok
23:45:04.0418 3856 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys
23:45:04.0428 3856 DfsC - ok
23:45:04.0508 3856 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll
23:45:04.0528 3856 Dhcp - ok
23:45:04.0558 3856 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys
23:45:04.0558 3856 discache - ok
23:45:04.0578 3856 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\DRIVERS\disk.sys
23:45:04.0588 3856 Disk - ok
23:45:04.0648 3856 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll
23:45:04.0658 3856 Dnscache - ok
23:45:04.0698 3856 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll
23:45:04.0718 3856 dot3svc - ok
23:45:04.0758 3856 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll
23:45:04.0758 3856 DPS - ok
23:45:04.0808 3856 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
23:45:04.0828 3856 drmkaud - ok
23:45:04.0888 3856 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
23:45:04.0918 3856 DXGKrnl - ok
23:45:04.0949 3856 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll
23:45:04.0969 3856 EapHost - ok
23:45:05.0079 3856 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\DRIVERS\evbda.sys
23:45:05.0219 3856 ebdrv - ok
23:45:05.0259 3856 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe
23:45:05.0259 3856 EFS - ok
23:45:05.0349 3856 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe
23:45:05.0359 3856 ehRecvr - ok
23:45:05.0399 3856 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe
23:45:05.0409 3856 ehSched - ok
23:45:05.0449 3856 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\DRIVERS\elxstor.sys
23:45:05.0469 3856 elxstor - ok
23:45:05.0539 3856 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys
23:45:05.0549 3856 ErrDev - ok
23:45:05.0629 3856 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll
23:45:05.0629 3856 EventSystem - ok
23:45:05.0669 3856 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys
23:45:05.0689 3856 exfat - ok
23:45:05.0739 3856 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys
23:45:05.0759 3856 fastfat - ok
23:45:05.0809 3856 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe
23:45:05.0849 3856 Fax - ok
23:45:05.0889 3856 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\DRIVERS\fdc.sys
23:45:05.0899 3856 fdc - ok
23:45:05.0950 3856 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll
23:45:05.0960 3856 fdPHost - ok
23:45:05.0970 3856 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll
23:45:05.0980 3856 FDResPub - ok
23:45:06.0000 3856 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys
23:45:06.0010 3856 FileInfo - ok
23:45:06.0040 3856 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys
23:45:06.0070 3856 Filetrace - ok
23:45:06.0090 3856 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\DRIVERS\flpydisk.sys
23:45:06.0100 3856 flpydisk - ok
23:45:06.0160 3856 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
23:45:06.0170 3856 FltMgr - ok
23:45:06.0230 3856 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\windows\system32\FntCache.dll
23:45:06.0250 3856 FontCache - ok
23:45:06.0300 3856 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:45:06.0300 3856 FontCache3.0.0.0 - ok
23:45:06.0340 3856 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys
23:45:06.0360 3856 FsDepends - ok
23:45:06.0400 3856 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
23:45:06.0410 3856 Fs_Rec - ok
23:45:06.0480 3856 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
23:45:06.0490 3856 fvevol - ok
23:45:06.0520 3856 [ 60ACB128E64C35C2B4E4AAB1B0A5C293 ] FwLnk C:\windows\system32\DRIVERS\FwLnk.sys
23:45:06.0530 3856 FwLnk - ok
23:45:06.0560 3856 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\DRIVERS\gagp30kx.sys
23:45:06.0580 3856 gagp30kx - ok
23:45:06.0630 3856 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys
23:45:06.0640 3856 GEARAspiWDM - ok
23:45:06.0700 3856 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll
23:45:06.0720 3856 gpsvc - ok
23:45:06.0760 3856 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\windows\system32\DRIVERS\hamachi.sys
23:45:06.0790 3856 hamachi - ok
23:45:06.0970 3856 [ A5963114373834D78782013BC803043E ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
23:45:07.0030 3856 Hamachi2Svc - ok
23:45:07.0070 3856 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
23:45:07.0090 3856 hcw85cir - ok
23:45:07.0160 3856 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
23:45:07.0170 3856 HdAudAddService - ok
23:45:07.0200 3856 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\drivers\HDAudBus.sys
23:45:07.0210 3856 HDAudBus - ok
23:45:07.0250 3856 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\DRIVERS\HidBatt.sys
23:45:07.0270 3856 HidBatt - ok
23:45:07.0290 3856 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\DRIVERS\hidbth.sys
23:45:07.0310 3856 HidBth - ok
23:45:07.0330 3856 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\DRIVERS\hidir.sys
23:45:07.0350 3856 HidIr - ok
23:45:07.0370 3856 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\system32\hidserv.dll
23:45:07.0380 3856 hidserv - ok
23:45:07.0430 3856 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
23:45:07.0440 3856 HidUsb - ok
23:45:07.0490 3856 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll
23:45:07.0500 3856 hkmsvc - ok
23:45:07.0540 3856 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll
23:45:07.0560 3856 HomeGroupListener - ok
23:45:07.0610 3856 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll
23:45:07.0620 3856 HomeGroupProvider - ok
23:45:07.0660 3856 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys
23:45:07.0670 3856 HpSAMD - ok
23:45:07.0710 3856 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys
23:45:07.0720 3856 HTTP - ok
23:45:07.0760 3856 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
23:45:07.0760 3856 hwpolicy - ok
23:45:07.0820 3856 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\drivers\i8042prt.sys
23:45:07.0830 3856 i8042prt - ok
23:45:07.0870 3856 [ BBB3B6DF1ABB0FE35802EDE85CC1C011 ] iaStor C:\windows\system32\DRIVERS\iaStor.sys
23:45:07.0880 3856 iaStor - ok
23:45:07.0930 3856 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
23:45:07.0960 3856 iaStorV - ok
23:45:08.0020 3856 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
23:45:08.0030 3856 idsvc - ok
23:45:08.0330 3856 [ 898AB5BFED7040D7AB07AF01885EB944 ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys
23:45:08.0580 3856 igfx - ok
23:45:08.0630 3856 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\DRIVERS\iirsp.sys
23:45:08.0640 3856 iirsp - ok
23:45:08.0710 3856 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll
23:45:08.0740 3856 IKEEXT - ok
23:45:08.0780 3856 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys
23:45:08.0790 3856 intelide - ok
23:45:08.0840 3856 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
23:45:08.0860 3856 intelppm - ok
23:45:08.0910 3856 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll
23:45:08.0920 3856 IPBusEnum - ok
23:45:08.0960 3856 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
23:45:08.0970 3856 IpFilterDriver - ok
23:45:09.0020 3856 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\windows\System32\iphlpsvc.dll
23:45:09.0040 3856 iphlpsvc - ok
23:45:09.0070 3856 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys
23:45:09.0080 3856 IPMIDRV - ok
23:45:09.0120 3856 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys
23:45:09.0130 3856 IPNAT - ok
23:45:09.0190 3856 [ 3C0D4B3E80FC4854CA325DD123CC4DED ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
23:45:09.0200 3856 iPod Service - ok
23:45:09.0240 3856 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys
23:45:09.0250 3856 IRENUM - ok
23:45:09.0290 3856 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys
23:45:09.0300 3856 isapnp - ok
23:45:09.0330 3856 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys
23:45:09.0350 3856 iScsiPrt - ok
23:45:09.0390 3856 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
23:45:09.0400 3856 kbdclass - ok
23:45:09.0440 3856 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys
23:45:09.0450 3856 kbdhid - ok
23:45:09.0470 3856 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe
23:45:09.0470 3856 KeyIso - ok
23:45:09.0520 3856 [ E3CF421210EBDDACB4590AE67A0226DC ] KeyScrambler C:\windows\system32\drivers\keyscrambler.sys
23:45:09.0540 3856 KeyScrambler - ok
23:45:09.0570 3856 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
23:45:09.0610 3856 KSecDD - ok
23:45:09.0650 3856 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
23:45:09.0670 3856 KSecPkg - ok
23:45:09.0710 3856 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys
23:45:09.0720 3856 ksthunk - ok
23:45:09.0760 3856 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll
23:45:09.0780 3856 KtmRm - ok
23:45:09.0820 3856 [ 655A5D8E80869781CCE23760ADA7E695 ] L1C C:\windows\system32\DRIVERS\L1C62x64.sys
23:45:09.0830 3856 L1C - ok
23:45:09.0880 3856 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\system32\srvsvc.dll
23:45:09.0910 3856 LanmanServer - ok
23:45:09.0951 3856 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll
23:45:09.0961 3856 LanmanWorkstation - ok
23:45:10.0081 3856 [ 7772DFAB22611050B79504E671B06E6E ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
23:45:10.0081 3856 LBTServ - ok
23:45:10.0141 3856 [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt C:\windows\system32\DRIVERS\LHidFilt.Sys
23:45:10.0151 3856 LHidFilt - ok
23:45:10.0211 3856 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
23:45:10.0221 3856 lltdio - ok
23:45:10.0261 3856 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll
23:45:10.0281 3856 lltdsvc - ok
23:45:10.0301 3856 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll
23:45:10.0311 3856 lmhosts - ok
23:45:10.0411 3856 [ 7109163D8027076D2680CFC4E80E2A28 ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
23:45:10.0411 3856 LMIGuardianSvc - ok
23:45:10.0461 3856 [ 0317335B15FF3BDA8E10197E3434CFC0 ] LMIInfo C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys
23:45:10.0461 3856 LMIInfo - ok
23:45:10.0531 3856 [ 8054CE1FC8B417691960D00F931516A7 ] LMIMaint C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
23:45:10.0541 3856 LMIMaint - ok
23:45:10.0581 3856 [ 413ECDCFAD9A82804D3674C8D7EEC24E ] lmimirr C:\windows\system32\DRIVERS\lmimirr.sys
23:45:10.0591 3856 lmimirr - ok
23:45:10.0621 3856 LMIRfsClientNP - ok
23:45:10.0651 3856 [ C57D3FAA50E6F395759FFB7C709BD944 ] LMIRfsDriver C:\windows\system32\drivers\LMIRfsDriver.sys
23:45:10.0681 3856 LMIRfsDriver - ok
23:45:10.0721 3856 [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt C:\windows\system32\DRIVERS\LMouFilt.Sys
23:45:10.0731 3856 LMouFilt - ok
23:45:10.0791 3856 [ D3760BC17E1755091B7120CF32DBF56B ] LogMeIn C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
23:45:10.0801 3856 LogMeIn - ok
23:45:10.0861 3856 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\DRIVERS\lsi_fc.sys
23:45:10.0871 3856 LSI_FC - ok
23:45:10.0911 3856 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\DRIVERS\lsi_sas.sys
23:45:10.0921 3856 LSI_SAS - ok
23:45:10.0951 3856 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\DRIVERS\lsi_sas2.sys
23:45:10.0961 3856 LSI_SAS2 - ok
23:45:10.0991 3856 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\DRIVERS\lsi_scsi.sys
23:45:11.0001 3856 LSI_SCSI - ok
23:45:11.0031 3856 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys
23:45:11.0051 3856 luafv - ok
23:45:11.0101 3856 [ 0C85B2B6FB74B36A251792D45E0EF860 ] LVRS64 C:\windows\system32\DRIVERS\lvrs64.sys
23:45:11.0111 3856 LVRS64 - ok
23:45:11.0221 3856 [ E28381560A24B0E2CFD4F449AD8C37C1 ] McAfee SiteAdvisor Service c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe
23:45:11.0221 3856 McAfee SiteAdvisor Service - ok
23:45:11.0261 3856 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
23:45:11.0271 3856 Mcx2Svc - ok
23:45:11.0311 3856 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\DRIVERS\megasas.sys
23:45:11.0321 3856 megasas - ok
23:45:11.0351 3856 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\DRIVERS\MegaSR.sys
23:45:11.0371 3856 MegaSR - ok
23:45:11.0421 3856 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll
23:45:11.0431 3856 MMCSS - ok
23:45:11.0451 3856 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys
23:45:11.0461 3856 Modem - ok
23:45:11.0491 3856 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys
23:45:11.0501 3856 monitor - ok
23:45:11.0581 3856 [ 5FEC1FF5BB9A1FA5C9CF4544D19D6D5D ] MotioninJoyXFilter C:\windows\system32\DRIVERS\MijXfilt.sys
23:45:11.0591 3856 MotioninJoyXFilter - ok
23:45:11.0631 3856 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
23:45:11.0641 3856 mouclass - ok
23:45:11.0691 3856 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
23:45:11.0701 3856 mouhid - ok
23:45:11.0741 3856 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys
23:45:11.0741 3856 mountmgr - ok
23:45:11.0891 3856 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
23:45:11.0901 3856 MozillaMaintenance - ok
23:45:11.0941 3856 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys
23:45:11.0951 3856 mpio - ok
23:45:12.0001 3856 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
23:45:12.0011 3856 mpsdrv - ok
23:45:12.0061 3856 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll
23:45:12.0091 3856 MpsSvc - ok
23:45:12.0131 3856 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
23:45:12.0141 3856 MRxDAV - ok
23:45:12.0181 3856 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
23:45:12.0211 3856 mrxsmb - ok
23:45:12.0261 3856 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
23:45:12.0281 3856 mrxsmb10 - ok
23:45:12.0321 3856 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
23:45:12.0331 3856 mrxsmb20 - ok
23:45:12.0361 3856 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys
23:45:12.0381 3856 msahci - ok
23:45:12.0431 3856 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys
23:45:12.0441 3856 msdsm - ok
23:45:12.0461 3856 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe
23:45:12.0481 3856 MSDTC - ok
23:45:12.0521 3856 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys
23:45:12.0531 3856 Msfs - ok
23:45:12.0581 3856 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
23:45:12.0591 3856 mshidkmdf - ok
23:45:12.0621 3856 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys
23:45:12.0631 3856 msisadrv - ok
23:45:12.0671 3856 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll
23:45:12.0701 3856 MSiSCSI - ok
23:45:12.0711 3856 msiserver - ok
23:45:12.0771 3856 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
23:45:12.0771 3856 MSKSSRV - ok
23:45:12.0801 3856 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
23:45:12.0811 3856 MSPCLOCK - ok
23:45:12.0831 3856 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys
23:45:12.0841 3856 MSPQM - ok
23:45:12.0881 3856 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys
23:45:12.0901 3856 MsRPC - ok
23:45:12.0951 3856 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\drivers\mssmbios.sys
23:45:12.0961 3856 mssmbios - ok
23:45:13.0001 3856 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys
23:45:13.0011 3856 MSTEE - ok
23:45:13.0041 3856 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\DRIVERS\MTConfig.sys
23:45:13.0051 3856 MTConfig - ok
23:45:13.0071 3856 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys
23:45:13.0081 3856 Mup - ok
23:45:13.0121 3856 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll
23:45:13.0141 3856 napagent - ok
23:45:13.0191 3856 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
23:45:13.0211 3856 NativeWifiP - ok
23:45:13.0271 3856 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys
23:45:13.0281 3856 NDIS - ok
23:45:13.0321 3856 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
23:45:13.0331 3856 NdisCap - ok
23:45:13.0371 3856 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
23:45:13.0381 3856 NdisTapi - ok
23:45:13.0431 3856 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
23:45:13.0451 3856 Ndisuio - ok
23:45:13.0481 3856 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
23:45:13.0501 3856 NdisWan - ok
23:45:13.0531 3856 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
23:45:13.0551 3856 NDProxy - ok
23:45:13.0611 3856 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
23:45:13.0621 3856 NetBIOS - ok
23:45:13.0651 3856 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys
23:45:13.0651 3856 NetBT - ok
23:45:13.0671 3856 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe
23:45:13.0671 3856 Netlogon - ok
23:45:13.0741 3856 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll
23:45:13.0751 3856 Netman - ok
23:45:13.0791 3856 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:13.0801 3856 NetMsmqActivator - ok
23:45:13.0811 3856 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:13.0811 3856 NetPipeActivator - ok
23:45:13.0831 3856 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll
23:45:13.0841 3856 netprofm - ok
23:45:13.0851 3856 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:13.0861 3856 NetTcpActivator - ok
23:45:13.0871 3856 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:45:13.0871 3856 NetTcpPortSharing - ok
23:45:13.0931 3856 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\DRIVERS\nfrd960.sys
23:45:13.0941 3856 nfrd960 - ok
23:45:14.0001 3856 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\windows\System32\nlasvc.dll
23:45:14.0011 3856 NlaSvc - ok
23:45:14.0031 3856 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys
23:45:14.0051 3856 Npfs - ok
23:45:14.0081 3856 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll
23:45:14.0091 3856 nsi - ok
23:45:14.0111 3856 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
23:45:14.0111 3856 nsiproxy - ok
23:45:14.0181 3856 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
23:45:14.0221 3856 Ntfs - ok
23:45:14.0271 3856 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys
23:45:14.0291 3856 Null - ok
23:45:14.0311 3856 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys
23:45:14.0331 3856 nvraid - ok
23:45:14.0371 3856 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys
23:45:14.0381 3856 nvstor - ok
23:45:14.0421 3856 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys
23:45:14.0431 3856 nv_agp - ok
23:45:14.0571 3856 [ 71C97F97A909A990C7F60C77908BAFF9 ] OfficeSvc C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
23:45:14.0581 3856 OfficeSvc - ok
23:45:14.0641 3856 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys
23:45:14.0661 3856 ohci1394 - ok
23:45:14.0761 3856 [ FF93D67903FDEABCD4470CD82F44ACFA ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:45:14.0761 3856 ose - ok
23:45:14.0921 3856 [ 31DC8D825D2C4EB0FF7ED021BB92C541 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:45:15.0032 3856 osppsvc - ok
23:45:15.0072 3856 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll
23:45:15.0092 3856 p2pimsvc - ok
23:45:15.0122 3856 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll
23:45:15.0162 3856 p2psvc - ok
23:45:15.0222 3856 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\DRIVERS\parport.sys
23:45:15.0232 3856 Parport - ok
23:45:15.0282 3856 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys
23:45:15.0292 3856 partmgr - ok
23:45:15.0322 3856 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll
23:45:15.0332 3856 PcaSvc - ok
23:45:15.0372 3856 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys
23:45:15.0392 3856 pci - ok
23:45:15.0412 3856 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys
23:45:15.0422 3856 pciide - ok
23:45:15.0462 3856 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\DRIVERS\pcmcia.sys
23:45:15.0502 3856 pcmcia - ok
23:45:15.0532 3856 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys
23:45:15.0542 3856 pcw - ok
23:45:15.0572 3856 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys
23:45:15.0602 3856 PEAUTH - ok
23:45:15.0702 3856 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe
23:45:15.0702 3856 PerfHost - ok
23:45:15.0782 3856 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll
23:45:15.0812 3856 pla - ok
23:45:15.0852 3856 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll
23:45:15.0862 3856 PlugPlay - ok
23:45:15.0892 3856 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
23:45:15.0902 3856 PNRPAutoReg - ok
23:45:15.0932 3856 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll
23:45:15.0932 3856 PNRPsvc - ok
23:45:15.0982 3856 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
23:45:15.0992 3856 PolicyAgent - ok
23:45:16.0032 3856 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll
23:45:16.0042 3856 Power - ok
23:45:16.0082 3856 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
23:45:16.0102 3856 PptpMiniport - ok
23:45:16.0132 3856 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\DRIVERS\processr.sys
23:45:16.0142 3856 Processor - ok
23:45:16.0192 3856 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll
23:45:16.0222 3856 ProfSvc - ok
23:45:16.0252 3856 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe
23:45:16.0252 3856 ProtectedStorage - ok
23:45:16.0312 3856 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys
23:45:16.0322 3856 Psched - ok
23:45:16.0382 3856 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\DRIVERS\ql2300.sys
23:45:16.0412 3856 ql2300 - ok
23:45:16.0442 3856 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\DRIVERS\ql40xx.sys
23:45:16.0462 3856 ql40xx - ok
23:45:16.0502 3856 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll
23:45:16.0512 3856 QWAVE - ok
23:45:16.0542 3856 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
23:45:16.0552 3856 QWAVEdrv - ok
23:45:16.0592 3856 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
23:45:16.0602 3856 RasAcd - ok
23:45:16.0652 3856 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
23:45:16.0702 3856 RasAgileVpn - ok
23:45:16.0742 3856 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll
23:45:16.0752 3856 RasAuto - ok
23:45:16.0792 3856 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
23:45:16.0802 3856 Rasl2tp - ok
23:45:16.0852 3856 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll
23:45:16.0872 3856 RasMan - ok
23:45:16.0912 3856 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
23:45:16.0922 3856 RasPppoe - ok
23:45:16.0942 3856 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
23:45:16.0952 3856 RasSstp - ok
23:45:16.0992 3856 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
23:45:17.0013 3856 rdbss - ok
23:45:17.0033 3856 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\DRIVERS\rdpbus.sys
23:45:17.0043 3856 rdpbus - ok
23:45:17.0073 3856 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
23:45:17.0073 3856 RDPCDD - ok
23:45:17.0113 3856 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
23:45:17.0113 3856 RDPENCDD - ok
23:45:17.0133 3856 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
23:45:17.0133 3856 RDPREFMP - ok
23:45:17.0223 3856 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
23:45:17.0233 3856 RdpVideoMiniport - ok
23:45:17.0273 3856 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys
23:45:17.0313 3856 RDPWD - ok
23:45:17.0393 3856 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys
23:45:17.0413 3856 rdyboost - ok
23:45:17.0463 3856 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll
23:45:17.0473 3856 RemoteAccess - ok
23:45:17.0513 3856 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll
23:45:17.0523 3856 RemoteRegistry - ok
23:45:17.0573 3856 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
23:45:17.0583 3856 RpcEptMapper - ok
23:45:17.0613 3856 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe
23:45:17.0623 3856 RpcLocator - ok
23:45:17.0673 3856 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll
23:45:17.0673 3856 RpcSs - ok
23:45:17.0733 3856 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
23:45:17.0743 3856 rspndr - ok
23:45:17.0793 3856 [ 907C4464381B5EBDFDC60F6C7D0DEDFC ] RSUSBSTOR C:\windows\system32\Drivers\RtsUStor.sys
23:45:17.0803 3856 RSUSBSTOR - ok
23:45:17.0823 3856 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe
23:45:17.0833 3856 SamSs - ok
23:45:17.0873 3856 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys
23:45:17.0883 3856 sbp2port - ok
23:45:17.0923 3856 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll
23:45:17.0933 3856 SCardSvr - ok
23:45:17.0973 3856 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
23:45:17.0983 3856 scfilter - ok
23:45:18.0043 3856 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll
23:45:18.0083 3856 Schedule - ok
23:45:18.0123 3856 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll
23:45:18.0123 3856 SCPolicySvc - ok
23:45:18.0163 3856 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll
23:45:18.0173 3856 SDRSVC - ok
23:45:18.0203 3856 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys
23:45:18.0213 3856 secdrv - ok
23:45:18.0253 3856 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll
23:45:18.0283 3856 seclogon - ok
23:45:18.0323 3856 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\System32\sens.dll
23:45:18.0333 3856 SENS - ok
23:45:18.0373 3856 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll
23:45:18.0383 3856 SensrSvc - ok
23:45:18.0423 3856 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\DRIVERS\serenum.sys
23:45:18.0433 3856 Serenum - ok
23:45:18.0483 3856 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\DRIVERS\serial.sys
23:45:18.0493 3856 Serial - ok
23:45:18.0543 3856 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\DRIVERS\sermouse.sys
23:45:18.0553 3856 sermouse - ok
23:45:18.0623 3856 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll
23:45:18.0633 3856 SessionEnv - ok
23:45:18.0683 3856 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys
23:45:18.0693 3856 sffdisk - ok
23:45:18.0703 3856 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys
23:45:18.0733 3856 sffp_mmc - ok
23:45:18.0753 3856 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys
23:45:18.0763 3856 sffp_sd - ok
23:45:18.0793 3856 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\DRIVERS\sfloppy.sys
23:45:18.0803 3856 sfloppy - ok
23:45:18.0873 3856 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\windows\system32\DRIVERS\Sftfslh.sys
23:45:18.0893 3856 Sftfs - ok
23:45:18.0963 3856 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
23:45:18.0973 3856 sftlist - ok
23:45:18.0993 3856 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\windows\system32\DRIVERS\Sftplaylh.sys
23:45:19.0014 3856 Sftplay - ok
23:45:19.0044 3856 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\windows\system32\DRIVERS\Sftredirlh.sys
23:45:19.0054 3856 Sftredir - ok
23:45:19.0084 3856 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\windows\system32\DRIVERS\Sftvollh.sys
23:45:19.0094 3856 Sftvol - ok
23:45:19.0134 3856 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
23:45:19.0134 3856 sftvsa - ok
23:45:19.0194 3856 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll
23:45:19.0204 3856 SharedAccess - ok
23:45:19.0254 3856 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll
23:45:19.0264 3856 ShellHWDetection - ok
23:45:19.0284 3856 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\DRIVERS\SiSRaid2.sys
23:45:19.0294 3856 SiSRaid2 - ok
23:45:19.0344 3856 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\DRIVERS\sisraid4.sys
23:45:19.0354 3856 SiSRaid4 - ok
23:45:19.0374 3856 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys
23:45:19.0394 3856 Smb - ok
23:45:19.0444 3856 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe
23:45:19.0454 3856 SNMPTRAP - ok
23:45:19.0474 3856 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys
23:45:19.0484 3856 spldr - ok
23:45:19.0524 3856 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe
23:45:19.0534 3856 Spooler - ok
23:45:19.0654 3856 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe
23:45:19.0844 3856 sppsvc - ok
23:45:19.0884 3856 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll
23:45:19.0894 3856 sppuinotify - ok
23:45:19.0944 3856 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys
23:45:19.0964 3856 srv - ok
23:45:20.0004 3856 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys
23:45:20.0024 3856 srv2 - ok
23:45:20.0054 3856 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
23:45:20.0074 3856 srvnet - ok
23:45:20.0124 3856 [ F4F1E1FF6986FE8914525AF751EA3EAC ] sscdbus C:\windows\system32\DRIVERS\sscdbus.sys
23:45:20.0134 3856 sscdbus - ok
23:45:20.0174 3856 [ 5447690D2CFE1BDE1BE3A5A5A3E2F796 ] sscdmdfl C:\windows\system32\DRIVERS\sscdmdfl.sys
23:45:20.0184 3856 sscdmdfl - ok
23:45:20.0214 3856 [ BFDA292053AEB76A0C1D63B2279D5138 ] sscdmdm C:\windows\system32\DRIVERS\sscdmdm.sys
23:45:20.0224 3856 sscdmdm - ok
23:45:20.0264 3856 [ 208731A751357DD71C5A0345C77AFD0A ] sscdserd C:\windows\system32\DRIVERS\sscdserd.sys
23:45:20.0274 3856 sscdserd - ok
23:45:20.0334 3856 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
23:45:20.0344 3856 SSDPSRV - ok
23:45:20.0354 3856 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll
23:45:20.0374 3856 SstpSvc - ok
23:45:20.0414 3856 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\DRIVERS\stexstor.sys
23:45:20.0424 3856 stexstor - ok
23:45:20.0464 3856 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll
23:45:20.0484 3856 stisvc - ok
23:45:20.0524 3856 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\drivers\swenum.sys
23:45:20.0534 3856 swenum - ok
23:45:20.0584 3856 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll
23:45:20.0604 3856 swprv - ok
23:45:20.0644 3856 [ 470C47DABA9CA3966F0AB3F835D7D135 ] SynTP C:\windows\system32\DRIVERS\SynTP.sys
23:45:20.0654 3856 SynTP - ok
23:45:20.0734 3856 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll
23:45:20.0784 3856 SysMain - ok
23:45:20.0824 3856 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll
23:45:20.0854 3856 TabletInputService - ok
23:45:20.0884 3856 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll
23:45:20.0894 3856 TapiSrv - ok
23:45:20.0934 3856 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll
23:45:20.0944 3856 TBS - ok
23:45:21.0255 3856 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip C:\windows\system32\drivers\tcpip.sys
23:45:21.0335 3856 Tcpip - ok
23:45:21.0385 3856 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
23:45:21.0395 3856 TCPIP6 - ok
23:45:21.0445 3856 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
23:45:21.0455 3856 tcpipreg - ok
23:45:21.0495 3856 [ FD542B661BD22FA69CA789AD0AC58C29 ] tdcmdpst C:\windows\system32\DRIVERS\tdcmdpst.sys
23:45:21.0505 3856 tdcmdpst - ok
23:45:21.0535 3856 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
23:45:21.0545 3856 TDPIPE - ok
23:45:21.0585 3856 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
23:45:21.0595 3856 TDTCP - ok
23:45:21.0655 3856 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys
23:45:21.0665 3856 tdx - ok
23:45:21.0875 3856 [ 33966A658FF37E0C65D46E59F37E2380 ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
23:45:21.0945 3856 TeamViewer7 - ok
23:45:21.0985 3856 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\drivers\termdd.sys
23:45:22.0005 3856 TermDD - ok
23:45:22.0075 3856 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll
23:45:22.0095 3856 TermService - ok
23:45:22.0165 3856 [ 48D9D00C2E0E72C3D4F52772C80355F6 ] TFsExDisk C:\windows\System32\Drivers\TFsExDisk.sys
23:45:22.0175 3856 TFsExDisk - ok
23:45:22.0205 3856 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll
23:45:22.0225 3856 Themes - ok
23:45:22.0265 3856 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll
23:45:22.0265 3856 THREADORDER - ok
23:45:22.0385 3856 [ 28644B0523D64EFF2FC7312A2EE74B0A ] TMachInfo C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
23:45:22.0385 3856 TMachInfo - ok
23:45:22.0455 3856 [ 4C4554287AB3E0F84AE5101117B0C18E ] tmactmon C:\windows\system32\DRIVERS\tmactmon.sys
23:45:22.0465 3856 tmactmon - ok
23:45:22.0555 3856 [ E3485981980692756B6D4A561D718368 ] tmcomm C:\windows\system32\DRIVERS\tmcomm.sys
23:45:22.0565 3856 tmcomm - ok
23:45:22.0605 3856 [ 384C4A844E3DE65E26ED0639375C0D3B ] tmevtmgr C:\windows\system32\DRIVERS\tmevtmgr.sys
23:45:22.0615 3856 tmevtmgr - ok
23:45:22.0685 3856 [ 065CB7D9278D778FB9EF62CEAD01433F ] tmtdi C:\windows\system32\DRIVERS\tmtdi.sys
23:45:22.0725 3856 tmtdi - ok
23:45:22.0755 3856 [ ED32035BDFECED1AD66D459FD9CC1140 ] TODDSrv C:\windows\system32\TODDSrv.exe
23:45:22.0765 3856 TODDSrv - ok
23:45:22.0885 3856 [ DB9719688C08F42705FEB3F6A0C98B91 ] TosCoSrv C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
23:45:22.0895 3856 TosCoSrv - ok
23:45:22.0995 3856 [ 74C2FA8C3765EE71A9C22182EC108457 ] TOSHIBA HDD SSD Alert Service C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
23:45:23.0015 3856 TOSHIBA HDD SSD Alert Service - ok
23:45:23.0046 3856 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll
23:45:23.0066 3856 TrkWks - ok
23:45:23.0116 3856 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
23:45:23.0116 3856 TrustedInstaller - ok
23:45:23.0176 3856 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
23:45:23.0216 3856 tssecsrv - ok
23:45:23.0246 3856 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys
23:45:23.0256 3856 TsUsbFlt - ok
23:45:23.0316 3856 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
23:45:23.0336 3856 tunnel - ok
23:45:23.0356 3856 [ 550B567F9364D8F7684C3FB3EA665A72 ] TVALZ C:\windows\system32\DRIVERS\TVALZ_O.SYS
23:45:23.0366 3856 TVALZ - ok
23:45:23.0396 3856 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\DRIVERS\uagp35.sys
23:45:23.0416 3856 uagp35 - ok
23:45:23.0456 3856 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys
23:45:23.0476 3856 udfs - ok
23:45:23.0536 3856 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe
23:45:23.0546 3856 UI0Detect - ok
23:45:23.0576 3856 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys
23:45:23.0586 3856 uliagpkx - ok
23:45:23.0646 3856 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\drivers\umbus.sys
23:45:23.0656 3856 umbus - ok
23:45:23.0696 3856 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\DRIVERS\umpass.sys
23:45:23.0716 3856 UmPass - ok
23:45:23.0766 3856 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll
23:45:23.0786 3856 upnphost - ok
23:45:23.0846 3856 [ AA33FC47ED58C34E6E9261E4F850B7EB ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys
23:45:23.0856 3856 USBAAPL64 - ok
23:45:23.0916 3856 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\windows\system32\drivers\usbaudio.sys
23:45:23.0926 3856 usbaudio - ok
23:45:23.0976 3856 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
23:45:23.0986 3856 usbccgp - ok
23:45:24.0016 3856 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys
23:45:24.0036 3856 usbcir - ok
23:45:24.0056 3856 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys
23:45:24.0086 3856 usbehci - ok
23:45:24.0116 3856 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys
23:45:24.0136 3856 usbhub - ok
23:45:24.0176 3856 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys
23:45:24.0186 3856 usbohci - ok
23:45:24.0226 3856 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\DRIVERS\usbprint.sys
23:45:24.0266 3856 usbprint - ok
23:45:24.0306 3856 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
23:45:24.0316 3856 USBSTOR - ok
23:45:24.0346 3856 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\DRIVERS\usbuhci.sys
23:45:24.0356 3856 usbuhci - ok
23:45:24.0406 3856 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys
23:45:24.0416 3856 usbvideo - ok
23:45:24.0456 3856 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll
23:45:24.0466 3856 UxSms - ok
23:45:24.0486 3856 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe
23:45:24.0486 3856 VaultSvc - ok
23:45:24.0536 3856 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys
23:45:24.0546 3856 vdrvroot - ok
23:45:24.0596 3856 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe
23:45:24.0626 3856 vds - ok
23:45:24.0666 3856 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys
23:45:24.0686 3856 vga - ok
23:45:24.0716 3856 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys
23:45:24.0726 3856 VgaSave - ok
23:45:24.0756 3856 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys
23:45:24.0776 3856 vhdmp - ok
23:45:24.0816 3856 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys
23:45:24.0826 3856 viaide - ok
23:45:24.0846 3856 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys
23:45:24.0866 3856 volmgr - ok
23:45:24.0956 3856 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys
23:45:24.0966 3856 volmgrx - ok
23:45:25.0036 3856 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\windows\system32\drivers\volsnap.sys
23:45:25.0057 3856 volsnap - ok
23:45:25.0107 3856 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\DRIVERS\vsmraid.sys
23:45:25.0117 3856 vsmraid - ok
23:45:25.0197 3856 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe
23:45:25.0237 3856 VSS - ok
23:45:25.0267 3856 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys
23:45:25.0277 3856 vwifibus - ok
23:45:25.0297 3856 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys
23:45:25.0327 3856 vwififlt - ok
23:45:25.0377 3856 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys
23:45:25.0387 3856 vwifimp - ok
23:45:25.0447 3856 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll
23:45:25.0467 3856 W32Time - ok
23:45:25.0497 3856 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\DRIVERS\wacompen.sys
23:45:25.0507 3856 WacomPen - ok
23:45:25.0567 3856 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
23:45:25.0597 3856 WANARP - ok
23:45:25.0607 3856 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
23:45:25.0607 3856 Wanarpv6 - ok
23:45:25.0737 3856 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe
23:45:25.0797 3856 WatAdminSvc - ok
23:45:25.0907 3856 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe
23:45:25.0947 3856 wbengine - ok
23:45:26.0007 3856 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll
23:45:26.0017 3856 WbioSrvc - ok
23:45:26.0057 3856 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll
23:45:26.0077 3856 wcncsvc - ok
23:45:26.0097 3856 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
23:45:26.0107 3856 WcsPlugInService - ok
23:45:26.0157 3856 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\DRIVERS\wd.sys
23:45:26.0167 3856 Wd - ok
23:45:26.0197 3856 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
23:45:26.0217 3856 Wdf01000 - ok
23:45:26.0237 3856 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll
23:45:26.0247 3856 WdiServiceHost - ok
23:45:26.0257 3856 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll
23:45:26.0267 3856 WdiSystemHost - ok
23:45:26.0307 3856 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll
23:45:26.0327 3856 WebClient - ok
23:45:26.0357 3856 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll
23:45:26.0367 3856 Wecsvc - ok
23:45:26.0397 3856 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll
23:45:26.0407 3856 wercplsupport - ok
23:45:26.0437 3856 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll
23:45:26.0437 3856 WerSvc - ok
23:45:26.0477 3856 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
23:45:26.0487 3856 WfpLwf - ok
23:45:26.0547 3856 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys
23:45:26.0557 3856 WIMMount - ok
23:45:26.0567 3856 WinDefend - ok
23:45:26.0607 3856 WinHttpAutoProxySvc - ok
23:45:26.0707 3856 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
23:45:26.0717 3856 Winmgmt - ok
23:45:26.0837 3856 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll
23:45:26.0907 3856 WinRM - ok
23:45:26.0967 3856 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys
23:45:26.0967 3856 WinUsb - ok
23:45:27.0017 3856 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll
23:45:27.0017 3856 Wlansvc - ok
23:45:27.0087 3856 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
23:45:27.0087 3856 wlcrasvc - ok
23:45:27.0187 3856 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:45:27.0207 3856 wlidsvc - ok
23:45:27.0257 3856 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\drivers\wmiacpi.sys
23:45:27.0257 3856 WmiAcpi - ok
23:45:27.0307 3856 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
23:45:27.0317 3856 wmiApSrv - ok
23:45:27.0367 3856 WMPNetworkSvc - ok
23:45:27.0407 3856 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll
23:45:27.0417 3856 WPCSvc - ok
23:45:27.0457 3856 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
23:45:27.0467 3856 WPDBusEnum - ok
23:45:27.0497 3856 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
23:45:27.0507 3856 ws2ifsl - ok
23:45:27.0547 3856 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\System32\wscsvc.dll
23:45:27.0557 3856 wscsvc - ok
23:45:27.0567 3856 WSearch - ok
23:45:27.0657 3856 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll
23:45:27.0677 3856 wuauserv - ok
23:45:27.0707 3856 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\windows\system32\drivers\WudfPf.sys
23:45:27.0717 3856 WudfPf - ok
23:45:27.0767 3856 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
23:45:27.0767 3856 WUDFRd - ok
23:45:27.0797 3856 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\windows\System32\WUDFSvc.dll
23:45:27.0817 3856 wudfsvc - ok
23:45:27.0857 3856 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll
23:45:27.0867 3856 WwanSvc - ok
23:45:27.0927 3856 [ 9176C0822FAA649E45121875BE32F5D2 ] xusb21 C:\windows\system32\DRIVERS\xusb21.sys
23:45:27.0947 3856 xusb21 - ok
23:45:27.0977 3856 ================ Scan global ===============================
23:45:28.0007 3856 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll
23:45:28.0047 3856 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll
23:45:28.0057 3856 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll
23:45:28.0107 3856 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll
23:45:28.0187 3856 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe
23:45:28.0197 3856 [Global] - ok
23:45:28.0197 3856 ================ Scan MBR ==================================
23:45:28.0207 3856 [ 5B5E648D12FCADC244C1EC30318E1EB9 ] \Device\Harddisk0\DR0
23:45:28.0807 3856 \Device\Harddisk0\DR0 - ok
23:45:28.0807 3856 ================ Scan VBR ==================================
23:45:28.0837 3856 [ F0DD1E264C067963AB34E1DD5EA255A7 ] \Device\Harddisk0\DR0\Partition1
23:45:28.0837 3856 \Device\Harddisk0\DR0\Partition1 - ok
23:45:28.0837 3856 ============================================================
23:45:28.0837 3856 Scan finished
23:45:28.0837 3856 ============================================================
23:45:28.0857 1352 Detected object count: 0
23:45:28.0857 1352 Actual detected object count: 0
23:48:52.0380 3984 Deinitialize success
=====================================================

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Database version: v2012.11.19.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Nick :: NICK-PC [administrator]

11/19/2012 11:13:52 PM
mbam-log-2012-11-19 (23-13-52).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 224660
Time elapsed: 6 minute(s), 27 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Edited by a_tep23, 20 November 2012 - 12:31 AM.


#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:34 PM

Posted 20 November 2012 - 10:29 PM

How is it running now? Please run more.

ESET ONLINE


I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image
      icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.



>>>>
MiniToolBox
Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 a_tep23

a_tep23
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:02:34 PM

Posted 25 November 2012 - 09:51 PM

Sorry about that. I kind of gave up when he stopped replying. I don't think it's necessary anymore. I had already deleted the virus and my laptop seems to be running fine for now. I sense no unusual activity happening. With your permission I should let this go or continue on with your instructions.

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:34 PM

Posted 28 November 2012 - 09:14 PM

If you have the time run the ESET..
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users