Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected? What is Jeetyetmedia?


  • This topic is locked This topic is locked
31 replies to this topic

#1 Ca20

Ca20

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 29 November 2012 - 10:28 PM

I am running Windows 7 service pack 1 build 7601.

I've browsing tumblr and some other sites (Redflagdeals, Yelp) and noticed ads on the bottom or the right side of the screen.
I mainly use Firefox, so I'm not sure if it's affecting Chrome or IE9 but I checked and there aren't any abnormal extensions in Chrome and IE9, only just firefox is affected.
I've looked it up and I'm not sure if jeetyetmedia.com is malware or not?
Is my computer compromised and my personal information at risk?

A lot of solutions online say to delete certain files, but I can't find them, and I don't know how to and which files to edit on the windows file registry.

I noticed an extension in firefox called Yontoo that I never seen or remembering installing and I removed it as suggested by this site (http://www.infobarrel.com/How_Do_I_Get_Rid_of_Jeetyet_Media_How_to_get_rid_of_Jeetyet_Media_on_Your_PC) and uninstalled it from the add/remove programs in Control Panel . The ads have disappeared for now, but I'm not sure if this is just a bandaid solution. I restarted my computer and found it in the add/remove programs and uninstalled it again. I restarted several times and it is gone in the add/remove programs under control panel. I'm worried because of the I sometimes check my bank info online and this might compromise my personal info.
I've also did a search for and deleted all yontoo files in my C: drive.
I'm very worried about my private information.

Help is much appreciated!

Edited by Ca20, 29 November 2012 - 11:14 PM.


BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:42 AM

Posted 30 November 2012 - 09:55 AM

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here.If you get crashes in normal mode,run it in safemode with networking

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 04:04 PM

TDSSKiller
16:02:48.0019 6904 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
16:02:48.0469 6904 ============================================================
16:02:48.0469 6904 Current date / time: 2012/11/30 16:02:48.0469
16:02:48.0469 6904 SystemInfo:
16:02:48.0469 6904
16:02:48.0469 6904 OS Version: 6.1.7601 ServicePack: 1.0
16:02:48.0469 6904 Product type: Workstation
16:02:48.0469 6904 ComputerName: COWFUN-VAIO
16:02:48.0469 6904 UserName: cowfun
16:02:48.0469 6904 Windows directory: C:\Windows
16:02:48.0469 6904 System windows directory: C:\Windows
16:02:48.0469 6904 Running under WOW64
16:02:48.0469 6904 Processor architecture: Intel x64
16:02:48.0469 6904 Number of processors: 4
16:02:48.0469 6904 Page size: 0x1000
16:02:48.0469 6904 Boot type: Normal boot
16:02:48.0469 6904 ============================================================
16:02:49.0319 6904 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:02:49.0329 6904 ============================================================
16:02:49.0329 6904 \Device\Harddisk0\DR0:
16:02:49.0329 6904 MBR partitions:
16:02:49.0329 6904 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x13B1800, BlocksNum 0x32000
16:02:49.0329 6904 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x13E3800, BlocksNum 0x38FA2030
16:02:49.0329 6904 ============================================================
16:02:49.0349 6904 C: <-> \Device\Harddisk0\DR0\Partition2
16:02:49.0349 6904 ============================================================
16:02:49.0349 6904 Initialize success
16:02:49.0349 6904 ============================================================
16:03:15.0279 6860 ============================================================
16:03:15.0279 6860 Scan started
16:03:15.0279 6860 Mode: Manual; TDLFS;
16:03:15.0279 6860 ============================================================
16:03:16.0049 6860 ================ Scan system memory ========================
16:03:16.0049 6860 System memory - ok
16:03:16.0049 6860 ================ Scan services =============================
16:03:16.0229 6860 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
16:03:16.0229 6860 1394ohci - ok
16:03:16.0319 6860 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
16:03:16.0329 6860 ACDaemon - ok
16:03:16.0369 6860 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
16:03:16.0379 6860 ACPI - ok
16:03:16.0419 6860 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
16:03:16.0419 6860 AcpiPmi - ok
16:03:16.0479 6860 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
16:03:16.0479 6860 adp94xx - ok
16:03:16.0519 6860 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
16:03:16.0519 6860 adpahci - ok
16:03:16.0559 6860 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
16:03:16.0559 6860 adpu320 - ok
16:03:16.0589 6860 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
16:03:16.0589 6860 AeLookupSvc - ok
16:03:16.0639 6860 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
16:03:16.0639 6860 AFD - ok
16:03:16.0679 6860 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
16:03:16.0679 6860 agp440 - ok
16:03:16.0709 6860 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
16:03:16.0709 6860 ALG - ok
16:03:16.0749 6860 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
16:03:16.0749 6860 aliide - ok
16:03:16.0769 6860 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
16:03:16.0779 6860 amdide - ok
16:03:16.0819 6860 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
16:03:16.0819 6860 AmdK8 - ok
16:03:16.0839 6860 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
16:03:16.0839 6860 AmdPPM - ok
16:03:16.0879 6860 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
16:03:16.0879 6860 amdsata - ok
16:03:16.0919 6860 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
16:03:16.0919 6860 amdsbs - ok
16:03:16.0949 6860 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
16:03:16.0949 6860 amdxata - ok
16:03:16.0999 6860 [ 2D45F2DFBC3D8F53DF7EBEFFA8C9BC38 ] ApfiltrService C:\Windows\system32\drivers\Apfiltr.sys
16:03:16.0999 6860 ApfiltrService - ok
16:03:17.0059 6860 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
16:03:17.0059 6860 AppID - ok
16:03:17.0069 6860 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
16:03:17.0079 6860 AppIDSvc - ok
16:03:17.0099 6860 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
16:03:17.0099 6860 Appinfo - ok
16:03:17.0139 6860 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
16:03:17.0139 6860 arc - ok
16:03:17.0169 6860 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
16:03:17.0169 6860 arcsas - ok
16:03:17.0189 6860 [ C130BC4A51B1382B2BE8E44579EC4C0A ] ArcSoftKsUFilter C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
16:03:17.0189 6860 ArcSoftKsUFilter - ok
16:03:17.0349 6860 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
16:03:17.0359 6860 aspnet_state - ok
16:03:17.0389 6860 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
16:03:17.0399 6860 AsyncMac - ok
16:03:17.0429 6860 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
16:03:17.0429 6860 atapi - ok
16:03:17.0659 6860 [ 08BAAA2432E81031A6C3B11AD5A67E2B ] athr C:\Windows\system32\DRIVERS\athrx.sys
16:03:17.0679 6860 athr - ok
16:03:17.0729 6860 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
16:03:17.0739 6860 AudioEndpointBuilder - ok
16:03:17.0759 6860 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
16:03:17.0769 6860 AudioSrv - ok
16:03:17.0839 6860 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
16:03:17.0839 6860 AxInstSV - ok
16:03:17.0889 6860 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
16:03:17.0899 6860 b06bdrv - ok
16:03:17.0939 6860 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
16:03:17.0939 6860 b57nd60a - ok
16:03:17.0979 6860 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
16:03:17.0979 6860 BDESVC - ok
16:03:17.0989 6860 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
16:03:17.0989 6860 Beep - ok
16:03:18.0059 6860 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
16:03:18.0069 6860 BFE - ok
16:03:18.0299 6860 [ ED97ADAF00A61F57A2CCBBB1CE58C600 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\BASHDefs\20121106.001\BHDrvx64.sys
16:03:18.0309 6860 BHDrvx64 - ok
16:03:18.0369 6860 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
16:03:18.0379 6860 BITS - ok
16:03:18.0429 6860 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
16:03:18.0429 6860 blbdrive - ok
16:03:18.0459 6860 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
16:03:18.0459 6860 bowser - ok
16:03:18.0509 6860 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
16:03:18.0509 6860 BrFiltLo - ok
16:03:18.0529 6860 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
16:03:18.0529 6860 BrFiltUp - ok
16:03:18.0599 6860 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
16:03:18.0599 6860 Browser - ok
16:03:18.0629 6860 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
16:03:18.0629 6860 Brserid - ok
16:03:18.0649 6860 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
16:03:18.0649 6860 BrSerWdm - ok
16:03:18.0689 6860 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
16:03:18.0689 6860 BrUsbMdm - ok
16:03:18.0709 6860 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
16:03:18.0709 6860 BrUsbSer - ok
16:03:18.0769 6860 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
16:03:18.0769 6860 BthEnum - ok
16:03:18.0819 6860 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
16:03:18.0819 6860 BTHMODEM - ok
16:03:18.0849 6860 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
16:03:18.0849 6860 BthPan - ok
16:03:18.0899 6860 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
16:03:18.0899 6860 BTHPORT - ok
16:03:18.0949 6860 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
16:03:18.0949 6860 bthserv - ok
16:03:18.0969 6860 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
16:03:18.0979 6860 BTHUSB - ok
16:03:19.0029 6860 [ 59E3510784548C6939C1B3B985C232E3 ] btwampfl C:\Windows\system32\drivers\btwampfl.sys
16:03:19.0029 6860 btwampfl - ok
16:03:19.0059 6860 [ 1872074ED0A3FB22E3F1E3197B984BFA ] btwaudio C:\Windows\system32\drivers\btwaudio.sys
16:03:19.0059 6860 btwaudio - ok
16:03:19.0109 6860 [ 691CF076C33AB1C3A5B2FD5450300733 ] btwavdt C:\Windows\system32\drivers\btwavdt.sys
16:03:19.0119 6860 btwavdt - ok
16:03:19.0229 6860 [ 8BA6E93A182126781952A7895EC1E4B2 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
16:03:19.0239 6860 btwdins - ok
16:03:19.0249 6860 [ 07096D2BC22CCB6CEA5A532DF0BE8A75 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys
16:03:19.0249 6860 btwl2cap - ok
16:03:19.0279 6860 [ C9273B20DEC8CE38DBCE5D29DE63C907 ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys
16:03:19.0279 6860 btwrchid - ok
16:03:19.0429 6860 [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_NIS C:\Windows\system32\drivers\NISx64\1309000.009\ccSetx64.sys
16:03:19.0429 6860 ccSet_NIS - ok
16:03:19.0479 6860 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
16:03:19.0479 6860 cdfs - ok
16:03:19.0529 6860 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
16:03:19.0529 6860 cdrom - ok
16:03:19.0609 6860 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
16:03:19.0609 6860 CertPropSvc - ok
16:03:19.0669 6860 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
16:03:19.0669 6860 circlass - ok
16:03:19.0749 6860 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
16:03:19.0759 6860 CLFS - ok
16:03:19.0809 6860 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:03:19.0809 6860 clr_optimization_v2.0.50727_32 - ok
16:03:19.0849 6860 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:03:19.0849 6860 clr_optimization_v2.0.50727_64 - ok
16:03:19.0999 6860 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:03:19.0999 6860 clr_optimization_v4.0.30319_32 - ok
16:03:20.0019 6860 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:03:20.0019 6860 clr_optimization_v4.0.30319_64 - ok
16:03:20.0059 6860 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
16:03:20.0059 6860 CmBatt - ok
16:03:20.0079 6860 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
16:03:20.0079 6860 cmdide - ok
16:03:20.0129 6860 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
16:03:20.0129 6860 CNG - ok
16:03:20.0179 6860 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
16:03:20.0179 6860 Compbatt - ok
16:03:20.0199 6860 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
16:03:20.0209 6860 CompositeBus - ok
16:03:20.0219 6860 COMSysApp - ok
16:03:20.0249 6860 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
16:03:20.0249 6860 crcdisk - ok
16:03:20.0309 6860 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
16:03:20.0309 6860 CryptSvc - ok
16:03:20.0359 6860 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
16:03:20.0369 6860 DcomLaunch - ok
16:03:20.0389 6860 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
16:03:20.0389 6860 defragsvc - ok
16:03:20.0419 6860 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
16:03:20.0419 6860 DfsC - ok
16:03:20.0479 6860 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
16:03:20.0479 6860 Dhcp - ok
16:03:20.0489 6860 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
16:03:20.0499 6860 discache - ok
16:03:20.0539 6860 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
16:03:20.0539 6860 Disk - ok
16:03:20.0559 6860 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
16:03:20.0569 6860 Dnscache - ok
16:03:20.0599 6860 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
16:03:20.0599 6860 dot3svc - ok
16:03:20.0619 6860 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
16:03:20.0619 6860 DPS - ok
16:03:20.0649 6860 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
16:03:20.0649 6860 drmkaud - ok
16:03:20.0699 6860 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
16:03:20.0699 6860 DXGKrnl - ok
16:03:20.0739 6860 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
16:03:20.0739 6860 EapHost - ok
16:03:21.0009 6860 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
16:03:21.0029 6860 ebdrv - ok
16:03:21.0189 6860 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
16:03:21.0199 6860 eeCtrl - ok
16:03:21.0289 6860 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
16:03:21.0289 6860 EFS - ok
16:03:21.0409 6860 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
16:03:21.0419 6860 ehRecvr - ok
16:03:21.0449 6860 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
16:03:21.0449 6860 ehSched - ok
16:03:21.0599 6860 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
16:03:21.0609 6860 elxstor - ok
16:03:21.0729 6860 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
16:03:21.0729 6860 EraserUtilRebootDrv - ok
16:03:21.0839 6860 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
16:03:21.0839 6860 ErrDev - ok
16:03:21.0959 6860 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
16:03:21.0959 6860 EventSystem - ok
16:03:22.0089 6860 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
16:03:22.0089 6860 exfat - ok
16:03:22.0139 6860 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
16:03:22.0139 6860 fastfat - ok
16:03:22.0519 6860 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
16:03:22.0529 6860 Fax - ok
16:03:22.0599 6860 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
16:03:22.0599 6860 fdc - ok
16:03:22.0659 6860 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
16:03:22.0659 6860 fdPHost - ok
16:03:22.0689 6860 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
16:03:22.0689 6860 FDResPub - ok
16:03:22.0759 6860 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
16:03:22.0759 6860 FileInfo - ok
16:03:22.0759 6860 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
16:03:22.0759 6860 Filetrace - ok
16:03:22.0799 6860 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
16:03:22.0799 6860 flpydisk - ok
16:03:22.0869 6860 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
16:03:22.0879 6860 FltMgr - ok
16:03:23.0019 6860 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
16:03:23.0039 6860 FontCache - ok
16:03:23.0139 6860 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:03:23.0139 6860 FontCache3.0.0.0 - ok
16:03:23.0189 6860 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
16:03:23.0199 6860 FsDepends - ok
16:03:23.0249 6860 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
16:03:23.0249 6860 Fs_Rec - ok
16:03:23.0309 6860 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
16:03:23.0309 6860 fvevol - ok
16:03:23.0359 6860 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
16:03:23.0359 6860 gagp30kx - ok
16:03:23.0399 6860 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
16:03:23.0409 6860 gpsvc - ok
16:03:23.0479 6860 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:03:23.0489 6860 gupdate - ok
16:03:23.0519 6860 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:03:23.0529 6860 gupdatem - ok
16:03:23.0559 6860 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
16:03:23.0559 6860 hcw85cir - ok
16:03:23.0609 6860 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
16:03:23.0619 6860 HdAudAddService - ok
16:03:23.0649 6860 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
16:03:23.0649 6860 HDAudBus - ok
16:03:23.0679 6860 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
16:03:23.0679 6860 HidBatt - ok
16:03:23.0699 6860 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
16:03:23.0699 6860 HidBth - ok
16:03:23.0729 6860 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
16:03:23.0739 6860 HidIr - ok
16:03:23.0759 6860 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
16:03:23.0759 6860 hidserv - ok
16:03:23.0809 6860 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
16:03:23.0809 6860 HidUsb - ok
16:03:23.0849 6860 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
16:03:23.0849 6860 hkmsvc - ok
16:03:23.0899 6860 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
16:03:23.0899 6860 HomeGroupListener - ok
16:03:23.0939 6860 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
16:03:23.0939 6860 HomeGroupProvider - ok
16:03:23.0969 6860 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
16:03:23.0979 6860 HpSAMD - ok
16:03:24.0029 6860 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
16:03:24.0029 6860 HTTP - ok
16:03:24.0069 6860 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
16:03:24.0069 6860 hwpolicy - ok
16:03:24.0109 6860 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
16:03:24.0119 6860 i8042prt - ok
16:03:24.0149 6860 [ ABBF174CB394F5C437410A788B7E404A ] iaStor C:\Windows\system32\drivers\iaStor.sys
16:03:24.0159 6860 iaStor - ok
16:03:24.0239 6860 [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
16:03:24.0239 6860 IAStorDataMgrSvc - ok
16:03:24.0279 6860 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
16:03:24.0279 6860 iaStorV - ok
16:03:24.0329 6860 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:03:24.0339 6860 idsvc - ok
16:03:24.0459 6860 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\IPSDefs\20121129.001\IDSvia64.sys
16:03:24.0469 6860 IDSVia64 - ok
16:03:24.0499 6860 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
16:03:24.0499 6860 iirsp - ok
16:03:24.0559 6860 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
16:03:24.0569 6860 IKEEXT - ok
16:03:24.0659 6860 [ 4B6363CD4610BB848531BB260B15DFCC ] Impcd C:\Windows\system32\drivers\Impcd.sys
16:03:24.0659 6860 Impcd - ok
16:03:24.0779 6860 [ 526E482AFB586CB1CDD687869DECF686 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
16:03:24.0799 6860 IntcAzAudAddService - ok
16:03:24.0849 6860 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
16:03:24.0849 6860 intelide - ok
16:03:24.0889 6860 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys
16:03:24.0889 6860 intelppm - ok
16:03:24.0929 6860 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
16:03:24.0929 6860 IPBusEnum - ok
16:03:24.0959 6860 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:03:24.0969 6860 IpFilterDriver - ok
16:03:25.0019 6860 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
16:03:25.0029 6860 iphlpsvc - ok
16:03:25.0069 6860 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
16:03:25.0069 6860 IPMIDRV - ok
16:03:25.0099 6860 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
16:03:25.0099 6860 IPNAT - ok
16:03:25.0119 6860 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
16:03:25.0119 6860 IRENUM - ok
16:03:25.0139 6860 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
16:03:25.0139 6860 isapnp - ok
16:03:25.0159 6860 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
16:03:25.0159 6860 iScsiPrt - ok
16:03:25.0189 6860 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
16:03:25.0189 6860 kbdclass - ok
16:03:25.0239 6860 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
16:03:25.0239 6860 kbdhid - ok
16:03:25.0259 6860 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
16:03:25.0259 6860 KeyIso - ok
16:03:25.0279 6860 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
16:03:25.0279 6860 KSecDD - ok
16:03:25.0299 6860 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
16:03:25.0309 6860 KSecPkg - ok
16:03:25.0339 6860 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
16:03:25.0339 6860 ksthunk - ok
16:03:25.0359 6860 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
16:03:25.0369 6860 KtmRm - ok
16:03:25.0429 6860 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
16:03:25.0429 6860 LanmanServer - ok
16:03:25.0469 6860 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
16:03:25.0469 6860 LanmanWorkstation - ok
16:03:25.0519 6860 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
16:03:25.0519 6860 lltdio - ok
16:03:25.0539 6860 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
16:03:25.0539 6860 lltdsvc - ok
16:03:25.0559 6860 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
16:03:25.0559 6860 lmhosts - ok
16:03:25.0609 6860 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
16:03:25.0609 6860 LSI_FC - ok
16:03:25.0639 6860 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
16:03:25.0639 6860 LSI_SAS - ok
16:03:25.0649 6860 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
16:03:25.0649 6860 LSI_SAS2 - ok
16:03:25.0669 6860 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
16:03:25.0669 6860 LSI_SCSI - ok
16:03:25.0699 6860 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
16:03:25.0699 6860 luafv - ok
16:03:25.0809 6860 [ 98E19D3FCAAE0236816E4942C5771F89 ] McComponentHostServiceSony C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe
16:03:25.0819 6860 McComponentHostServiceSony - ok
16:03:25.0849 6860 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
16:03:25.0859 6860 Mcx2Svc - ok
16:03:25.0889 6860 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
16:03:25.0889 6860 megasas - ok
16:03:25.0929 6860 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
16:03:25.0929 6860 MegaSR - ok
16:03:26.0029 6860 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
16:03:26.0029 6860 MMCSS - ok
16:03:26.0049 6860 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
16:03:26.0049 6860 Modem - ok
16:03:26.0069 6860 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
16:03:26.0069 6860 monitor - ok
16:03:26.0119 6860 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
16:03:26.0119 6860 mouclass - ok
16:03:26.0149 6860 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
16:03:26.0159 6860 mouhid - ok
16:03:26.0209 6860 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
16:03:26.0209 6860 mountmgr - ok
16:03:26.0289 6860 [ 313265CF4F5F02ED927774DA1DB3FE00 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:03:26.0289 6860 MozillaMaintenance - ok
16:03:26.0319 6860 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
16:03:26.0319 6860 mpio - ok
16:03:26.0349 6860 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
16:03:26.0349 6860 mpsdrv - ok
16:03:26.0399 6860 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
16:03:26.0399 6860 MpsSvc - ok
16:03:26.0439 6860 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
16:03:26.0439 6860 MRxDAV - ok
16:03:26.0469 6860 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
16:03:26.0469 6860 mrxsmb - ok
16:03:26.0509 6860 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:03:26.0509 6860 mrxsmb10 - ok
16:03:26.0529 6860 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:03:26.0529 6860 mrxsmb20 - ok
16:03:26.0549 6860 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
16:03:26.0549 6860 msahci - ok
16:03:26.0579 6860 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
16:03:26.0579 6860 msdsm - ok
16:03:26.0609 6860 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
16:03:26.0609 6860 MSDTC - ok
16:03:26.0639 6860 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
16:03:26.0639 6860 Msfs - ok
16:03:26.0669 6860 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
16:03:26.0669 6860 mshidkmdf - ok
16:03:26.0699 6860 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
16:03:26.0699 6860 msisadrv - ok
16:03:26.0719 6860 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
16:03:26.0719 6860 MSiSCSI - ok
16:03:26.0729 6860 msiserver - ok
16:03:26.0759 6860 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
16:03:26.0759 6860 MSKSSRV - ok
16:03:26.0769 6860 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
16:03:26.0779 6860 MSPCLOCK - ok
16:03:26.0779 6860 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
16:03:26.0779 6860 MSPQM - ok
16:03:26.0809 6860 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
16:03:26.0819 6860 MsRPC - ok
16:03:26.0839 6860 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
16:03:26.0839 6860 mssmbios - ok
16:03:26.0889 6860 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
16:03:26.0889 6860 MSTEE - ok
16:03:26.0909 6860 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
16:03:26.0909 6860 MTConfig - ok
16:03:26.0919 6860 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
16:03:26.0919 6860 Mup - ok
16:03:26.0939 6860 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
16:03:26.0949 6860 napagent - ok
16:03:26.0989 6860 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
16:03:26.0989 6860 NativeWifiP - ok
16:03:27.0099 6860 [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\VirusDefs\20121130.002\ENG64.SYS
16:03:27.0099 6860 NAVENG - ok
16:03:27.0189 6860 [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\VirusDefs\20121130.002\EX64.SYS
16:03:27.0209 6860 NAVEX15 - ok
16:03:27.0309 6860 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
16:03:27.0319 6860 NDIS - ok
16:03:27.0379 6860 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
16:03:27.0379 6860 NdisCap - ok
16:03:27.0399 6860 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
16:03:27.0399 6860 NdisTapi - ok
16:03:27.0429 6860 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
16:03:27.0429 6860 Ndisuio - ok
16:03:27.0469 6860 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
16:03:27.0469 6860 NdisWan - ok
16:03:27.0499 6860 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
16:03:27.0499 6860 NDProxy - ok
16:03:27.0589 6860 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
16:03:27.0589 6860 NetBIOS - ok
16:03:27.0619 6860 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
16:03:27.0629 6860 NetBT - ok
16:03:27.0659 6860 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
16:03:27.0659 6860 Netlogon - ok
16:03:27.0699 6860 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
16:03:27.0699 6860 Netman - ok
16:03:27.0769 6860 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:03:27.0769 6860 NetMsmqActivator - ok
16:03:27.0789 6860 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:03:27.0789 6860 NetPipeActivator - ok
16:03:27.0819 6860 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
16:03:27.0819 6860 netprofm - ok
16:03:27.0829 6860 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:03:27.0839 6860 NetTcpActivator - ok
16:03:27.0839 6860 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:03:27.0839 6860 NetTcpPortSharing - ok
16:03:27.0879 6860 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
16:03:27.0879 6860 nfrd960 - ok
16:03:28.0049 6860 [ F2840DBFE9322F35557219AE82CC4597 ] NIS C:\Program Files (x86)\Norton Internet Security\Engine\19.9.0.9\ccSvcHst.exe
16:03:28.0049 6860 NIS - ok
16:03:28.0109 6860 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
16:03:28.0109 6860 NlaSvc - ok
16:03:28.0149 6860 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
16:03:28.0149 6860 Npfs - ok
16:03:28.0169 6860 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
16:03:28.0169 6860 nsi - ok
16:03:28.0179 6860 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
16:03:28.0179 6860 nsiproxy - ok
16:03:28.0239 6860 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
16:03:28.0249 6860 Ntfs - ok
16:03:28.0289 6860 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
16:03:28.0289 6860 Null - ok
16:03:28.0309 6860 [ 285ACEC1B13A15BA520AAE06BACB9CFF ] nusb3hub C:\Windows\system32\drivers\nusb3hub.sys
16:03:28.0309 6860 nusb3hub - ok
16:03:28.0339 6860 [ F6D625FF7B56BB6EA063F0D3A5BBC996 ] nusb3xhc C:\Windows\system32\drivers\nusb3xhc.sys
16:03:28.0339 6860 nusb3xhc - ok
16:03:28.0389 6860 [ 857FB74754EBFF94EE3AD40788740916 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
16:03:28.0389 6860 NVHDA - ok
16:03:28.0699 6860 [ FBE6AC1C3591CB67543FAD15ABD26BCB ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
16:03:28.0759 6860 nvlddmkm - ok
16:03:28.0799 6860 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
16:03:28.0799 6860 nvraid - ok
16:03:28.0819 6860 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
16:03:28.0819 6860 nvstor - ok
16:03:28.0889 6860 [ 147B0D17255FD796F990CC6F745605C5 ] nvsvc C:\Windows\system32\nvvsvc.exe
16:03:28.0899 6860 nvsvc - ok
16:03:28.0919 6860 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
16:03:28.0919 6860 nv_agp - ok
16:03:29.0019 6860 [ 07D0A535A44DD048EE346853B0BB9349 ] Oasis2Service C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe
16:03:29.0029 6860 Oasis2Service - ok
16:03:29.0109 6860 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
16:03:29.0119 6860 odserv - ok
16:03:29.0139 6860 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
16:03:29.0139 6860 ohci1394 - ok
16:03:29.0219 6860 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:03:29.0219 6860 ose - ok
16:03:29.0259 6860 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
16:03:29.0269 6860 p2pimsvc - ok
16:03:29.0289 6860 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
16:03:29.0299 6860 p2psvc - ok
16:03:29.0309 6860 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
16:03:29.0309 6860 Parport - ok
16:03:29.0339 6860 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
16:03:29.0349 6860 partmgr - ok
16:03:29.0369 6860 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
16:03:29.0369 6860 PcaSvc - ok
16:03:29.0409 6860 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
16:03:29.0409 6860 pci - ok
16:03:29.0439 6860 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
16:03:29.0439 6860 pciide - ok
16:03:29.0459 6860 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
16:03:29.0459 6860 pcmcia - ok
16:03:29.0489 6860 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
16:03:29.0499 6860 pcw - ok
16:03:29.0519 6860 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
16:03:29.0529 6860 PEAUTH - ok
16:03:29.0599 6860 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
16:03:29.0599 6860 PerfHost - ok
16:03:29.0669 6860 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
16:03:29.0679 6860 pla - ok
16:03:29.0719 6860 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
16:03:29.0719 6860 PlugPlay - ok
16:03:29.0769 6860 [ 80E85394D8CD7F84340B1C6F4B9D698F ] PMBDeviceInfoProvider C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
16:03:29.0769 6860 PMBDeviceInfoProvider - ok
16:03:29.0799 6860 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
16:03:29.0809 6860 PNRPAutoReg - ok
16:03:29.0819 6860 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
16:03:29.0819 6860 PNRPsvc - ok
16:03:29.0859 6860 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
16:03:29.0859 6860 PolicyAgent - ok
16:03:29.0879 6860 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
16:03:29.0889 6860 Power - ok
16:03:29.0919 6860 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
16:03:29.0919 6860 PptpMiniport - ok
16:03:29.0939 6860 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
16:03:29.0949 6860 Processor - ok
16:03:29.0979 6860 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
16:03:29.0979 6860 ProfSvc - ok
16:03:29.0989 6860 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
16:03:29.0989 6860 ProtectedStorage - ok
16:03:30.0029 6860 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
16:03:30.0029 6860 Psched - ok
16:03:30.0089 6860 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
16:03:30.0099 6860 ql2300 - ok
16:03:30.0169 6860 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
16:03:30.0169 6860 ql40xx - ok
16:03:30.0189 6860 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
16:03:30.0189 6860 QWAVE - ok
16:03:30.0219 6860 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
16:03:30.0219 6860 QWAVEdrv - ok
16:03:30.0229 6860 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
16:03:30.0229 6860 RasAcd - ok
16:03:30.0259 6860 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
16:03:30.0259 6860 RasAgileVpn - ok
16:03:30.0279 6860 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
16:03:30.0279 6860 RasAuto - ok
16:03:30.0309 6860 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
16:03:30.0309 6860 Rasl2tp - ok
16:03:30.0339 6860 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
16:03:30.0339 6860 RasMan - ok
16:03:30.0369 6860 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
16:03:30.0369 6860 RasPppoe - ok
16:03:30.0379 6860 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
16:03:30.0379 6860 RasSstp - ok
16:03:30.0389 6860 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
16:03:30.0399 6860 rdbss - ok
16:03:30.0419 6860 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
16:03:30.0419 6860 rdpbus - ok
16:03:30.0439 6860 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
16:03:30.0439 6860 RDPCDD - ok
16:03:30.0439 6860 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
16:03:30.0449 6860 RDPENCDD - ok
16:03:30.0459 6860 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
16:03:30.0459 6860 RDPREFMP - ok
16:03:30.0499 6860 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
16:03:30.0499 6860 RDPWD - ok
16:03:30.0549 6860 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
16:03:30.0549 6860 rdyboost - ok
16:03:30.0579 6860 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
16:03:30.0579 6860 RemoteAccess - ok
16:03:30.0629 6860 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
16:03:30.0629 6860 RemoteRegistry - ok
16:03:30.0689 6860 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
16:03:30.0689 6860 RFCOMM - ok
16:03:30.0729 6860 [ FA6ABC06B629DA29634D31F1FE0347BD ] rimspci C:\Windows\system32\drivers\rimssne64.sys
16:03:30.0729 6860 rimspci - ok
16:03:30.0769 6860 [ 8F8539A7F5C117D4407B2985995671F2 ] risdsnpe C:\Windows\system32\drivers\risdsne64.sys
16:03:30.0769 6860 risdsnpe - ok
16:03:30.0799 6860 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
16:03:30.0799 6860 RpcEptMapper - ok
16:03:30.0819 6860 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
16:03:30.0829 6860 RpcLocator - ok
16:03:30.0859 6860 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
16:03:30.0869 6860 RpcSs - ok
16:03:30.0919 6860 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
16:03:30.0919 6860 rspndr - ok
16:03:30.0979 6860 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
16:03:30.0979 6860 SamSs - ok
16:03:31.0019 6860 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
16:03:31.0019 6860 sbp2port - ok
16:03:31.0049 6860 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
16:03:31.0059 6860 SCardSvr - ok
16:03:31.0079 6860 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
16:03:31.0089 6860 scfilter - ok
16:03:31.0129 6860 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
16:03:31.0139 6860 Schedule - ok
16:03:31.0179 6860 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
16:03:31.0179 6860 SCPolicySvc - ok
16:03:31.0219 6860 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys
16:03:31.0219 6860 sdbus - ok
16:03:31.0239 6860 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
16:03:31.0249 6860 SDRSVC - ok
16:03:31.0289 6860 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
16:03:31.0289 6860 secdrv - ok
16:03:31.0319 6860 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
16:03:31.0319 6860 seclogon - ok
16:03:31.0349 6860 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
16:03:31.0349 6860 SENS - ok
16:03:31.0389 6860 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
16:03:31.0389 6860 SensrSvc - ok
16:03:31.0429 6860 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
16:03:31.0429 6860 Serenum - ok
16:03:31.0469 6860 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
16:03:31.0469 6860 Serial - ok
16:03:31.0529 6860 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
16:03:31.0529 6860 sermouse - ok
16:03:31.0579 6860 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
16:03:31.0579 6860 SessionEnv - ok
16:03:31.0659 6860 [ 286D3889E6AB5589646FF8A63CB928AE ] SFEP C:\Windows\system32\drivers\SFEP.sys
16:03:31.0659 6860 SFEP - ok
16:03:31.0689 6860 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
16:03:31.0689 6860 sffdisk - ok
16:03:31.0709 6860 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
16:03:31.0709 6860 sffp_mmc - ok
16:03:31.0719 6860 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
16:03:31.0719 6860 sffp_sd - ok
16:03:31.0749 6860 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
16:03:31.0749 6860 sfloppy - ok
16:03:31.0809 6860 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
16:03:31.0809 6860 SharedAccess - ok
16:03:31.0839 6860 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
16:03:31.0839 6860 ShellHWDetection - ok
16:03:31.0869 6860 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
16:03:31.0869 6860 SiSRaid2 - ok
16:03:31.0899 6860 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
16:03:31.0899 6860 SiSRaid4 - ok
16:03:31.0939 6860 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
16:03:31.0939 6860 Smb - ok
16:03:31.0989 6860 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
16:03:31.0989 6860 SNMPTRAP - ok
16:03:32.0049 6860 [ C3E69DB0A4E59564230E053232F39AC7 ] SOHCImp C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
16:03:32.0059 6860 SOHCImp - ok
16:03:32.0079 6860 [ 65CC4779A29C3E82B987BD4961790DFF ] SOHDms C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
16:03:32.0079 6860 SOHDms - ok
16:03:32.0099 6860 [ F47D75CEE1844EEF4A9EA6EE768828FB ] SOHDs C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
16:03:32.0099 6860 SOHDs - ok
16:03:32.0179 6860 [ 5449FC97476F52E027409E703791E6A9 ] SpfService C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
16:03:32.0179 6860 SpfService - ok
16:03:32.0209 6860 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
16:03:32.0209 6860 spldr - ok
16:03:32.0249 6860 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
16:03:32.0259 6860 Spooler - ok
16:03:32.0369 6860 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
16:03:32.0389 6860 sppsvc - ok
16:03:32.0429 6860 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
16:03:32.0439 6860 sppuinotify - ok
16:03:32.0579 6860 [ 891793E00432FA055CF040605C260E49 ] SRTSP C:\Windows\System32\Drivers\NISx64\1309000.009\SRTSP64.SYS
16:03:32.0589 6860 SRTSP - ok
16:03:32.0599 6860 [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX C:\Windows\system32\drivers\NISx64\1309000.009\SRTSPX64.SYS
16:03:32.0609 6860 SRTSPX - ok
16:03:32.0659 6860 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
16:03:32.0659 6860 srv - ok
16:03:32.0679 6860 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
16:03:32.0679 6860 srv2 - ok
16:03:32.0699 6860 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
16:03:32.0699 6860 srvnet - ok
16:03:32.0739 6860 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
16:03:32.0739 6860 SSDPSRV - ok
16:03:32.0749 6860 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
16:03:32.0749 6860 SstpSvc - ok
16:03:32.0779 6860 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
16:03:32.0779 6860 stexstor - ok
16:03:32.0809 6860 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
16:03:32.0819 6860 stisvc - ok
16:03:32.0849 6860 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
16:03:32.0849 6860 swenum - ok
16:03:32.0869 6860 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
16:03:32.0879 6860 swprv - ok
16:03:32.0939 6860 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\Windows\system32\drivers\NISx64\1309000.009\SYMDS64.SYS
16:03:32.0949 6860 SymDS - ok
16:03:33.0059 6860 [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA C:\Windows\system32\drivers\NISx64\1309000.009\SYMEFA64.SYS
16:03:33.0069 6860 SymEFA - ok
16:03:33.0169 6860 [ 898BB48C797483420DF523B2BBC1ECDB ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
16:03:33.0169 6860 SymEvent - ok
16:03:33.0229 6860 [ B681D1B0F9596684225DCC9B94C6BACF ] SymIM C:\Windows\system32\DRIVERS\SymIMv.sys
16:03:33.0229 6860 SymIM - ok
16:03:33.0269 6860 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\Windows\system32\drivers\NISx64\1309000.009\Ironx64.SYS
16:03:33.0279 6860 SymIRON - ok
16:03:33.0339 6860 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\Windows\System32\Drivers\NISx64\1309000.009\SYMNETS.SYS
16:03:33.0339 6860 SymNetS - ok
16:03:33.0429 6860 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
16:03:33.0439 6860 SysMain - ok
16:03:33.0489 6860 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
16:03:33.0489 6860 TabletInputService - ok
16:03:33.0519 6860 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
16:03:33.0519 6860 TapiSrv - ok
16:03:33.0549 6860 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
16:03:33.0549 6860 TBS - ok
16:03:33.0619 6860 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
16:03:33.0629 6860 Tcpip - ok
16:03:33.0719 6860 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
16:03:33.0729 6860 TCPIP6 - ok
16:03:33.0779 6860 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
16:03:33.0779 6860 tcpipreg - ok
16:03:33.0809 6860 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
16:03:33.0809 6860 TDPIPE - ok
16:03:33.0819 6860 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
16:03:33.0819 6860 TDTCP - ok
16:03:33.0869 6860 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
16:03:33.0879 6860 tdx - ok
16:03:33.0909 6860 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
16:03:33.0909 6860 TermDD - ok
16:03:33.0949 6860 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
16:03:33.0959 6860 TermService - ok
16:03:33.0989 6860 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
16:03:33.0989 6860 Themes - ok
16:03:34.0019 6860 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
16:03:34.0019 6860 THREADORDER - ok
16:03:34.0049 6860 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
16:03:34.0049 6860 TrkWks - ok
16:03:34.0089 6860 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
16:03:34.0089 6860 TrustedInstaller - ok
16:03:34.0129 6860 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
16:03:34.0129 6860 tssecsrv - ok
16:03:34.0179 6860 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
16:03:34.0179 6860 TsUsbFlt - ok
16:03:34.0229 6860 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
16:03:34.0229 6860 tunnel - ok
16:03:34.0259 6860 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
16:03:34.0259 6860 uagp35 - ok
16:03:34.0299 6860 [ 63F6D08C54D5B3C1B12A6172032055C7 ] uCamMonitor C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
16:03:34.0299 6860 uCamMonitor - ok
16:03:34.0329 6860 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
16:03:34.0329 6860 udfs - ok
16:03:34.0359 6860 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
16:03:34.0359 6860 UI0Detect - ok
16:03:34.0399 6860 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
16:03:34.0399 6860 uliagpkx - ok
16:03:34.0449 6860 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
16:03:34.0449 6860 umbus - ok
16:03:34.0469 6860 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
16:03:34.0469 6860 UmPass - ok
16:03:34.0499 6860 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
16:03:34.0499 6860 upnphost - ok
16:03:34.0549 6860 [ 5FCC71487888589A9244AF54CFEFAB29 ] usbbus C:\Windows\system32\DRIVERS\lgx64bus.sys
16:03:34.0549 6860 usbbus - ok
16:03:34.0589 6860 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
16:03:34.0589 6860 usbccgp - ok
16:03:34.0639 6860 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
16:03:34.0639 6860 usbcir - ok
16:03:34.0689 6860 [ 3FB6E423F7567C92C32EA786F5FD0C69 ] UsbDiag C:\Windows\system32\DRIVERS\lgx64diag.sys
16:03:34.0689 6860 UsbDiag - ok
16:03:34.0739 6860 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
16:03:34.0739 6860 usbehci - ok
16:03:34.0779 6860 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
16:03:34.0779 6860 usbhub - ok
16:03:34.0829 6860 [ 78D551F5B93488B4666F5FC8DD4815F3 ] USBModem C:\Windows\system32\DRIVERS\lgx64modem.sys
16:03:34.0829 6860 USBModem - ok
16:03:34.0859 6860 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
16:03:34.0859 6860 usbohci - ok
16:03:34.0889 6860 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
16:03:34.0889 6860 usbprint - ok
16:03:34.0919 6860 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:03:34.0919 6860 USBSTOR - ok
16:03:34.0929 6860 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
16:03:34.0929 6860 usbuhci - ok
16:03:34.0979 6860 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
16:03:34.0979 6860 usbvideo - ok
16:03:35.0019 6860 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
16:03:35.0019 6860 UxSms - ok
16:03:35.0059 6860 [ A60605FC66552B421EE1F3D4EBB9A4E0 ] VAIO Event Service C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
16:03:35.0059 6860 VAIO Event Service - ok
16:03:35.0129 6860 [ D469BE2723F79CF4B384680B1FDC577D ] VAIO Power Management C:\Program Files\Sony\VAIO Power Management\SPMService.exe
16:03:35.0129 6860 VAIO Power Management - ok
16:03:35.0159 6860 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
16:03:35.0159 6860 VaultSvc - ok
16:03:35.0229 6860 [ 96EFA2698D6B9E2931609A3EA73FC5DC ] VCFw C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
16:03:35.0229 6860 VCFw - ok
16:03:35.0279 6860 [ 7BEBF6A5285FFC03C34A7297A4E177CB ] VcmIAlzMgr C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
16:03:35.0289 6860 VcmIAlzMgr - ok
16:03:35.0329 6860 [ E005B04DFCA99F5880C5111933194CA9 ] VcmINSMgr C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
16:03:35.0329 6860 VcmINSMgr - ok
16:03:35.0379 6860 [ 829A32FD1334F72429CA0515760EB7A7 ] VcmXmlIfHelper C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
16:03:35.0379 6860 VcmXmlIfHelper - ok
16:03:35.0449 6860 [ 8F0840FF3A11D6B3F767AD6C79AC2A40 ] VCService C:\Program Files\Sony\VAIO Care\VCService.exe
16:03:35.0449 6860 VCService - ok
16:03:35.0499 6860 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
16:03:35.0499 6860 vdrvroot - ok
16:03:35.0599 6860 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
16:03:35.0609 6860 vds - ok
16:03:35.0679 6860 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
16:03:35.0679 6860 vga - ok
16:03:35.0689 6860 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
16:03:35.0689 6860 VgaSave - ok
16:03:35.0729 6860 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
16:03:35.0729 6860 vhdmp - ok
16:03:35.0749 6860 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
16:03:35.0749 6860 viaide - ok
16:03:35.0769 6860 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
16:03:35.0769 6860 volmgr - ok
16:03:35.0799 6860 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
16:03:35.0799 6860 volmgrx - ok
16:03:35.0819 6860 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
16:03:35.0829 6860 volsnap - ok
16:03:35.0849 6860 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
16:03:35.0849 6860 vsmraid - ok
16:03:35.0919 6860 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
16:03:35.0939 6860 VSS - ok
16:03:36.0069 6860 [ D2D646D4D686C6996BA1FF96E11BE570 ] VUAgent C:\Program Files\Sony\VAIO Update\VUAgent.exe
16:03:36.0079 6860 VUAgent - ok
16:03:36.0119 6860 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
16:03:36.0119 6860 vwifibus - ok
16:03:36.0139 6860 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
16:03:36.0139 6860 vwififlt - ok
16:03:36.0149 6860 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
16:03:36.0149 6860 vwifimp - ok
16:03:36.0189 6860 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
16:03:36.0189 6860 W32Time - ok
16:03:36.0209 6860 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
16:03:36.0209 6860 WacomPen - ok
16:03:36.0249 6860 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
16:03:36.0249 6860 WANARP - ok
16:03:36.0269 6860 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
16:03:36.0279 6860 Wanarpv6 - ok
16:03:36.0339 6860 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
16:03:36.0359 6860 WatAdminSvc - ok
16:03:36.0409 6860 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
16:03:36.0429 6860 wbengine - ok
16:03:36.0479 6860 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
16:03:36.0479 6860 WbioSrvc - ok
16:03:36.0519 6860 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
16:03:36.0529 6860 wcncsvc - ok
16:03:36.0539 6860 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
16:03:36.0549 6860 WcsPlugInService - ok
16:03:36.0569 6860 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
16:03:36.0569 6860 Wd - ok
16:03:36.0589 6860 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys
16:03:36.0589 6860 WDC_SAM - ok
16:03:36.0639 6860 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
16:03:36.0639 6860 Wdf01000 - ok
16:03:36.0669 6860 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
16:03:36.0669 6860 WdiServiceHost - ok
16:03:36.0679 6860 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
16:03:36.0679 6860 WdiSystemHost - ok
16:03:36.0739 6860 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
16:03:36.0749 6860 WebClient - ok
16:03:36.0779 6860 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
16:03:36.0789 6860 Wecsvc - ok
16:03:36.0799 6860 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
16:03:36.0799 6860 wercplsupport - ok
16:03:36.0829 6860 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
16:03:36.0829 6860 WerSvc - ok
16:03:36.0879 6860 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
16:03:36.0879 6860 WfpLwf - ok
16:03:36.0889 6860 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
16:03:36.0889 6860 WIMMount - ok
16:03:36.0899 6860 WinDefend - ok
16:03:36.0919 6860 WinHttpAutoProxySvc - ok
16:03:36.0979 6860 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
16:03:36.0979 6860 Winmgmt - ok
16:03:37.0039 6860 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
16:03:37.0059 6860 WinRM - ok
16:03:37.0109 6860 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
16:03:37.0109 6860 WinUsb - ok
16:03:37.0149 6860 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
16:03:37.0159 6860 Wlansvc - ok
16:03:37.0299 6860 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
16:03:37.0319 6860 wlidsvc - ok
16:03:37.0349 6860 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
16:03:37.0349 6860 WmiAcpi - ok
16:03:37.0389 6860 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
16:03:37.0389 6860 wmiApSrv - ok
16:03:37.0429 6860 WMPNetworkSvc - ok
16:03:37.0449 6860 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
16:03:37.0449 6860 WPCSvc - ok
16:03:37.0479 6860 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
16:03:37.0489 6860 WPDBusEnum - ok
16:03:37.0519 6860 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
16:03:37.0519 6860 ws2ifsl - ok
16:03:37.0539 6860 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
16:03:37.0539 6860 wscsvc - ok
16:03:37.0549 6860 WSearch - ok
16:03:37.0629 6860 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
16:03:37.0649 6860 wuauserv - ok
16:03:37.0709 6860 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
16:03:37.0719 6860 WudfPf - ok
16:03:37.0729 6860 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
16:03:37.0739 6860 wudfsvc - ok
16:03:37.0779 6860 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
16:03:37.0779 6860 WwanSvc - ok
16:03:37.0839 6860 [ 5250193EF8E173AA7491250F00EB367F ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys
16:03:37.0839 6860 yukonw7 - ok
16:03:37.0879 6860 ================ Scan global ===============================
16:03:37.0899 6860 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
16:03:37.0929 6860 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
16:03:37.0939 6860 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
16:03:37.0979 6860 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
16:03:38.0009 6860 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
16:03:38.0019 6860 [Global] - ok
16:03:38.0019 6860 ================ Scan MBR ==================================
16:03:38.0029 6860 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
16:03:38.0489 6860 \Device\Harddisk0\DR0 - ok
16:03:38.0489 6860 ================ Scan VBR ==================================
16:03:38.0489 6860 [ ECCDA50F370288A657E673436A7A28BF ] \Device\Harddisk0\DR0\Partition1
16:03:38.0509 6860 \Device\Harddisk0\DR0\Partition1 - ok
16:03:38.0579 6860 [ 2E79DA14698E468461B0082FCC5DB1AB ] \Device\Harddisk0\DR0\Partition2
16:03:38.0579 6860 \Device\Harddisk0\DR0\Partition2 - ok
16:03:38.0579 6860 ============================================================
16:03:38.0579 6860 Scan finished
16:03:38.0579 6860 ============================================================
16:03:38.0599 3512 Detected object count: 0
16:03:38.0599 3512 Actual detected object count: 0
16:03:47.0959 4748 Deinitialize success

#4 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 04:21 PM

aswMBR version 0.9.9.1707 Copyright© 2011 AVAST Software
Run date: 2012-11-30 16:21:53
-----------------------------
16:21:53.299 OS Version: Windows x64 6.1.7601 Service Pack 1
16:21:53.299 Number of processors: 4 586 0x2505
16:21:53.299 ComputerName: COWFUN-VAIO UserName: cowfun
16:22:04.689 Initialize success
16:22:12.459 AVAST engine defs: 12113001
16:22:16.579 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
16:22:16.579 Disk 0 Vendor: ST950032 0006 Size: 476940MB BusType: 3
16:22:16.619 Disk 0 MBR read successfully
16:22:16.619 Disk 0 MBR scan
16:22:16.629 Disk 0 Windows 7 default MBR code
16:22:16.679 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 10082 MB offset 2048
16:22:16.709 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 20649984
16:22:16.739 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 466756 MB offset 20854784
16:22:16.809 Disk 0 scanning C:\Windows\system32\drivers
16:22:34.739 Service scanning
16:23:03.489 Modules scanning
16:23:03.499 Disk 0 trace - called modules:
16:23:03.569 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys
16:23:03.899 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800673b060]
16:23:03.899 3 CLASSPNP.SYS[fffff88001d6643f] -> nt!IofCallDriver -> [0xfffffa8003931040]
16:23:03.909 5 ACPI.sys[fffff88000eeb7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80043be050]
16:23:17.859 AVAST engine scan C:\Windows
16:23:34.229 AVAST engine scan C:\Windows\system32
16:26:25.110 AVAST engine scan C:\Windows\system32\drivers
16:26:59.500 AVAST engine scan C:\Users\cowfun
16:46:00.073 AVAST engine scan C:\ProgramData
16:49:40.624 Scan finished successfully
16:52:27.772 Disk 0 MBR has been saved successfully to "C:\Users\cowfun\Desktop\MBR.dat"
16:52:27.772 The log file has been saved successfully to "C:\Users\cowfun\Desktop\aswMBR.txt"

Edited by Ca20, 30 November 2012 - 04:52 PM.


#5 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 06:06 PM

ESET scan
C:\ProgramData\Tarma Installer\{C049526F-B3EB-4151-9B11-B11F00F53A96}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application cleaned by deleting - quarantined

Edited by Ca20, 30 November 2012 - 06:06 PM.


#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:42 AM

Posted 30 November 2012 - 08:51 PM

Download

Malwarebytes

Install,update and run a full scan

Click on Show results.Right click on the list ,select all and remove them.

Post the generated log here

Download

mini toolbox

Checkmark following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List restore points

Click Go and post the result.

Download

Farbar service scanner

Checkmark all the boxes

Click on "Scan".
Please copy and paste the log to your reply.

Download

adware cleaner

Launch it click on Delete

A log should be generated after scan ,post it here

Download

Junkware removal tool

For vista and windows 7 right click on the tool and select run as administrator

After scan gets completed,post the generated log here.

#7 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 10:11 PM

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Database version: v2012.12.01.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
cowfun :: COWFUN-VAIO [administrator]

30/11/2012 9:04:35 PM
mbam-log-2012-11-30 (21-04-35).txt

Scan type: Full scan (C:\|E:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 381929
Time elapsed: 1 hour(s), 3 minute(s), 42 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

#8 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 10:16 PM

MiniToolBox by Farbar Version: 25-11-2012
Ran by cowfun (administrator) on 30-11-2012 at 22:14:55
Running from "C:\Users\cowfun\Desktop"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================



========================= IP Configuration: ================================

Marvell Yukon 88E8057 PCI-E Gigabit Ethernet Controller = Local Area Connection (Connected)
Microsoft Virtual WiFi Miniport Adapter = Wireless Network Connection 2 (Media disconnected)
Atheros AR9287 Wireless Network Adapter = Wireless Network Connection (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set subinterface interface=?"$ subinterface=ethernet_9 mtu=1477


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : cowfun-VAIO
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : phub.net.cable.rogers.com

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physical Address. . . . . . . . . : 56-0F-6E-F2-D3-5E
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : phub.net.cable.rogers.com
Description . . . . . . . . . . . : Atheros AR9287 Wireless Network Adapter
Physical Address. . . . . . . . . : 4C-0F-6E-F2-D3-5E
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : phub.net.cable.rogers.com
Description . . . . . . . . . . . : Marvell Yukon 88E8057 PCI-E Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 78-84-3C-05-C4-97
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::4d30:346f:2688:15d1%10(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.0.12(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : November-30-12 10:13:15 AM
Lease Expires . . . . . . . . . . : December-14-12 9:53:06 PM
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DHCPv6 IAID . . . . . . . . . . . : 240403017
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-CE-61-F5-78-84-3C-05-C4-97
DNS Servers . . . . . . . . . . . : 192.168.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter 6TO4 Adapter:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:953c:849:359e:9c0b:c367(Preferred)
Link-local IPv6 Address . . . . . : fe80::849:359e:9c0b:c367%16(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.phub.net.cable.rogers.com:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : phub.net.cable.rogers.com
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{9B22A781-692B-41FE-9528-ADEC0E3A6350}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: phub.net.cable.rogers.com
Address: 192.168.0.1

Name: google.com
Addresses: 2607:f8b0:400b:801::1007
74.125.226.64
74.125.226.66
74.125.226.67
74.125.226.71
74.125.226.73
74.125.226.72
74.125.226.70
74.125.226.65
74.125.226.69
74.125.226.78
74.125.226.68


Pinging google.com [74.125.226.68] with 32 bytes of data:
Reply from 74.125.226.68: bytes=32 time=11ms TTL=56
Reply from 74.125.226.68: bytes=32 time=14ms TTL=56

Ping statistics for 74.125.226.68:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 11ms, Maximum = 14ms, Average = 12ms
Server: phub.net.cable.rogers.com
Address: 192.168.0.1

Name: yahoo.com
Addresses: 98.138.253.109
72.30.38.140
98.139.183.24


Pinging yahoo.com [98.139.183.24] with 32 bytes of data:
Reply from 98.139.183.24: bytes=32 time=141ms TTL=52
Reply from 98.139.183.24: bytes=32 time=101ms TTL=52

Ping statistics for 98.139.183.24:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 101ms, Maximum = 141ms, Average = 121ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
12...56 0f 6e f2 d3 5e ......Microsoft Virtual WiFi Miniport Adapter
11...4c 0f 6e f2 d3 5e ......Atheros AR9287 Wireless Network Adapter
10...78 84 3c 05 c4 97 ......Marvell Yukon 88E8057 PCI-E Gigabit Ethernet Controller
1...........................Software Loopback Interface 1
17...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
16...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.12 10
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.0.0 255.255.255.0 On-link 192.168.0.12 266
192.168.0.12 255.255.255.255 On-link 192.168.0.12 266
192.168.0.255 255.255.255.255 On-link 192.168.0.12 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.0.12 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.0.12 266
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
16 58 ::/0 On-link
1 306 ::1/128 On-link
16 58 2001::/32 On-link
16 306 2001:0:9d38:953c:849:359e:9c0b:c367/128
On-link
10 266 fe80::/64 On-link
16 306 fe80::/64 On-link
16 306 fe80::849:359e:9c0b:c367/128
On-link
10 266 fe80::4d30:346f:2688:15d1/128
On-link
1 306 ff00::/8 On-link
16 306 ff00::/8 On-link
10 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.)
x64-Catalog5 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (11/30/2012 09:03:45 PM) (Source: Application Hang) (User: )
Description: The program VAIO Messenger.exe version 2.0.493.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 960

Start Time: 01cdcf0da13cad12

Termination Time: 130

Application Path: C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe

Report Id: 511d31c6-3b5b-11e2-9097-78843c05c497

Error: (11/30/2012 04:52:54 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/30/2012 04:52:54 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/30/2012 04:13:45 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/30/2012 04:13:45 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/30/2012 04:13:28 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/30/2012 04:13:28 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/30/2012 04:01:39 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/30/2012 03:59:36 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/29/2012 11:47:12 PM) (Source: SampleCollector) (User: )
Description: init_sstates_file:CreateFile:Prev_SState: Failed with error 0x20: The process cannot access the file because it is being used by another process.


System errors:
=============
Error: (11/30/2012 10:13:16 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (11/29/2012 11:39:24 PM) (Source: Service Control Manager) (User: )
Description: The VAIO Care Performance Service service hung on starting.

Error: (11/29/2012 11:34:53 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (11/29/2012 11:21:40 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (11/29/2012 11:06:14 PM) (Source: Service Control Manager) (User: )
Description: The VAIO Care Performance Service service terminated with the following error:
%%234

Error: (11/29/2012 11:04:42 PM) (Source: Service Control Manager) (User: )
Description: The VAIO Care Performance Service service hung on starting.

Error: (11/29/2012 10:59:30 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (11/29/2012 10:57:02 PM) (Source: DCOM) (User: )
Description: 1084MSIServer{000C101C-0000-0000-C000-000000000046}

Error: (11/29/2012 10:55:18 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (11/29/2012 10:54:31 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068


Microsoft Office Sessions:
=========================

=========================== Installed Programs ============================

Update for Microsoft Office 2007 (KB2508958)
Adobe AIR (Version: 1.5.3.9130)
Adobe Flash Player 10 ActiveX (Version: 10.1.53.64)
Adobe Flash Player 11 Plugin (Version: 11.5.502.110)
Adobe Reader 9.5.2 (Version: 9.5.2)
Alps Pointing-device for VAIO
ArcSoft Magic-i Visual Effects 2 (Version: 2.0.1.115)
ArcSoft WebCam Companion 3 (Version: 3.0.21.390)
Audacity 2.0
Chinese Simplified Fonts Support For Adobe Reader 9 (Version: 9.0.0)
Combined Community Codec Pack 2011-07-30 (Version: 2011.07.30.0)
CutePDF Writer 2.8
D3DX10 (Version: 15.4.2368.0902)
ESET Online Scanner v3
Fences (Version: 1.0)
Google Chrome (Version: 23.0.1271.95)
Google Update Helper (Version: 1.3.21.123)
Intel® Control Center (Version: 1.2.1.1007)
Intel® Rapid Storage Technology (Version: 9.6.0.1014)
Intel® Turbo Boost Technology Driver (Version: 01.01.01.1007)
Japanese Fonts Support For Adobe Reader 9 (Version: 9.0.0)
Java Auto Updater (Version: 2.0.7.2)
Java™ 6 Update 20 (64-bit) (Version: 6.0.200)
Java™ 6 Update 37 (Version: 6.0.370)
Junk Mail filter update (Version: 15.4.3502.0922)
LAME v3.99.3 (for Windows)
LG MC USB U330 driver (Version: 1.0.0.0000)
LG USB Modem Drivers (Version: 4.9.4)
Malwarebytes Anti-Malware version 1.65.1.1000 (Version: 1.65.1.1000)
Media Gallery (Version: 1.3.0)
Media Gallery (Version: 1.3.0.06230)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliType Pro 8.2 (Version: 8.20.469.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server Compact 3.5 SP2 ENU (Version: 3.5.8080.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Mozilla Firefox 17.0 (x86 en-US) (Version: 17.0)
Mozilla Maintenance Service (Version: 17.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
NetWorx 5.2.5
Norton Internet Security (Version: 19.9.0.9)
NVIDIA Control Panel 266.72 (Version: 266.72)
NVIDIA Graphics Driver 266.72 (Version: 266.72)
NVIDIA HD Audio Driver 1.1.13.1 (Version: 1.1.13.1)
NVIDIA Install Application (Version: 2.265.39.0)
NVIDIA PhysX (Version: 9.10.0514)
NVIDIA PhysX System Software 9.10.0514 (Version: 9.10.0514)
Oasis2Service (Version: 1.0.4)
OOBE (Version: 3.10.0630)
PMB (Version: 5.3.00.06040)
PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00)
PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00)
PVSonyDll (Version: 1.00.0001)
Realtek High Definition Audio Driver (Version: 6.0.1.6098)
Remote Keyboard (Version: 1.1.1.07060)
Remote Play with PlayStation 3 (Version: 1.0.2.06210)
Remote Play with PlayStation®3 (Version: 1.0.2.06210)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.1)
SmartWi Connection Utility (Version: 4.11.4.20100722.2739)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VAIO - Media Gallery (Version: 1.3.0.06230)
VAIO - PMB VAIO Edition Guide (Version: 1.3.00.06040)
VAIO - PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00.06180)
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (Version: 1.3.00.06110)
VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00.06180)
VAIO - Remote Keyboard (Version: 1.1.0.07060)
VAIO Care (Version: 8.1.0.10120)
VAIO Control Center (Version: 4.3.0.05310)
VAIO Data Restore Tool (Version: 1.4.0.05240)
VAIO DVD Menu Data (Version: 2.2.00.05120)
VAIO Gate (Version: 2.4.0.06210)
VAIO Gate Default (Version: 2.2.0.07020)
VAIO Hardware Diagnostics (Version: 4.0.0.06230)
VAIO Help and Support (Version: 12.00.0622)
VAIO Manual (Version: 1.1.0.05280)
VAIO Media plus (Version: 2.1.0)
VAIO Media plus (Version: 2.1.0.18210)
VAIO Media plus Opening Movie (Version: 2.1.0.14080)
VAIO Messenger (Version: 2.0.493.0)
VAIO Movie Story Template Data (Version: 2.3.00.06040)
VAIO Sample Contents (Version: 1.2.0.16080)
VAIO Survey (Version: 6.00.1028)
VAIO Transfer Support (Version: 1.2.0.06230)
VAIO Update (Version: 6.1.1.10250)
VLC media player 1.1.11 (Version: 1.1.11)
VU5x64 (Version: 1.1.0)
VU5x86 (Version: 1.0.0)
VU5x86 (Version: 1.1.0)
WIDCOMM Bluetooth Software (Version: 6.3.0.5600)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
WinRAR 4.01 (64-bit) (Version: 4.01.0)

========================= Memory info: ===================================

Percentage of memory in use: 73%
Total physical RAM: 4012.96 MB
Available physical RAM: 1073.39 MB
Total Pagefile: 8024.11 MB
Available Pagefile: 4799.72 MB
Total Virtual: 4095.88 MB
Available Virtual: 3977.12 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:455.82 GB) (Free:264.95 GB) NTFS

========================= Users: ========================================

User accounts for \\COWFUN-VAIO

Administrator cowfun Guest

========================= Restore Points ==================================

26-09-2012 05:08:03 Windows Update
10-10-2012 05:59:27 Windows Update
11-10-2012 05:23:59 Windows Update
22-10-2012 00:52:31 Installed Java™ 6 Update 37
16-11-2012 05:49:52 Windows Update
28-11-2012 02:12:32 Removed VAIO Care
28-11-2012 02:13:50 Installed VAIO Care.
28-11-2012 02:19:28 Removed VAIO Update 5
28-11-2012 02:19:44 Installed VAIO Update
28-11-2012 05:25:24 Windows Update
29-11-2012 06:06:30 Windows Update
30-11-2012 04:03:38 Removed System Requirements Lab CYRI

**** End of log ****

#9 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 10:17 PM

Farbar Service Scanner Version: 09-11-2012
Ran by cowfun (administrator) on 30-11-2012 at 22:17:09
Running from "C:\Users\cowfun\Desktop"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2012-11-15 19:21] - [2012-10-03 12:56] - 1914248 ____A (Microsoft Corporation) 37608401DFDB388CAF66917F6B2D6FB0

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

#10 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 10:21 PM

# AdwCleaner v2.010 - Logfile created 11/30/2012 at 22:18:06
# Updated 29/11/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : cowfun - COWFUN-VAIO
# Boot Mode : Normal
# Running from : C:\Users\cowfun\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\ProgramData\Partner
Folder Deleted : C:\ProgramData\Tarma Installer

***** [Registry] *****

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92E5039E-FF1E-4AFB-8F24-87592D20C383}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Tarma Installer

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Registry is clean.

-\\ Mozilla Firefox v17.0 (en-US)

Profile name : default
File : C:\Users\cowfun\AppData\Roaming\Mozilla\Firefox\Profiles\dtoql2e3.default\prefs.js

C:\Users\cowfun\AppData\Roaming\Mozilla\Firefox\Profiles\dtoql2e3.default\user.js ... Deleted !

[OK] File is clean.

-\\ Google Chrome v23.0.1271.95

File : C:\Users\cowfun\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[S1].txt - [4069 octets] - [30/11/2012 22:18:06]

########## EOF - C:\AdwCleaner[S1].txt - [4129 octets] ##########

#11 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 10:44 PM

Removed a few entries from the log (personal/privacy reasons)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 3.7.0 (11.30.2012:3)
OS: Windows 7 Home Premium x64
Ran by cowfun on 30/11/2012 at 22:26:01.71
Blog: http://thisisudax.blogspot.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\cowfun\AppData\Roaming\mozilla\firefox\profiles\dtoql2e3.default\prefs.js

user_pref("capability.policy.maonoscript.sites", "100thgreycupfestival.ca 173.231.31.34 178.211.52.84 192.168.0.1 192.168.0.14 1click-downloader.net 1up.com 205.196.121.206 205.196.123.141 29a.ch 2genbox.net 2mdn.net 2shared.com 395taxi.com 49st.com 4chan.org 4ormat.com 4shared-china.com 4shared.com 50.62.137.133 6theory.com 7821k.com 78royal.com 7chan.org 8.19.33.130 abebooks.com abmp3.com about.com accesso.com ad-indicator.com adadvisor.net adbrite.com adcash.com addons.mozilla.org addthis.com adf.ly adfoc.us adgear.com adsfuse.com adshost1.com adshost2.com adtechus.com advaestheticsurgery.com afx.ms agogoktv.ca aimini.net akamaihd.net alibaba.com alibris-static.com alibris.com alive.in.th allkpop.com allmyvideos.net allrecipes.com amazon.ca amazon.com amazonaws.com americanapparel.net amiami.com amung.us androp.jp angusreidforum.com ani-com.hk anilinkz.com animea-server.net animea.net animecrazy.net animefreak.tv animefushigi.com animelyrics.com animenewsnetwork.com animeratio.com animeseason.com animesuki.com animetake.com animeultima.tv anipan.com anivoid.com annexcatrescue.ca antipodemap.com antranik.org aol.com aolcdn.com apple.com archive.org arstechnica.com arstechnica.net asahi-net.or.jp asecular.com asianfanatics.net asianjunkie.com asiatorrents.com askmen.com asos.com aspnetcdn.com astretchyhand.com astronomyforum.net atdmt.com auctiva.com avaaz.org avail.net avatarchapters.tv avex.jp avexnet.or.jp azjmp.com badgeville.com baidu.com bakabt.com bakabt.me bananarepublic.ca bandcamp.com bannergadgets.com basecampcenters.com basecampstudyabroad.co.uk basecamptudyabroad.co.uk basic-japanese.com batoto.net baynote.net bbc.co.uk bbci.co.uk bbcimg.co.uk bcbits.com beauty-jp.com becktaxi.com beemp3.com belamionline.com bell.ca bestbuy.ca bestbuy.com bibme.org billboard.com bimm-dev.com bing.com bitly.com bitshare.com bitsnoop.com bixi.com blacks.ca bleachflame.com bleepingcomputer.com blissful-sin.com blitzdownloads.com blogblog.com blogger.com blogspot.ca blogspot.com blogspot.mx blogto.com bloor-yorkville.com bmo.com bookstorerus.com bootybreak.com bostonpizza.com bravender.us brcdn.com break.com brightcove.com brightsiren.jp bulgogibros.ca bulkbarn.ca bulldogtoronto.com burgerking.ca burpee.com buzzfed.com buzzfeed.com cachefly.net cafprs.com calculatorcat.com canada.com canadapost.ca canadaswonderland.com canlearn.ca canpages.ca cantoneseinput.com cardsagainsthumanity.com casalemedia.com cat-bounce.com cbc.ca cbox.ws cbs.com cbsa-asfc.gc.ca cbsnews.com ccer.ca cdjapan.co.jp cdn-apple.com cedarbraemall.ca cengage.com centennialcollege.ca cfs-fcee.ca cfs-services.ca cfsadmin.org cfsontario.ca channelintelligence.com chartbeat.com chatroll-cloud-1.com checkm8.com cheng-tsui.com chia-anime.com chinacottage.ca chinese-tools.com chinesepod.com choicestream.com choix.jp christianpost.com cineplex.com citationmachine.net citefast.com citrixonline.com cityeats.com citytv.com classistatic.com cleanprint.net clickability.com clickthatbutton.com climbingacademy.com clip.dj cloudflare.com cloudfront.net cmaj.ca cnet.com cnet.com.au cnn.com co.cc coachcanada.com codysherman.com coldfront.net collegehumor.com colormunki.com com.com comedycentral.com commiesubs.com compassionpit.com confirmit.com cookieless.ca copyrite.ca cornify.com cosplayfu.ca councillordavis.com coveragemapper.com cp24.com cpime.hk cpmstar.com cpxinteractive.com cracked.com crackedcdn.com crowdscience.com crtinv.com crumpler.com ctv.ca ctvdigital.net ctvnews.ca ctvolympics.ca cuhk.edu.hk cvcdn.com dadt.com dailyfinance.com dailymotion.com datacard.com datacollectionsite.com daum-img.net daum.net daumcdn.net davidduncanhouse.com davidwalsh.name dealsnoop.com depositfiles.com developerduck.com deviantart.com deviantart.net dga.jp dhl.ca digitaljournal.com digitalriver.com disqus.com diylol.com dkpopnews.net dl-rms.com dmcdn.net doaj.org doctorsnightguard.com dollforum.com doodle.com doubleclick.net downloadbox.me downloadprovider.me dramacrazy.net dramafever.com drawastickman.com drpgilbert.com drtuber.com dsparking.com dsultra.com dt07.net dualshockers.com dubzonline.com dufflet.com duolingo.com e-activist.com easybib.com eatmanga.com eatyourkimchi.com ebay.ca ebay.com ebaydesc.ca ebaydesc.com ebayrtm.com ebaystatic.com ebgames.ca ebten.jp echoenabled.com ecwid.com edgecastcdn.net edgekey.net editmysite.com effectivemeasure.net eguidedog.net ehow.com ehowcdn.com electronicinfo.ca emimusic.jp emotionalbagcheck.com empathica.com enewsworld.com engadget.com epdrama.com esnips.com esoft.in essaytyper.com etoolsage.com europepmc.org eventbrite.com everysing.com evolvemediametrics.com excite.co.jp expedia.com exponential.com extratorrent.com eyereturn.com facebook.com facebook.net fairchildtv.com fairviewmall.ca fanmail.biz fanpop.com fastclick.net fbcdn.net ff-type0.net ffdistantworlds.com ffshrine.org fiberupload.com fido.ca filefactory.com filefat.com filesend.net fileserve.com filesonic.com filestube.com filetram.com fileuplo.de finalfantasy.jp firstclass-download.com firstcovers.com flashgot.net flux.com flyerservices.com flyertown.ca flyporter.com fm-anime.com fmpub.net foodnetwork.ca forumtl.com freakshare.com freeboyfriend.com freehostedscripts.net freetranslation.com freshenergy.com frontiercollege.ca fullsail.edu funnyordie.com futureshop.ca fyzzed.com gamedorm.net gamedorm.org gamefaqs.com gameshark.com gamespot.com gamespotcdn.net gamestop.ca gametrailers.com gamezone.com gapcanada.ca garlandcanada.ca gawker.com gawkerassets.com geekosystem.com gematsu.com general-files.com georgebrown.ca geovisite.com gettopup.com gfx.ms ggsrv.com gifbin.com giftcardstore.ca gigya.com girlsgenerationusa.com github.com givex.com gizmodo.com globaltv.com globe7.com gmarket.co.kr gogoanime.com goo.gl gooddrama.net goodmanga.net goodreads.com google-analytics.com google.ca google.co.in google.co.uk google.com googleadservices.com googleapis.com googlesyndication.com googletagservices.com googleusercontent.com gotobus.com gotransit.com gov.on.ca gq.com grantgalitz.org gravatar.com greenbeanery.ca greenshield.ca grenville.com greyhound.ca grocerygateway.com grocerysavings.ca groupon-content.net groupon.ca groupon.com grouponcdn.com gsgd.co.uk gstatic.com guidetojapanese.org gumgum.com gunggo.com gx101.com hackertyper.com hardlywork.in hc-sc.gc.ca heraldsun.com.au hktv.cc hlj.com hmv.ca hollywoodreporter.com hotfile.com hotgoo.com hotmail.com howardforums.com hulkshare.com icefilms.info ichiriki.ca idownloadgalore.com idws-static.com ign.com ignimgs.com ilive.to illuminati.org ilovefreestuff.ca images-amazon.com imageshack.us imdb.com imgag.com imgur.com imshopping.com inagist.com indieclicktv.com indigo.ca indowebster.com infolinks.com informaction.com inputfree.com insightexpressai.com insinc.com intellitxt.com invitemedia.com involver.com io9.com islandinkjet.com isohunt.com issuu.com iucnredlist.org j-pop-rock.com j.gs jaccotours.com jame-world.com japanpost.jp java.com javascriptkit.com jccc.on.ca jeetyetmedia.com jezebel.com jibjab.com jmp3up.info jogc.com johnson.ca josmanart.com jpddl.com jphip.com jpopasia.com jquery.com jsonline.com jtown.ca jtvnw.net just-eat.ca just-wink.com justcloud.com justin.tv kaiseki.ca kaisekisakura.com kakao.co.kr kakao.com kazanteppanyaki.com keepvid.com kijapanese.com kijiji.ca kintonramen.com kissmanga.com kivmanga.com knowyourmeme.com koalastothemax.com kondoot.com kotaku.com kpop7.com kpopseven.com kpoptown.com kristalbelli.com ktopia.net kumby.com kumon.ca lacrawfish.com laduree.fr lahoretikkahouse.com laiwahheen.com lalaparadise.com larc-en-ciel.com lcbo.com learningprograms.ca letitbit.net letsgoglobal.ca lg.com liftdna.com lijit.com linkbucks.com linkwithin.com listal.com listenandlearnusa.com live.com liverail.com livestream.com llamafont.com llbean.com llnwd.net lmgtfy.com lnnte-dncl.gc.ca loading321.com localwork.ca longtailvideo.com lottomax.ca lucasentertainment.com lululemon.com makkalchon.com mamaawardslivestream.com mandarintools.com manga-go.com manga365.net manga4.com mangaeden.com mangafox.com mangafox.me mangahere.com mangainn.com mangapark.com mangareader.net mangarush.com mangastream.com mangastream.to mangatoyou.com mangatraders.com mangaupdates.com manpuku.ca maone.net mapbox.com mapleleaf.ca mapquest.com mapquestapi.com marbleslab.ca marketforce.com marketingden.com masalatime.com mastercard.ca mastercard.com mathtran.org maxmind.com mcdonalds.ca mcdonalds.com mcmaster.ca me2day.com me2day.net media-imdb.com mediafactory.fm mediafire.com mediatraffic.de medscape.com meebo.com megabus.com megashare.com megashares.com megaupload.com megavideo.com melon.com meltingpot.com memegenerator.net menchies.ca menchies.com method.ac metro.us metroland.com mfcdn.net mhcdn.net miamiherald.com microsoft.com minus.com mirrorcreator.com missaworld.com mix2ktv.com mixi.jp mixpanel.com mixpod.com mmgn.com mnetamerica.com mojvideo.com momofuku.com moneyville.ca montblanc.com monttremblantnow.ca movie2k.to movietickets.com movietimes.ca movook.com moxies.ca mozilla.com mozilla.net mp3raid.com mp3skull.com mp3total.com mpcdn.net mqcdn.com mrdoob.com mrmarz.com mrtzcmp3.net msecnd.net msn.com mtviggy.com mtvnservices.com murgent.com music-boom.com muzie.co.jp muzikupdates.com mvtracker.com myanimelist.net myexplore.ca mykawartha.com mynortonaccount.com mysoju.com myspace.com myspacecdn.com nadege-patisserie.com namcobandaigames.com nap.edu naturalmoleremovals.com nature.com naver.com nbc.com nbcuni.com nciku.com ndoverdrive.net neave.com neonandsons.com newegg.ca newegg.com newfullalbum.com newrelic.com news.com.au newstalk1010.com newswire.ca newsy.com newzia.jp nick.com nicovideo.jp nih.gov nintendo.com nisemonogatari-anime.com nitrodownloads.net nocookie.net nokatoronto.com northcountrypublicradio.org norton.com noscript.net noslang.com notesolution.com notjac.com novamov.com nowtoronto.com nsdsvc.com nuclearsecrecy.com nuffnang.com.sg nutritioncourseunion.com ocutg.on.ca olg.ca onionstatic.com ontariocolleges.ca ontariosake.com ontariotourismpublications.com optimizely.com orderrogers.ca ordertickets.ca ordienetworks.com orlandosentinel.com otaku.com otonomai.net ouac.on.ca ourpubliclibrary.to ousa.ca outbrain.com ox.ac.uk oxfordjournals.org pages05.net pantherssl.com papermate.com parsely.com passport.com passport.net passportimages.com paypal.com paypalobjects.com pbsrc.com pcfinancial.ca pcmag.com pearsoncmg.com persona.org phncdn.com phonejedi.com photobucket.com picdizzle.com pimp-my-profile.com pixiv.net playonestop.com playstation.com plus4chan.org poll.fm polldaddy.com postsecret.com pp2g.tv procatinator.com protect-my-links.com pubmed.gov purdue.edu puremobile.ca purolator.com purpleculture.net pusheen.com putlocker.com q.gs queeriodictable.com quotemedia.com rainymood.com randomc.net rapidgator.net rapidshare.com rapidshare.de rarlab.com ratemyprofessors.com ray-ban.com rbc.com rbcroyalbank.com reachjunction.com read.homeunix.com realitylapse.com realkana.com recaptcha.net recommender.jp redbullstratos.com reddit.com redditgifts.com redditgraphs.com redditstatic.com redflagdeals.com redlobster.ca redlobster.com redpathsugars.com refworks.com res-x.com research-house.com researchnow.com resultglider.com revsci.net rfdcontent.com rlcdn.com robert-forbes.com rocketnews24.com rogers.com rogershelp.com rpgmusics.com rsuonline.ca rucssa.ca ryebooks.com ryerson.ca ryersonbikeclub.com ryersonkendo.com ryersonrams.ca ryushare.com s-msn.com s-mysoju.com safewaytours.net sakuranoa.me saladking.com samanthasmith.info samsung.com sanrio.co.jp sansotei.com santouka.co.jp sapo.pt save.ca savefile.com scancafe.com scandal-4.com scarboroughtowncentre.com scea.com scholarshipscanada.com scholarsportal.info sciencedirect.com scientificamerican.com scorecardresearch.com scphillips.com scribblelive.com scribd.com scriblink.com searchforce.net securecode.com seetorontonow.com sellathon.com senecac.on.ca serialssolutions.com seriouseats.com serving-sys.com share-online.biz sharingzone.net sheik.co.uk sherwaygardens.ca shortform.com sickkidslottery.ca siliconera.com simg.jp sina.com.cn sinajs.cn sitelock.com sitemeter.com skimresources.com sky.com slickitup.com slideshare.net slidesharecdn.com slightlywarped.com smartling.com smbc-comics.com smokespoutinerie.com smtown.com snazzyspace.com sndcdn.com snipmp3.com snopes.com sogc.org someecards.com somethingawful.com sony.ca sonycentre.ca sonyentertainmentnetwork.com sonymobile.com sonymusic.co.jp soompi.com soundcloud.com sourceforge.net spankwire.com spccard.ca speedtest.net spike.com sportchek.ca spotagame.com spreadshirt.com springrolls.ca springsushi.com square-enix.com staples.ca staples.com staplescopyandprint.ca staplesesp.ca starbucks.ca stardock.com stardriver-movie.net statcounter.com stippleit.com stlouiswings.com stoneskippingrobot.com storify.com stream2watch.me streamtivi.com struckphoto.com stumbleupon.com survey4on.ca survey4onca.com surveymonkey.com surveywriter.net sushikaji.com susur.com swap.ca swisschalet.ca systemrequirementslab.com t.co tadst.com taipantours.com takeonektv.com taobao.com taobaocdn.com taobaofocus.com tarosfish.com tbcdn.cn tbs.co.jp tdpumpitup.com tdsb.on.ca teambuy.ca teamcoco.com teamcococdn.com technoratimedia.com ted.com teennick.com telus.com ten23.ca tenmanga.com tested.com tf1.fr thebananablog.com thedailybeast.com theglobeandmail.com themaxdavisthemes.com thenicestplaceontheinter.net theoatmeal.com theonion.com theplatform.com thesixtyone.com thestar.com theweathernetwork.com three-words.net ticketmaster.ca ticketmaster.com tiff.net timeanddate.com timelinecoverbanner.com timezoneconverter.com timhortons.com tineye.com tinypic.com tnaflix.com tokyohive.com toonamiaftermath.com topatoco.com topscms.com toptenreviews.com toronto-sanko.com toronto.ca toronto.com torontolife.com torontomandarinschool.com torontoprintcopycentre.com torontopubliclibrary.ca torrentz.eu totalbeauty.com tours4fun.com treetoptrekking.com tremblant.ca tribalfusion.com trove.com tsh.to ttc.ca tubemirror.com tudou.com tudouui.com tulsaworld.com tumblr.com tunghingbakery.ca turbobit.net turn.com turner.com tusbe.com twimg.com twinfinite.net twisterkaraoke.com twitch.tv twitter.com tynt.com udmserve.net uhn.ca umusic.com universalmusic.com uoftbookstore.com uoguelph.ca uplly.com upload2.com uploaded.to uploading.com uploadstation.com ups.com uptake.com uptakeinc.com urbanspoon.com urbns.pn ursinus.edu ust.hk ustream.tv utadanet.com uthinkonline.com utoronto.ca vancouversun.com vanilladev.com vanillaforums.com venda.com venturebeat.com veoh.com verisign.com viarail.ca videa.hu video44.net videogameslive.com videoweed.es videozer.com vidzur.com viki.com vikiassets.com vimeo.com vimeocdn.com virtualearth.net visionfactory.jp visionobjects.com visitkoreayear.com visualrevenue.com vmixcore.com washingtonpost.com wat.fr wat.tv watchanimeon.com watchcartoononline.com watchdub.com weborama.fr webs.com webtrendslive.com weebly.com weibo.com wemakevotingeasy.ca wetpaint.com whackanumber.com wikia-beacon.com wikia.com wikidot.com wikimedia.org wikipedia.org wikiwallpapers.com wiley.com wintermagic.ca wipmania.com wired.com wix.com wlonk.com wlxrs.com wm-panel.com wmctv.com wnetwork.com wolfram.com wolframalpha.com wordpress.com workopolis.com world.co.jp worldcat.org worldtaximeter.com wp.com writeinchinese.com writtenkitten.net wsj.com wsj.net wupload.com wwfcentral.ca wwfchina.org xfb.kr xokaraoke.com xrite.com xtendmedia.com xuite.net yahoo.co.jp yahoo.com yahooapis.com yai.bz ycasmd.info yellowbridge.com yellowpages.ca yelp.ca yelpcdn.com yesasia.com yesstyle.com yfrog.com yimg.com yinyuetai.com yogenfruz.com yooouuutuuube.com yosida.com youku.com youtube.com yp.ca ytimg.com ytv.com zara.com zara.net zenjapaneserestaurant.com zerochan.net zip-codes.com zone-anime.com about: about:addons about:blank about:blocked about:certerror about:config about:crashes about:credits about:home about:memory about:neterror about:plugins about:privatebrowsing about:sessionrestore about:support blob: chrome: http://100thgreycupfestival.ca http://192.168.0.1. http://1click-downloader.net http://1up.com http://29a.ch http://2genbox.net http://2mdn.net http://2shared.com http://395taxi.com http://49st.com http://4chan.org http://4ormat.com http://4shared-china.com http://4shared.com http://6theory.com http://7821k.com http://78royal.com http://7chan.org http://abebooks.com http://abmp3.com http://about.com http://accesso.com http://ad-indicator.com http://adadvisor.net http://adbrite.com http://adcash.com http://addthis.com http://adf.ly http://adfoc.us http://adgear.com http://adsfuse.com http://adshost1.com http://adshost2.com http://adtechus.com http://advaestheticsurgery.com http://afx.ms http://agogoktv.ca http://aimini.net http://akamaihd.net http://alibaba.com http://alibris-static.com http://alibris.com http://allkpop.com http://allmyvideos.net http://allrecipes.com http://amazon.ca http://amazon.com http://amazonaws.com http://americanapparel.net http://amiami.com http://amung.us http://androp.jp http://angusreidforum.com http://ani-com.hk http://anilinkz.com http://animea-server.net http://animea.net http://animecrazy.net http://animefreak.tv http://animefushigi.com http://animelyrics.com http://animenewsnetwork.com http://animeratio.com http://animeseason.com http://animesuki.com http://animetake.com http://animeultima.tv http://anipan.com http://anivoid.com http://annexcatrescue.ca http://antipodemap.com http://antranik.org http://aol.com http://aolcdn.com http://apple.com http://archive.org http://arstechnica.com http://arstechnica.net http://asecular.com http://asianfanatics.net http://asianjunkie.com http://asiatorrents.com http://askmen.com http://asos.com http://aspnetcdn.com http://astretchyhand.com http://astronomyforum.net http://atdmt.com http://auctiva.com http://avaaz.org http://avail.net http://avatarchapters.tv http://avex.jp http://azjmp.com http://badgeville.com http://baidu.com http://bakabt.com http://bakabt.me http://bananarepublic.ca http://bandcamp.com http://bannergadgets.com http://basecampcenters.com http://basic-japanese.com http://batoto.net http://baynote.net http://bcbits.com http://beauty-jp.com http://becktaxi.com http://beemp3.com http://belamionline.com http://bell.ca http://bestbuy.ca http://bestbuy.com http://bibme.org http://billboard.com http://bimm-dev.com http://bing.com http://bitly.com http://bitshare.com http://bitsnoop.com http://bixi.com http://blacks.ca http://bleachflame.com http://bleepingcomputer.com http://blissful-sin.com http://blitzdownloads.com http://blogblog.com http://blogger.com http://blogspot.ca http://blogspot.com http://blogspot.mx http://blogto.com http://bloor-yorkville.com http://bmo.com http://bookstorerus.com http://bootybreak.com http://bostonpizza.com http://bravender.us http://brcdn.com http://break.com http://brightcove.com http://brightsiren.jp http://bulgogibros.ca http://bulkbarn.ca http://bulldogtoronto.com http://burgerking.ca http://burpee.com http://buzzfed.com http://buzzfeed.com http://cachefly.net http://cafprs.com http://calculatorcat.com http://canada.com http://canadapost.ca http://canadaswonderland.com http://canlearn.ca http://canpages.ca http://cantoneseinput.com http://cardsagainsthumanity.com http://casalemedia.com http://cat-bounce.com http://cbc.ca http://cbox.ws http://cbs.com http://cbsnews.com http://ccer.ca http://cdn-apple.com http://cedarbraemall.ca http://cengage.com http://centennialcollege.ca http://cfs-fcee.ca http://cfs-services.ca http://cfsadmin.org http://cfsontario.ca http://channelintelligence.com http://chartbeat.com http://chatroll-cloud-1.com http://checkm8.com http://cheng-tsui.com http://chia-anime.com http://chinacottage.ca http://chinese-tools.com http://chinesepod.com http://choicestream.com http://choix.jp http://christianpost.com http://cineplex.com http://citationmachine.net http://citefast.com http://citrixonline.com http://cityeats.com http://citytv.com http://classistatic.com http://cleanprint.net http://clickability.com http://clickthatbutton.com http://climbingacademy.com http://clip.dj http://cloudflare.com http://cloudfront.net http://cmaj.ca http://cnet.com http://cnn.com http://co.cc http://coachcanada.com http://codysherman.com http://coldfront.net http://collegehumor.com http://colormunki.com http://com.com http://comedycentral.com http://commiesubs.com http://compassionpit.com http://confirmit.com http://cookieless.ca http://copyrite.ca http://cornify.com http://cosplayfu.ca http://councillordavis.com http://coveragemapper.com http://cp24.com http://cpime.hk http://cpmstar.com http://cpxinteractive.com http://cracked.com http://crackedcdn.com http://crowdscience.com http://crtinv.com http://crumpler.com http://ctv.ca http://ctvdigital.net http://ctvnews.ca http://ctvolympics.ca http://cvcdn.com http://dadt.com http://dailyfinance.com http://dailymotion.com http://datacard.com http://datacollectionsite.com http://daum-img.net http://daum.net http://daumcdn.net http://davidduncanhouse.com http://davidwalsh.name http://dealsnoop.com http://depositfiles.com http://developerduck.com http://deviantart.com http://deviantart.net http://dga.jp http://dhl.ca http://digitaljournal.com http://digitalriver.com http://disqus.com http://diylol.com http://dkpopnews.net http://dl-rms.com http://dmcdn.net http://doaj.org http://doctorsnightguard.com http://dollforum.com http://doodle.com http://doubleclick.net http://downloadbox.me http://downloadprovider.me http://dramacrazy.net http://dramafever.com http://drawastickman.com http://drpgilbert.com http://drtuber.com http://dsparking.com http://dsultra.com http://dt07.net http://dualshockers.com http://dubzonline.com http://dufflet.com http://duolingo.com http://e-activist.com http://easybib.com http://eatmanga.com http://eatyourkimchi.com http://ebay.ca http://ebay.com http://ebaydesc.ca http://ebaydesc.com http://ebayrtm.com http://ebaystatic.com http://ebgames.ca http://ebten.jp http://echoenabled.com http://ecwid.com http://edgecastcdn.net http://edgekey.net http://editmysite.com http://effectivemeasure.net http://eguidedog.net http://ehow.com http://ehowcdn.com http://electronicinfo.ca http://emimusic.jp http://emotionalbagcheck.com http://empathica.com http://enewsworld.com http://engadget.com http://epdrama.com http://esnips.com http://esoft.in http://essaytyper.com http://etoolsage.com http://europepmc.org http://eventbrite.com http://everysing.com http://evolvemediametrics.com http://expedia.com http://exponential.com http://extratorrent.com http://eyereturn.com http://facebook.com http://facebook.net http://fairchildtv.com http://fairviewmall.ca http://fanmail.biz http://fanpop.com http://fastclick.net http://fbcdn.net http://ff-type0.net http://ffdistantworlds.com http://ffshrine.org http://fiberupload.com http://fido.ca http://filefactory.com http://filefat.com http://filesend.net http://fileserve.com http://filesonic.com http://filestube.com http://filetram.com http://fileuplo.de http://finalfantasy.jp http://firstclass-download.com http://firstcovers.com http://flashgot.net http://flux.com http://flyerservices.com http://flyertown.ca http://flyporter.com http://fm-anime.com http://fmpub.net http://foodnetwork.ca http://forumtl.com http://freakshare.com http://freeboyfriend.com http://freehostedscripts.net http://freetranslation.com http://freshenergy.com http://frontiercollege.ca http://fullsail.edu http://funnyordie.com http://futureshop.ca http://fyzzed.com http://gamedorm.net http://gamedorm.org http://gamefaqs.com http://gameshark.com http://gamespot.com http://gamespotcdn.net http://gamestop.ca http://gametrailers.com http://gamezone.com http://gapcanada.ca http://garlandcanada.ca http://gawker.com http://gawkerassets.com http://geekosystem.com http://gematsu.com http://general-files.com http://georgebrown.ca http://geovisite.com http://gettopup.com http://gfx.ms http://ggsrv.com http://gifbin.com http://giftcardstore.ca http://gigya.com http://girlsgenerationusa.com http://github.com http://givex.com http://gizmodo.com http://globaltv.com http://globe7.com http://gogoanime.com http://goo.gl http://gooddrama.net http://goodmanga.net http://goodreads.com http://google-analytics.com http://google.ca http://google.com http://googleadservices.com http://googleapis.com http://googlesyndication.com http://googletagservices.com http://googleusercontent.com http://gotobus.com http://gotransit.com http://gq.com http://grantgalitz.org http://gravatar.com http://greenbeanery.ca http://greenshield.ca http://grenville.com http://greyhound.ca http://grocerygateway.com http://grocerysavings.ca http://groupon-content.net http://groupon.ca http://groupon.com http://grouponcdn.com http://gstatic.com http://guidetojapanese.org http://gumgum.com http://gunggo.com http://gx101.com http://hackertyper.com http://hardcorecorn.com http://hardlywork.in http://hktv.cc http://hlj.com http://hmv.ca http://hollywoodreporter.com http://hotfile.com http://hotgoo.com http://hotmail.com http://howardforums.com http://hulkshare.com http://icefilms.info http://ichiriki.ca http://idownloadgalore.com http://idws-static.com http://ign.com http://ignimgs.com http://ilive.to http://illuminati.org http://ilovefreestuff.ca http://images-amazon.com http://imageshack.us http://imdb.com http://imgag.com http://imgur.com http://imshopping.com http://inagist.com http://indieclicktv.com http://indigo.ca http://indowebster.com http://infolinks.com http://informaction.com http://inputfree.com http://insightexpressai.com http://insinc.com http://intellitxt.com http://invitemedia.com http://involver.com http://io9.com http://islandinkjet.com http://isohunt.com http://issuu.com http://iucnredlist.org http://j-pop-rock.com http://j.gs http://jaccotours.com http://jame-world.com http://japanpost.jp http://java.com http://javascriptkit.com http://jeetyetmedia.com http://jezebel.com http://jibjab.com http://jmp3up.info http://jogc.com http://johnson.ca http://josmanart.com http://jpddl.com http://jphip.com http://jpopasia.com http://jquery.com http://jsonline.com http://jtown.ca http://jtvnw.net http://just-eat.ca http://just-wink.com http://justcloud.com http://justin.tv http://kaiseki.ca http://kaisekisakura.com http://kakao.com http://kazanteppanyaki.com http://keepvid.com http://kijapanese.com http://kijiji.ca http://kintonramen.com http://kissmanga.com http://kivmanga.com http://knowyourmeme.com http://koalastothemax.com http://kondoot.com http://kotaku.com http://kpop7.com http://kpopseven.com http://kpoptown.com http://kristalbelli.com http://ktopia.net http://kumby.com http://kumon.ca http://lacrawfish.com http://laduree.fr http://lahoretikkahouse.com http://laiwahheen.com http://lalaparadise.com http://larc-en-ciel.com http://lcbo.com http://learningprograms.ca http://letitbit.net http://letsgoglobal.ca http://lg.com http://liftdna.com http://lijit.com http://linkbucks.com http://linkwithin.com http://listal.com http://listenandlearnusa.com http://live.com http://liverail.com http://livestream.com http://llamafont.com http://llbean.com http://llnwd.net http://lmgtfy.com http://loading321.com http://localwork.ca http://longtailvideo.com http://lottomax.ca http://lucasentertainment.com http://lululemon.com http://makkalchon.com http://mamaawardslivestream.com http://mandarintools.com http://manga-go.com http://manga365.net http://manga4.com http://mangaeden.com http://mangafox.com http://mangafox.me http://mangahere.com http://mangainn.com http://mangapark.com http://mangareader.net http://mangarush.com http://mangastream.com http://mangastream.to http://mangatoyou.com http://mangatraders.com http://mangaupdates.com http://manpuku.ca http://maone.net http://mapbox.com http://mapleleaf.ca http://mapquest.com http://mapquestapi.com http://marbleslab.ca http://marketforce.com http://marketingden.com http://masalatime.com http://mastercard.ca http://mastercard.com http://mathtran.org http://maxmind.com http://mcdonalds.ca http://mcdonalds.com http://mcmaster.ca http://me2day.com http://me2day.net http://media-imdb.com http://mediafactory.fm http://mediafire.com http://mediatraffic.de http://medscape.com http://meebo.com http://megabus.com http://megashare.com http://megashares.com http://megaupload.com http://megavideo.com http://melon.com http://meltingpot.com http://memegenerator.net http://menchies.ca http://menchies.com http://method.ac http://metro.us http://metroland.com http://mfcdn.net http://mhcdn.net http://miamiherald.com http://microsoft.com http://minus.com http://mirrorcreator.com http://missaworld.com http://mix2ktv.com http://mixi.jp http://mixpanel.com http://mixpod.com http://mmgn.com http://mnetamerica.com http://mojvideo.com http://momofuku.com http://moneyville.ca http://montblanc.com http://monttremblantnow.ca http://movie2k.to http://movietickets.com http://movietimes.ca http://movook.com http://moxies.ca http://mozilla.com http://mozilla.net http://mp3raid.com http://mp3skull.com http://mp3total.com http://mpcdn.net http://mqcdn.com http://mrdoob.com http://mrmarz.com http://mrtzcmp3.net http://msecnd.net http://msn.com http://mtviggy.com http://mtvnservices.com http://murgent.com http://music-boom.com http://muzikupdates.com http://mvtracker.com http://myanimelist.net http://myexplore.ca http://mykawartha.com http://mynortonaccount.com http://mysoju.com http://myspace.com http://myspacecdn.com http://nadege-patisserie.com http://namcobandaigames.com http://nap.edu http://naturalmoleremovals.com http://nature.com http://naver.com http://nbc.com http://nbcuni.com http://nciku.com http://ndoverdrive.net http://neave.com http://neonandsons.com http://newegg.ca http://newegg.com http://newfullalbum.com http://newrelic.com http://newstalk1010.com http://newswire.ca http://newsy.com http://newzia.jp http://nick.com http://nicovideo.jp http://nih.gov http://nintendo.com http://nisemonogatari-anime.com http://nitrodownloads.net http://nocookie.net http://nokatoronto.com http://northcountrypublicradio.org http://norton.com http://noscript.net http://noslang.com http://notesolution.com http://notjac.com http://novamov.com http://nowtoronto.com http://nsdsvc.com http://nuclearsecrecy.com http://nutritioncourseunion.com http://olg.ca http://onionstatic.com http://ontariocolleges.ca http://ontariosake.com http://ontariotourismpublications.com http://optimizely.com http://orderrogers.ca http://ordertickets.ca http://ordienetworks.com http://orlandosentinel.com http://otaku.com http://otonomai.net http://ourpubliclibrary.to http://ousa.ca http://outbrain.com http://oxfordjournals.org http://pages05.net http://pantherssl.com http://papermate.com http://parsely.com http://passport.com http://passport.net http://passportimages.com http://paypal.com http://paypalobjects.com http://pbsrc.com http://pcfinancial.ca http://pcmag.com http://pearsoncmg.com http://persona.org http://phncdn.com http://phonejedi.com http://photobucket.com http://picdizzle.com http://pimp-my-profile.com http://pixiv.net http://playonestop.com http://playstation.com http://plus4chan.org http://poll.fm http://polldaddy.com http://postsecret.com http://pp2g.tv http://procatinator.com http://protect-my-links.com http://pubmed.gov http://purdue.edu http://puremobile.ca http://purolator.com http://purpleculture.net http://pusheen.com http://putlocker.com http://q.gs http://queeriodictable.com http://quotemedia.com http://rainymood.com http://randomc.net http://rapidgator.net http://rapidshare.com http://rapidshare.de http://rarlab.com http://ratemyprofessors.com http://ray-ban.com http://rbc.com http://rbcroyalbank.com http://reachjunction.com http://realitylapse.com http://realkana.com http://recaptcha.net http://recommender.jp http://redbullstratos.com http://reddit.com http://redditgifts.com http://redditgraphs.com http://redditstatic.com http://redflagdeals.com http://redlobster.ca http://redlobster.com http://redpathsugars.com http://refworks.com http://res-x.com http://research-house.com http://researchnow.com http://resultglider.com http://revsci.net http://rfdcontent.com http://rlcdn.com http://robert-forbes.com http://rocketnews24.com http://rogers.com http://rogershelp.com http://rpgmusics.com http://rsuonline.ca http://rucssa.ca http://ryebooks.com http://ryerson.ca http://ryersonbikeclub.com http://ryersonkendo.com http://ryersonrams.ca http://ryushare.com http://s-msn.com http://s-mysoju.com http://safewaytours.net http://sakuranoa.me http://saladking.com http://samanthasmith.info http://samsung.com http://sansotei.com http://sapo.pt http://save.ca http://savefile.com http://scancafe.com http://scandal-4.com http://scarboroughtowncentre.com http://scea.com http://scholarshipscanada.com http://scholarsportal.info http://sciencedirect.com http://scientificamerican.com http://scorecardresearch.com http://scphillips.com http://scribblelive.com http://scribd.com http://scriblink.com http://searchforce.net http://securecode.com http://seetorontonow.com http://sellathon.com http://serialssolutions.com http://seriouseats.com http://serving-sys.com http://share-online.biz http://sharingzone.net http://sherwaygardens.ca http://shortform.com http://sickkidslottery.ca http://siliconera.com http://simg.jp http://sinajs.cn http://sitelock.com http://sitemeter.com http://skimresources.com http://sky.com http://slickitup.com http://slideshare.net http://slidesharecdn.com http://slightlywarped.com http://smartling.com http://smbc-comics.com http://smokespoutinerie.com http://smtown.com http://snazzyspace.com http://sndcdn.com http://snipmp3.com http://snopes.com http://sogc.org http://someecards.com http://somethingawful.com http://sony.ca http://sonycentre.ca http://sonyentertainmentnetwork.com http://sonymobile.com http://soompi.com http://soundcloud.com http://sourceforge.net http://spankwire.com http://spccard.ca http://speedtest.net http://spike.com http://sportchek.ca http://spotagame.com http://spreadshirt.com http://springrolls.ca http://springsushi.com http://square-enix.com http://staples.ca http://staples.com http://staplescopyandprint.ca http://staplesesp.ca http://starbucks.ca http://stardock.com http://stardriver-movie.net http://statcounter.com http://stippleit.com http://stlouiswings.com http://stoneskippingrobot.com http://storify.com http://stream2watch.me http://streamtivi.com http://struckphoto.com http://stumbleupon.com http://survey4on.ca http://survey4onca.com http://surveymonkey.com http://surveywriter.net http://sushikaji.com http://susur.com http://swap.ca http://swisschalet.ca http://systemrequirementslab.com http://t.co http://tadst.com http://taipantours.com http://takeonektv.com http://taobao.com http://taobaocdn.com http://taobaofocus.com http://tarosfish.com http://tbcdn.cn http://tdpumpitup.com http://teambuy.ca http://teamcoco.com http://teamcococdn.com http://technoratimedia.com http://ted.com http://teennick.com http://telus.com http://ten23.ca http://tenmanga.com http://tested.com http://tf1.fr http://thebananablog.com http://thedailybeast.com http://theglobeandmail.com http://themaxdavisthemes.com http://thenicestplaceontheinter.net http://theoatmeal.com http://theonion.com http://theplatform.com http://thesixtyone.com http://thestar.com http://theweathernetwork.com http://three-words.net http://ticketmaster.ca http://ticketmaster.com http://tiff.net http://timeanddate.com http://timelinecoverbanner.com http://timezoneconverter.com http://timhortons.com http://tineye.com http://tinypic.com http://tnaflix.com http://tokyohive.com http://toonamiaftermath.com http://topatoco.com http://topscms.com http://toptenreviews.com http://toronto-sanko.com http://toronto.ca http://toronto.com http://torontolife.com http://torontomandarinschool.com http://torontoprintcopycentre.com http://torontopubliclibrary.ca http://torrentz.eu http://totalbeauty.com http://tours4fun.com http://treetoptrekking.com http://tremblant.ca http://tribalfusion.com http://trove.com http://tsh.to http://ttc.ca http://tubemirror.com http://tudou.com http://tudouui.com http://tulsaworld.com http://tumblr.com http://tunghingbakery.ca http://turbobit.net http://turn.com http://turner.com http://tusbe.com http://twimg.com http://twinfinite.net http://twisterkaraoke.com http://twitch.tv http://twitter.com http://tynt.com http://udmserve.net http://uhn.ca http://umusic.com http://universalmusic.com http://uoftbookstore.com http://uoguelph.ca http://uplly.com http://upload2.com http://uploaded.to http://uploading.com http://uploadstation.com http://ups.com http://uptake.com http://uptakeinc.com http://urbanspoon.com http://urbns.pn http://ursinus.edu http://ust.hk http://ustream.tv http://utadanet.com http://uthinkonline.com http://utoronto.ca http://vancouversun.com http://vanilladev.com http://vanillaforums.com http://venda.com http://venturebeat.com http://veoh.com http://verisign.com http://viarail.ca http://videa.hu http://video44.net http://videogameslive.com http://videoweed.es http://videozer.com http://vidzur.com http://viki.com http://vikiassets.com http://vimeo.com http://vimeocdn.com http://virtualearth.net http://visionfactory.jp http://visionobjects.com http://visitkoreayear.com http://visualrevenue.com http://vmixcore.com http://washingtonpost.com http://wat.fr http://wat.tv http://watchanimeon.com http://watchcartoononline.com http://watchdub.com http://weborama.fr http://webs.com http://webtrendslive.com http://weebly.com http://weibo.com http://wemakevotingeasy.ca http://wetpaint.com http://whackanumber.com http://wikia-beacon.com http://wikia.com http://wikidot.com http://wikimedia.org http://wikipedia.org http://wikiwallpapers.com http://wiley.com http://wintermagic.ca http://wipmania.com http://wired.com http://wix.com http://wlonk.com http://wlxrs.com http://wm-panel.com http://wmctv.com http://wnetwork.com http://wolfram.com http://wolframalpha.com http://wordpress.com http://workopolis.com http://worldcat.org http://worldtaximeter.com http://wp.com http://writeinchinese.com http://writtenkitten.net http://wsj.com http://wsj.net http://wupload.com http://wwfcentral.ca http://wwfchina.org http://xfb.kr http://xokaraoke.com http://xrite.com http://xtendmedia.com http://xuite.net http://yahoo.com http://yahooapis.com http://yai.bz http://ycasmd.info http://yellowbridge.com http://yellowpages.ca http://yelp.ca http://yelpcdn.com http://yesasia.com http://yesstyle.com http://yfrog.com http://yimg.com http://yinyuetai.com http://yogenfruz.com http://yooouuutuuube.com http://yosida.com http://youku.com http://youtube.com http://yp.ca http://ytimg.com http://ytv.com http://zara.com http://zara.net http://zenjapaneserestaurant.com http://zerochan.net http://zip-codes.com http://zone-anime.com https://100thgreycupfestival.ca https://1click-downloader.net https://1up.com https://29a.ch https://2genbox.net https://2mdn.net https://2shared.com https://395taxi.com https://49st.com https://4chan.org https://4ormat.com https://4shared-china.com https://4shared.com https://6theory.com https://7821k.com https://78royal.com https://7chan.org https://abebooks.com https://abmp3.com https://about.com https://accesso.com https://ad-indicator.com https://adadvisor.net https://adbrite.com https://adcash.com https://addthis.com https://adf.ly https://adfoc.us https://adgear.com https://adsfuse.com https://adshost1.com https://adshost2.com https://adtechus.com https://advaestheticsurgery.com https://afx.ms https://agogoktv.ca https://aimini.net https://akamaihd.net https://alibaba.com https://alibris-static.com https://alibris.com https://allkpop.com https://allmyvideos.net https://allrecipes.com https://amazon.ca https://amazon.com https://amazonaws.com https://americanapparel.net https://amiami.com https://amung.us https://androp.jp https://angusreidforum.com https://ani-com.hk https://anilinkz.com https://animea-server.net https://animea.net https://animecrazy.net https://animefreak.tv https://animefushigi.com https://animelyrics.com https://animenewsnetwork.com https://animeratio.com https://animeseason.com https://animesuki.com https://animetake.com https://animeultima.tv https://anipan.com https://anivoid.com https://annexcatrescue.ca https://antipodemap.com https://antranik.org https://aol.com https://aolcdn.com https://apple.com https://archive.org https://arstechnica.com https://arstechnica.net https://asecular.com https://asianfanatics.net https://asianjunkie.com https://asiatorrents.com https://askmen.com https://asos.com https://aspnetcdn.com https://astretchyhand.com https://astronomyforum.net https://atdmt.com https://auctiva.com https://avaaz.org https://avail.net https://avatarchapters.tv https://avex.jp https://azjmp.com https://badgeville.com https://baidu.com https://bakabt.com https://bakabt.me https://bananarepublic.ca https://bandcamp.com https://bannergadgets.com https://basecampcenters.com https://basic-japanese.com https://batoto.net https://baynote.net https://bcbits.com https://beauty-jp.com https://becktaxi.com https://beemp3.com https://belamionline.com https://bell.ca https://bestbuy.ca https://bestbuy.com https://bibme.org https://billboard.com https://bimm-dev.com https://bing.com https://bitly.com https://bitshare.com https://bitsnoop.com https://bixi.com https://blacks.ca https://bleachflame.com https://bleepingcomputer.com https://blissful-sin.com https://blitzdownloads.com https://blogblog.com https://blogger.com https://blogspot.ca https://blogspot.com https://blogspot.mx https://blogto.com https://bloor-yorkville.com https://bmo.com https://bookstorerus.com https://bootybreak.com https://bostonpizza.com https://bravender.us https://brcdn.com https://break.com https://brightcove.com https://brightsiren.jp https://bulgogibros.ca https://bulkbarn.ca https://bulldogtoronto.com https://burgerking.ca https://burpee.com https://buzzfed.com https://buzzfeed.com https://cachefly.net https://cafprs.com https://calculatorcat.com https://canada.com https://canadapost.ca https://canadaswonderland.com https://canlearn.ca https://canpages.ca https://cantoneseinput.com https://cardsagainsthumanity.com https://casalemedia.com https://cat-bounce.com https://cbc.ca https://cbox.ws https://cbs.com https://cbsnews.com https://ccer.ca https://cdn-apple.com https://cedarbraemall.ca https://cengage.com https://centennialcollege.ca https://cfs-fcee.ca https://cfs-services.ca https://cfsadmin.org https://cfsontario.ca https://channelintelligence.com https://chartbeat.com https://chatroll-cloud-1.com https://checkm8.com https://cheng-tsui.com https://chia-anime.com https://chinacottage.ca https://chinese-tools.com https://chinesepod.com https://choicestream.com https://choix.jp https://christianpost.com https://cineplex.com https://citationmachine.net https://citefast.com https://citrixonline.com https://cityeats.com https://citytv.com https://classistatic.com https://cleanprint.net https://clickability.com https://clickthatbutton.com https://climbingacademy.com https://clip.dj https://cloudflare.com https://cloudfront.net https://cmaj.ca https://cnet.com https://cnn.com https://co.cc https://coachcanada.com https://codysherman.com https://coldfront.net https://collegehumor.com https://colormunki.com https://com.com https://comedycentral.com https://commiesubs.com https://compassionpit.com https://confirmit.com https://cookieless.ca https://copyrite.ca https://cornify.com https://cosplayfu.ca https://councillordavis.com https://coveragemapper.com https://cp24.com https://cpime.hk https://cpmstar.com https://cpxinteractive.com https://cracked.com https://crackedcdn.com https://crowdscience.com https://crtinv.com https://crumpler.com https://ctv.ca https://ctvdigital.net https://ctvnews.ca https://ctvolympics.ca https://cvcdn.com https://dadt.com https://dailyfinance.com https://dailymotion.com https://datacard.com https://datacollectionsite.com https://daum-img.net https://daum.net https://daumcdn.net https://davidduncanhouse.com https://davidwalsh.name https://dealsnoop.com https://depositfiles.com https://developerduck.com https://deviantart.com https://deviantart.net https://dga.jp https://dhl.ca https://digitaljournal.com https://digitalriver.com https://disqus.com https://diylol.com https://dkpopnews.net https://dl-rms.com https://dmcdn.net https://doaj.org https://doctorsnightguard.com https://dollforum.com https://doodle.com https://doubleclick.net https://downloadbox.me https://downloadprovider.me https://dramacrazy.net https://dramafever.com https://drawastickman.com https://drpgilbert.com https://drtuber.com https://dsparking.com https://dsultra.com https://dt07.net https://dualshockers.com https://dubzonline.com https://dufflet.com https://duolingo.com https://e-activist.com https://easybib.com https://eatmanga.com https://eatyourkimchi.com https://ebay.ca https://ebay.com https://ebaydesc.ca https://ebaydesc.com https://ebayrtm.com https://ebaystatic.com https://ebgames.ca https://ebten.jp https://echoenabled.com https://ecwid.com https://edgecastcdn.net https://edgekey.net https://editmysite.com https://effectivemeasure.net https://eguidedog.net https://ehow.com https://ehowcdn.com https://electronicinfo.ca https://emimusic.jp https://emotionalbagcheck.com https://empathica.com https://enewsworld.com https://engadget.com https://epdrama.com https://esnips.com https://esoft.in https://essaytyper.com https://etoolsage.com https://europepmc.org https://eventbrite.com https://everysing.com https://evolvemediametrics.com https://expedia.com https://exponential.com https://extratorrent.com https://eyereturn.com https://facebook.com https://facebook.net https://fairchildtv.com https://fairviewmall.ca https://fanmail.biz https://fanpop.com https://fastclick.net https://fbcdn.net https://ff-type0.net https://ffdistantworlds.com https://ffshrine.org https://fiberupload.com https://fido.ca https://filefactory.com https://filefat.com https://filesend.net https://fileserve.com https://filesonic.com https://filestube.com https://filetram.com https://fileuplo.de https://finalfantasy.jp https://firstclass-download.com https://firstcovers.com https://flashgot.net https://flux.com https://flyerservices.com https://flyertown.ca https://flyporter.com https://fm-anime.com https://fmpub.net https://foodnetwork.ca https://forumtl.com https://freakshare.com https://freeboyfriend.com https://freehostedscripts.net https://freetranslation.com https://freshenergy.com https://frontiercollege.ca https://fullsail.edu https://funnyordie.com https://futureshop.ca https://fyzzed.com https://gamedorm.net https://gamedorm.org https://gamefaqs.com https://gameshark.com https://gamespot.com https://gamespotcdn.net https://gamestop.ca https://gametrailers.com https://gamezone.com https://gapcanada.ca https://garlandcanada.ca https://gawker.com https://gawkerassets.com https://geekosystem.com https://gematsu.com https://general-files.com https://georgebrown.ca https://geovisite.com https://gettopup.com https://gfx.ms https://ggsrv.com https://gifbin.com https://giftcardstore.ca https://gigya.com https://girlsgenerationusa.com https://github.com https://givex.com https://gizmodo.com https://globaltv.com https://globe7.com https://gogoanime.com https://goo.gl https://gooddrama.net https://goodmanga.net https://goodreads.com https://google-analytics.com https://google.ca https://google.com https://googleadservices.com https://googleapis.com https://googlesyndication.com https://googletagservices.com https://googleusercontent.com https://gotobus.com https://gotransit.com https://gq.com https://grantgalitz.org https://gravatar.com https://greenbeanery.ca https://greenshield.ca https://grenville.com https://greyhound.ca https://grocerygateway.com https://grocerysavings.ca https://groupon-content.net https://groupon.ca https://groupon.com https://grouponcdn.com https://gstatic.com https://guidetojapanese.org https://gumgum.com https://gunggo.com https://gx101.com https://hackertyper.com https://hardcorecorn.com https://hardlywork.in https://hktv.cc https://hlj.com https://hmv.ca https://hollywoodreporter.com https://hotfile.com https://hotgoo.com https://hotmail.com https://howardforums.com https://hulkshare.com https://icefilms.info https://ichiriki.ca https://idownloadgalore.com https://idws-static.com https://ign.com https://ignimgs.com https://ilive.to https://illuminati.org https://ilovefreestuff.ca https://images-amazon.com https://imageshack.us https://imdb.com https://imgag.com https://imgur.com https://imshopping.com https://inagist.com https://indieclicktv.com https://indigo.ca https://indowebster.com https://infolinks.com https://informaction.com https://inputfree.com https://insightexpressai.com https://insinc.com https://intellitxt.com https://invitemedia.com https://involver.com https://io9.com https://islandinkjet.com https://isohunt.com https://issuu.com https://iucnredlist.org https://j-pop-rock.com https://j.gs https://jaccotours.com https://jame-world.com https://japanpost.jp https://java.com https://javascriptkit.com https://jeetyetmedia.com https://jezebel.com https://jibjab.com https://jmp3up.info https://jogc.com https://johnson.ca https://josmanart.com https://jpddl.com https://jphip.com https://jpopasia.com https://jquery.com https://jsonline.com https://jtown.ca https://jtvnw.net https://just-eat.ca https://just-wink.com https://justcloud.com https://justin.tv https://kaiseki.ca https://kaisekisakura.com https://kakao.com https://kazanteppanyaki.com https://keepvid.com https://kijapanese.com https://kijiji.ca https://kintonramen.com https://kissmanga.com https://kivmanga.com https://knowyourmeme.com https://koalastothemax.com https://kondoot.com https://kotaku.com https://kpop7.com https://kpopseven.com https://kpoptown.com https://kristalbelli.com https://ktopia.net https://kumby.com https://kumon.ca https://lacrawfish.com https://laduree.fr https://lahoretikkahouse.com https://laiwahheen.com https://lalaparadise.com https://larc-en-ciel.com https://lcbo.com https://learningprograms.ca https://letitbit.net https://letsgoglobal.ca https://lg.com https://liftdna.com https://lijit.com https://linkbucks.com https://linkwithin.com https://listal.com https://listenandlearnusa.com https://live.com https://liverail.com https://livestream.com https://llamafont.com https://llbean.com https://llnwd.net https://lmgtfy.com https://loading321.com https://localwork.ca https://longtailvideo.com https://lottomax.ca https://lucasentertainment.com https://lululemon.com https://makkalchon.com https://mamaawardslivestream.com https://mandarintools.com https://manga-go.com https://manga365.net https://manga4.com https://mangaeden.com https://mangafox.com https://mangafox.me https://mangahere.com https://mangainn.com https://mangapark.com https://mangareader.net https://mangarush.com https://mangastream.com https://mangastream.to https://mangatoyou.com https://mangatraders.com https://mangaupdates.com https://manpuku.ca https://maone.net https://mapbox.com https://mapleleaf.ca https://mapquest.com https://mapquestapi.com https://marbleslab.ca https://marketforce.com https://marketingden.com https://masalatime.com https://mastercard.ca https://mastercard.com https://mathtran.org https://maxmind.com https://mcdonalds.ca https://mcdonalds.com https://mcmaster.ca https://me2day.com https://me2day.net https://media-imdb.com https://mediafactory.fm https://mediafire.com https://mediatraffic.de https://medscape.com https://meebo.com https://megabus.com https://megashare.com https://megashares.com https://megaupload.com https://megavideo.com https://melon.com https://meltingpot.com https://memegenerator.net https://menchies.ca https://menchies.com https://method.ac https://metro.us https://metroland.com https://mfcdn.net https://mhcdn.net https://miamiherald.com https://microsoft.com https://minus.com https://mirrorcreator.com https://missaworld.com https://mix2ktv.com https://mixi.jp https://mixpanel.com https://mixpod.com https://mmgn.com https://mnetamerica.com https://mojvideo.com https://momofuku.com https://moneyville.ca https://montblanc.com https://monttremblantnow.ca https://movie2k.to https://movietickets.com https://movietimes.ca https://movook.com https://moxies.ca https://mozilla.com https://mozilla.net https://mp3raid.com https://mp3skull.com https://mp3total.com https://mpcdn.net https://mqcdn.com https://mrdoob.com https://mrmarz.com https://mrtzcmp3.net https://msecnd.net https://msn.com https://mtviggy.com https://mtvnservices.com https://murgent.com https://music-boom.com https://muzikupdates.com https://mvtracker.com https://myanimelist.net https://myexplore.ca https://mykawartha.com https://mynortonaccount.com https://mysoju.com https://myspace.com https://myspacecdn.com https://nadege-patisserie.com https://namcobandaigames.com https://nap.edu https://naturalmoleremovals.com https://nature.com https://naver.com https://nbc.com https://nbcuni.com https://nciku.com https://ndoverdrive.net https://neave.com https://neonandsons.com https://newegg.ca https://newegg.com https://newfullalbum.com https://newrelic.com https://newstalk1010.com https://newswire.ca https://newsy.com https://newzia.jp https://nick.com https://nicovideo.jp https://nih.gov https://nintendo.com https://nisemonogatari-anime.com https://nitrodownloads.net https://nocookie.net https://nokatoronto.com https://northcountrypublicradio.org https://norton.com https://noscript.net https://noslang.com https://notesolution.com https://notjac.com https://novamov.com https://nowtoronto.com https://nsdsvc.com https://nuclearsecrecy.com https://nutritioncourseunion.com https://olg.ca https://onionstatic.com https://ontariocolleges.ca https://ontariosake.com https://ontariotourismpublications.com https://optimizely.com https://orderrogers.ca https://ordertickets.ca https://ordienetworks.com https://orlandosentinel.com https://otaku.com https://otonomai.net https://ourpubliclibrary.to https://ousa.ca https://outbrain.com https://oxfordjournals.org https://pages05.net https://pantherssl.com https://papermate.com https://parsely.com https://passport.com https://passport.net https://passportimages.com https://paypal.com https://paypalobjects.com https://pbsrc.com https://pcfinancial.ca https://pcmag.com https://pearsoncmg.com https://persona.org https://phncdn.com https://phonejedi.com https://photobucket.com https://picdizzle.com https://pimp-my-profile.com https://pixiv.net https://playonestop.com https://playstation.com https://plus4chan.org https://poll.fm https://polldaddy.com https://postsecret.com https://pp2g.tv https://procatinator.com https://protect-my-links.com https://pubmed.gov https://purdue.edu https://puremobile.ca https://purolator.com https://purpleculture.net https://pusheen.com https://putlocker.com https://q.gs https://queeriodictable.com https://quotemedia.com https://rainymood.com https://randomc.net https://rapidgator.net https://rapidshare.com https://rapidshare.de https://rarlab.com https://ratemyprofessors.com https://ray-ban.com https://rbc.com https://rbcroyalbank.com https://reachjunction.com https://realitylapse.com https://realkana.com https://recaptcha.net https://recommender.jp https://redbullstratos.com https://reddit.com https://redditgifts.com https://redditgraphs.com https://redditstatic.com https://redflagdeals.com https://redlobster.ca https://redlobster.com https://redpathsugars.com https://refworks.com https://res-x.com https://research-house.com https://researchnow.com https://resultglider.com https://revsci.net https://rfdcontent.com https://rlcdn.com https://robert-forbes.com https://rocketnews24.com https://rogers.com https://rogershelp.com https://rpgmusics.com https://rsuonline.ca https://rucssa.ca https://ryebooks.com https://ryerson.ca https://ryersonbikeclub.com https://ryersonkendo.com https://ryersonrams.ca https://ryushare.com https://s-msn.com https://s-mysoju.com https://safewaytours.net https://sakuranoa.me https://saladking.com https://samanthasmith.info https://samsung.com https://sansotei.com https://sapo.pt https://save.ca https://savefile.com https://scancafe.com https://scandal-4.com https://scarboroughtowncentre.com https://scea.com https://scholarshipscanada.com https://scholarsportal.info https://sciencedirect.com https://scientificamerican.com https://scorecardresearch.com https://scphillips.com https://scribblelive.com https://scribd.com https://scriblink.com https://searchforce.net https://securecode.com https://seetorontonow.com https://sellathon.com https://serialssolutions.com https://seriouseats.com https://serving-sys.com https://share-online.biz https://sharingzone.net https://sherwaygardens.ca https://shortform.com https://sickkidslottery.ca https://siliconera.com https://simg.jp https://sinajs.cn https://sitelock.com https://sitemeter.com https://skimresources.com https://sky.com https://slickitup.com https://slideshare.net https://slidesharecdn.com https://slightlywarped.com https://smartling.com https://smbc-comics.com https://smokespoutinerie.com https://smtown.com https://snazzyspace.com https://sndcdn.com https://snipmp3.com https://snopes.com https://sogc.org https://someecards.com https://somethingawful.com https://sony.ca https://sonycentre.ca https://sonyentertainmentnetwork.com https://sonymobile.com https://soompi.com https://soundcloud.com https://sourceforge.net https://spankwire.com https://spccard.ca https://speedtest.net https://spike.com https://sportchek.ca https://spotagame.com https://spreadshirt.com https://springrolls.ca https://springsushi.com https://square-enix.com https://staples.ca https://staples.com https://staplescopyandprint.ca https://staplesesp.ca https://starbucks.ca https://stardock.com https://stardriver-movie.net https://statcounter.com https://stippleit.com https://stlouiswings.com https://stoneskippingrobot.com https://storify.com https://stream2watch.me https://streamtivi.com https://struckphoto.com https://stumbleupon.com https://survey4on.ca https://survey4onca.com https://surveymonkey.com https://surveywriter.net https://sushikaji.com https://susur.com https://swap.ca https://swisschalet.ca https://systemrequirementslab.com https://t.co https://tadst.com https://taipantours.com https://takeonektv.com https://taobao.com https://taobaocdn.com https://taobaofocus.com https://tarosfish.com https://tbcdn.cn https://tdpumpitup.com https://teambuy.ca https://teamcoco.com https://teamcococdn.com https://technoratimedia.com https://ted.com https://teennick.com https://telus.com https://ten23.ca https://tenmanga.com https://tested.com https://tf1.fr https://thebananablog.com https://thedailybeast.com https://theglobeandmail.com https://themaxdavisthemes.com https://thenicestplaceontheinter.net https://theoatmeal.com https://theonion.com https://theplatform.com https://thesixtyone.com https://thestar.com https://theweathernetwork.com https://three-words.net https://ticketmaster.ca https://ticketmaster.com https://tiff.net https://timeanddate.com https://timelinecoverbanner.com https://timezoneconverter.com https://timhortons.com https://tineye.com https://tinypic.com https://tokyohive.com https://toonamiaftermath.com https://topatoco.com https://topscms.com https://toptenreviews.com https://toronto-sanko.com https://toronto.ca https://toronto.com https://torontolife.com https://torontomandarinschool.com https://torontoprintcopycentre.com https://torontopubliclibrary.ca https://torrentz.eu https://totalbeauty.com https://tours4fun.com https://treetoptrekking.com https://tremblant.ca https://tribalfusion.com https://trove.com https://tsh.to https://ttc.ca https://tubemirror.com https://tudou.com https://tudouui.com https://tulsaworld.com https://tumblr.com https://tunghingbakery.ca https://turbobit.net https://turn.com https://turner.com https://tusbe.com https://twimg.com https://twinfinite.net https://twisterkaraoke.com https://twitch.tv https://twitter.com https://tynt.com https://udmserve.net https://uhn.ca https://umusic.com https://universalmusic.com https://uoftbookstore.com https://uoguelph.ca https://uplly.com https://upload2.com https://uploaded.to https://uploading.com https://uploadstation.com https://ups.com https://uptake.com https://uptakeinc.com https://urbanspoon.com https://urbns.pn https://ursinus.edu https://ust.hk https://ustream.tv https://utadanet.com https://uthinkonline.com https://utoronto.ca https://vancouversun.com https://vanilladev.com https://vanillaforums.com https://venda.com https://venturebeat.com https://veoh.com https://verisign.com https://viarail.ca https://videa.hu https://video44.net https://videogameslive.com https://videoweed.es https://videozer.com https://vidzur.com https://viki.com https://vikiassets.com https://vimeo.com https://vimeocdn.com https://virtualearth.net https://visionfactory.jp https://visionobjects.com https://visitkoreayear.com https://visualrevenue.com https://vmixcore.com https://washingtonpost.com https://wat.fr https://wat.tv https://watchanimeon.com https://watchcartoononline.com https://watchdub.com https://weborama.fr https://webs.com https://webtrendslive.com https://weebly.com https://weibo.com https://wemakevotingeasy.ca https://wetpaint.com https://whackanumber.com https://wikia-beacon.com https://wikia.com https://wikidot.com https://wikimedia.org https://wikipedia.org https://wikiwallpapers.com https://wiley.com https://wintermagic.ca https://wipmania.com https://wired.com https://wix.com https://wlonk.com https://wlxrs.com https://wm-panel.com https://wmctv.com https://wnetwork.com https://wolfram.com https://wolframalpha.com https://wordpress.com https://workopolis.com https://worldcat.org https://worldtaximeter.com https://wp.com https://writeinchinese.com https://writtenkitten.net https://wsj.com https://wsj.net https://wupload.com https://wwfcentral.ca https://wwfchina.org https://xfb.kr https://xokaraoke.com https://xrite.com https://xtendmedia.com https://xuite.net https://yahoo.com https://yahooapis.com https://yai.bz https://ycasmd.info https://yellowbridge.com https://yellowpages.ca https://yelp.ca https://yelpcdn.com https://yesasia.com https://yesstyle.com https://yfrog.com https://yimg.com https://yinyuetai.com https://yogenfruz.com https://yooouuutuuube.com https://yosida.com https://youku.com https://youtube.com https://yp.ca https://ytimg.com https://ytv.com https://zara.com https://zara.net https://zenjapaneserestaurant.com https://zerochan.net https://zip-codes.com https://zone-anime.com resource: symres:");



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30/11/2012 at 22:31:31.24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Edited by Grinler, 29 March 2018 - 05:50 PM.


#12 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:42 AM

Posted 30 November 2012 - 10:57 PM

Download

http://www.bleepingcomputer.com/download/rkill/

Run it and after scan finishes,post the contents of RKILL log located on the desktop here


Download

Autoruns

Extract and launch autoruns.exe

Allow the scan to get finished

Now click on FILE-SAVE

Filename:Autoruns.txt
Save as :Text

Paste the contents of text here


Current issues?

#13 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 11:20 PM

Rkill 2.4.5 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 11/30/2012 11:11:44 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* Explorer Policy Removed: NoActiveDesktopChanges [HKLM]

Backup Registry file created at:
C:\Users\cowfun\Desktop\rkill\rkill-11-30-2012-11-11-48.reg

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 11/30/2012 11:11:59 PM
Execution time: 0 hours(s), 0 minute(s), and 15 seconds(s)




"HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms" "" "" ""
+ "rdpclip" "" "" "File not found: rdpclip"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "Apoint" "Alps Pointing-device Driver" "Alps Electric Co., Ltd." "c:\program files\apoint\apoint.exe"
+ "itype" "IType.exe" "Microsoft Corporation" "c:\program files\microsoft intellitype pro\itype.exe"
+ "NetWorx" "NetWorx Application (64-bit)" "SoftPerfect Research" "c:\program files\networx\networx.exe"
+ "RtHDVBg" "HD Audio Background Process" "Realtek Semiconductor" "c:\program files\realtek\audio\hda\ravbg64.exe"
+ "RtHDVCpl" "Realtek HD Audio Manager" "Realtek Semiconductor" "c:\program files\realtek\audio\hda\ravcpl64.exe"
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "Adobe ARM" "Adobe Reader and Acrobat Manager" "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe"
+ "Adobe Reader Speed Launcher" "Adobe Acrobat SpeedLauncher" "Adobe Systems Incorporated" "c:\program files (x86)\adobe\reader 9.0\reader\reader_sl.exe"
+ "IAStorIcon" "IAStorIcon" "Intel Corporation" "c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe"
+ "ISBMgr.exe" "" "Sony Corporation" "c:\program files (x86)\sony\isb utility\isbmgr.exe"
+ "PMBVolumeWatcher" "Media Check Tool" "Sony Corporation" "c:\program files (x86)\sony\pmb\pmbvolumewatcher.exe"
+ "SmartWiHelper" "SmartWi Helper" "Sony Electronics Corporation" "c:\program files (x86)\sony\smartwi connection utility\smartwihelper.exe"
+ "SunJavaUpdateSched" "Java(TM) Update Scheduler" "Sun Microsystems, Inc." "c:\program files (x86)\common files\java\java update\jusched.exe"
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup" "" "" ""
+ "Sony MSS.lnk" "McAfee Security Scanner Scheduler" "McAfee, Inc." "c:\program files (x86)\sony\mss\3.0.271\ssscheduler.exe"
"C:\Users\cowfun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" "" "" ""
+ "NetWorx.lnk" "NetWorx Application (64-bit)" "SoftPerfect Research" "c:\program files\networx\networx.exe"
"HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" "" "" ""
+ "Microsoft Windows" "Windows Mail" "Microsoft Corporation" "c:\program files\windows mail\winmail.exe"
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components" "" "" ""
+ "Microsoft Windows" "Windows Mail" "Microsoft Corporation" "c:\program files (x86)\windows mail\winmail.exe"
"HKCU\Software\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "Custom.exe" "" "" "File not found: C:\PROGRAM FILES (X86)\WINPENJR\WIN32\CUSTOM.EXE"
+ "Google Update" "Google Installer" "Google Inc." "c:\users\cowfun\appdata\local\google\update\googleupdate.exe"
+ "msnmsgr" "Windows Live Messenger" "Microsoft Corporation" "c:\program files (x86)\windows live\messenger\msnmsgr.exe"
"HKLM\SOFTWARE\Classes\Protocols\Filter" "" "" ""
+ "text/xml" "Microsoft Office XML MIME Filter" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\msoxmlmf.dll"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler" "" "" ""
+ "FencesShellExt" "Stardock Fences Shell Extension" "Stardock" "c:\program files (x86)\stardock\fences\fencesmenu64.dll"
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" ""
+ "FencesShellExt" "Stardock Fences Shell Extension" "Stardock" "c:\program files (x86)\stardock\fences\fencesmenu64.dll"
+ "Symantec.Norton.Antivirus.IEContextMenu" "Symantec Shared Component Shell Extension Module" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine64\19.9.0.9\navshext.dll"
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Wow6432Node\Classes\*\ShellEx\ContextMenuHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files\winrar\rarext32.dll"
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" ""
+ "AddtoVAIOGate" "VAIOGateShellExt" "Sony Corporation" "c:\program files\sony\vaio gate\vaiogateshellext.dll"
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll"
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" ""
+ "FencesShellExt" "Stardock Fences Shell Extension" "Stardock" "c:\program files (x86)\stardock\fences\fencesmenu64.dll"
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Wow6432Node\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files\winrar\rarext32.dll"
"HKLM\Software\Classes\Directory\Shellex\DragDropHandlers" "" "" ""
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Wow6432Node\Classes\Directory\Shellex\DragDropHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files\winrar\rarext32.dll"
"HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers" "" "" ""
+ "Monitor" "BTNCopy Module" "Broadcom Corporation." "c:\program files\widcomm\bluetooth software\btncopy.dll"
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" ""
+ "FencesShellExt" "Stardock Fences Shell Extension" "Stardock" "c:\program files (x86)\stardock\fences\fencesmenu64.dll"
+ "Gadgets" "Sidebar droptarget" "Microsoft Corporation" "c:\program files\windows sidebar\sbdrop.dll"
+ "NvCplDesktopContext" "" "NVIDIA Corporation" "c:\windows\system32\nvshext.dll"
"HKLM\Software\Wow6432Node\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" ""
+ "Gadgets" "Sidebar droptarget" "Microsoft Corporation" "c:\program files (x86)\windows sidebar\sbdrop.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\Shellex\ColumnHandlers" "" "" ""
+ "PDF Shell Extension" "PDF Shell Extension" "Adobe Systems, Inc." "c:\program files (x86)\common files\adobe\acrobat\activex\pdfshell.dll"
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" ""
+ "AddtoVAIOGate" "VAIOGateShellExt" "Sony Corporation" "c:\program files\sony\vaio gate\vaiogateshellext.dll"
+ "FencesShellExt" "Stardock Fences Shell Extension" "Stardock" "c:\program files (x86)\stardock\fences\fencesmenu64.dll"
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll"
+ "Symantec.Norton.Antivirus.IEContextMenu" "Symantec Shared Component Shell Extension Module" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine64\19.9.0.9\navshext.dll"
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files\winrar\rarext32.dll"
"HKLM\Software\Classes\Folder\ShellEx\DragDropHandlers" "" "" ""
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\DragDropHandlers" "" "" ""
+ "WinRAR32" "" "" "c:\program files\winrar\rarext32.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "Java(tm) Plug-In 2 SSV Helper" "Java(TM) Platform SE binary" "Sun Microsystems, Inc." "c:\program files\java\jre6\bin\jp2ssv.dll"
+ "Windows Live ID Sign-in Helper" "Microsoft® Windows Live ID Login Helper" "Microsoft Corp." "c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll"
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "Adobe PDF Link Helper" "Adobe PDF Helper for Internet Explorer" "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\acrobat\activex\acroiehelpershim.dll"
+ "Java(tm) Plug-In 2 SSV Helper" "Java(TM) Platform SE binary" "Sun Microsystems, Inc." "c:\program files (x86)\java\jre6\bin\jp2ssv.dll"
+ "Java(tm) Plug-In SSV Helper" "Java(TM) Platform SE binary" "Sun Microsystems, Inc." "c:\program files (x86)\java\jre6\bin\ssv.dll"
+ "Norton Identity Protection" "coIEPlugIn" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine\19.9.0.9\coieplg.dll"
+ "Norton Vulnerability Protection" "IPS Browser Helper DLL" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine\19.9.0.9\ips\ipsbho.dll"
+ "Windows Live ID Sign-in Helper" "Microsoft® Windows Live ID Login Helper" "Microsoft Corp." "c:\program files (x86)\common files\microsoft shared\windows live\windowslivelogin.dll"
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" "" "" ""
+ "Norton Toolbar" "coIEPlugIn" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine\19.9.0.9\coieplg.dll"
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions" "" "" ""
+ "&Blog This in Windows Live Writer" "Windows Live Writer Blog This Extension" "Microsoft Corporation" "c:\program files (x86)\windows live\writer\writerbrowserextension.dll"
+ "S&end to OneNote" "Microsoft Office OneNote Internet Explorer Add-in" "Microsoft Corporation" "c:\program files (x86)\microsoft office\office12\onbttnie.dll"
"Task Scheduler" "" "" ""
+ "\DDNi Startup" "DDNiStartup" "Digital Delivery Networks, Inc." "c:\program files (x86)\ddni\oasis\ddnistartup.exe"
+ "\GoogleUpdateTaskMachineCore" "Google Installer" "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe"
+ "\GoogleUpdateTaskMachineUA" "Google Installer" "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe"
+ "\GoogleUpdateTaskUserS-1-5-21-2212351638-2218885372-1049982263-1000Core" "Google Installer" "Google Inc." "c:\users\cowfun\appdata\local\google\update\googleupdate.exe"
+ "\GoogleUpdateTaskUserS-1-5-21-2212351638-2218885372-1049982263-1000UA" "Google Installer" "Google Inc." "c:\users\cowfun\appdata\local\google\update\googleupdate.exe"
+ "\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task" "Windows Live Social Object Extractor Engine" "Microsoft Corporation" "c:\program files (x86)\windows live\soxe\wlsoxe.dll"
+ "\Microsoft\Windows\NetTrace\GatherNetworkInfo" "" "" "c:\windows\system32\gathernetworkinfo.vbs"
+ "\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" "Windows Media Player Network Sharing Service Configuration Application" "Microsoft Corporation" "c:\program files\windows media player\wmpnscfg.exe"
+ "\Microsoft_Hardware_Launch_IType_exe" "IType.exe" "Microsoft Corporation" "c:\program files\microsoft intellitype pro\itype.exe"
+ "\Norton Internet Security\Norton Error Analyzer" "Symantec Error Reporting" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine\19.9.0.9\symerr.exe"
+ "\Norton Internet Security\Norton Error Processor" "Symantec Error Reporting" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine\19.9.0.9\symerr.exe"
+ "\Norton WSC Integration" "WSCStub" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine\19.9.0.9\wscstub.exe"
+ "\Sony Corporation\VAIO Care\CRMReminder" "VCSystemTray" "Sony Corporation" "c:\program files\sony\vaio care\vcsystemtray.exe"
+ "\Sony Corporation\VAIO Care\VAIO Care" "VCSystemTray" "Sony Corporation" "c:\program files\sony\vaio care\vcsystemtray.exe"
+ "\Sony Corporation\VAIO Care\VCCheckIolo" "VCSystemTray" "Sony Corporation" "c:\program files\sony\vaio care\vcsystemtray.exe"
+ "\Sony Corporation\VAIO Care\VCMetrics" "VCSystemTray" "Sony Corporation" "c:\program files\sony\vaio care\vcsystemtray.exe"
+ "\Sony Corporation\VAIO Care\VCOneClick" "VCSystemTray" "Sony Corporation" "c:\program files\sony\vaio care\vcsystemtray.exe"
+ "\Sony Corporation\VAIO Care\VCSelfHeal" "VCSystemTray" "Sony Corporation" "c:\program files\sony\vaio care\vcsystemtray.exe"
+ "\Sony Corporation\VAIO Gate\StartExecuteProxy" "VAIO Gate" "Sony Corporation" "c:\program files\sony\vaio gate\executionproxy.exe"
+ "\Sony Corporation\VAIO Gate\VAIO Gate" "VAIO Gate" "Sony Corporation" "c:\program files\sony\vaio gate\vaio gate.exe"
+ "\Sony Corporation\VAIO Update\Launch Application" "ShellExeProxy" "Sony Corporation" "c:\program files\sony\vaio update\shellexeproxy.exe"
+ "\Sony Corporation\VAIO Update\VAIO Update" "VAIOUpdt" "Sony Corporation" "c:\program files\sony\vaio update\vaioupdt.exe"
+ "\Sony Corporation\VAIO Update\VAIO Update Self Repair" "VUSR" "Sony Corporation" "c:\program files\sony\vaio update\vusr.exe"
+ "\SONY\Java Update" "" "" "File not found: C:\Program Files\Java\jre6\bin\jusched.exe"
+ "\SONY\SUS-BCF\Level4Daily" "WBCBatteryCare" "Sony Corporation" "c:\program files (x86)\sony\setting utility series\wbcbatterycare.exe"
+ "\SONY\SUS-BCF\Level4Month" "WBCBatteryCare" "Sony Corporation" "c:\program files (x86)\sony\setting utility series\wbcbatterycare.exe"
+ "\SONY\VAIO Power Management\VPM Logon Start" "SPM Module" "Sony Corporation" "c:\program files\sony\vaio power management\spmgr.exe"
+ "\SONY\VAIO Power Management\VPM Session Change" "SPM Module" "Sony Corporation" "c:\program files\sony\vaio power management\spmgr.exe"
+ "\SONY\VAIO Power Management\VPM Unlock" "SPM Module" "Sony Corporation" "c:\program files\sony\vaio power management\spmgr.exe"
+ "\SONY\VAIO Survey" " " "" "c:\program files (x86)\sony\vaio survey\vaio sat survey.exe"
+ "\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool" "" "" "File not found: C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe"
+ "\VAIO® Messenger (cowfun)" "VAIO Messenger" "Digital Delivery Networks, Inc." "c:\program files (x86)\ddni\oasis\vaio messenger.exe"
"HKLM\System\CurrentControlSet\Services" "" "" ""
+ "ACDaemon" "ArcSoft Connect Service" "ArcSoft Inc." "c:\program files (x86)\common files\arcsoft\connection service\bin\acservice.exe"
+ "btwdins" "Handles installation and removal of Bluetooth devices." "Broadcom Corporation." "c:\program files\widcomm\bluetooth software\btwdins.exe"
+ "gupdate" "Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe"
+ "gupdatem" "Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe"
+ "IAStorDataMgrSvc" "Provides storage event notification and manages communication between the storage driver and user space applications." "Intel Corporation" "c:\program files (x86)\intel\intel(r) rapid storage technology\iastordatamgrsvc.exe"
+ "McComponentHostServiceSony" "McAfee Security Scan Component Host Service for Sony" "McAfee, Inc." "c:\program files (x86)\sony\mss\3.0.271\mcchsvc.exe"
+ "MozillaMaintenance" "The Mozilla Maintenance Service ensures that you have the latest and most secure version of Mozilla Firefox on your computer. Keeping Firefox up to date is very important for your online security, and Mozilla strongly recommends that you keep this service enabled." "Mozilla Foundation" "c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe"
+ "NIS" "Norton Internet Security" "Symantec Corporation" "c:\program files (x86)\norton internet security\engine\19.9.0.9\ccsvchst.exe"
+ "nvsvc" "Provides system and desktop level support to the NVIDIA display driver" "NVIDIA Corporation" "c:\windows\system32\nvvsvc.exe"
+ "Oasis2Service" "DDNI Oasis 2 Services" "Digital Delivery Networks, Inc." "c:\program files (x86)\ddni\oasis2service\oasis2service.exe"
+ "odserv" "Run portions of Microsoft Office Diagnostics." "Microsoft Corporation" "c:\program files (x86)\common files\microsoft shared\office12\odserv.exe"
+ "ose" "Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports." "Microsoft Corporation" "c:\program files (x86)\common files\microsoft shared\source engine\ose.exe"
+ "PMBDeviceInfoProvider" "Enables PMB to communicate with the device." "Sony Corporation" "c:\program files (x86)\sony\pmb\pmbdeviceinfoprovider.exe"
+ "SampleCollector" "Checks the systems performance for VAIO Care." "" "c:\program files\sony\vaio care\vcperfservice.exe"
+ "SOHCImp" "VAIO Media plus Content Importer" "Sony Corporation" "c:\program files (x86)\common files\sony shared\sohlib\sohcimp.exe"
+ "SOHDms" "VAIO Media plus Digital Media Server" "Sony Corporation" "c:\program files (x86)\common files\sony shared\sohlib\sohdms.exe"
+ "SOHDs" "VAIO Media plus Device Searcher" "Sony Corporation" "c:\program files (x86)\common files\sony shared\sohlib\sohds.exe"
+ "SpfService" "VAIO Entertainment Common Service" "Sony Corporation" "c:\program files\common files\sony shared\vaio entertainment platform\spf\spfservice64.exe"
+ "uCamMonitor" "Monitor the status of the webcam on PC startup." "ArcSoft, Inc." "c:\program files (x86)\arcsoft\magic-i visual effects 2\ucammonitor.exe"
+ "VAIO Event Service" "Provides the hardware event managing service for VAIO. During termination of this service, some fuctions such as Special button ,Hotkey ,and VAIO original powermanagement are limited." "Sony Corporation" "c:\program files (x86)\sony\vaio event service\vesmgr.exe"
+ "VAIO Power Management" "Provides power management service for VAIO. If this service is stopped or disabled, power management functions for VAIO will not be available." "Sony Corporation" "c:\program files\sony\vaio power management\spmservice.exe"
+ "VCFw" "VAIO Content Folder Watcher" "Sony Corporation" "c:\program files (x86)\common files\sony shared\vaio content folder watcher\vcfw.exe"
+ "VcmIAlzMgr" "Provides the content analysis function used with VAIO original software." "Sony Corporation" "c:\program files\sony\vcm intelligent analyzing manager\vcmialzmgr.exe"
+ "VcmINSMgr" "Provides the information retrieval service function used with VAIO original software." "Sony Corporation" "c:\program files\sony\vcm intelligent network service manager\vcminsmgr.exe"
+ "VcmXmlIfHelper" "VcmXml Helper Interface" "Sony Corporation" "c:\program files\common files\sony shared\vcmxml\vcmxmlifhelper64.exe"
+ "VCService" "Provides important VAIO Care functionality. If this service is stopped or disabled, VAIO Care may not function correctly." "Sony Corporation" "c:\program files\sony\vaio care\vcservice.exe"
+ "VUAgent" "Agent for VAIO Update." "Sony Corporation" "c:\program files\sony\vaio update\vuagent.exe"
+ "WinDefend" "Protection against spyware and potentially unwanted software" "Microsoft Corporation" "c:\program files\windows defender\mpsvc.dll"
+ "wlidsvc" "Enables Windows Live ID authentication." "Microsoft Corp." "c:\program files\common files\microsoft shared\windows live\wlidsvc.exe"
+ "WMPNetworkSvc" "Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play" "Microsoft Corporation" "c:\program files\windows media player\wmpnetwk.exe"
"HKLM\System\CurrentControlSet\Services" "" "" ""
+ "adp94xx" "Adaptec Windows SAS/SATA Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\adp94xx.sys"
+ "adpahci" "Adaptec Windows SATA Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\adpahci.sys"
+ "adpu320" "Adaptec StorPort Ultra320 SCSI Driver (X64)" "Adaptec, Inc." "c:\windows\system32\drivers\adpu320.sys"
+ "aliide" "ALi mini IDE Driver" "Acer Laboratories Inc." "c:\windows\system32\drivers\aliide.sys"
+ "amdsata" "AHCI 1.2 Device Driver" "Advanced Micro Devices" "c:\windows\system32\drivers\amdsata.sys"
+ "amdsbs" "AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform" "AMD Technologies Inc." "c:\windows\system32\drivers\amdsbs.sys"
+ "amdxata" "Storage Filter Driver" "Advanced Micro Devices" "c:\windows\system32\drivers\amdxata.sys"
+ "ApfiltrService" "Alps Touch Pad Driver" "Alps Electric Co., Ltd." "c:\windows\system32\drivers\apfiltr.sys"
+ "arc" "Adaptec RAID Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\arc.sys"
+ "arcsas" "Adaptec SAS RAID WS03 Driver" "Adaptec, Inc." "c:\windows\system32\drivers\arcsas.sys"
+ "ArcSoftKsUFilter" "For X64" "ArcSoft, Inc." "c:\windows\system32\drivers\arcsoftksufilter.sys"
+ "athr" "Atheros Extensible Wireless LAN device driver" "Atheros Communications, Inc." "c:\windows\system32\drivers\athrx.sys"
+ "b06bdrv" "Broadcom NetXtreme II GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\bxvbda.sys"
+ "b57nd60a" "Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver." "Broadcom Corporation" "c:\windows\system32\drivers\b57nd60a.sys"
+ "BHDrvx64" "SONAR Engine Driver" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.7.1.5\definitions\bashdefs\20121106.001\bhdrvx64.sys"
+ "BrFiltLo" "Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltlo.sys"
+ "BrFiltUp" "Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltup.sys"
+ "Brserid" "Brotehr Serial I/F Driver (WDM)" "Brother Industries Ltd." "c:\windows\system32\drivers\brserid.sys"
+ "BrSerWdm" "Brother Serial driver (WDM version)" "Brother Industries Ltd." "c:\windows\system32\drivers\brserwdm.sys"
+ "BrUsbMdm" "Brother USB MDM Driver " "Brother Industries Ltd." "c:\windows\system32\drivers\brusbmdm.sys"
+ "BrUsbSer" "Brother USB Serial Driver" "Brother Industries Ltd." "c:\windows\system32\drivers\brusbser.sys"
+ "btwampfl" "Broadcom Bluetooth USB AMP Filter for Windows Vista" "Broadcom Corporation." "c:\windows\system32\drivers\btwampfl.sys"
+ "btwaudio" "Bluetooth Audio Device" "Broadcom Corporation." "c:\windows\system32\drivers\btwaudio.sys"
+ "btwavdt" "Broadcom Bluetooth AVDT Service" "Broadcom Corporation." "c:\windows\system32\drivers\btwavdt.sys"
+ "btwl2cap" "Broadcom Bluetooth L2CAP Service" "Broadcom Corporation." "c:\windows\system32\drivers\btwl2cap.sys"
+ "btwrchid" "Bluetooth Remote Control HID Minidriver" "Broadcom Corporation." "c:\windows\system32\drivers\btwrchid.sys"
+ "ccSet_NIS" "Common Client Settings Driver" "Symantec Corporation" "c:\windows\system32\drivers\nisx64\1309000.009\ccsetx64.sys"
+ "cmdide" "CMD PCI IDE Bus Driver" "CMD Technology, Inc." "c:\windows\system32\drivers\cmdide.sys"
+ "ebdrv" "Broadcom NetXtreme II 10 GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\evbda.sys"
+ "eeCtrl" "Symantec Eraser Control Driver" "Symantec Corporation" "c:\program files (x86)\common files\symantec shared\eengine\eectrl64.sys"
+ "elxstor" "Storport Miniport Driver for LightPulse HBAs" "Emulex" "c:\windows\system32\drivers\elxstor.sys"
+ "EraserUtilRebootDrv" "Symantec Eraser Utility Driver" "Symantec Corporation" "c:\program files (x86)\common files\symantec shared\eengine\eraserutilrebootdrv.sys"
+ "hcw85cir" "Hauppauge WinTV 885 Consumer IR Driver for eHome" "Hauppauge Computer Works, Inc." "c:\windows\system32\drivers\hcw85cir.sys"
+ "HpSAMD" "Smart Array SAS/SATA Controller Media Driver" "Hewlett-Packard Company" "c:\windows\system32\drivers\hpsamd.sys"
+ "iaStor" "Intel Rapid Storage Technology driver - x64" "Intel Corporation" "c:\windows\system32\drivers\iastor.sys"
+ "iaStorV" "Intel Matrix Storage Manager driver - x64" "Intel Corporation" "c:\windows\system32\drivers\iastorv.sys"
+ "IDSVia64" "Symantec Intrusion Prevention Driver" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.7.1.5\definitions\ipsdefs\20121130.001\idsvia64.sys"
+ "iirsp" "Intel/ICP Raid Storport Driver" "Intel Corp./ICP vortex GmbH" "c:\windows\system32\drivers\iirsp.sys"
+ "Impcd" "Intel(R) Turbo Boost Technology Driver" "Intel Corporation" "c:\windows\system32\drivers\impcd.sys"
+ "IntcAzAudAddService" "Realtek(r) High Definition Audio Function Driver" "Realtek Semiconductor Corp." "c:\windows\system32\drivers\rtkvhd64.sys"
+ "LSI_FC" "LSI Fusion-MPT FC Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_fc.sys"
+ "LSI_SAS" "LSI Fusion-MPT SAS Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_sas.sys"
+ "LSI_SAS2" "LSI SAS Gen2 Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_sas2.sys"
+ "LSI_SCSI" "LSI Fusion-MPT SCSI Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_scsi.sys"
+ "megasas" "MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for x64" "LSI Corporation" "c:\windows\system32\drivers\megasas.sys"
+ "MegaSR" "LSI MegaRAID Software RAID Driver" "LSI Corporation, Inc." "c:\windows\system32\drivers\megasr.sys"
+ "NAVENG" "AV Engine" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.7.1.5\definitions\virusdefs\20121130.016\eng64.sys"
+ "NAVEX15" "AV Engine" "Symantec Corporation" "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.7.1.5\definitions\virusdefs\20121130.016\ex64.sys"
+ "nfrd960" "IBM ServeRAID Controller Driver" "IBM Corporation" "c:\windows\system32\drivers\nfrd960.sys"
+ "nusb3hub" "USB 3.0 Hub Driver" "Renesas Electronics Corporation" "c:\windows\system32\drivers\nusb3hub.sys"
+ "nusb3xhc" "USB 3.0 Host Controller Driver" "Renesas Electronics Corporation" "c:\windows\system32\drivers\nusb3xhc.sys"
+ "NVHDA" "NVIDIA HDMI Audio Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvhda64v.sys"
+ "nvlddmkm" "NVIDIA Windows Kernel Mode Driver, Version 266.72 " "NVIDIA Corporation" "c:\windows\system32\drivers\nvlddmkm.sys"
+ "nvraid" "NVIDIA® nForce(TM) RAID Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvraid.sys"
+ "nvstor" "NVIDIA® nForce(TM) Sata Performance Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvstor.sys"
+ "ql2300" "QLogic Fibre Channel Stor Miniport Driver" "QLogic Corporation" "c:\windows\system32\drivers\ql2300.sys"
+ "ql40xx" "QLogic iSCSI Storport Miniport Driver" "QLogic Corporation" "c:\windows\system32\drivers\ql40xx.sys"
+ "rimspci" "RICOH MS Driver" "REDC" "c:\windows\system32\drivers\rimssne64.sys"
+ "risdsnpe" "RICOH PCIe SD/MMC Driver" "REDC" "c:\windows\system32\drivers\risdsne64.sys"
+ "secdrv" "Macrovision SECURITY Driver" "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K." "c:\windows\system32\drivers\secdrv.sys"
+ "SFEP" "Sony Firmware Extension Parser driver" "Sony Corporation" "c:\windows\system32\drivers\sfep.sys"
+ "SiSRaid2" "SiS RAID Stor Miniport Driver" "Silicon Integrated Systems Corp." "c:\windows\system32\drivers\sisraid2.sys"
+ "SiSRaid4" "SiS AHCI Stor-Miniport Driver" "Silicon Integrated Systems" "c:\windows\system32\drivers\sisraid4.sys"
+ "SRTSP" "Symantec AutoProtect" "Symantec Corporation" "c:\windows\system32\drivers\nisx64\1309000.009\srtsp64.sys"
+ "SRTSPX" "Symantec AutoProtect" "Symantec Corporation" "c:\windows\system32\drivers\nisx64\1309000.009\srtspx64.sys"
+ "stexstor" "Promise SuperTrak EX Series Driver for Windows " "Promise Technology" "c:\windows\system32\drivers\stexstor.sys"
+ "SymDS" "Symantec Data Store" "Symantec Corporation" "c:\windows\system32\drivers\nisx64\1309000.009\symds64.sys"
+ "SymEFA" "Symantec Extended File Attributes" "Symantec Corporation" "c:\windows\system32\drivers\nisx64\1309000.009\symefa64.sys"
+ "SymEvent" "Symantec Event Library" "Symantec Corporation" "c:\windows\system32\drivers\symevent64x86.sys"
+ "SymIM" "Symantec Network Security Intermediate Filter Driver" "Symantec Corporation" "c:\windows\system32\drivers\symimv.sys"
+ "SymIRON" "Iron Driver" "Symantec Corporation" "c:\windows\system32\drivers\nisx64\1309000.009\ironx64.sys"
+ "SymNetS" "Network Security Driver" "Symantec Corporation" "c:\windows\system32\drivers\nisx64\1309000.009\symnets.sys"
+ "usbbus" "LG CDMA USB Multi function Driver" "LG Electronics Inc." "c:\windows\system32\drivers\lgx64bus.sys"
+ "UsbDiag" "LGE Mobile USB Serial Port" "LG Electronics Inc." "c:\windows\system32\drivers\lgx64diag.sys"
+ "USBModem" "LGE Mobile Modem Support" "LG Electronics Inc." "c:\windows\system32\drivers\lgx64modem.sys"
+ "viaide" "VIA Generic PCI IDE Bus Driver" "VIA Technologies, Inc." "c:\windows\system32\drivers\viaide.sys"
+ "vsmraid" "VIA RAID DRIVER FOR AMD-X86-64" "VIA Technologies Inc.,Ltd" "c:\windows\system32\drivers\vsmraid.sys"
+ "WDC_SAM" "Manages WD external storage products." "Western Digital Technologies" "c:\windows\system32\drivers\wdcsam64.sys"
+ "yukonw7" "NDIS6.20 Miniport Driver for Marvell Yukon Ethernet Controller" "Marvell" "c:\windows\system32\drivers\yk62x64.sys"
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" ""
+ "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codeca.acm"
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" ""
+ "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\syswow64\l3codeca.acm"
+ "vidc.cvid" "Cinepak® Codec" "Radius Inc." "c:\windows\syswow64\iccvid.dll"
+ "VIDC.FFDS" "" "" "c:\program files (x86)\combined community codec pack\filters\ffdshow\ff_vfw.dll"
"HKLM\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" ""
+ "Capture File Writer" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
+ "DirectVobSub" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "MPC-HC Team" "c:\program files (x86)\combined community codec pack\filters\vsfilter.dll"
+ "DirectVobSub (auto-loading version)" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "MPC-HC Team" "c:\program files (x86)\combined community codec pack\filters\vsfilter.dll"
+ "ffdshow Audio Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files (x86)\combined community codec pack\filters\ffdshow\ffdshow.ax"
+ "ffdshow Audio Processor" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files (x86)\combined community codec pack\filters\ffdshow\ffdshow.ax"
+ "ffdshow DXVA Video Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files (x86)\combined community codec pack\filters\ffdshow\ffdshow.ax"
+ "ffdshow raw video filter" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files (x86)\combined community codec pack\filters\ffdshow\ffdshow.ax"
+ "ffdshow subtitles filter" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files (x86)\combined community codec pack\filters\ffdshow\ffdshow.ax"
+ "ffdshow Video Decoder" "DirectShow and VFW video and audio decoding/encoding/processing filter" "" "c:\program files (x86)\combined community codec pack\filters\ffdshow\ffdshow.ax"
+ "Haali Matroska Muxer" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax"
+ "Haali Media Splitter" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax"
+ "Haali Media Splitter (AR)" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax"
+ "Haali Simple Media Splitter" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax"
+ "Haali Video Renderer" "" "" "c:\program files (x86)\combined community codec pack\filters\haali\dxr.dll"
+ "Haali Video Sink" "Haali Media Splitter" "" "c:\program files (x86)\combined community codec pack\filters\haali\splitter.ax"
+ "MPC - FLV Source (Gabest)" "FLV Splitter" "MPC-HC Team" "c:\program files (x86)\combined community codec pack\filters\flvsplitter.ax"
+ "MPC - FLV Splitter (Gabest)" "FLV Splitter" "MPC-HC Team" "c:\program files (x86)\combined community codec pack\filters\flvsplitter.ax"
+ "MPC - MPEG-2 Video Decoder (Gabest)" "MPEG-2 Decoder Filter for DirectShow" "MPC-HC Team" "c:\program files (x86)\combined community codec pack\filters\mpeg2decfilter.ax"
+ "Record Queue" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
+ "VAIO Content Metadata Univ Filter" "DirectShow Filter for VCM Intelligent Analyzing Manager" "Sony Corporation" "c:\program files\sony\vcm intelligent analyzing manager\vcmsmplcapflt.ax"
+ "VcmIAlzGPDFilter" "VCM Intelligent Analyzing Manager GPD Library" "Sony Corporation" "c:\program files\sony\vcm intelligent analyzing manager\vcmialzgpdfilter.ax"
+ "VcmIAlzGPDFilter2" "VCM Intelligent Analyzing Manager GPD Library" "Sony Corporation" "c:\program files\sony\vcm intelligent analyzing manager\vcmialzgpdfilter2.ax"
+ "WavPack Audio Decoder" "WavPack Audio DirectShow Decoder" "-" "c:\program files (x86)\combined community codec pack\filters\wavpackdsdecoder.ax"
+ "WavPack Audio Splitter" "WavPack Audio DirectShow Splitter" "-" "c:\program files (x86)\combined community codec pack\filters\wavpackdssplitter.ax"
+ "WM VIH2 Fix" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
+ "WMT DV Extract Filter" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Sample Info Filter" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Switch Filter" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Virtual Renderer" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Virtual Source" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files (x86)\windows live\photo gallery\wlxvafilt.dll"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers" "" "" ""
+ "BtwCredentialProvider" "BtwCP DLL" "Broadcom Corporation." "c:\program files\widcomm\bluetooth software\btwcp.dll"
+ "WLIDCredentialProvider" "Microsoft® Windows Live ID Credential Provider" "Microsoft Corp." "c:\program files\common files\microsoft shared\windows live\wlidcredprov.dll"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries" "" "" ""
+ "WindowsLive Local NSP" "Microsoft® Windows Live ID Namespace Provider" "Microsoft Corp." "c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll"
+ "WindowsLive NSP" "Microsoft® Windows Live ID Namespace Provider" "Microsoft Corp." "c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64" "" "" ""
+ "WindowsLive Local NSP" "Microsoft® Windows Live ID Namespace Provider" "Microsoft Corp." "c:\program files\common files\microsoft shared\windows live\wlidnsp.dll"
+ "WindowsLive NSP" "Microsoft® Windows Live ID Namespace Provider" "Microsoft Corp." "c:\program files\common files\microsoft shared\windows live\wlidnsp.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" ""
+ "CutePDF Writer Monitor" "" "" "c:\windows\system32\cpwmon64.dll"


#14 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 30 November 2012 - 11:23 PM

I accidentally clicked the rkill registry file inside the rkill folder that appeared on my desktop as shown here(http://i.imgur.com/aBY20.png) thinking it was the text and it said it modified/added that registry file to my registry. Is that bad?

I'm not aware of any issues now. The ads have stopped when I deleted the files in my original post.


I wanted to know if that adware has been removed completely or not?

It seems that the adware cleaner deleted all the traces of yontoo/jeetyetmedia?

Is that the case?

Edited by Ca20, 01 December 2012 - 12:19 AM.


#15 Ca20

Ca20
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:42 AM

Posted 01 December 2012 - 01:07 AM

Just another question.
Malwarebytes didn't detect anything, the ESET scan did.

Is the yontoo/jeetyet thing gone after the adware cleaner deleted the registry entries?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users