Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Has the 'Exploit:JS/Blacole.JQ' kit unleashed loads of nasties on to my laptop ??


  • Please log in to reply
5 replies to this topic

#1 SWIM_GOOD

SWIM_GOOD

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:10:41 PM

Posted 26 November 2012 - 11:52 AM

Hello, I've not bumped into any issues with my laptop since last year but at the end of last week Microsoft Security Essentials detected and quarantined 'Exploit:JS/Blacole.JQ' whilst I was using the internet.. It was removed and subsequent scans with Malwarebytes and SUPERAntiSpyware came back clean. I noticed the system was somewhat laggy and so ran a scan with Dr.Web CureIt!, this found the Win32 virus and I 'cured' the infected file using this programme.

All subsequent scans with Malwarebytes, SUPERAntiSpyware, Security Essentials AND Dr.Web CureIt! are coming back clean but I'd like confirmation from you guys that this is indeed the case and that there aren't various other nasties roaming around my laptop!

Cheers in advance,

Dan

BC AdBot (Login to Remove)

 


#2 Sightless

Sightless

  • Members
  • 435 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Up in the Clouds
  • Local time:11:41 PM

Posted 26 November 2012 - 04:05 PM

Let's try an ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Check Posted Image
  • Check Remove found threats and Scan potentially unwanted applications (If given the option, choose "Quarantine" instead of delete.)
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image

Please include the following in your reply
ESET log
Any questions/comments you may have

#3 SWIM_GOOD

SWIM_GOOD
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:10:41 PM

Posted 26 November 2012 - 08:02 PM

Hello, thanks for the reply. I ran the ESET OnlineScan but no threats were found.. :)

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:41 PM

Posted 26 November 2012 - 08:18 PM

Hello also run these 2 and check rootkits...
Please Download TDSSkiller
Launch it.
Click on change parameters-Select TDLFS file system
Click on "Scan".
Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results.



Please download aswMBR ( 4.5MB ) to your desktop.
  • Double click the aswMBR.exe icon, and click Run.
  • When asked if you'd like to "download the latest Avast! virus definitions", click Yes.
  • Click the Scan button to start the scan.
  • On completion of the scan, click the save log button, save it to your desktop, then copy and paste it in your next reply.

Edited by boopme, 26 November 2012 - 08:20 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 SWIM_GOOD

SWIM_GOOD
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:10:41 PM

Posted 27 November 2012 - 05:02 AM

Hey, here are the logs for TDSSkiller and aswMBR:


09:28:42.0769 5992 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
09:28:43.0050 5992 ============================================================
09:28:43.0050 5992 Current date / time: 2012/11/27 09:28:43.0050
09:28:43.0050 5992 SystemInfo:
09:28:43.0050 5992
09:28:43.0050 5992 OS Version: 6.0.6001 ServicePack: 1.0
09:28:43.0050 5992 Product type: Workstation
09:28:43.0051 5992 ComputerName: DAN-PC
09:28:43.0051 5992 UserName: Dan
09:28:43.0051 5992 Windows directory: C:\Windows
09:28:43.0051 5992 System windows directory: C:\Windows
09:28:43.0051 5992 Processor architecture: Intel x86
09:28:43.0051 5992 Number of processors: 2
09:28:43.0051 5992 Page size: 0x1000
09:28:43.0051 5992 Boot type: Normal boot
09:28:43.0051 5992 ============================================================
09:28:45.0067 5992 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
09:28:45.0072 5992 ============================================================
09:28:45.0072 5992 \Device\Harddisk0\DR0:
09:28:45.0072 5992 MBR partitions:
09:28:45.0072 5992 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1400800, BlocksNum 0x8B0C000
09:28:45.0072 5992 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x9F0C800, BlocksNum 0x8B0C800
09:28:45.0072 5992 ============================================================
09:28:45.0103 5992 C: <-> \Device\Harddisk0\DR0\Partition1
09:28:45.0147 5992 D: <-> \Device\Harddisk0\DR0\Partition2
09:28:45.0148 5992 ============================================================
09:28:45.0148 5992 Initialize success
09:28:45.0148 5992 ============================================================
09:29:25.0761 4604 ============================================================
09:29:25.0761 4604 Scan started
09:29:25.0761 4604 Mode: Manual; TDLFS;
09:29:25.0761 4604 ============================================================
09:29:26.0618 4604 ================ Scan system memory ========================
09:29:26.0618 4604 System memory - ok
09:29:26.0619 4604 ================ Scan services =============================
09:29:26.0748 4604 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
09:29:26.0753 4604 !SASCORE - ok
09:29:28.0059 4604 [ 02E1C46C34F2D2843533C4F223867930 ] A310 C:\Windows\system32\DRIVERS\AVerA310USB.sys
09:29:28.0062 4604 A310 - ok
09:29:28.0233 4604 [ FCB8C7210F0135E24C6580F7F649C73C ] ACPI C:\Windows\system32\drivers\acpi.sys
09:29:28.0241 4604 ACPI - ok
09:29:28.0782 4604 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
09:29:28.0785 4604 AdobeARMservice - ok
09:29:28.0833 4604 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
09:29:28.0855 4604 adp94xx - ok
09:29:28.0907 4604 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
09:29:28.0917 4604 adpahci - ok
09:29:28.0949 4604 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
09:29:28.0954 4604 adpu160m - ok
09:29:29.0069 4604 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
09:29:29.0075 4604 adpu320 - ok
09:29:29.0201 4604 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
09:29:29.0203 4604 AeLookupSvc - ok
09:29:29.0264 4604 [ 48EB99503533C27AC6135648E5474457 ] AFD C:\Windows\system32\drivers\afd.sys
09:29:29.0273 4604 AFD - ok
09:29:29.0383 4604 [ EFBC44FBD75E4F80BD927AEBF6E7EADE ] AgereModemAudio C:\Windows\system32\agrsmsvc.exe
09:29:29.0385 4604 AgereModemAudio - ok
09:29:29.0466 4604 [ 38325C6AA8EAE011897D61CE48EC6435 ] AgereSoftModem C:\Windows\system32\DRIVERS\AGRSM.sys
09:29:29.0645 4604 AgereSoftModem - ok
09:29:29.0711 4604 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
09:29:29.0714 4604 agp440 - ok
09:29:29.0774 4604 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
09:29:29.0778 4604 aic78xx - ok
09:29:29.0823 4604 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
09:29:29.0826 4604 ALG - ok
09:29:29.0929 4604 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
09:29:29.0932 4604 aliide - ok
09:29:29.0962 4604 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
09:29:29.0966 4604 amdagp - ok
09:29:30.0045 4604 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
09:29:30.0048 4604 amdide - ok
09:29:30.0218 4604 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
09:29:30.0221 4604 AmdK7 - ok
09:29:30.0258 4604 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
09:29:30.0261 4604 AmdK8 - ok
09:29:30.0319 4604 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
09:29:30.0321 4604 Appinfo - ok
09:29:30.0495 4604 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
09:29:30.0502 4604 Apple Mobile Device - ok
09:29:30.0609 4604 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
09:29:30.0613 4604 arc - ok
09:29:30.0709 4604 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
09:29:30.0713 4604 arcsas - ok
09:29:30.0739 4604 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
09:29:30.0742 4604 AsyncMac - ok
09:29:30.0766 4604 [ 2D9C903DC76A66813D350A562DE40ED9 ] atapi C:\Windows\system32\drivers\atapi.sys
09:29:30.0772 4604 atapi - ok
09:29:30.0822 4604 [ 42076E29AAFA0830A2C5D4E310F58DD1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
09:29:30.0845 4604 AudioEndpointBuilder - ok
09:29:30.0860 4604 [ 42076E29AAFA0830A2C5D4E310F58DD1 ] Audiosrv C:\Windows\System32\Audiosrv.dll
09:29:30.0867 4604 Audiosrv - ok
09:29:30.0936 4604 [ C46BA2C177DF0B84F9C0BFC1E4574DC7 ] Avgfwfd C:\Windows\system32\DRIVERS\avgfwd6x.sys
09:29:30.0939 4604 Avgfwfd - ok
09:29:31.0019 4604 avgfws - ok
09:29:31.0028 4604 AVGIDSAgent - ok
09:29:31.0122 4604 [ 4CBB56FBC9C0CBC517E6E3A6889EBDDC ] AVGIDSDriver C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
09:29:31.0128 4604 AVGIDSDriver - ok
09:29:31.0202 4604 [ 459BCE188232E2FE6152423EFEF65D76 ] AVGIDSEH C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
09:29:31.0204 4604 AVGIDSEH - ok
09:29:31.0238 4604 [ 91D9ABE7E88EAC7C167CBA4ED4D983BF ] AVGIDSFilter C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
09:29:31.0241 4604 AVGIDSFilter - ok
09:29:31.0333 4604 [ 3FC2714E185C04308215D46730D41A94 ] AVGIDSShim C:\Windows\system32\DRIVERS\AVGIDSShim.Sys
09:29:31.0335 4604 AVGIDSShim - ok
09:29:31.0417 4604 [ BF8118CD5E2255387B715B534D64ACD1 ] Avgldx86 C:\Windows\system32\DRIVERS\avgldx86.sys
09:29:31.0425 4604 Avgldx86 - ok
09:29:31.0481 4604 [ 1C77EF67F196466ADC9924CB288AFE87 ] Avgmfx86 C:\Windows\system32\DRIVERS\avgmfx86.sys
09:29:31.0484 4604 Avgmfx86 - ok
09:29:31.0538 4604 [ F2038ED7284B79DCEF581468121192A9 ] Avgrkx86 C:\Windows\system32\DRIVERS\avgrkx86.sys
09:29:31.0541 4604 Avgrkx86 - ok
09:29:31.0603 4604 [ A6D562B612216D8D02A35EBEB92366BD ] Avgtdix C:\Windows\system32\DRIVERS\avgtdix.sys
09:29:31.0612 4604 Avgtdix - ok
09:29:31.0701 4604 [ 57D83B82117C2DDB9D7E9AEA691CEDFC ] avgtp C:\Windows\system32\drivers\avgtpx86.sys
09:29:31.0704 4604 avgtp - ok
09:29:31.0716 4604 avgwd - ok
09:29:31.0801 4604 [ 7D0F2BFA273831124FA08526AF48AF18 ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
09:29:31.0808 4604 b57nd60x - ok
09:29:31.0868 4604 [ 9347A2DDEE501C242A8E21990279D688 ] BDASwCap C:\Windows\system32\drivers\AVerA310Cap.sys
09:29:31.0893 4604 BDASwCap - ok
09:29:31.0943 4604 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
09:29:31.0946 4604 Beep - ok
09:29:32.0005 4604 [ D3E6D78285529962349A7F1617035938 ] BFE C:\Windows\System32\bfe.dll
09:29:32.0015 4604 BFE - ok
09:29:32.0088 4604 [ 02ED7B4DBC2A3232A389106DA7515C3D ] BITS C:\Windows\system32\qmgr.dll
09:29:32.0144 4604 BITS - ok
09:29:32.0193 4604 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
09:29:32.0196 4604 blbdrive - ok
09:29:32.0290 4604 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
09:29:32.0313 4604 Bonjour Service - ok
09:29:32.0355 4604 [ 8153396D5551276227FA146900F734E6 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
09:29:32.0359 4604 bowser - ok
09:29:32.0475 4604 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
09:29:32.0478 4604 BrFiltLo - ok
09:29:32.0518 4604 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
09:29:32.0521 4604 BrFiltUp - ok
09:29:32.0587 4604 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
09:29:32.0592 4604 Browser - ok
09:29:32.0629 4604 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
09:29:32.0633 4604 Brserid - ok
09:29:32.0678 4604 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
09:29:32.0681 4604 BrSerWdm - ok
09:29:32.0764 4604 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
09:29:32.0766 4604 BrUsbMdm - ok
09:29:32.0827 4604 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
09:29:32.0830 4604 BrUsbSer - ok
09:29:32.0883 4604 [ DA7B195275BDA7F8FCF79B40E0F45DDE ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
09:29:32.0887 4604 BthEnum - ok
09:29:32.0933 4604 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
09:29:32.0937 4604 BTHMODEM - ok
09:29:33.0037 4604 [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
09:29:33.0042 4604 BthPan - ok
09:29:33.0129 4604 [ 671134053D59E23704F08DB19F11E10B ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
09:29:33.0138 4604 BTHPORT - ok
09:29:33.0233 4604 [ 58EE7F5E68310BC8D4E7CEBD8358C12E ] BthServ C:\Windows\System32\bthserv.dll
09:29:33.0236 4604 BthServ - ok
09:29:33.0326 4604 [ 93D7007E2C660DFCCA6AE72622740B14 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
09:29:33.0329 4604 BTHUSB - ok
09:29:33.0387 4604 [ 09E6AFFAE6C0E9158BF05C7D08D0107A ] BUNAgentSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
09:29:33.0443 4604 BUNAgentSvc - ok
09:29:33.0516 4604 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
09:29:33.0520 4604 cdfs - ok
09:29:33.0564 4604 [ 1EC25CEA0DE6AC4718BF89F9E1778B57 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
09:29:33.0568 4604 cdrom - ok
09:29:33.0613 4604 [ 87C2D0377B23E2D8A41093C2F5FB1A5B ] CertPropSvc C:\Windows\System32\certprop.dll
09:29:33.0617 4604 CertPropSvc - ok
09:29:33.0665 4604 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\DRIVERS\circlass.sys
09:29:33.0668 4604 circlass - ok
09:29:33.0716 4604 [ 465745561C832B29F7C48B488AAB3842 ] CLFS C:\Windows\system32\CLFS.sys
09:29:33.0725 4604 CLFS - ok
09:29:33.0984 4604 [ 5CA9B1062C0C3E3AE19C23AD9D8A5048 ] CLHNService C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
09:29:34.0059 4604 CLHNService - ok
09:29:34.0162 4604 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:29:34.0167 4604 clr_optimization_v2.0.50727_32 - ok
09:29:34.0245 4604 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
09:29:34.0251 4604 clr_optimization_v4.0.30319_32 - ok
09:29:34.0325 4604 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
09:29:34.0328 4604 CmBatt - ok
09:29:34.0347 4604 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
09:29:34.0350 4604 cmdide - ok
09:29:34.0370 4604 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
09:29:34.0377 4604 Compbatt - ok
09:29:34.0389 4604 COMSysApp - ok
09:29:34.0412 4604 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
09:29:34.0417 4604 crcdisk - ok
09:29:34.0499 4604 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
09:29:34.0502 4604 Crusoe - ok
09:29:34.0577 4604 [ 6DE363F9F99334514C46AEC02D3E3678 ] CryptSvc C:\Windows\system32\cryptsvc.dll
09:29:34.0581 4604 CryptSvc - ok
09:29:34.0649 4604 [ 301AE00E12408650BADDC04DBC832830 ] DcomLaunch C:\Windows\system32\rpcss.dll
09:29:34.0705 4604 DcomLaunch - ok
09:29:34.0749 4604 [ A3E9FA213F443AC77C7746119D13FEEC ] DfsC C:\Windows\system32\Drivers\dfsc.sys
09:29:34.0753 4604 DfsC - ok
09:29:34.0931 4604 [ FA3463F25F9CC9C3BCF1E7912FEFF099 ] DFSR C:\Windows\system32\DFSR.exe
09:29:35.0020 4604 DFSR - ok
09:29:35.0078 4604 [ 43A988A9C10333476CB5FB667CBD629D ] Dhcp C:\Windows\System32\dhcpcsvc.dll
09:29:35.0086 4604 Dhcp - ok
09:29:35.0121 4604 [ 64109E623ABD6955C8FB110B592E68B7 ] disk C:\Windows\system32\drivers\disk.sys
09:29:35.0125 4604 disk - ok
09:29:35.0157 4604 [ 73BAF270D24FE726B9CD7F80BB17A23D ] DKbFltr C:\Windows\system32\DRIVERS\DKbFltr.sys
09:29:35.0160 4604 DKbFltr - ok
09:29:35.0196 4604 [ 4805D9A6D281C7A7DEFD9094DEC6AF7D ] Dnscache C:\Windows\System32\dnsrslvr.dll
09:29:35.0201 4604 Dnscache - ok
09:29:35.0271 4604 [ 5AF620A08C614E24206B79E8153CF1A8 ] dot3svc C:\Windows\System32\dot3svc.dll
09:29:35.0278 4604 dot3svc - ok
09:29:35.0327 4604 [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
09:29:35.0333 4604 Dot4 - ok
09:29:35.0379 4604 [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
09:29:35.0382 4604 Dot4Print - ok
09:29:35.0413 4604 [ C55004CA6B419B6695970DFE849B122F ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
09:29:35.0416 4604 dot4usb - ok
09:29:35.0452 4604 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
09:29:35.0459 4604 DPS - ok
09:29:35.0484 4604 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
09:29:35.0486 4604 drmkaud - ok
09:29:35.0582 4604 [ 85F33880B8CFB554BD3D9CCDB486845A ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
09:29:35.0607 4604 DXGKrnl - ok
09:29:35.0645 4604 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
09:29:35.0650 4604 E1G60 - ok
09:29:35.0719 4604 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
09:29:35.0724 4604 EapHost - ok
09:29:35.0784 4604 [ DD2CD259D83D8B72C02C5F2331FF9D68 ] Ecache C:\Windows\system32\drivers\ecache.sys
09:29:35.0790 4604 Ecache - ok
09:29:36.0051 4604 [ B7DC2580425225C320CEDA78DE55A3D0 ] eDataSecurity Service C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
09:29:36.0075 4604 eDataSecurity Service - ok
09:29:36.0204 4604 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
09:29:36.0215 4604 elxstor - ok
09:29:36.0306 4604 [ 70B1A86DF0C8EAD17D2BC332EDAE2C7C ] EMDMgmt C:\Windows\system32\emdmgmt.dll
09:29:36.0331 4604 EMDMgmt - ok
09:29:36.0450 4604 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
09:29:36.0453 4604 ErrDev - ok
09:29:36.0559 4604 [ A51FD9DF23720485991F56741BBEFCFB ] ETService C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
09:29:36.0561 4604 ETService - ok
09:29:36.0648 4604 [ 3CB3343D720168B575133A0A20DC2465 ] EventSystem C:\Windows\system32\es.dll
09:29:36.0657 4604 EventSystem - ok
09:29:36.0816 4604 [ 0D858EB20589A34EFB25695ACAA6AA2D ] exfat C:\Windows\system32\drivers\exfat.sys
09:29:36.0822 4604 exfat - ok
09:29:36.0883 4604 [ 3C489390C2E2064563727752AF8EAB9E ] fastfat C:\Windows\system32\drivers\fastfat.sys
09:29:36.0890 4604 fastfat - ok
09:29:36.0931 4604 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
09:29:36.0934 4604 fdc - ok
09:29:37.0029 4604 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
09:29:37.0032 4604 fdPHost - ok
09:29:37.0068 4604 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
09:29:37.0071 4604 FDResPub - ok
09:29:37.0107 4604 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
09:29:37.0111 4604 FileInfo - ok
09:29:37.0156 4604 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
09:29:37.0159 4604 Filetrace - ok
09:29:37.0218 4604 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
09:29:37.0221 4604 flpydisk - ok
09:29:37.0241 4604 [ 05EA53AFE985443011E36DAB07343B46 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
09:29:37.0248 4604 FltMgr - ok
09:29:37.0378 4604 [ C9BE08664611DDAF98E2331E9288B00B ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
09:29:37.0381 4604 FontCache3.0.0.0 - ok
09:29:37.0447 4604 [ 65EA8B77B5851854F0C55C43FA51A198 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
09:29:37.0449 4604 Fs_Rec - ok
09:29:37.0601 4604 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
09:29:37.0605 4604 gagp30kx - ok
09:29:37.0653 4604 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\Windows\system32\Drivers\GEARAspiWDM.sys
09:29:37.0656 4604 GEARAspiWDM - ok
09:29:37.0812 4604 [ D9F1113D9401185245573350712F92FC ] gpsvc C:\Windows\System32\gpsvc.dll
09:29:37.0837 4604 gpsvc - ok
09:29:37.0935 4604 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
09:29:37.0940 4604 gupdate - ok
09:29:38.0046 4604 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
09:29:38.0049 4604 gupdatem - ok
09:29:38.0228 4604 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
09:29:38.0235 4604 gusvc - ok
09:29:38.0314 4604 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
09:29:38.0322 4604 HdAudAddService - ok
09:29:38.0367 4604 [ C87B1EE051C0464491C1A7B03FA0BC99 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
09:29:38.0369 4604 HDAudBus - ok
09:29:38.0454 4604 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
09:29:38.0457 4604 HidBth - ok
09:29:38.0505 4604 [ D8DF3722D5E961BAA1292AA2F12827E2 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
09:29:38.0508 4604 HidIr - ok
09:29:38.0605 4604 [ 8FA640195279ACE21BEA91396A0054FC ] hidserv C:\Windows\System32\hidserv.dll
09:29:38.0609 4604 hidserv - ok
09:29:38.0669 4604 [ 854CA287AB7FAF949617A788306D967E ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
09:29:38.0672 4604 HidUsb - ok
09:29:38.0749 4604 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
09:29:38.0754 4604 hkmsvc - ok
09:29:38.0884 4604 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
09:29:38.0888 4604 HpCISSs - ok
09:29:39.0037 4604 [ F50F7984FDD151EDD8A70A8DBD9E2A44 ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
09:29:39.0346 4604 hpqcxs08 - ok
09:29:39.0372 4604 [ DF446BA625CC441617843E87798CE048 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
09:29:39.0379 4604 hpqddsvc - ok
09:29:39.0564 4604 [ 33B02459E86D0A2B86A6B9FE19139390 ] HTTP C:\Windows\system32\drivers\HTTP.sys
09:29:39.0587 4604 HTTP - ok
09:29:39.0637 4604 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
09:29:39.0640 4604 i2omp - ok
09:29:39.0706 4604 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
09:29:39.0710 4604 i8042prt - ok
09:29:39.0784 4604 [ 3E42C4691AAD4B1E8D0466F9CBF05CBE ] IAANTMON C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
09:29:39.0796 4604 IAANTMON - ok
09:29:39.0902 4604 [ 707C1692214B1C290271067197F075F6 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
09:29:39.0908 4604 iaStor - ok
09:29:39.0950 4604 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
09:29:39.0957 4604 iaStorV - ok
09:29:40.0047 4604 [ 7B630ACAED64FEF0C3E1CF255CB56686 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
09:29:40.0183 4604 idsvc - ok
09:29:40.0298 4604 [ 0627FC0C422CD6E0F23E1B0D1D9F0899 ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
09:29:40.0387 4604 igfx - ok
09:29:40.0438 4604 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
09:29:40.0441 4604 iirsp - ok
09:29:40.0567 4604 [ 68E8C415E102E5D79FD7E4A765B8CBA4 ] IKEEXT C:\Windows\System32\ikeext.dll
09:29:40.0591 4604 IKEEXT - ok
09:29:40.0625 4604 [ C6E5276C00EBDEB096BB5EF4B797D1B6 ] int15 C:\Windows\system32\drivers\int15.sys
09:29:40.0627 4604 int15 - ok
09:29:40.0773 4604 [ 3CFA12FEFEA751DAE7B8133A6EF3C0D9 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
09:29:40.0850 4604 IntcAzAudAddService - ok
09:29:40.0993 4604 [ C7E7E43CBD34D3B0A0156B51B917DFCC ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys
09:29:40.0997 4604 IntcHdmiAddService - ok
09:29:41.0477 4604 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
09:29:41.0480 4604 intelide - ok
09:29:41.0504 4604 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
09:29:41.0506 4604 intelppm - ok
09:29:41.0669 4604 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
09:29:41.0676 4604 IPBusEnum - ok
09:29:41.0764 4604 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
09:29:41.0767 4604 IpFilterDriver - ok
09:29:41.0931 4604 [ 6A35D233693EDC29A12742049BC5E37F ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
09:29:41.0939 4604 iphlpsvc - ok
09:29:41.0950 4604 IpInIp - ok
09:29:42.0009 4604 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
09:29:42.0013 4604 IPMIDRV - ok
09:29:42.0131 4604 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
09:29:42.0136 4604 IPNAT - ok
09:29:42.0331 4604 [ BC0EA61246F8D940FBC5F652D337D6BD ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
09:29:42.0401 4604 iPod Service - ok
09:29:42.0481 4604 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
09:29:42.0484 4604 IRENUM - ok
09:29:42.0588 4604 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
09:29:42.0591 4604 isapnp - ok
09:29:42.0664 4604 [ F247EEC28317F6C739C16DE420097301 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
09:29:42.0669 4604 iScsiPrt - ok
09:29:42.0725 4604 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
09:29:42.0728 4604 iteatapi - ok
09:29:42.0771 4604 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
09:29:42.0774 4604 iteraid - ok
09:29:42.0845 4604 [ 858C550EBBD243826A2193262C1B54A3 ] JMCR C:\Windows\system32\DRIVERS\jmcr.sys
09:29:42.0849 4604 JMCR - ok
09:29:42.0961 4604 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
09:29:42.0964 4604 kbdclass - ok
09:29:42.0993 4604 [ 18247836959BA67E3511B62846B9C2E0 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
09:29:42.0996 4604 kbdhid - ok
09:29:43.0052 4604 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] KeyIso C:\Windows\system32\lsass.exe
09:29:43.0057 4604 KeyIso - ok
09:29:43.0238 4604 [ 7A0CF7908B6824D6A2A1D313E5AE3DCA ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
09:29:43.0262 4604 KSecDD - ok
09:29:43.0492 4604 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
09:29:43.0515 4604 KtmRm - ok
09:29:43.0586 4604 [ 1925E63C91CF1610AE41BFD539062079 ] LanmanServer C:\Windows\System32\srvsvc.dll
09:29:43.0596 4604 LanmanServer - ok
09:29:43.0672 4604 [ 2AE2E1628C5D3F1C0A46A67C9FA1DF15 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
09:29:43.0683 4604 LanmanWorkstation - ok
09:29:43.0879 4604 [ 793FF718477345CD5D232C50BED1E452 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
09:29:43.0882 4604 LightScribeService - ok
09:29:43.0934 4604 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
09:29:43.0937 4604 lltdio - ok
09:29:44.0022 4604 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
09:29:44.0032 4604 lltdsvc - ok
09:29:44.0076 4604 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
09:29:44.0081 4604 lmhosts - ok
09:29:44.0114 4604 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
09:29:44.0119 4604 LSI_FC - ok
09:29:44.0145 4604 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
09:29:44.0150 4604 LSI_SAS - ok
09:29:44.0213 4604 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
09:29:44.0223 4604 LSI_SCSI - ok
09:29:44.0249 4604 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
09:29:44.0254 4604 luafv - ok
09:29:44.0781 4604 [ F8B823414A22DBF3BEC10DCAA5F93CD8 ] McciCMService C:\Program Files\Common Files\Motive\McciCMService.exe
09:29:44.0883 4604 McciCMService - ok
09:29:44.0930 4604 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
09:29:44.0933 4604 megasas - ok
09:29:45.0045 4604 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
09:29:45.0068 4604 MegaSR - ok
09:29:45.0101 4604 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
09:29:45.0107 4604 MMCSS - ok
09:29:45.0244 4604 MobilityService - ok
09:29:45.0383 4604 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
09:29:45.0385 4604 Modem - ok
09:29:45.0508 4604 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
09:29:45.0511 4604 monitor - ok
09:29:45.0600 4604 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
09:29:45.0603 4604 mouclass - ok
09:29:45.0796 4604 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
09:29:45.0798 4604 mouhid - ok
09:29:45.0929 4604 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
09:29:45.0933 4604 MountMgr - ok
09:29:46.0097 4604 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
09:29:46.0101 4604 MozillaMaintenance - ok
09:29:46.0197 4604 [ EE728AF83850DDAD9A3FCAC0AAB3AD97 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
09:29:46.0204 4604 MpFilter - ok
09:29:46.0251 4604 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
09:29:46.0256 4604 mpio - ok
09:29:46.0678 4604 [ A69630D039C38018689190234F866D77 ] MpKsl07ae80e1 C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AB5C230C-5722-4193-B903-5BDF2865CEA6}\MpKsl07ae80e1.sys
09:29:46.0680 4604 MpKsl07ae80e1 - ok
09:29:46.0872 4604 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
09:29:46.0875 4604 mpsdrv - ok
09:29:47.0007 4604 [ D1639BA315B0D79DEC49A4B0E1FB929B ] MpsSvc C:\Windows\system32\mpssvc.dll
09:29:47.0021 4604 MpsSvc - ok
09:29:47.0099 4604 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
09:29:47.0102 4604 Mraid35x - ok
09:29:47.0263 4604 [ 9BD4DCB5412921864A7AACDEDFBD1923 ] MREMP50 C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS
09:29:47.0266 4604 MREMP50 - ok
09:29:47.0273 4604 MREMPR5 - ok
09:29:47.0287 4604 MRENDIS5 - ok
09:29:47.0429 4604 [ 07C02C892E8E1A72D6BF35004F0E9C5E ] MRESP50 C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS
09:29:47.0446 4604 MRESP50 - ok
09:29:47.0523 4604 [ AE3DE84536B6799D2267443CEC8EDBB9 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
09:29:47.0557 4604 MRxDAV - ok
09:29:47.0647 4604 [ 5734A0F2BE7E495F7D3ED6EFD4B9F5A1 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
09:29:47.0652 4604 mrxsmb - ok
09:29:47.0732 4604 [ 6B5FA5ADFACAC9DBBE0991F4566D7D55 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
09:29:47.0739 4604 mrxsmb10 - ok
09:29:47.0752 4604 [ 5C80D8159181C7ABF1B14BA703B01E0B ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
09:29:47.0758 4604 mrxsmb20 - ok
09:29:47.0829 4604 [ 28023E86F17001F7CD9B15A5BC9AE07D ] msahci C:\Windows\system32\drivers\msahci.sys
09:29:47.0832 4604 msahci - ok
09:29:47.0893 4604 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
09:29:47.0898 4604 msdsm - ok
09:29:47.0931 4604 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
09:29:47.0939 4604 MSDTC - ok
09:29:47.0973 4604 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
09:29:47.0977 4604 Msfs - ok
09:29:48.0049 4604 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
09:29:48.0063 4604 msisadrv - ok
09:29:48.0118 4604 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
09:29:48.0125 4604 MSiSCSI - ok
09:29:48.0136 4604 msiserver - ok
09:29:48.0219 4604 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
09:29:48.0225 4604 MSKSSRV - ok
09:29:48.0401 4604 [ E077FCA2A7E79FB9BF67D3E30B5CE593 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
09:29:48.0402 4604 MsMpSvc - ok
09:29:48.0545 4604 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
09:29:48.0547 4604 MSPCLOCK - ok
09:29:48.0666 4604 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
09:29:48.0669 4604 MSPQM - ok
09:29:48.0719 4604 [ B5614AECB05A9340AA0FB55BF561CC63 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
09:29:48.0731 4604 MsRPC - ok
09:29:48.0769 4604 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
09:29:48.0771 4604 mssmbios - ok
09:29:48.0845 4604 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
09:29:48.0848 4604 MSTEE - ok
09:29:48.0917 4604 [ 6DFD1D322DE55B0B7DB7D21B90BEC49C ] Mup C:\Windows\system32\Drivers\mup.sys
09:29:48.0921 4604 Mup - ok
09:29:49.0105 4604 [ C43B25863FBD65B6D2A142AF3AE320CA ] napagent C:\Windows\system32\qagentRT.dll
09:29:49.0129 4604 napagent - ok
09:29:49.0184 4604 [ 3C21CE48FF529BB73DADB98770B54025 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
09:29:49.0189 4604 NativeWifiP - ok
09:29:49.0240 4604 [ 9BDC71790FA08F0A0B5F10462B1BD0B1 ] NDIS C:\Windows\system32\drivers\ndis.sys
09:29:49.0264 4604 NDIS - ok
09:29:49.0288 4604 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
09:29:49.0291 4604 NdisTapi - ok
09:29:49.0332 4604 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
09:29:49.0335 4604 Ndisuio - ok
09:29:49.0402 4604 [ 3D14C3B3496F88890D431E8AA022A411 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
09:29:49.0407 4604 NdisWan - ok
09:29:49.0444 4604 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
09:29:49.0447 4604 NDProxy - ok
09:29:49.0566 4604 [ 51C6D8BFBD4EA5B62A1BA7F4469250D3 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
09:29:49.0570 4604 Net Driver HPZ12 - ok
09:29:49.0653 4604 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
09:29:49.0656 4604 NetBIOS - ok
09:29:49.0723 4604 [ 7C5FEE5B1C5728507CD96FB4A13E7A02 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
09:29:49.0745 4604 netbt - ok
09:29:49.0834 4604 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] Netlogon C:\Windows\system32\lsass.exe
09:29:49.0838 4604 Netlogon - ok
09:29:49.0882 4604 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
09:29:49.0895 4604 Netman - ok
09:29:49.0927 4604 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
09:29:49.0938 4604 netprofm - ok
09:29:49.0974 4604 [ 0AD5876EF4E9EB77C8F93EB5B2FFF386 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:29:49.0981 4604 NetTcpPortSharing - ok
09:29:50.0142 4604 [ E559EA9138C77B5D1FDA8C558764A25F ] NETw5v32 C:\Windows\system32\DRIVERS\NETw5v32.sys
09:29:50.0299 4604 NETw5v32 - ok
09:29:50.0339 4604 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
09:29:50.0342 4604 nfrd960 - ok
09:29:50.0440 4604 [ 2CD24A6AF497D0E9B9BF3DA924ED05E6 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
09:29:50.0445 4604 NisDrv - ok
09:29:50.0592 4604 [ 3B846434055F80D9E89D0742F3ADAD34 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe
09:29:50.0600 4604 NisSrv - ok
09:29:50.0635 4604 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
09:29:50.0645 4604 NlaSvc - ok
09:29:50.0688 4604 [ ECB5003F484F9ED6C608D6D6C7886CBB ] Npfs C:\Windows\system32\drivers\Npfs.sys
09:29:50.0691 4604 Npfs - ok
09:29:50.0749 4604 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
09:29:50.0764 4604 nsi - ok
09:29:50.0791 4604 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
09:29:50.0793 4604 nsiproxy - ok
09:29:50.0862 4604 [ B4EFFE29EB4F15538FD8A9681108492D ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
09:29:50.0939 4604 Ntfs - ok
09:29:51.0051 4604 [ CB76F68BA0D57C5D25B538981B1C611C ] NTIBackupSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
09:29:51.0187 4604 NTIBackupSvc - ok
09:29:51.0237 4604 [ 2757D2BA59AEE155209E24942AB127C9 ] NTIDrvr C:\Windows\system32\DRIVERS\NTIDrvr.sys
09:29:51.0297 4604 NTIDrvr - ok
09:29:51.0332 4604 [ 547BFA3591C70674B0BFC99354AB78B3 ] NTIPPKernel C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys
09:29:51.0337 4604 NTIPPKernel - ok
09:29:51.0425 4604 [ DF1C10A75DF7E50195FC417F88A33227 ] NTISchedulerSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
09:29:51.0431 4604 NTISchedulerSvc - ok
09:29:51.0466 4604 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
09:29:51.0469 4604 ntrigdigi - ok
09:29:51.0510 4604 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
09:29:51.0512 4604 Null - ok
09:29:51.0555 4604 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
09:29:51.0572 4604 nvraid - ok
09:29:51.0605 4604 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
09:29:51.0609 4604 nvstor - ok
09:29:51.0659 4604 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
09:29:51.0664 4604 nv_agp - ok
09:29:51.0675 4604 NwlnkFlt - ok
09:29:51.0697 4604 NwlnkFwd - ok
09:29:51.0816 4604 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
09:29:51.0838 4604 odserv - ok
09:29:51.0885 4604 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
09:29:51.0889 4604 ohci1394 - ok
09:29:51.0941 4604 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:29:51.0947 4604 ose - ok
09:29:52.0007 4604 [ 5DE1A3972FD3112C75EB17BDCF454169 ] p2pimsvc C:\Windows\system32\p2psvc.dll
09:29:52.0073 4604 p2pimsvc - ok
09:29:52.0098 4604 [ 5DE1A3972FD3112C75EB17BDCF454169 ] p2psvc C:\Windows\system32\p2psvc.dll
09:29:52.0114 4604 p2psvc - ok
09:29:52.0148 4604 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
09:29:52.0158 4604 Parport - ok
09:29:52.0185 4604 [ 3B38467E7C3DAED009DFE359E17F139F ] partmgr C:\Windows\system32\drivers\partmgr.sys
09:29:52.0208 4604 partmgr - ok
09:29:52.0231 4604 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
09:29:52.0274 4604 Parvdm - ok
09:29:52.0297 4604 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
09:29:52.0329 4604 PcaSvc - ok
09:29:52.0355 4604 [ 01B94418DEB235DFF777CC80076354B4 ] pci C:\Windows\system32\drivers\pci.sys
09:29:52.0364 4604 pci - ok
09:29:52.0382 4604 [ FC175F5DDAB666D7F4D17449A547626F ] pciide C:\Windows\system32\drivers\pciide.sys
09:29:52.0390 4604 pciide - ok
09:29:52.0431 4604 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
09:29:52.0443 4604 pcmcia - ok
09:29:52.0553 4604 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
09:29:52.0587 4604 PEAUTH - ok
09:29:52.0708 4604 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
09:29:52.0794 4604 pla - ok
09:29:52.0879 4604 [ 78F975CB6D18265BE6F492EDB2D7BC7B ] PlugPlay C:\Windows\system32\umpnpmgr.dll
09:29:52.0927 4604 PlugPlay - ok
09:29:52.0964 4604 [ 79834AA2FBF9FE81EEBB229024F6F7FC ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
09:29:52.0969 4604 Pml Driver HPZ12 - ok
09:29:53.0028 4604 [ 5DE1A3972FD3112C75EB17BDCF454169 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
09:29:53.0044 4604 PNRPAutoReg - ok
09:29:53.0084 4604 [ 5DE1A3972FD3112C75EB17BDCF454169 ] PNRPsvc C:\Windows\system32\p2psvc.dll
09:29:53.0100 4604 PNRPsvc - ok
09:29:53.0176 4604 [ 47B8F37AA18B74D8C2E1BC1A7A2C8F8A ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
09:29:53.0199 4604 PolicyAgent - ok
09:29:53.0260 4604 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
09:29:53.0264 4604 PptpMiniport - ok
09:29:53.0326 4604 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\drivers\processr.sys
09:29:53.0329 4604 Processor - ok
09:29:53.0411 4604 [ B627E4FC8585E8843C5905D4D3587A90 ] ProfSvc C:\Windows\system32\profsvc.dll
09:29:53.0421 4604 ProfSvc - ok
09:29:53.0436 4604 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] ProtectedStorage C:\Windows\system32\lsass.exe
09:29:53.0441 4604 ProtectedStorage - ok
09:29:53.0483 4604 [ BFEF604508A0ED1EAE2A73E872555FFB ] PSched C:\Windows\system32\DRIVERS\pacer.sys
09:29:53.0486 4604 PSched - ok
09:29:53.0524 4604 [ AB94285FF6C6BC5433407D8D182A4BB4 ] PSDFilter C:\Windows\system32\DRIVERS\psdfilter.sys
09:29:53.0527 4604 PSDFilter - ok
09:29:53.0545 4604 [ 2AAF9A5D7A63D26BFAEA853C5F2292BC ] PSDNServ C:\Windows\system32\DRIVERS\PSDNServ.sys
09:29:53.0547 4604 PSDNServ - ok
09:29:53.0566 4604 [ 0EB8CEC99855BEAE5B0D02C2302619EF ] psdvdisk C:\Windows\system32\DRIVERS\PSDVdisk.sys
09:29:53.0571 4604 psdvdisk - ok
09:29:53.0635 4604 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
09:29:53.0703 4604 ql2300 - ok
09:29:53.0724 4604 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
09:29:53.0732 4604 ql40xx - ok
09:29:53.0765 4604 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
09:29:53.0788 4604 QWAVE - ok
09:29:53.0808 4604 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
09:29:53.0812 4604 QWAVEdrv - ok
09:29:53.0836 4604 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
09:29:53.0845 4604 RasAcd - ok
09:29:53.0889 4604 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
09:29:53.0898 4604 RasAuto - ok
09:29:53.0919 4604 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
09:29:53.0926 4604 Rasl2tp - ok
09:29:53.0952 4604 [ 6E7C284FC5C4EC07AD164D93810385A6 ] RasMan C:\Windows\System32\rasmans.dll
09:29:53.0975 4604 RasMan - ok
09:29:54.0000 4604 [ 3E9D9B048107B40D87B97DF2E48E0744 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
09:29:54.0005 4604 RasPppoe - ok
09:29:54.0040 4604 [ A7D141684E9500AC928A772ED8E6B671 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
09:29:54.0044 4604 RasSstp - ok
09:29:54.0069 4604 [ 6E1C5D0457622F9EE35F683110E93D14 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
09:29:54.0077 4604 rdbss - ok
09:29:54.0088 4604 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
09:29:54.0094 4604 RDPCDD - ok
09:29:54.0139 4604 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
09:29:54.0149 4604 rdpdr - ok
09:29:54.0161 4604 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
09:29:54.0169 4604 RDPENCDD - ok
09:29:54.0204 4604 [ E1C18F4097A5ABCEC941DC4B2F99DB7E ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
09:29:54.0211 4604 RDPWD - ok
09:29:54.0252 4604 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
09:29:54.0259 4604 RemoteAccess - ok
09:29:54.0298 4604 [ CC4E32400F3C7253400CF8F3F3A0B676 ] RemoteRegistry C:\Windows\system32\regsvc.dll
09:29:54.0307 4604 RemoteRegistry - ok
09:29:54.0346 4604 [ 34CC78C06587718C2AD6D3AA83B1F072 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
09:29:54.0350 4604 RFCOMM - ok
09:29:54.0442 4604 [ 17E0BEF5CA5C9CE52CC8082AC6EBC449 ] RichVideo C:\Program Files\Cyberlink\Shared files\RichVideo.exe
09:29:54.0450 4604 RichVideo - ok
09:29:54.0477 4604 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
09:29:54.0482 4604 RpcLocator - ok
09:29:54.0527 4604 [ 301AE00E12408650BADDC04DBC832830 ] RpcSs C:\Windows\system32\rpcss.dll
09:29:54.0544 4604 RpcSs - ok
09:29:54.0583 4604 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
09:29:54.0587 4604 rspndr - ok
09:29:54.0598 4604 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] SamSs C:\Windows\system32\lsass.exe
09:29:54.0603 4604 SamSs - ok
09:29:54.0664 4604 [ 39763504067962108505BFF25F024345 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
09:29:54.0666 4604 SASDIFSV - ok
09:29:54.0726 4604 [ 7CE61C25C159F50F9EAF6D77FC83FA35 ] SASENUM C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
09:29:54.0729 4604 SASENUM - ok
09:29:54.0759 4604 [ 77B9FC20084B48408AD3E87570EB4A85 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
09:29:54.0763 4604 SASKUTIL - ok
09:29:54.0827 4604 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
09:29:54.0832 4604 sbp2port - ok
09:29:54.0861 4604 [ 11387E32642269C7E62E8B52C060B3C6 ] SCardSvr C:\Windows\System32\SCardSvr.dll
09:29:54.0871 4604 SCardSvr - ok
09:29:54.0951 4604 [ 7B587B8A6D4A99F79D2902D0385F29BD ] Schedule C:\Windows\system32\schedsvc.dll
09:29:55.0007 4604 Schedule - ok
09:29:55.0026 4604 [ 87C2D0377B23E2D8A41093C2F5FB1A5B ] SCPolicySvc C:\Windows\System32\certprop.dll
09:29:55.0028 4604 SCPolicySvc - ok
09:29:55.0065 4604 [ 126EA89BCC413EE45E3004FB0764888F ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
09:29:55.0074 4604 sdbus - ok
09:29:55.0106 4604 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
09:29:55.0116 4604 SDRSVC - ok
09:29:55.0143 4604 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
09:29:55.0145 4604 secdrv - ok
09:29:55.0169 4604 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
09:29:55.0176 4604 seclogon - ok
09:29:55.0194 4604 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\system32\sens.dll
09:29:55.0203 4604 SENS - ok
09:29:55.0214 4604 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
09:29:55.0223 4604 Serenum - ok
09:29:55.0248 4604 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
09:29:55.0253 4604 Serial - ok
09:29:55.0274 4604 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
09:29:55.0277 4604 sermouse - ok
09:29:55.0336 4604 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
09:29:55.0345 4604 SessionEnv - ok
09:29:55.0362 4604 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
09:29:55.0365 4604 sffdisk - ok
09:29:55.0389 4604 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
09:29:55.0395 4604 sffp_mmc - ok
09:29:55.0409 4604 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
09:29:55.0415 4604 sffp_sd - ok
09:29:55.0430 4604 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
09:29:55.0436 4604 sfloppy - ok
09:29:55.0486 4604 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
09:29:55.0507 4604 SharedAccess - ok
09:29:55.0564 4604 [ 1E3FDB80E40A3CE645F229DFBDFB7694 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
09:29:55.0587 4604 ShellHWDetection - ok
09:29:55.0606 4604 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
09:29:55.0610 4604 sisagp - ok
09:29:55.0630 4604 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
09:29:55.0637 4604 SiSRaid2 - ok
09:29:55.0666 4604 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
09:29:55.0672 4604 SiSRaid4 - ok
09:29:55.0798 4604 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
09:29:55.0804 4604 SkypeUpdate - ok
09:29:55.0937 4604 [ 0BA91E1358AD25236863039BB2609A2E ] slsvc C:\Windows\system32\SLsvc.exe
09:29:56.0025 4604 slsvc - ok
09:29:56.0052 4604 [ 7C6DC44CA0BFA6291629AB764200D1D4 ] SLUINotify C:\Windows\system32\SLUINotify.dll
09:29:56.0075 4604 SLUINotify - ok
09:29:56.0090 4604 [ 031E6BCD53C9B2B9ACE111EAFEC347B6 ] Smb C:\Windows\system32\DRIVERS\smb.sys
09:29:56.0097 4604 Smb - ok
09:29:56.0140 4604 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
09:29:56.0148 4604 SNMPTRAP - ok
09:29:56.0164 4604 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
09:29:56.0167 4604 spldr - ok
09:29:56.0204 4604 [ 3665F79026A3F91FBCA63F2C65A09B19 ] Spooler C:\Windows\System32\spoolsv.exe
09:29:56.0214 4604 Spooler - ok
09:29:56.0266 4604 [ 2252AEF839B1093D16761189F45AF885 ] srv C:\Windows\system32\DRIVERS\srv.sys
09:29:56.0285 4604 srv - ok
09:29:56.0321 4604 [ B7FF59408034119476B00A81BB53D5D1 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
09:29:56.0327 4604 srv2 - ok
09:29:56.0383 4604 [ 2ACCC9B12AF02030F531E6CCA6F8B76E ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
09:29:56.0389 4604 srvnet - ok
09:29:56.0465 4604 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
09:29:56.0476 4604 SSDPSRV - ok
09:29:56.0509 4604 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
09:29:56.0519 4604 SstpSvc - ok
09:29:56.0586 4604 [ 7DD08A597BC56051F320DA0BAF69E389 ] stisvc C:\Windows\System32\wiaservc.dll
09:29:56.0642 4604 stisvc - ok
09:29:56.0679 4604 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
09:29:56.0682 4604 swenum - ok
09:29:56.0717 4604 [ B36C7CDB86F7F7A8E884479219766950 ] swprv C:\Windows\System32\swprv.dll
09:29:56.0740 4604 swprv - ok
09:29:56.0767 4604 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
09:29:56.0770 4604 Symc8xx - ok
09:29:56.0848 4604 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
09:29:56.0852 4604 Sym_hi - ok
09:29:56.0875 4604 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
09:29:56.0878 4604 Sym_u3 - ok
09:29:56.0978 4604 [ BF7AA84D5AF0FAA0978C840E63B17DBF ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
09:29:56.0984 4604 SynTP - ok
09:29:57.0033 4604 [ 8710A92D0024B03B5FB9540DF1F71F1D ] SysMain C:\Windows\system32\sysmain.dll
09:29:57.0168 4604 SysMain - ok
09:29:57.0298 4604 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
09:29:57.0315 4604 TabletInputService - ok
09:29:57.0355 4604 [ 680916BB09EE0F3A6ACA7C274B0D633F ] TapiSrv C:\Windows\System32\tapisrv.dll
09:29:57.0378 4604 TapiSrv - ok
09:29:57.0437 4604 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
09:29:57.0445 4604 TBS - ok
09:29:57.0527 4604 [ 6216A954ED7045B62880A92D6C9B9FC7 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
09:29:57.0562 4604 Tcpip - ok
09:29:57.0618 4604 [ 6216A954ED7045B62880A92D6C9B9FC7 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
09:29:57.0634 4604 Tcpip6 - ok
09:29:57.0750 4604 [ D4A2E4A4B011F3A883AF77315A5AE76B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
09:29:57.0753 4604 tcpipreg - ok
09:29:57.0804 4604 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
09:29:57.0807 4604 TDPIPE - ok
09:29:57.0868 4604 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
09:29:57.0872 4604 TDTCP - ok
09:29:57.0936 4604 [ D09276B1FAB033CE1D40DCBDF303D10F ] tdx C:\Windows\system32\DRIVERS\tdx.sys
09:29:57.0941 4604 tdx - ok
09:29:57.0998 4604 [ A048056F5E1A96A9BF3071B91741A5AA ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
09:29:58.0002 4604 TermDD - ok
09:29:58.0048 4604 [ D605031E225AACCBCEB5B76A4F1603A6 ] TermService C:\Windows\System32\termsrv.dll
09:29:58.0071 4604 TermService - ok
09:29:58.0111 4604 [ 1E3FDB80E40A3CE645F229DFBDFB7694 ] Themes C:\Windows\system32\shsvcs.dll
09:29:58.0121 4604 Themes - ok
09:29:58.0220 4604 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
09:29:58.0225 4604 THREADORDER - ok
09:29:58.0260 4604 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
09:29:58.0269 4604 TrkWks - ok
09:29:58.0383 4604 [ 16613A1BAD034D4ECF957AF18B7C2FF5 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
09:29:58.0386 4604 TrustedInstaller - ok
09:29:58.0436 4604 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
09:29:58.0439 4604 tssecsrv - ok
09:29:58.0495 4604 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
09:29:58.0498 4604 tunmp - ok
09:29:58.0535 4604 [ 6042505FF6FA9AC1EF7684D0E03B6940 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
09:29:58.0538 4604 tunnel - ok
09:29:58.0595 4604 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
09:29:58.0599 4604 uagp35 - ok
09:29:58.0628 4604 [ F763E070843EE2803DE1395002B42938 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
09:29:58.0696 4604 UBHelper - ok
09:29:58.0731 4604 [ 8B5088058FA1D1CD897A2113CCFF6C58 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
09:29:58.0741 4604 udfs - ok
09:29:58.0817 4604 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
09:29:58.0825 4604 UI0Detect - ok
09:29:58.0850 4604 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
09:29:58.0855 4604 uliagpkx - ok
09:29:58.0899 4604 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
09:29:58.0907 4604 uliahci - ok
09:29:58.0976 4604 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
09:29:58.0981 4604 UlSata - ok
09:29:59.0013 4604 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
09:29:59.0018 4604 ulsata2 - ok
09:29:59.0047 4604 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
09:29:59.0050 4604 umbus - ok
09:29:59.0133 4604 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
09:29:59.0146 4604 upnphost - ok
09:29:59.0235 4604 [ EAFE1E00739AFE6C51487A050E772E17 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
09:29:59.0299 4604 USBAAPL - ok
09:29:59.0340 4604 [ A7CD5B4ADEA26765CAB06BDAB7B07B13 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
09:29:59.0345 4604 usbccgp - ok
09:29:59.0493 4604 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
09:29:59.0497 4604 usbcir - ok
09:29:59.0559 4604 [ 686D4188AE36254C3008B71FEDACADF3 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
09:29:59.0562 4604 usbehci - ok
09:29:59.0595 4604 [ 4E42F665A658F08D153F7FFFE7C83806 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
09:29:59.0603 4604 usbhub - ok
09:29:59.0632 4604 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
09:29:59.0635 4604 usbohci - ok
09:29:59.0668 4604 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
09:29:59.0671 4604 usbprint - ok
09:29:59.0753 4604 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
09:29:59.0757 4604 usbscan - ok
09:29:59.0804 4604 [ 87BA6B83C5D19B69160968D07D6E2982 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
09:29:59.0808 4604 USBSTOR - ok
09:29:59.0849 4604 [ 40F95A3D6D50D82F947F1D167C2EC39D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
09:29:59.0852 4604 usbuhci - ok
09:29:59.0897 4604 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
09:29:59.0904 4604 usbvideo - ok
09:29:59.0960 4604 [ 032A0ACC3909AE7215D524E29D536797 ] UxSms C:\Windows\System32\uxsms.dll
09:29:59.0968 4604 UxSms - ok
09:30:00.0021 4604 [ B13BC395B9D6116628F5AF47E0802AC4 ] vds C:\Windows\System32\vds.exe
09:30:00.0045 4604 vds - ok
09:30:00.0088 4604 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
09:30:00.0091 4604 vga - ok
09:30:00.0103 4604 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
09:30:00.0106 4604 VgaSave - ok
09:30:00.0137 4604 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
09:30:00.0141 4604 viaagp - ok
09:30:00.0259 4604 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
09:30:00.0263 4604 ViaC7 - ok
09:30:00.0312 4604 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
09:30:00.0315 4604 viaide - ok
09:30:00.0395 4604 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
09:30:00.0399 4604 volmgr - ok
09:30:00.0469 4604 [ 98F5FFE6316BD74E9E2C97206C190196 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
09:30:00.0480 4604 volmgrx - ok
09:30:00.0516 4604 [ D8B4A53DD2769F226B3EB374374987C9 ] volsnap C:\Windows\system32\drivers\volsnap.sys
09:30:00.0525 4604 volsnap - ok
09:30:00.0624 4604 [ 587253E09325E6BF226B299774B728A9 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
09:30:00.0629 4604 vsmraid - ok
09:30:00.0729 4604 [ D5FB73D19C46ADE183F968E13F186B23 ] VSS C:\Windows\system32\vssvc.exe
09:30:00.0797 4604 VSS - ok
09:30:00.0955 4604 [ 7D110D645030C05A06C3CD08D1E47D0A ] vToolbarUpdater13.2.0 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe
09:30:00.0990 4604 vToolbarUpdater13.2.0 - ok
09:30:01.0024 4604 [ 1CF9206966A8458CDA9A8B20DF8AB7D3 ] W32Time C:\Windows\system32\w32time.dll
09:30:01.0047 4604 W32Time - ok
09:30:01.0080 4604 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
09:30:01.0083 4604 WacomPen - ok
09:30:01.0134 4604 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
09:30:01.0137 4604 Wanarp - ok
09:30:01.0146 4604 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
09:30:01.0149 4604 Wanarpv6 - ok
09:30:01.0232 4604 [ F3A5C2E1A6533192B070D06ECF6BE796 ] wcncsvc C:\Windows\System32\wcncsvc.dll
09:30:01.0255 4604 wcncsvc - ok
09:30:01.0334 4604 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
09:30:01.0342 4604 WcsPlugInService - ok
09:30:01.0378 4604 [ 78FE9542363F297B18C027B2D7E7C07F ] Wd C:\Windows\system32\drivers\wd.sys
09:30:01.0382 4604 Wd - ok
09:30:01.0451 4604 [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
09:30:01.0474 4604 Wdf01000 - ok
09:30:01.0526 4604 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
09:30:01.0536 4604 WdiServiceHost - ok
09:30:01.0545 4604 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
09:30:01.0554 4604 WdiSystemHost - ok
09:30:01.0614 4604 [ CF9A5F41789B642DB967021DE06A2713 ] WebClient C:\Windows\System32\webclnt.dll
09:30:01.0637 4604 WebClient - ok
09:30:01.0789 4604 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
09:30:01.0801 4604 Wecsvc - ok
09:30:01.0849 4604 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
09:30:01.0859 4604 wercplsupport - ok
09:30:01.0903 4604 [ FD1965AAA112C6818A30AB02742D0461 ] WerSvc C:\Windows\System32\WerSvc.dll
09:30:01.0913 4604 WerSvc - ok
09:30:01.0967 4604 [ 3FA87D56769838AAC82FAFC3E78FC732 ] winbondcir C:\Windows\system32\DRIVERS\winbondcir.sys
09:30:01.0970 4604 winbondcir - ok
09:30:02.0019 4604 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
09:30:02.0027 4604 WinDefend - ok
09:30:02.0045 4604 WinHttpAutoProxySvc - ok
09:30:02.0267 4604 [ 00B79A7C984678F24CF052E5BEB3A2F5 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
09:30:02.0274 4604 Winmgmt - ok
09:30:02.0367 4604 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
09:30:02.0490 4604 WinRM - ok
09:30:02.0564 4604 [ 275F4346E569DF56CFB95243BD6F6FF0 ] Wlansvc C:\Windows\System32\wlansvc.dll
09:30:02.0597 4604 Wlansvc - ok
09:30:02.0621 4604 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
09:30:02.0624 4604 WmiAcpi - ok
09:30:02.0671 4604 [ ABA4CF9F856D9A3A25F4DDD7690A6E9D ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
09:30:02.0677 4604 wmiApSrv - ok
09:30:02.0775 4604 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
09:30:02.0821 4604 WMPNetworkSvc - ok
09:30:02.0876 4604 [ 5D94CD167751294962BA238D82DD1BB8 ] WPCSvc C:\Windows\System32\wpcsvc.dll
09:30:02.0887 4604 WPCSvc - ok
09:30:02.0933 4604 [ 396D406292B0CD26E3504FFE82784702 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
09:30:02.0943 4604 WPDBusEnum - ok
09:30:03.0047 4604 [ 0CEC23084B51B8288099EB710224E955 ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
09:30:03.0050 4604 WpdUsb - ok
09:30:03.0152 4604 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
09:30:03.0186 4604 WPFFontCache_v0400 - ok
09:30:03.0224 4604 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
09:30:03.0227 4604 ws2ifsl - ok
09:30:03.0320 4604 [ 683DD16B590372F2C9661D277F35E49C ] wscsvc C:\Windows\system32\wscsvc.dll
09:30:03.0329 4604 wscsvc - ok
09:30:03.0341 4604 WSearch - ok
09:30:03.0480 4604 [ 6298277B73C77FA99106B271A7525163 ] wuauserv C:\Windows\system32\wuaueng.dll
09:30:03.0570 4604 wuauserv - ok
09:30:03.0657 4604 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
09:30:03.0662 4604 WUDFRd - ok
09:30:03.0730 4604 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
09:30:03.0740 4604 wudfsvc - ok
09:30:03.0846 4604 [ 4D840C6AF3C020ED3A35EFBA9025CF4A ] {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl
09:30:03.0849 4604 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} - ok
09:30:03.0856 4604 ================ Scan global ===============================
09:30:03.0912 4604 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
09:30:03.0968 4604 [ F42F8855CB5C22E203C6672B124F17FD ] C:\Windows\system32\winsrv.dll
09:30:04.0004 4604 [ F42F8855CB5C22E203C6672B124F17FD ] C:\Windows\system32\winsrv.dll
09:30:04.0039 4604 [ 2B336AB6286D6C81FA02CBAB914E3C6C ] C:\Windows\system32\services.exe
09:30:04.0062 4604 [Global] - ok
09:30:04.0063 4604 ================ Scan MBR ==================================
09:30:04.0092 4604 [ 7BA4C7EA1EF33A92F5F01BE63EDACB6A ] \Device\Harddisk0\DR0
09:30:10.0555 4604 \Device\Harddisk0\DR0 - ok
09:30:10.0563 4604 ================ Scan VBR ==================================
09:30:10.0631 4604 [ AB643BC3D6FBAD57E89989D44AC70E86 ] \Device\Harddisk0\DR0\Partition1
09:30:10.0634 4604 \Device\Harddisk0\DR0\Partition1 - ok
09:30:10.0704 4604 [ 707EC944A0B0E0D6FD2ED3F1A414FCB1 ] \Device\Harddisk0\DR0\Partition2
09:30:10.0717 4604 \Device\Harddisk0\DR0\Partition2 - ok
09:30:10.0718 4604 ============================================================
09:30:10.0718 4604 Scan finished
09:30:10.0718 4604 ============================================================
09:30:10.0749 3652 Detected object count: 0
09:30:10.0749 3652 Actual detected object count: 0
09:31:16.0499 5964 Deinitialize success




aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-11-27 09:31:44
-----------------------------
09:31:44.781 OS Version: Windows 6.0.6001 Service Pack 1
09:31:44.781 Number of processors: 2 586 0xF0D
09:31:44.783 ComputerName: DAN-PC UserName: Dan
09:32:38.555 Initialize success
09:33:45.118 AVAST engine defs: 12112700
09:33:54.273 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
09:33:54.277 Disk 0 Vendor: WDC_WD16 11.0 Size: 152627MB BusType: 3
09:33:54.336 Disk 0 MBR read successfully
09:33:54.342 Disk 0 MBR scan
09:33:54.356 Disk 0 unknown MBR code
09:33:54.377 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 10240 MB offset 2048
09:33:54.430 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 71192 MB offset 20973568
09:33:54.491 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 71193 MB offset 166774784
09:33:54.533 Disk 0 scanning sectors +312578048
09:33:54.635 Disk 0 scanning C:\Windows\system32\drivers
09:34:29.711 Service scanning
09:34:56.210 Service MpKsl07ae80e1 C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AB5C230C-5722-4193-B903-5BDF2865CEA6}\MpKsl07ae80e1.sys **LOCKED** 32
09:35:32.219 Modules scanning
09:35:40.007 Disk 0 trace - called modules:
09:35:40.046 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys
09:35:40.057 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8616c2b0]
09:35:40.068 3 CLASSPNP.SYS[8a5a1745] -> nt!IofCallDriver -> [0x856c5630]
09:35:40.080 5 acpi.sys[806986a0] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x856b7028]
09:35:42.991 AVAST engine scan C:\Windows
09:36:04.559 AVAST engine scan C:\Windows\system32
09:43:36.814 AVAST engine scan C:\Windows\system32\drivers
09:44:14.017 AVAST engine scan C:\Users\Dan
09:51:03.970 Disk 0 MBR has been saved successfully to "C:\Users\Dan\Desktop\MBR.dat"
09:51:04.302 The log file has been saved successfully to "C:\Users\Dan\Desktop\aswMBR27.11.12.txt"

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:41 PM

Posted 27 November 2012 - 11:25 AM

Hello, looks like an infected MBR to remove it...
Please follow this Preparation Guide and post in a new topic.

Let me know if all went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users