Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with Multiple Rootkits


  • This topic is locked This topic is locked
28 replies to this topic

#1 SkipDiver

SkipDiver

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 09 January 2013 - 11:50 AM

I was in another posting and the support individual told me to setup a posting here.

Here is the link to the original help posting: http://www.bleepingcomputer.com/forums/topic481078.html/page__pid__2942869#entry2942869

Thank you for all of your help!!!

Here is the DDS log as I have it thus far.



DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21
Run by Dwayne at 11:41:58 on 2013-01-09
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2039.1631 [GMT -5:00]
.
.
============== Running Processes ================
.
C:\Program Files\Emsisoft Anti-Malware\a2service.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [SetRefresh] c:\program files\compaq\setrefresh\SetRefresh.exe
mRun: [Client Access Service] "c:\program files\ibm\client access\cwbsvstr.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [wmlbs] "c:\windows\system32\rundll32.exe" "c:\documents and settings\dwayne\application data\wmlbs.dll",WarnEx
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
LSP: mswsock.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1357683779578
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
TCP: Interfaces\{12951583-9D55-49D7-820B-EEB71DDDB9C5} : DHCPNameServer = 192.168.1.120 192.168.1.17
TCP: Interfaces\{AEEA4434-A029-43A6-B051-0629D156A0B0} : DHCPNameServer = 192.168.1.120 192.168.1.17
Notify: igfxcui - igfxdev.dll
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
Hosts: 127.0.0.1 www.spywareinfo.com
.
============= SERVICES / DRIVERS ===============
.
R1 A2DDA;A2 Direct Disk Access Support Driver;c:\program files\emsisoft anti-malware\a2ddax86.sys [2012-12-26 17904]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-9-21 27496]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2012-7-11 116608]
R2 a2AntiMalware;Emsisoft Anti-Malware 7.0 - Service;c:\program files\emsisoft anti-malware\a2service.exe [2012-12-26 3084688]
R2 BrcmMgmtAgent;Broadcom Management Agent;c:\program files\broadcom\mgmtagent\BrcmMgmtAgent.exe [2010-2-11 103936]
S0 nypfwcpf;nypfwcpf;c:\windows\system32\drivers\dqpvnolw.sys --> c:\windows\system32\drivers\dqpvnolw.sys [?]
S1 MpKsl722956cb;MpKsl722956cb;\??\c:\windows\system32\mpenginestore\mpksl722956cb.sys --> c:\windows\system32\mpenginestore\MpKsl722956cb.sys [?]
S2 Ias;MicroSoft NetBIOS Tools;c:\windows\system32\svchost.exe -k netsvcs [2004-8-4 14336]
S2 Iprip;MicroSoft NetBIOS Support;c:\windows\system32\svchost.exe -k netsvcs [2004-8-4 14336]
S3 a2acc;a2acc;c:\program files\emsisoft anti-malware\a2accx86.sys [2012-12-26 54072]
S3 aswArKrn;aswArKrn;\??\c:\docume~1\fixitp~1\locals~1\temp\aswarkrn.sys --> c:\docume~1\fixitp~1\locals~1\temp\aswArKrn.sys [?]
S3 hitmanpro37;HitmanPro 3.7 Support Driver;c:\windows\system32\drivers\hitmanpro37.sys [2013-1-2 30616]
S3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\microsoft fix it center\Matsvc.exe [2011-6-13 267568]
S4 Fog Service;FOG Service;c:\program files\fog\FOGService.exe [2008-9-11 24576]
S4 pdfcDispatcher;PDF Document Manager;c:\program files\pdf complete\pdfsvc.exe [2009-8-17 576024]
.
=============== Created Last 30 ================
.
2013-01-09 13:21:15 -------- d-----w- C:\TDSSKiller_Quarantine
2013-01-07 18:20:55 -------- d-----w- c:\windows\system32\CatRoot2
2013-01-07 17:48:35 -------- d-----w- c:\program files\Trend Micro
2013-01-07 17:45:56 -------- d-----w- C:\!KillBox
2013-01-02 22:44:48 -------- d-----w- c:\program files\WinDirStat
2013-01-02 22:32:30 -------- d-----w- c:\documents and settings\dwayne\local settings\application data\FixItCenter
2013-01-02 22:31:12 176640 ----a-w- c:\documents and settings\dwayne\xesbcjxozkntkm.exe
2013-01-02 22:31:12 -------- d-----w- c:\documents and settings\dwayne\application data\Malwarebytes
2013-01-02 22:31:00 164864 ----a-w- c:\documents and settings\dwayne\pmyukfhocdquyqud.exe
2013-01-02 22:28:20 -------- d-----w- c:\windows\MATS
2013-01-02 22:28:19 -------- d-----w- c:\program files\Microsoft Fix it Center
2013-01-02 22:26:07 -------- d-----w- c:\documents and settings\dwayne\application data\ElevatedDiagnostics
2013-01-02 22:12:55 -------- d-sh--w- c:\documents and settings\dwayne\IECompatCache
2013-01-02 22:10:05 309760 ----a-w- c:\documents and settings\dwayne\application data\fotuie.dll
2013-01-02 22:09:42 589312 ----a-w- c:\documents and settings\dwayne\application data\wmlbs.dll
2013-01-02 22:08:52 175616 ----a-w- c:\documents and settings\dwayne\application data\dsgry.dll
2013-01-02 22:06:52 -------- d-sh--w- c:\documents and settings\dwayne\PrivacIE
2013-01-02 22:05:00 -------- d-sh--w- c:\documents and settings\dwayne\IETldCache
2013-01-02 13:37:55 30616 ----a-w- c:\windows\system32\drivers\hitmanpro37.sys
2013-01-02 13:30:00 -------- d-----w- c:\documents and settings\all users\application data\HitmanPro
2012-12-27 22:17:58 -------- d-----w- c:\windows\system32\MpEngineStore
2012-12-27 22:13:47 -------- d-----w- C:\bc06549e3bff912cfbc22b8da3
2012-12-26 16:45:23 -------- d-----w- c:\program files\Emsisoft Anti-Malware
2012-12-24 14:29:44 290304 ----a-w- C:\subinacl.exe
2012-12-24 14:27:32 -------- d-----w- c:\program files\Tweaking.com
2012-12-24 13:59:54 36552 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-12-21 16:22:33 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-12-21 16:22:33 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com
2012-12-21 16:22:03 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-12-21 16:22:03 -------- d-----w- c:\documents and settings\all users\application data\Spybot - Search & Destroy
2012-12-21 16:17:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
.
==================== Find3M ====================
.
2012-12-31 14:49:11 90112 ----a-w- c:\windows\DUMP6c46.tmp
2012-12-31 14:47:58 90112 ----a-w- c:\windows\DUMP6d31.tmp
2012-12-28 22:13:41 90112 ----a-w- c:\windows\DUMP69c6.tmp
2012-12-26 13:50:16 90112 ----a-w- c:\windows\DUMP4fa7.tmp
.
============= FINISH: 11:45:06.35 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:14 AM

Posted 09 January 2013 - 12:03 PM

Greetings and Welcome to The Forums!!

My name is Gringo and I'll be glad to help you with your malware problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.




These are the programs I would like you to run next, if you have any problems with these just skip it and run the next one.

-Security Check-

  • Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

-AdwCleaner-

  • Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

--RogueKiller--

  • Download & SAVE to your Desktop RogueKiller or from here
  • Quit all programs that you may have started.
  • Please disconnect any USB or external drives from the computer before you run this scan!
  • For Vista or Windows 7, right-click and select "Run as Administrator to start"
  • For Windows XP, double-click to start.
  • Wait until Prescan has finished ...
  • Then Click on "Scan" button
  • Wait until the Status box shows "Scan Finished"
  • click on "delete"
  • Wait until the Status box shows "Deleting Finished"
  • Click on "Report" and copy/paste the content of the Notepad into your next reply.
  • The log should be found in RKreport[1].txt on your Desktop
  • Exit/Close RogueKiller+

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 SkipDiver

SkipDiver
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 09 January 2013 - 12:19 PM

Howdy Gringo!
Thanks for all of your help on this...I appreciate it.

Here is the Security Check Log:

Results of screen317's Security Check version 0.99.56
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
Out of date HijackThis installed!
Spybot - Search & Destroy
SUPERAntiSpyware
Malwarebytes Anti-Malware version 1.70.0.1100
HijackThis 2.0.2
CCleaner
Java™ 6 Update 21
Java™ 6 Update 7
Java version out of Date!
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 10.1.82.76 Flash Player out of Date!
````````Process Check: objlist.exe by Laurent````````
Emsisoft Anti-Malware a2service.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 28% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````




Here is my AdwCleaner Log:



# AdwCleaner v2.105 - Logfile created 01/09/2013 at 12:11:54
# Updated 08/01/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Dwayne - MASTER
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Dwayne\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

*************************

AdwCleaner[S2].txt - [530 octets] - [09/01/2013 12:11:54]

########## EOF - C:\AdwCleaner[S2].txt - [589 octets] ##########


AND finally, here is my RogueKiller Log:


RogueKiller V8.4.2 [Jan 6 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User : Dwayne [Admin rights]
Mode : Remove -- Date : 01/09/2013 12:15:19

Bad processes : 1
[DLL] rundll32.exe -- C:\WINDOWS\system32\rundll32.exe : C:\Documents and Settings\Dwayne\Application Data\wmlbs.dll -> KILLED [TermProc]

Registry Entries : 3
[RUN][SUSP PATH] HKLM\[...]\Run : wmlbs ("C:\WINDOWS\system32\rundll32.exe" "C:\Documents and Settings\Dwayne\Application Data\wmlbs.dll",WarnEx) -> DELETED
[HJ INPROC][ZeroAccess] HKCR\[...]\InprocServer32 : (C:\RECYCLER\S-1-5-21-2577862939-955188120-766292290-1009\$fcf8319edf1a31a62d2c91c0dbc4452b\n.) -> REPLACED (C:\WINDOWS\system32\shell32.dll)
[HJ INPROC][ZeroAccess] HKCR\[...]\InprocServer32 : (C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\n.) -> REPLACED (C:\WINDOWS\system32\wbem\fastprox.dll)

Particular Files / Folders:
[ZeroAccess][FILE] @ : C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\@ --> REMOVED
[Del.Parent][FILE] 00000004.@ : C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\U\00000004.@ --> REMOVED
[Del.Parent][FILE] 00000008.@ : C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\U\00000008.@ --> REMOVED
[Del.Parent][FILE] 000000cb.@ : C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\U\000000cb.@ --> REMOVED
[Del.Parent][FILE] 80000000.@ : C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\U\80000000.@ --> REMOVED
[Del.Parent][FILE] 80000032.@ : C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\U\80000032.@ --> REMOVED
[ZeroAccess][FOLDER] ROOT : C:\RECYCLER\S-1-5-18\$fcf8319edf1a31a62d2c91c0dbc4452b\U --> REMOVED
[ZeroAccess][FILE] Desktop.ini : C:\WINDOWS\Assembly\GAC\Desktop.ini --> REMOVED

Driver : [LOADED]

Infection : ZeroAccess

HOSTS File:
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
[...]


MBR Check:

+++++ PhysicalDrive0: ST3160318AS +++++
--- User ---
[MBR] d9a244b929465438fe29339f48bde447
[BSP] 9c022dc9bdd137b4b5cbaf6dd677921b : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 152625 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[2]_D_01092013_02d1215.txt >>
RKreport[1]_S_01092013_02d1214.txt ; RKreport[2]_D_01092013_02d1215.txt

#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:14 AM

Posted 09 January 2013 - 12:59 PM

Hello

I Would like you to do the following.

Please print out or make a copy in notepad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 SkipDiver

SkipDiver
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 09 January 2013 - 01:42 PM

Hey Gringo,

1) One problem I had was renaming it to "I Click This" ...it did not like that and so I renamed it to alphanumeric characters of "8sdf62w30f."
2) It did ask to install recovery console and it did take awhile to download.
3) After I realized it stalled at 100% download, I restarted it from scratch again and it seemed to of worked just fine.
4) Took approximately 10 minutes to go through the "50 stages."


*The computer is still running slow, and the "temporary Folder" under the weirdly named "NetworkService" Folder still holds large amounts of Gb's of data that is unneeded and taking forever to delete if I try to manually before we started.


ComboFix seems to have halted at "Deleting Folders" but when I open the Task Manager there are a few programs with the .3XE extention KIND OF using some 1-2% CPU usage. Its been going for 1 hour 30 minutes now. Should I end task or let it go?

#6 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:14 AM

Posted 09 January 2013 - 02:01 PM

let it go for a little while longer and if it does not move forward then do this



I want you to run combofix in safe mode but it is very important that when combofix reboots the computer for you to direct it back into safe mode so it can finish the scan.

Boot into Safe Mode

Reboot your computer in Safe Mode.
  • If the computer is running, shut down Windows, and then turn off the power.
  • Wait 30 seconds, and then turn the computer on.
  • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • Ensure that the Safe Mode option is selected.
  • Press Enter. The computer then begins to start in Safe mode.
  • Login on your usual account.

after combofix has finished its scan please post the report back here.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#7 SkipDiver

SkipDiver
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 09 January 2013 - 04:09 PM

I FINALLY GOT IT. It went through...just took me to eat lunch I guess...




ComboFix 13-01-08.01 - Dwayne 01/09/2013 13:20:43.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2039.1650 [GMT -5:00]
Running from: c:\documents and settings\Dwayne\Desktop\8sdf62w30f.exe
.
/wow section not completed
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrator\Application Data\atmsc.dll
c:\documents and settings\Administrator\Application Data\Microsoft\Windows\.data
c:\documents and settings\Administrator\Application Data\Microsoft\Windows\unicode2.nls
c:\documents and settings\All Users\Application Data\Qg4pQ4gM.exe.b
c:\documents and settings\Dwayne\Application Data\dsgry.dll
c:\documents and settings\Dwayne\Application Data\fotuie.dll
c:\documents and settings\Dwayne\Application Data\wmlbs.dll
c:\documents and settings\Dwayne\pmyukfhocdquyqud.exe
c:\documents and settings\Dwayne\xesbcjxozkntkm.exe
C:\win32
c:\win32\e1000325.cat
c:\win32\e1000325.din
c:\win32\e1000325.inf
c:\win32\E1000325.sys
c:\win32\e1000msg.dll
c:\win32\e1000nt5.din
c:\win32\E1000NT5.SYS
c:\win32\e1e5032.din
c:\win32\E1e5032.SYS
c:\win32\e1e5132.cat
c:\win32\e1e5132.din
c:\win32\e1e5132.inf
c:\win32\e1e5132.sys
c:\win32\e1e6032.cat
c:\win32\e1e6032.din
c:\win32\e1e6032.INF
c:\win32\e1e6032.sys
c:\win32\e1g6032.cat
c:\win32\e1g6032.din
c:\win32\e1g6032.inf
c:\win32\E1G60I32.sys
c:\win32\NicCo.dll
c:\win32\NicEtCo.dll
c:\win32\NicEtCoE.dll
c:\win32\NicInst.dll
c:\win32\NicInstE.dll
c:\win32\PROUnstl.exe
c:\win32\RIS_INF\e1000325.zip
c:\win32\RIS_INF\e1000nt5.zip
c:\win32\RIS_INF\e1e5032.zip
c:\win32\RIS_INF\e1e5132.zip
c:\win32\RIS_INF\readme.txt
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\fusion.dll
c:\windows\system32\URTTemp\mscoree.dll
c:\windows\system32\URTTemp\mscoree.dll.local
c:\windows\system32\URTTemp\mscorsn.dll
c:\windows\system32\URTTemp\mscorwks.dll
c:\windows\system32\URTTemp\msvcr71.dll
c:\windows\system32\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_6TO4
-------\Legacy_AMSERVICE
-------\Legacy_IAS
-------\Service_6to4
-------\Service_Ias
.
.
((((((((((((((((((((((((( Files Created from 2012-12-09 to 2013-01-09 )))))))))))))))))))))))))))))))
.
.
2013-01-09 13:21 . 2013-01-09 13:21 -------- d-----w- C:\TDSSKiller_Quarantine
2013-01-07 18:20 . 2013-01-09 18:20 -------- d-----w- c:\windows\system32\CatRoot2
2013-01-07 17:48 . 2013-01-07 17:48 -------- d-----w- c:\program files\Trend Micro
2013-01-07 17:45 . 2013-01-09 17:52 -------- d-----w- C:\!KillBox
2013-01-02 22:44 . 2013-01-02 22:44 -------- d-----w- c:\program files\WinDirStat
2013-01-02 22:28 . 2013-01-02 22:32 -------- d-----w- c:\windows\MATS
2013-01-02 22:28 . 2013-01-02 22:32 -------- d-----w- c:\program files\Microsoft Fix it Center
2013-01-02 22:04 . 2013-01-09 18:25 -------- d-----w- c:\documents and settings\Dwayne
2013-01-02 13:37 . 2013-01-02 13:37 30616 ----a-w- c:\windows\system32\drivers\hitmanpro37.sys
2013-01-02 13:30 . 2013-01-02 13:30 -------- d-----w- c:\documents and settings\All Users\Application Data\HitmanPro
2012-12-27 22:17 . 2012-12-27 22:17 -------- d-----w- c:\windows\system32\MpEngineStore
2012-12-27 22:13 . 2012-12-27 22:13 -------- d-----w- C:\bc06549e3bff912cfbc22b8da3
2012-12-26 16:45 . 2013-01-09 21:01 -------- d-----w- c:\program files\Emsisoft Anti-Malware
2012-12-24 14:30 . 2012-12-24 19:45 181064 ----a-w- c:\windows\PSEXESVC.EXE
2012-12-24 14:29 . 2004-06-11 23:33 290304 ----a-w- C:\subinacl.exe
2012-12-24 14:27 . 2012-12-24 14:27 -------- d-----w- c:\program files\Tweaking.com
2012-12-24 13:59 . 2012-12-24 13:58 36552 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-12-24 13:59 . 2012-12-24 13:58 134336 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-12-21 16:23 . 2012-12-21 16:23 -------- d-----w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com
2012-12-21 16:22 . 2013-01-02 13:52 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-12-21 16:22 . 2012-12-21 16:22 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2012-12-21 16:22 . 2013-01-02 21:56 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2012-12-21 16:22 . 2012-12-21 19:52 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-12-21 16:17 . 2012-12-28 22:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-21 16:17 . 2012-12-21 16:17 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Hewlett-Packard
2012-12-17 17:36 . 2012-12-24 13:05 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Hewlett-Packard
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-31 14:49 . 2009-08-19 21:08 90112 ----a-w- c:\windows\DUMP6c46.tmp
2012-12-31 14:47 . 2009-08-19 21:08 90112 ----a-w- c:\windows\DUMP6d31.tmp
2012-12-28 22:13 . 2009-08-19 21:08 90112 ----a-w- c:\windows\DUMP69c6.tmp
2012-12-26 13:50 . 2009-08-19 21:08 90112 ----a-w- c:\windows\DUMP4fa7.tmp
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SetRefresh"="c:\program files\Compaq\SetRefresh\SetRefresh.exe" [2003-11-20 525824]
"Client Access Service"="c:\program files\IBM\Client Access\cwbsvstr.exe" [2007-03-07 20531]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-01-13 131072]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-01-13 163840]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-01-13 135168]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^FOGTray.exe.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\FOGTray.exe.lnk
backup=c:\windows\pss\FOGTray.exe.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\emsisoft anti-malware]
2012-10-17 22:02 3364264 ----a-w- c:\program files\Emsisoft Anti-Malware\a2guard.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete]
2008-04-07 14:10 318488 ----a-w- c:\program files\PDF Complete\pdfsty.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 18:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2012-11-01 19:45 4763008 ----a-w- c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"pdfcDispatcher"=2 (0x2)
"Fog Service"=2 (0x2)
.
R1 A2DDA;A2 Direct Disk Access Support Driver;c:\program files\Emsisoft Anti-Malware\a2ddax86.sys [12/26/2012 11:45 AM 17904]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [9/21/2012 10:23 AM 27496]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [7/22/2011 11:27 AM 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/12/2011 4:55 PM 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [7/11/2012 1:54 PM 116608]
R2 a2AntiMalware;Emsisoft Anti-Malware 7.0 - Service;c:\program files\Emsisoft Anti-Malware\a2service.exe [12/26/2012 11:45 AM 3084688]
R2 BrcmMgmtAgent;Broadcom Management Agent;c:\program files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [2/11/2010 6:35 PM 103936]
S0 nypfwcpf;nypfwcpf;c:\windows\system32\drivers\dqpvnolw.sys --> c:\windows\system32\drivers\dqpvnolw.sys [?]
S1 MpKsl722956cb;MpKsl722956cb;\??\c:\windows\system32\MpEngineStore\MpKsl722956cb.sys --> c:\windows\system32\MpEngineStore\MpKsl722956cb.sys [?]
S2 Iprip;MicroSoft NetBIOS Support;c:\windows\System32\svchost.exe -k netsvcs [8/4/2004 2:56 AM 14336]
S3 a2acc;a2acc;c:\program files\Emsisoft Anti-Malware\a2accx86.sys [12/26/2012 11:45 AM 54072]
S3 aswArKrn;aswArKrn;\??\c:\docume~1\FIXITP~1\LOCALS~1\Temp\aswArKrn.sys --> c:\docume~1\FIXITP~1\LOCALS~1\Temp\aswArKrn.sys [?]
S3 hitmanpro37;HitmanPro 3.7 Support Driver;c:\windows\system32\drivers\hitmanpro37.sys [1/2/2013 8:37 AM 30616]
S3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\Microsoft Fix it Center\Matsvc.exe [6/13/2011 10:09 PM 267568]
S4 Fog Service;FOG Service;c:\program files\FOG\FOGService.exe [9/11/2008 8:39 AM 24576]
S4 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [8/17/2009 4:48 PM 576024]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
*NewlyCreated* - WUAUSERV
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
LSP: mswsock.dll
Trusted Zone: microsoft.com\www.update
TCP: DhcpNameServer = 192.168.85.14
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-62027776.sys
MSConfigStartUp-atmsc - c:\documents and settings\Administrator\Application Data\atmsc.dll
MSConfigStartUp-dsgry - c:\documents and settings\Dwayne\Application Data\dsgry.dll
MSConfigStartUp-fotuie - c:\documents and settings\Dwayne\Application Data\fotuie.dll
MSConfigStartUp-KB00826585 - c:\documents and settings\Administrator\Application Data\KB00826585.exe
MSConfigStartUp-svhst - c:\documents and settings\Dwayne\wgsdgsdgdsgsd.exe
MSConfigStartUp-wmlbs - c:\documents and settings\Dwayne\Application Data\wmlbs.dll
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-09 16:03
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(2120)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2013-01-09 16:05:36 - machine was rebooted
ComboFix-quarantined-files.txt 2013-01-09 21:05
.
Pre-Run: 57,491,333,120 bytes free
Post-Run: 57,686,589,440 bytes free
.
- - End Of File - - 8079F60BB3BE842CB46AE57472915017

#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:14 AM

Posted 09 January 2013 - 04:13 PM

Greetings

I want you to run these next,

Please download the latest version of TDSSKiller from here and save it to your Desktop.
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
  • Put a checkmark beside loaded modules.
  • A reboot will be needed to apply the changes. Do it.
  • TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
  • Then click on Change parameters in TDSSKiller.
  • Check all boxes then click OK.
  • Click the Start Scan button.
  • The scan should take no longer than 2 minutes.
  • If a suspicious object is detected, the default action will be Skip, click on Continue.
  • If malicious objects are found, they will show in the Scan results
  • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
    Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  • A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.



Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • it will ask to download extra definitions - ALLOW IT
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#9 SkipDiver

SkipDiver
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 09 January 2013 - 04:44 PM

Ok...I've ran both and only "Suspicious Objects" were found so it defaulted to "Skip"

Here is the TDSSKiller Log:

16:26:51.0718 1964 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
16:26:52.0421 1964 ============================================================
16:26:52.0421 1964 Current date / time: 2013/01/09 16:26:52.0421
16:26:52.0421 1964 SystemInfo:
16:26:52.0421 1964
16:26:52.0421 1964 OS Version: 5.1.2600 ServicePack: 3.0
16:26:52.0421 1964 Product type: Workstation
16:26:52.0421 1964 ComputerName: MASTER
16:26:52.0421 1964 UserName: Dwayne
16:26:52.0437 1964 Windows directory: C:\WINDOWS
16:26:52.0437 1964 System windows directory: C:\WINDOWS
16:26:52.0437 1964 Processor architecture: Intel x86
16:26:52.0437 1964 Number of processors: 1
16:26:52.0437 1964 Page size: 0x1000
16:26:52.0437 1964 Boot type: Normal boot
16:26:52.0437 1964 ============================================================
16:26:55.0218 1964 BG loaded
16:26:55.0656 1964 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
16:26:55.0656 1964 ============================================================
16:26:55.0656 1964 \Device\Harddisk0\DR0:
16:26:55.0671 1964 MBR partitions:
16:26:55.0671 1964 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x12A18800
16:26:55.0671 1964 ============================================================
16:26:55.0718 1964 C: <-> \Device\Harddisk0\DR0\Partition1
16:26:55.0796 1964 ============================================================
16:26:55.0796 1964 Initialize success
16:26:55.0796 1964 ============================================================
16:27:19.0125 0964 ============================================================
16:27:19.0125 0964 Scan started
16:27:19.0125 0964 Mode: Manual;
16:27:19.0125 0964 ============================================================
16:27:20.0062 0964 ================ Scan system memory ========================
16:27:20.0062 0964 System memory - ok
16:27:20.0062 0964 ================ Scan services =============================
16:27:20.0125 0964 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
16:27:20.0125 0964 !SASCORE - ok
16:27:20.0171 0964 [ A8A4E18857CDFD8D9AB81E2C9EAF89B5 ] a2acc C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys
16:27:20.0171 0964 a2acc - ok
16:27:20.0265 0964 [ C6D0B4BF12036D1EE092D2F5EF436FC7 ] a2AntiMalware C:\Program Files\Emsisoft Anti-Malware\a2service.exe
16:27:20.0296 0964 a2AntiMalware - ok
16:27:20.0328 0964 [ F7EABCA8375EA2DC6F35C4BCA4757515 ] A2DDA C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
16:27:20.0328 0964 A2DDA - ok
16:27:20.0406 0964 Abiosdsk - ok
16:27:20.0406 0964 abp480n5 - ok
16:27:20.0437 0964 [ 0F2D66D5F08EBE2F77BB904288DCF6F0 ] ac97intc C:\WINDOWS\system32\drivers\ac97intc.sys
16:27:20.0437 0964 ac97intc - ok
16:27:20.0468 0964 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
16:27:20.0484 0964 ACPI - ok
16:27:20.0500 0964 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
16:27:20.0500 0964 ACPIEC - ok
16:27:20.0515 0964 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
16:27:20.0515 0964 adpu160m - ok
16:27:20.0531 0964 [ 0EA9B1F0C6C90A509C8603775366ADB7 ] adpu320 C:\WINDOWS\system32\DRIVERS\adpu320.sys
16:27:20.0531 0964 adpu320 - ok
16:27:20.0546 0964 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
16:27:20.0562 0964 aec - ok
16:27:20.0593 0964 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
16:27:20.0593 0964 AFD - ok
16:27:20.0593 0964 Aha154x - ok
16:27:20.0625 0964 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
16:27:20.0625 0964 aic78u2 - ok
16:27:20.0625 0964 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
16:27:20.0640 0964 aic78xx - ok
16:27:20.0671 0964 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
16:27:20.0671 0964 Alerter - ok
16:27:20.0687 0964 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
16:27:20.0687 0964 ALG - ok
16:27:20.0687 0964 AliIde - ok
16:27:20.0703 0964 amsint - ok
16:27:20.0718 0964 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
16:27:20.0718 0964 AppMgmt - ok
16:27:20.0734 0964 asc - ok
16:27:20.0734 0964 asc3350p - ok
16:27:20.0734 0964 asc3550 - ok
16:27:20.0765 0964 [ ED8CEE58C1E4C5893F5B2FD686A272BF ] Aspi32 C:\WINDOWS\system32\drivers\Aspi32.sys
16:27:20.0765 0964 Aspi32 - ok
16:27:20.0843 0964 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
16:27:20.0875 0964 aspnet_state - ok
16:27:20.0890 0964 aswArKrn - ok
16:27:20.0906 0964 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
16:27:20.0906 0964 AsyncMac - ok
16:27:20.0937 0964 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
16:27:20.0937 0964 atapi - ok
16:27:20.0937 0964 Atdisk - ok
16:27:20.0953 0964 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
16:27:20.0953 0964 Atmarpc - ok
16:27:21.0000 0964 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
16:27:21.0000 0964 AudioSrv - ok
16:27:21.0031 0964 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
16:27:21.0031 0964 audstub - ok
16:27:21.0062 0964 [ DB22E7062FD88CDD1CC8C99CE59E6B2B ] avgtp C:\WINDOWS\system32\drivers\avgtpx86.sys
16:27:21.0062 0964 avgtp - ok
16:27:21.0093 0964 [ E951D262C9144C05D3B21CCDDA6C7E47 ] b57w2k C:\WINDOWS\system32\DRIVERS\b57xp32.sys
16:27:21.0093 0964 b57w2k - ok
16:27:21.0109 0964 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
16:27:21.0109 0964 Beep - ok
16:27:21.0140 0964 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
16:27:21.0171 0964 BITS - ok
16:27:21.0203 0964 [ 673C79036AB4A47BB8AD555D84FFE42D ] Blfp C:\WINDOWS\system32\DRIVERS\baspxp32.sys
16:27:21.0218 0964 Blfp - ok
16:27:21.0250 0964 [ 8A1F4965B53F418483137B4F5815F775 ] BrcmMgmtAgent C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
16:27:21.0265 0964 BrcmMgmtAgent - ok
16:27:21.0296 0964 [ A06CE3399D16DB864F55FAEB1F1927A9 ] Browser C:\WINDOWS\System32\browser.dll
16:27:21.0296 0964 Browser - ok
16:27:21.0421 0964 catchme - ok
16:27:21.0453 0964 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
16:27:21.0453 0964 cbidf2k - ok
16:27:21.0468 0964 cd20xrnt - ok
16:27:21.0484 0964 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
16:27:21.0484 0964 Cdaudio - ok
16:27:21.0500 0964 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
16:27:21.0500 0964 Cdfs - ok
16:27:21.0531 0964 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
16:27:21.0531 0964 Cdrom - ok
16:27:21.0531 0964 Changer - ok
16:27:21.0562 0964 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
16:27:21.0562 0964 CiSvc - ok
16:27:21.0578 0964 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
16:27:21.0578 0964 ClipSrv - ok
16:27:21.0609 0964 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:27:21.0640 0964 clr_optimization_v2.0.50727_32 - ok
16:27:21.0640 0964 CmdIde - ok
16:27:21.0656 0964 COMSysApp - ok
16:27:21.0671 0964 Cpqarray - ok
16:27:21.0687 0964 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
16:27:21.0687 0964 CryptSvc - ok
16:27:21.0734 0964 [ C6EE25C79A9AE5A53C29830843D4DCF9 ] Cwbrxd C:\WINDOWS\CWBRXD.EXE
16:27:21.0734 0964 Cwbrxd - ok
16:27:21.0734 0964 dac2w2k - ok
16:27:21.0734 0964 dac960nt - ok
16:27:21.0765 0964 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
16:27:21.0796 0964 DcomLaunch - ok
16:27:21.0812 0964 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
16:27:21.0812 0964 Dhcp - ok
16:27:21.0828 0964 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
16:27:21.0828 0964 Disk - ok
16:27:21.0828 0964 dmadmin - ok
16:27:21.0859 0964 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
16:27:21.0875 0964 dmboot - ok
16:27:21.0890 0964 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
16:27:21.0906 0964 dmio - ok
16:27:21.0921 0964 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
16:27:21.0921 0964 dmload - ok
16:27:21.0937 0964 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
16:27:21.0937 0964 dmserver - ok
16:27:21.0953 0964 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
16:27:21.0953 0964 DMusic - ok
16:27:21.0984 0964 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
16:27:21.0984 0964 Dnscache - ok
16:27:22.0031 0964 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
16:27:22.0031 0964 Dot3svc - ok
16:27:22.0046 0964 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
16:27:22.0046 0964 dpti2o - ok
16:27:22.0078 0964 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
16:27:22.0078 0964 drmkaud - ok
16:27:22.0125 0964 [ 80CEAFB317A9E8A184644B1E22E0BE6E ] E1000 C:\WINDOWS\system32\DRIVERS\e1000325.sys
16:27:22.0125 0964 E1000 - ok
16:27:22.0156 0964 [ 3FCA03CBCA11269F973B70FA483C88EF ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
16:27:22.0156 0964 E100B - ok
16:27:22.0187 0964 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
16:27:22.0187 0964 EapHost - ok
16:27:22.0218 0964 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
16:27:22.0218 0964 ERSvc - ok
16:27:22.0250 0964 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
16:27:22.0250 0964 Eventlog - ok
16:27:22.0296 0964 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll
16:27:22.0296 0964 EventSystem - ok
16:27:22.0312 0964 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
16:27:22.0312 0964 Fastfat - ok
16:27:22.0343 0964 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
16:27:22.0343 0964 FastUserSwitchingCompatibility - ok
16:27:22.0390 0964 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
16:27:22.0390 0964 Fdc - ok
16:27:22.0406 0964 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
16:27:22.0406 0964 Fips - ok
16:27:22.0421 0964 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
16:27:22.0421 0964 Flpydisk - ok
16:27:22.0437 0964 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
16:27:22.0453 0964 FltMgr - ok
16:27:22.0484 0964 [ D5F52D403F29A37F3F6C0912197E7797 ] Fog Service C:\Program Files\FOG\FOGService.exe
16:27:22.0484 0964 Fog Service - ok
16:27:22.0531 0964 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
16:27:22.0546 0964 FontCache3.0.0.0 - ok
16:27:22.0578 0964 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
16:27:22.0578 0964 Fs_Rec - ok
16:27:22.0593 0964 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
16:27:22.0593 0964 Ftdisk - ok
16:27:22.0609 0964 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
16:27:22.0625 0964 Gpc - ok
16:27:22.0640 0964 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
16:27:22.0640 0964 HDAudBus - ok
16:27:22.0718 0964 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
16:27:22.0718 0964 helpsvc - ok
16:27:22.0750 0964 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
16:27:22.0750 0964 HidServ - ok
16:27:22.0765 0964 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
16:27:22.0765 0964 HidUsb - ok
16:27:22.0812 0964 [ 7EAB073BF5949ED639660787A01B623D ] hitmanpro37 C:\WINDOWS\system32\drivers\hitmanpro37.sys
16:27:22.0812 0964 hitmanpro37 - ok
16:27:22.0843 0964 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
16:27:22.0859 0964 hkmsvc - ok
16:27:22.0859 0964 hpn - ok
16:27:22.0906 0964 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
16:27:22.0906 0964 HTTP - ok
16:27:22.0921 0964 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
16:27:22.0921 0964 HTTPFilter - ok
16:27:22.0937 0964 i2omgmt - ok
16:27:22.0937 0964 i2omp - ok
16:27:22.0968 0964 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
16:27:22.0968 0964 i8042prt - ok
16:27:23.0000 0964 [ 06B7EF73BA5F302EECC294CDF7E19702 ] i81x C:\WINDOWS\system32\DRIVERS\i81xnt5.sys
16:27:23.0000 0964 i81x - ok
16:27:23.0015 0964 [ 7B5B44EFE5EB9DADFB8EE29700885D23 ] iAimFP0 C:\WINDOWS\system32\DRIVERS\wADV01nt.sys
16:27:23.0031 0964 iAimFP0 - ok
16:27:23.0031 0964 [ EB1F6BAB6C22EDE0BA551B527475F7E9 ] iAimFP1 C:\WINDOWS\system32\DRIVERS\wADV02NT.sys
16:27:23.0046 0964 iAimFP1 - ok
16:27:23.0046 0964 [ 03CE989D846C1AA81145CB22FCB86D06 ] iAimFP2 C:\WINDOWS\system32\DRIVERS\wADV05NT.sys
16:27:23.0046 0964 iAimFP2 - ok
16:27:23.0046 0964 [ 525849B4469DE021D5D61B4DB9BE3A9D ] iAimFP3 C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys
16:27:23.0062 0964 iAimFP3 - ok
16:27:23.0062 0964 [ 589C2BCDB5BD602BF7B63D210407EF8C ] iAimFP4 C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys
16:27:23.0062 0964 iAimFP4 - ok
16:27:23.0078 0964 [ 0308AEF61941E4AF478FA1A0F83812F5 ] iAimFP5 C:\WINDOWS\system32\DRIVERS\wADV07nt.sys
16:27:23.0078 0964 iAimFP5 - ok
16:27:23.0078 0964 [ 714038A8AA5DE08E12062202CD7EAEB5 ] iAimFP6 C:\WINDOWS\system32\DRIVERS\wADV08nt.sys
16:27:23.0078 0964 iAimFP6 - ok
16:27:23.0093 0964 [ 7BB3AA595E4507A788DE1CDC63F4C8C4 ] iAimFP7 C:\WINDOWS\system32\DRIVERS\wADV09nt.sys
16:27:23.0093 0964 iAimFP7 - ok
16:27:23.0093 0964 [ D83BDD5C059667A2F647A6BE5703A4D2 ] iAimTV0 C:\WINDOWS\system32\DRIVERS\wATV01nt.sys
16:27:23.0093 0964 iAimTV0 - ok
16:27:23.0109 0964 [ ED968D23354DAA0D7C621580C012A1F6 ] iAimTV1 C:\WINDOWS\system32\DRIVERS\wATV02NT.sys
16:27:23.0109 0964 iAimTV1 - ok
16:27:23.0109 0964 [ D738273F218A224C1DDAC04203F27A84 ] iAimTV3 C:\WINDOWS\system32\DRIVERS\wATV04nt.sys
16:27:23.0109 0964 iAimTV3 - ok
16:27:23.0125 0964 [ 0052D118995CBAB152DAABE6106D1442 ] iAimTV4 C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys
16:27:23.0125 0964 iAimTV4 - ok
16:27:23.0140 0964 [ 791CC45DE6E50445BE72E8AD6401FF45 ] iAimTV5 C:\WINDOWS\system32\DRIVERS\wATV10nt.sys
16:27:23.0140 0964 iAimTV5 - ok
16:27:23.0140 0964 [ 352FA0E98BC461CE1CE5D41F64DB558D ] iAimTV6 C:\WINDOWS\system32\DRIVERS\wATV06nt.sys
16:27:23.0140 0964 iAimTV6 - ok
16:27:23.0281 0964 [ 2AAE7BE67911F4AEC9AD28E9CFB9096F ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
16:27:23.0343 0964 ialm - ok
16:27:23.0375 0964 [ E5A0034847537EAEE3C00349D5C34C5F ] iaStor C:\WINDOWS\system32\DRIVERS\iaStor.sys
16:27:23.0390 0964 iaStor - ok
16:27:23.0453 0964 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
16:27:23.0484 0964 idsvc - ok
16:27:23.0500 0964 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
16:27:23.0500 0964 Imapi - ok
16:27:23.0546 0964 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
16:27:23.0546 0964 ImapiService - ok
16:27:23.0546 0964 ini910u - ok
16:27:23.0687 0964 [ A07D4742186B3CC41B0EDDECBBCEC34A ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:27:23.0734 0964 IntcAzAudAddService - ok
16:27:23.0765 0964 [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
16:27:23.0765 0964 IntelIde - ok
16:27:23.0796 0964 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
16:27:23.0796 0964 intelppm - ok
16:27:23.0796 0964 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
16:27:23.0796 0964 Ip6Fw - ok
16:27:23.0812 0964 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
16:27:23.0828 0964 IpInIp - ok
16:27:23.0843 0964 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
16:27:23.0843 0964 IpNat - ok
16:27:23.0859 0964 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
16:27:23.0859 0964 IPSec - ok
16:27:23.0875 0964 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
16:27:23.0875 0964 IRENUM - ok
16:27:23.0890 0964 Irmon - ok
16:27:23.0906 0964 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
16:27:23.0906 0964 isapnp - ok
16:27:23.0968 0964 [ E4AE0CBC0B55A5FAA6996E38CE6C981B ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
16:27:23.0968 0964 JavaQuickStarterService - ok
16:27:23.0968 0964 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
16:27:23.0968 0964 Kbdclass - ok
16:27:23.0984 0964 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
16:27:23.0984 0964 kbdhid - ok
16:27:24.0015 0964 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
16:27:24.0015 0964 kmixer - ok
16:27:24.0062 0964 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
16:27:24.0062 0964 KSecDD - ok
16:27:24.0093 0964 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
16:27:24.0093 0964 lanmanserver - ok
16:27:24.0109 0964 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
16:27:24.0109 0964 lanmanworkstation - ok
16:27:24.0109 0964 lbrtfdc - ok
16:27:24.0156 0964 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
16:27:24.0156 0964 LmHosts - ok
16:27:24.0218 0964 [ DDF15A42E27E8EFE27B18FD403151A86 ] MatSvc C:\Program Files\Microsoft Fix it Center\Matsvc.exe
16:27:24.0218 0964 MatSvc - ok
16:27:24.0234 0964 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
16:27:24.0234 0964 Messenger - ok
16:27:24.0265 0964 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
16:27:24.0281 0964 mnmdd - ok
16:27:24.0312 0964 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
16:27:24.0312 0964 mnmsrvc - ok
16:27:24.0343 0964 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
16:27:24.0343 0964 Modem - ok
16:27:24.0375 0964 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
16:27:24.0375 0964 Mouclass - ok
16:27:24.0406 0964 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
16:27:24.0406 0964 mouhid - ok
16:27:24.0421 0964 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
16:27:24.0421 0964 MountMgr - ok
16:27:24.0453 0964 MpKsl722956cb - ok
16:27:24.0453 0964 mraid35x - ok
16:27:24.0484 0964 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
16:27:24.0484 0964 MRxDAV - ok
16:27:24.0515 0964 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
16:27:24.0531 0964 MRxSmb - ok
16:27:24.0562 0964 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
16:27:24.0562 0964 MSDTC - ok
16:27:24.0578 0964 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
16:27:24.0578 0964 Msfs - ok
16:27:24.0609 0964 MSIServer - ok
16:27:24.0625 0964 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
16:27:24.0625 0964 MSKSSRV - ok
16:27:24.0640 0964 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
16:27:24.0640 0964 MSPCLOCK - ok
16:27:24.0671 0964 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
16:27:24.0671 0964 MSPQM - ok
16:27:24.0687 0964 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
16:27:24.0687 0964 mssmbios - ok
16:27:24.0734 0964 MSSQL$SQLEXPRESS - ok
16:27:24.0781 0964 [ 1D89EB4E2A99CABD4E81225F4F4C4B25 ] MSSQLServerADHelper c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe
16:27:24.0781 0964 MSSQLServerADHelper - ok
16:27:24.0812 0964 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
16:27:24.0812 0964 Mup - ok
16:27:24.0859 0964 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
16:27:24.0859 0964 napagent - ok
16:27:24.0890 0964 [ 8716356E49A665BDC7B114725B60A456 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
16:27:24.0890 0964 NDIS - ok
16:27:24.0921 0964 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
16:27:24.0921 0964 NdisTapi - ok
16:27:24.0953 0964 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
16:27:24.0953 0964 Ndisuio - ok
16:27:24.0968 0964 [ 5526CFEBB619F7F763BD6A2E1B618078 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
16:27:24.0968 0964 NdisWan - ok
16:27:24.0984 0964 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
16:27:24.0984 0964 NDProxy - ok
16:27:25.0031 0964 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
16:27:25.0031 0964 NetBIOS - ok
16:27:25.0046 0964 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
16:27:25.0046 0964 NetBT - ok
16:27:25.0078 0964 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
16:27:25.0078 0964 NetDDE - ok
16:27:25.0093 0964 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
16:27:25.0093 0964 NetDDEdsdm - ok
16:27:25.0093 0964 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
16:27:25.0093 0964 Netlogon - ok
16:27:25.0109 0964 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
16:27:25.0125 0964 Netman - ok
16:27:25.0156 0964 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:27:25.0156 0964 NetTcpPortSharing - ok
16:27:25.0187 0964 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
16:27:25.0187 0964 Nla - ok
16:27:25.0218 0964 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
16:27:25.0218 0964 Npfs - ok
16:27:25.0234 0964 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
16:27:25.0265 0964 Ntfs - ok
16:27:25.0281 0964 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
16:27:25.0281 0964 NtLmSsp - ok
16:27:25.0312 0964 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
16:27:25.0328 0964 NtmsSvc - ok
16:27:25.0359 0964 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
16:27:25.0359 0964 Null - ok
16:27:25.0375 0964 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
16:27:25.0375 0964 NwlnkFlt - ok
16:27:25.0390 0964 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
16:27:25.0390 0964 NwlnkFwd - ok
16:27:25.0390 0964 nypfwcpf - ok
16:27:25.0406 0964 [ C90018BAFDC7098619A4A95B046B30F3 ] P3 C:\WINDOWS\system32\DRIVERS\p3.sys
16:27:25.0406 0964 P3 - ok
16:27:25.0437 0964 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
16:27:25.0437 0964 Parport - ok
16:27:25.0453 0964 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
16:27:25.0453 0964 PartMgr - ok
16:27:25.0484 0964 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
16:27:25.0484 0964 ParVdm - ok
16:27:25.0484 0964 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
16:27:25.0484 0964 PCI - ok
16:27:25.0500 0964 PCIDump - ok
16:27:25.0515 0964 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
16:27:25.0515 0964 PCIIde - ok
16:27:25.0546 0964 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
16:27:25.0546 0964 Pcmcia - ok
16:27:25.0562 0964 PDCOMP - ok
16:27:25.0593 0964 pdfcDispatcher - ok
16:27:25.0593 0964 PDFRAME - ok
16:27:25.0609 0964 PDRELI - ok
16:27:25.0609 0964 PDRFRAME - ok
16:27:25.0625 0964 perc2 - ok
16:27:25.0625 0964 perc2hib - ok
16:27:25.0656 0964 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
16:27:25.0656 0964 PlugPlay - ok
16:27:25.0671 0964 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
16:27:25.0671 0964 PolicyAgent - ok
16:27:25.0687 0964 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
16:27:25.0687 0964 PptpMiniport - ok
16:27:25.0687 0964 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
16:27:25.0703 0964 ProtectedStorage - ok
16:27:25.0703 0964 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
16:27:25.0703 0964 PSched - ok
16:27:25.0734 0964 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
16:27:25.0734 0964 Ptilink - ok
16:27:25.0734 0964 ql1080 - ok
16:27:25.0750 0964 Ql10wnt - ok
16:27:25.0750 0964 ql12160 - ok
16:27:25.0750 0964 ql1240 - ok
16:27:25.0765 0964 ql1280 - ok
16:27:25.0781 0964 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
16:27:25.0781 0964 RasAcd - ok
16:27:25.0812 0964 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
16:27:25.0812 0964 RasAuto - ok
16:27:25.0828 0964 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
16:27:25.0828 0964 Rasl2tp - ok
16:27:25.0843 0964 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
16:27:25.0843 0964 RasMan - ok
16:27:25.0859 0964 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
16:27:25.0859 0964 RasPppoe - ok
16:27:25.0859 0964 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
16:27:25.0859 0964 Raspti - ok
16:27:25.0890 0964 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
16:27:25.0890 0964 Rdbss - ok
16:27:25.0906 0964 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
16:27:25.0906 0964 RDPCDD - ok
16:27:25.0937 0964 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:27:25.0937 0964 rdpdr - ok
16:27:25.0968 0964 [ 6589DB6E5969F8EEE594CF71171C5028 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
16:27:25.0968 0964 RDPWD - ok
16:27:25.0984 0964 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
16:27:25.0984 0964 RDSessMgr - ok
16:27:26.0000 0964 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
16:27:26.0000 0964 redbook - ok
16:27:26.0046 0964 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
16:27:26.0046 0964 RemoteAccess - ok
16:27:26.0062 0964 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
16:27:26.0062 0964 RemoteRegistry - ok
16:27:26.0078 0964 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
16:27:26.0093 0964 RpcLocator - ok
16:27:26.0109 0964 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\System32\rpcss.dll
16:27:26.0109 0964 RpcSs - ok
16:27:26.0156 0964 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
16:27:26.0156 0964 RSVP - ok
16:27:26.0171 0964 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
16:27:26.0171 0964 SamSs - ok
16:27:26.0203 0964 [ 39763504067962108505BFF25F024345 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
16:27:26.0203 0964 SASDIFSV - ok
16:27:26.0218 0964 [ 77B9FC20084B48408AD3E87570EB4A85 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
16:27:26.0218 0964 SASKUTIL - ok
16:27:26.0265 0964 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
16:27:26.0265 0964 SCardSvr - ok
16:27:26.0296 0964 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
16:27:26.0296 0964 Schedule - ok
16:27:26.0328 0964 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
16:27:26.0328 0964 Secdrv - ok
16:27:26.0343 0964 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
16:27:26.0343 0964 seclogon - ok
16:27:26.0359 0964 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
16:27:26.0359 0964 SENS - ok
16:27:26.0375 0964 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
16:27:26.0375 0964 serenum - ok
16:27:26.0390 0964 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
16:27:26.0390 0964 Serial - ok
16:27:26.0406 0964 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
16:27:26.0406 0964 Sfloppy - ok
16:27:26.0437 0964 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
16:27:26.0437 0964 SharedAccess - ok
16:27:26.0453 0964 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
16:27:26.0468 0964 ShellHWDetection - ok
16:27:26.0468 0964 Simbad - ok
16:27:26.0484 0964 Sparrow - ok
16:27:26.0500 0964 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
16:27:26.0500 0964 splitter - ok
16:27:26.0531 0964 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
16:27:26.0531 0964 Spooler - ok
16:27:26.0531 0964 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] SQLBrowser c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
16:27:26.0546 0964 SQLBrowser - ok
16:27:26.0578 0964 [ D89083C4EB02DACA8F944B0E05E57F9D ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
16:27:26.0578 0964 SQLWriter - ok
16:27:26.0593 0964 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
16:27:26.0593 0964 sr - ok
16:27:26.0625 0964 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
16:27:26.0625 0964 srservice - ok
16:27:26.0671 0964 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
16:27:26.0671 0964 Srv - ok
16:27:26.0687 0964 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
16:27:26.0687 0964 SSDPSRV - ok
16:27:26.0718 0964 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
16:27:26.0718 0964 stisvc - ok
16:27:26.0765 0964 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
16:27:26.0765 0964 swenum - ok
16:27:26.0781 0964 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
16:27:26.0781 0964 swmidi - ok
16:27:26.0781 0964 SwPrv - ok
16:27:26.0828 0964 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
16:27:26.0828 0964 symc810 - ok
16:27:26.0843 0964 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
16:27:26.0843 0964 symc8xx - ok
16:27:26.0843 0964 [ F2B7E8416F508368AC6730E2AE1C614F ] Symmpi C:\WINDOWS\system32\DRIVERS\symmpi.sys
16:27:26.0843 0964 Symmpi - ok
16:27:26.0875 0964 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
16:27:26.0875 0964 sym_hi - ok
16:27:26.0890 0964 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
16:27:26.0890 0964 sym_u3 - ok
16:27:26.0906 0964 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
16:27:26.0906 0964 sysaudio - ok
16:27:26.0953 0964 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
16:27:26.0953 0964 SysmonLog - ok
16:27:26.0968 0964 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
16:27:26.0984 0964 TapiSrv - ok
16:27:27.0015 0964 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
16:27:27.0015 0964 Tcpip - ok
16:27:27.0031 0964 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
16:27:27.0031 0964 TDPIPE - ok
16:27:27.0046 0964 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
16:27:27.0046 0964 TDTCP - ok
16:27:27.0062 0964 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
16:27:27.0062 0964 TermDD - ok
16:27:27.0093 0964 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
16:27:27.0109 0964 TermService - ok
16:27:27.0125 0964 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
16:27:27.0125 0964 Themes - ok
16:27:27.0156 0964 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
16:27:27.0156 0964 TlntSvr - ok
16:27:27.0171 0964 TosIde - ok
16:27:27.0203 0964 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
16:27:27.0203 0964 TrkWks - ok
16:27:27.0234 0964 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
16:27:27.0234 0964 Udfs - ok
16:27:27.0250 0964 ultra - ok
16:27:27.0265 0964 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
16:27:27.0281 0964 upnphost - ok
16:27:27.0296 0964 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
16:27:27.0296 0964 UPS - ok
16:27:27.0312 0964 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
16:27:27.0312 0964 usbccgp - ok
16:27:27.0343 0964 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
16:27:27.0343 0964 usbehci - ok
16:27:27.0359 0964 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
16:27:27.0359 0964 usbhub - ok
16:27:27.0359 0964 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
16:27:27.0359 0964 USBSTOR - ok
16:27:27.0375 0964 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
16:27:27.0375 0964 usbuhci - ok
16:27:27.0390 0964 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
16:27:27.0390 0964 VgaSave - ok
16:27:27.0406 0964 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
16:27:27.0406 0964 ViaIde - ok
16:27:27.0421 0964 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
16:27:27.0421 0964 VolSnap - ok
16:27:27.0453 0964 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
16:27:27.0468 0964 VSS - ok
16:27:27.0468 0964 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\system32\w32time.dll
16:27:27.0484 0964 W32Time - ok
16:27:27.0515 0964 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
16:27:27.0515 0964 Wanarp - ok
16:27:27.0531 0964 WDICA - ok
16:27:27.0546 0964 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
16:27:27.0546 0964 wdmaud - ok
16:27:27.0578 0964 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
16:27:27.0578 0964 WebClient - ok
16:27:27.0640 0964 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
16:27:27.0640 0964 winmgmt - ok
16:27:27.0687 0964 [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
16:27:27.0703 0964 WmdmPmSN - ok
16:27:27.0734 0964 [ E76F8807070ED04E7408A86D6D3A6137 ] Wmi C:\WINDOWS\System32\advapi32.dll
16:27:27.0734 0964 Wmi - ok
16:27:27.0750 0964 [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
16:27:27.0750 0964 WmiAcpi - ok
16:27:27.0781 0964 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
16:27:27.0781 0964 WmiApSrv - ok
16:27:27.0812 0964 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
16:27:27.0812 0964 WS2IFSL - ok
16:27:27.0843 0964 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
16:27:27.0859 0964 wscsvc - ok
16:27:27.0890 0964 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
16:27:27.0890 0964 wuauserv - ok
16:27:27.0921 0964 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
16:27:27.0921 0964 WZCSVC - ok
16:27:27.0968 0964 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
16:27:27.0968 0964 xmlprov - ok
16:27:27.0984 0964 ================ Scan global ===============================
16:27:28.0031 0964 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
16:27:28.0062 0964 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:27:28.0078 0964 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:27:28.0093 0964 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
16:27:28.0093 0964 [Global] - ok
16:27:28.0093 0964 ================ Scan MBR ==================================
16:27:28.0109 0964 [ 4975BDBEDA8A3AFB2AEADEFC06CE9E12 ] \Device\Harddisk0\DR0
16:27:28.0250 0964 \Device\Harddisk0\DR0 - ok
16:27:28.0250 0964 ================ Scan VBR ==================================
16:27:28.0265 0964 [ DD55B00384CAA514AD015B417D2AA37C ] \Device\Harddisk0\DR0\Partition1
16:27:28.0265 0964 \Device\Harddisk0\DR0\Partition1 - ok
16:27:28.0265 0964 ================ Scan active images ========================
16:27:28.0281 0964 [ E28726B72C46821A28830E077D39A55B ] C:\WINDOWS\system32\drivers\videoprt.sys
16:27:28.0281 0964 C:\WINDOWS\system32\drivers\videoprt.sys - ok
16:27:28.0281 0964 [ 2AAE7BE67911F4AEC9AD28E9CFB9096F ] C:\WINDOWS\system32\drivers\igxpmp32.sys
16:27:28.0281 0964 C:\WINDOWS\system32\drivers\igxpmp32.sys - ok
16:27:28.0281 0964 [ 791912E524CC2CC6F50B5F2B52D1EB71 ] C:\WINDOWS\system32\drivers\usbport.sys
16:27:28.0281 0964 C:\WINDOWS\system32\drivers\usbport.sys - ok
16:27:28.0296 0964 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] C:\WINDOWS\system32\drivers\usbuhci.sys
16:27:28.0296 0964 C:\WINDOWS\system32\drivers\usbuhci.sys - ok
16:27:28.0296 0964 [ 573C7D0A32852B48F3058CFD8026F511 ] C:\WINDOWS\system32\drivers\hdaudbus.sys
16:27:28.0296 0964 C:\WINDOWS\system32\drivers\hdaudbus.sys - ok
16:27:28.0296 0964 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] C:\WINDOWS\system32\drivers\usbehci.sys
16:27:28.0296 0964 C:\WINDOWS\system32\drivers\usbehci.sys - ok
16:27:28.0296 0964 [ E951D262C9144C05D3B21CCDDA6C7E47 ] C:\WINDOWS\system32\drivers\b57xp32.sys
16:27:28.0296 0964 C:\WINDOWS\system32\drivers\b57xp32.sys - ok
16:27:28.0312 0964 [ 4A0B06AA8943C1E332520F7440C0AA30 ] C:\WINDOWS\system32\drivers\i8042prt.sys
16:27:28.0312 0964 C:\WINDOWS\system32\drivers\i8042prt.sys - ok
16:27:28.0312 0964 [ 463C1EC80CD17420A542B7F36A36F128 ] C:\WINDOWS\system32\drivers\kbdclass.sys
16:27:28.0312 0964 C:\WINDOWS\system32\drivers\kbdclass.sys - ok
16:27:28.0312 0964 [ 35C9E97194C8CFB8430125F8DBC34D04 ] C:\WINDOWS\system32\drivers\mouclass.sys
16:27:28.0312 0964 C:\WINDOWS\system32\drivers\mouclass.sys - ok
16:27:28.0328 0964 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] C:\WINDOWS\system32\drivers\parport.sys
16:27:28.0328 0964 C:\WINDOWS\system32\drivers\parport.sys - ok
16:27:28.0328 0964 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] C:\WINDOWS\system32\drivers\serial.sys
16:27:28.0328 0964 C:\WINDOWS\system32\drivers\serial.sys - ok
16:27:28.0328 0964 [ 1F4260CC5B42272D71F79E570A27A4FE ] C:\WINDOWS\system32\drivers\cdrom.sys
16:27:28.0328 0964 C:\WINDOWS\system32\drivers\cdrom.sys - ok
16:27:28.0343 0964 [ 0753515F78DF7F271A5E61C20BCD36A1 ] C:\WINDOWS\system32\drivers\ks.sys
16:27:28.0343 0964 C:\WINDOWS\system32\drivers\ks.sys - ok
16:27:28.0343 0964 [ F828DD7E1419B6653894A8F97A0094C5 ] C:\WINDOWS\system32\drivers\redbook.sys
16:27:28.0343 0964 C:\WINDOWS\system32\drivers\redbook.sys - ok
16:27:28.0343 0964 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] C:\WINDOWS\system32\drivers\serenum.sys
16:27:28.0343 0964 C:\WINDOWS\system32\drivers\serenum.sys - ok
16:27:28.0359 0964 [ D9F724AA26C010A217C97606B160ED68 ] C:\WINDOWS\system32\drivers\audstub.sys
16:27:28.0359 0964 C:\WINDOWS\system32\drivers\audstub.sys - ok
16:27:28.0359 0964 [ 8C953733D8F36EB2133F5BB58808B66B ] C:\WINDOWS\system32\drivers\intelppm.sys
16:27:28.0359 0964 C:\WINDOWS\system32\drivers\intelppm.sys - ok
16:27:28.0359 0964 [ 0109C4F3850DFBAB279542515386AE22 ] C:\WINDOWS\system32\drivers\ndistapi.sys
16:27:28.0359 0964 C:\WINDOWS\system32\drivers\ndistapi.sys - ok
16:27:28.0375 0964 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] C:\WINDOWS\system32\drivers\rasl2tp.sys
16:27:28.0375 0964 C:\WINDOWS\system32\drivers\rasl2tp.sys - ok
16:27:28.0375 0964 [ C42584FD66CE9E17403AEBCA199F7BDB ] C:\WINDOWS\system32\drivers\wmiacpi.sys
16:27:28.0375 0964 C:\WINDOWS\system32\drivers\wmiacpi.sys - ok
16:27:28.0375 0964 [ 5526CFEBB619F7F763BD6A2E1B618078 ] C:\WINDOWS\system32\drivers\ndiswan.sys
16:27:28.0375 0964 C:\WINDOWS\system32\drivers\ndiswan.sys - ok
16:27:28.0390 0964 [ 5BC962F2654137C9909C3D4603587DEE ] C:\WINDOWS\system32\drivers\raspppoe.sys
16:27:28.0390 0964 C:\WINDOWS\system32\drivers\raspppoe.sys - ok
16:27:28.0390 0964 [ 0539D5E53587F82D1B4FD74C5BE205CF ] C:\WINDOWS\system32\drivers\tdi.sys
16:27:28.0390 0964 C:\WINDOWS\system32\drivers\tdi.sys - ok
16:27:28.0390 0964 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] C:\WINDOWS\system32\drivers\msgpc.sys
16:27:28.0390 0964 C:\WINDOWS\system32\drivers\msgpc.sys - ok
16:27:28.0406 0964 [ 09298EC810B07E5D582CB3A3F9255424 ] C:\WINDOWS\system32\drivers\psched.sys
16:27:28.0406 0964 C:\WINDOWS\system32\drivers\psched.sys - ok
16:27:28.0406 0964 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] C:\WINDOWS\system32\drivers\raspptp.sys
16:27:28.0406 0964 C:\WINDOWS\system32\drivers\raspptp.sys - ok
16:27:28.0406 0964 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] C:\WINDOWS\system32\drivers\ptilink.sys
16:27:28.0406 0964 C:\WINDOWS\system32\drivers\ptilink.sys - ok
16:27:28.0421 0964 [ FDBB1D60066FCFBB7452FD8F9829B242 ] C:\WINDOWS\system32\drivers\raspti.sys
16:27:28.0421 0964 C:\WINDOWS\system32\drivers\raspti.sys - ok
16:27:28.0421 0964 [ 15CABD0F7C00C47C70124907916AF3F1 ] C:\WINDOWS\system32\drivers\rdpdr.sys
16:27:28.0421 0964 C:\WINDOWS\system32\drivers\rdpdr.sys - ok
16:27:28.0421 0964 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] C:\WINDOWS\system32\drivers\swenum.sys
16:27:28.0421 0964 C:\WINDOWS\system32\drivers\swenum.sys - ok
16:27:28.0437 0964 [ 88155247177638048422893737429D9E ] C:\WINDOWS\system32\drivers\termdd.sys
16:27:28.0437 0964 C:\WINDOWS\system32\drivers\termdd.sys - ok
16:27:28.0437 0964 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] C:\WINDOWS\system32\drivers\mssmbios.sys
16:27:28.0437 0964 C:\WINDOWS\system32\drivers\mssmbios.sys - ok
16:27:28.0437 0964 [ 9282BD12DFB069D3889EB3FCC1000A9B ] C:\WINDOWS\system32\drivers\ndproxy.sys
16:27:28.0437 0964 C:\WINDOWS\system32\drivers\ndproxy.sys - ok
16:27:28.0453 0964 [ 596EB39B50D6EBD9B734DC4AE0544693 ] C:\WINDOWS\system32\drivers\usbd.sys
16:27:28.0453 0964 C:\WINDOWS\system32\drivers\usbd.sys - ok
16:27:28.0453 0964 [ 1AB3CDDE553B6E064D2E754EFE20285C ] C:\WINDOWS\system32\drivers\usbhub.sys
16:27:28.0453 0964 C:\WINDOWS\system32\drivers\usbhub.sys - ok
16:27:28.0453 0964 [ 6CB08593487F5701D2D2254E693EAFCE ] C:\WINDOWS\system32\drivers\drmk.sys
16:27:28.0453 0964 C:\WINDOWS\system32\drivers\drmk.sys - ok
16:27:28.0468 0964 [ E82A496C3961EFC6828B508C310CE98F ] C:\WINDOWS\system32\drivers\portcls.sys
16:27:28.0468 0964 C:\WINDOWS\system32\drivers\portcls.sys - ok
16:27:28.0468 0964 [ A07D4742186B3CC41B0EDDECBBCEC34A ] C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:27:28.0468 0964 C:\WINDOWS\system32\drivers\RtkHDAud.sys - ok
16:27:28.0468 0964 [ DB22E7062FD88CDD1CC8C99CE59E6B2B ] C:\WINDOWS\system32\drivers\avgtpx86.sys
16:27:28.0468 0964 C:\WINDOWS\system32\drivers\avgtpx86.sys - ok
16:27:28.0484 0964 [ DA1F27D85E0D1525F6621372E7B685E9 ] C:\WINDOWS\system32\drivers\beep.sys
16:27:28.0484 0964 C:\WINDOWS\system32\drivers\beep.sys - ok
16:27:28.0484 0964 [ C1B486A7658353D33A10CC15211A873B ] C:\WINDOWS\system32\drivers\cdaudio.sys
16:27:28.0484 0964 C:\WINDOWS\system32\drivers\cdaudio.sys - ok
16:27:28.0484 0964 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] C:\WINDOWS\system32\drivers\fs_rec.sys
16:27:28.0484 0964 C:\WINDOWS\system32\drivers\fs_rec.sys - ok
16:27:28.0500 0964 [ 96ECCF28FDBF1B2CC12725818A63628D ] C:\WINDOWS\system32\drivers\hidparse.sys
16:27:28.0500 0964 C:\WINDOWS\system32\drivers\hidparse.sys - ok
16:27:28.0500 0964 [ 9EF487A186DEA361AA06913A75B3FA99 ] C:\WINDOWS\system32\drivers\kbdhid.sys
16:27:28.0500 0964 C:\WINDOWS\system32\drivers\kbdhid.sys - ok
16:27:28.0500 0964 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] C:\WINDOWS\system32\drivers\null.sys
16:27:28.0500 0964 C:\WINDOWS\system32\drivers\null.sys - ok
16:27:28.0515 0964 [ 8E6B8C671615D126FDC553D1E2DE5562 ] C:\WINDOWS\system32\drivers\sfloppy.sys
16:27:28.0515 0964 C:\WINDOWS\system32\drivers\sfloppy.sys - ok
16:27:28.0515 0964 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] C:\WINDOWS\system32\drivers\vga.sys
16:27:28.0515 0964 C:\WINDOWS\system32\drivers\vga.sys - ok
16:27:28.0515 0964 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] C:\WINDOWS\system32\drivers\mnmdd.sys
16:27:28.0515 0964 C:\WINDOWS\system32\drivers\mnmdd.sys - ok
16:27:28.0515 0964 [ 4912D5B403614CE99C28420F75353332 ] C:\WINDOWS\system32\drivers\rdpcdd.sys
16:27:28.0515 0964 C:\WINDOWS\system32\drivers\rdpcdd.sys - ok
16:27:28.0531 0964 [ 23C74D75E36E7158768DD63D92789A91 ] C:\WINDOWS\system32\drivers\ipsec.sys
16:27:28.0531 0964 C:\WINDOWS\system32\drivers\ipsec.sys - ok
16:27:28.0531 0964 [ C941EA2454BA8350021D774DAF0F1027 ] C:\WINDOWS\system32\drivers\msfs.sys
16:27:28.0531 0964 C:\WINDOWS\system32\drivers\msfs.sys - ok
16:27:28.0531 0964 [ 3182D64AE053D6FB034F44B6DEF8034A ] C:\WINDOWS\system32\drivers\npfs.sys
16:27:28.0531 0964 C:\WINDOWS\system32\drivers\npfs.sys - ok
16:27:28.0546 0964 [ FE0D99D6F31E4FAD8159F690D68DED9C ] C:\WINDOWS\system32\drivers\rasacd.sys
16:27:28.0546 0964 C:\WINDOWS\system32\drivers\rasacd.sys - ok
16:27:28.0546 0964 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] C:\WINDOWS\system32\drivers\tcpip.sys
16:27:28.0546 0964 C:\WINDOWS\system32\drivers\tcpip.sys - ok
16:27:28.0546 0964 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] C:\WINDOWS\system32\drivers\netbt.sys
16:27:28.0546 0964 C:\WINDOWS\system32\drivers\netbt.sys - ok
16:27:28.0562 0964 [ CC748EA12C6EFFDE940EE98098BF96BB ] C:\WINDOWS\system32\drivers\ipnat.sys
16:27:28.0562 0964 C:\WINDOWS\system32\drivers\ipnat.sys - ok
16:27:28.0562 0964 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] C:\WINDOWS\system32\drivers\ws2ifsl.sys
16:27:28.0562 0964 C:\WINDOWS\system32\drivers\ws2ifsl.sys - ok
16:27:28.0562 0964 [ 39763504067962108505BFF25F024345 ] C:\Program Files\SUPERAntiSpyware\sasdifsv.sys
16:27:28.0562 0964 C:\Program Files\SUPERAntiSpyware\sasdifsv.sys - ok
16:27:28.0578 0964 [ 77B9FC20084B48408AD3E87570EB4A85 ] C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
16:27:28.0578 0964 C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS - ok
16:27:28.0578 0964 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] C:\WINDOWS\system32\drivers\afd.sys
16:27:28.0578 0964 C:\WINDOWS\system32\drivers\afd.sys - ok
16:27:28.0578 0964 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] C:\WINDOWS\system32\drivers\netbios.sys
16:27:28.0578 0964 C:\WINDOWS\system32\drivers\netbios.sys - ok
16:27:28.0593 0964 [ C90018BAFDC7098619A4A95B046B30F3 ] C:\WINDOWS\system32\drivers\p3.sys
16:27:28.0593 0964 C:\WINDOWS\system32\drivers\p3.sys - ok
16:27:28.0593 0964 [ 7AD224AD1A1437FE28D89CF22B17780A ] C:\WINDOWS\system32\drivers\rdbss.sys
16:27:28.0593 0964 C:\WINDOWS\system32\drivers\rdbss.sys - ok
16:27:28.0593 0964 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] C:\WINDOWS\system32\drivers\mrxsmb.sys
16:27:28.0593 0964 C:\WINDOWS\system32\drivers\mrxsmb.sys - ok
16:27:28.0609 0964 [ 083A052659F5310DD8B6A6CB05EDCF8E ] C:\WINDOWS\system32\drivers\imapi.sys
16:27:28.0609 0964 C:\WINDOWS\system32\drivers\imapi.sys - ok
16:27:28.0609 0964 [ F7EABCA8375EA2DC6F35C4BCA4757515 ] C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
16:27:28.0609 0964 C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys - ok
16:27:28.0609 0964 [ D45926117EB9FA946A6AF572FBE1CAA3 ] C:\WINDOWS\system32\drivers\fips.sys
16:27:28.0609 0964 C:\WINDOWS\system32\drivers\fips.sys - ok
16:27:28.0625 0964 [ F8F0D25CA553E39DDE485D8FC7FCCE89 ] C:\WINDOWS\system32\ntdll.dll
16:27:28.0625 0964 C:\WINDOWS\system32\ntdll.dll - ok
16:27:28.0625 0964 [ 5F816C1F539266D2D4C78694239DA0B5 ] C:\WINDOWS\system32\smss.exe
16:27:28.0625 0964 C:\WINDOWS\system32\smss.exe - ok
16:27:28.0625 0964 [ 23043C91A0F9DFB4B9E9F87B680863B4 ] C:\WINDOWS\system32\autochk.exe
16:27:28.0625 0964 C:\WINDOWS\system32\autochk.exe - ok
16:27:28.0640 0964 [ 9DD07AF82244867CA36681EA2D29CE79 ] C:\WINDOWS\system32\sfcfiles.dll
16:27:28.0640 0964 C:\WINDOWS\system32\sfcfiles.dll - ok
16:27:28.0640 0964 [ 1AF592532532A402ED7C060F6954004F ] C:\WINDOWS\system32\drivers\hidclass.sys
16:27:28.0640 0964 C:\WINDOWS\system32\drivers\hidclass.sys - ok
16:27:28.0640 0964 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] C:\WINDOWS\system32\drivers\hidusb.sys
16:27:28.0640 0964 C:\WINDOWS\system32\drivers\hidusb.sys - ok
16:27:28.0656 0964 [ C885B02847F5D2FD45A24E219ED93B32 ] C:\WINDOWS\system32\drivers\cdfs.sys
16:27:28.0656 0964 C:\WINDOWS\system32\drivers\cdfs.sys - ok
16:27:28.0656 0964 [ B1C303E17FB9D46E87A98E4BA6769685 ] C:\WINDOWS\system32\drivers\mouhid.sys
16:27:28.0656 0964 C:\WINDOWS\system32\drivers\mouhid.sys - ok
16:27:28.0656 0964 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] C:\WINDOWS\system32\drivers\atapi.sys
16:27:28.0656 0964 C:\WINDOWS\system32\drivers\atapi.sys - ok
16:27:28.0671 0964 [ 2F31B7F954BED437F2C75026C65CAF7B ] C:\WINDOWS\system32\drivers\wmilib.sys
16:27:28.0671 0964 C:\WINDOWS\system32\drivers\wmilib.sys - ok
16:27:28.0671 0964 [ FE97D0343ACFDEBDD578FC67CC91FA87 ] C:\WINDOWS\system32\drivers\dxapi.sys
16:27:28.0671 0964 C:\WINDOWS\system32\drivers\dxapi.sys - ok
16:27:28.0671 0964 [ 9A10AACBFDC4922715375FB4065EC930 ] C:\WINDOWS\system32\watchdog.sys
16:27:28.0671 0964 C:\WINDOWS\system32\watchdog.sys - ok
16:27:28.0687 0964 [ DFF851C4D8977A26F95B929A0B89BB5D ] C:\WINDOWS\system32\win32k.sys
16:27:28.0687 0964 C:\WINDOWS\system32\win32k.sys - ok
16:27:28.0687 0964 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
16:27:28.0687 0964 C:\WINDOWS\system32\basesrv.dll - ok
16:27:28.0687 0964 [ DD40363ABAD230A84C5E2178B11EFA88 ] C:\WINDOWS\system32\csrsrv.dll
16:27:28.0687 0964 C:\WINDOWS\system32\csrsrv.dll - ok
16:27:28.0703 0964 [ 44F275C64738EA2056E3D9580C23B60F ] C:\WINDOWS\system32\csrss.exe
16:27:28.0703 0964 C:\WINDOWS\system32\csrss.exe - ok
16:27:28.0703 0964 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:27:28.0703 0964 C:\WINDOWS\system32\winsrv.dll - ok
16:27:28.0703 0964 [ 8B1F3320AEBB536E021A5014409862DE ] C:\WINDOWS\system32\gdi32.dll
16:27:28.0703 0964 C:\WINDOWS\system32\gdi32.dll - ok
16:27:28.0718 0964 [ B921FB870C9AC0D509B2CCABBBBE95F3 ] C:\WINDOWS\system32\kernel32.dll
16:27:28.0718 0964 C:\WINDOWS\system32\kernel32.dll - ok
16:27:28.0718 0964 [ B26B135FF1B9F60C9388B4A7D16F600B ] C:\WINDOWS\system32\user32.dll
16:27:28.0718 0964 C:\WINDOWS\system32\user32.dll - ok
16:27:28.0718 0964 [ AC7280566A7BB85CB3291F04DDC1198E ] C:\WINDOWS\system32\drivers\dxg.sys
16:27:28.0718 0964 C:\WINDOWS\system32\drivers\dxg.sys - ok
16:27:28.0718 0964 [ A73F5D6705B1D820C19B18782E176EFD ] C:\WINDOWS\system32\drivers\dxgthk.sys
16:27:28.0718 0964 C:\WINDOWS\system32\drivers\dxgthk.sys - ok
16:27:28.0734 0964 [ E95967EB24F5036998947E771E5BE734 ] C:\WINDOWS\system32\igxpgd32.dll
16:27:28.0734 0964 C:\WINDOWS\system32\igxpgd32.dll - ok
16:27:28.0734 0964 [ 9326C80A449CE799977207138B9F7FEE ] C:\WINDOWS\system32\igxprd32.dll
16:27:28.0734 0964 C:\WINDOWS\system32\igxprd32.dll - ok
16:27:28.0734 0964 [ ECB7591870F8BFB1A4C17B718AD5A4AA ] C:\WINDOWS\system32\vga.dll
16:27:28.0734 0964 C:\WINDOWS\system32\vga.dll - ok
16:27:28.0750 0964 [ EE34119CD544A50A0D5F6E0750DAA389 ] C:\WINDOWS\system32\igxpdv32.dll
16:27:28.0750 0964 C:\WINDOWS\system32\igxpdv32.dll - ok
16:27:28.0750 0964 [ 2680FC3AA485925DCFE9ADF853FCF267 ] C:\WINDOWS\system32\igxpdx32.dll
16:27:28.0750 0964 C:\WINDOWS\system32\igxpdx32.dll - ok
16:27:28.0750 0964 [ ED0EF0A136DEC83DF69F04118870003E ] C:\WINDOWS\system32\winlogon.exe
16:27:28.0750 0964 C:\WINDOWS\system32\winlogon.exe - ok
16:27:28.0765 0964 [ E76F8807070ED04E7408A86D6D3A6137 ] C:\WINDOWS\system32\advapi32.dll
16:27:28.0765 0964 C:\WINDOWS\system32\advapi32.dll - ok
16:27:28.0765 0964 [ D4502F124289A31976130CCCB014C9AA ] C:\WINDOWS\system32\rpcrt4.dll
16:27:28.0765 0964 C:\WINDOWS\system32\rpcrt4.dll - ok
16:27:28.0765 0964 [ 5357826C8A8DD6A07F17C48BB45BE46E ] C:\WINDOWS\system32\secur32.dll
16:27:28.0765 0964 C:\WINDOWS\system32\secur32.dll - ok
16:27:28.0781 0964 [ 714705F29A917993536A6AB2DEDB0B7F ] C:\WINDOWS\system32\authz.dll
16:27:28.0781 0964 C:\WINDOWS\system32\authz.dll - ok
16:27:28.0781 0964 [ 355EDBB4D412B01F1740C17E3F50FA00 ] C:\WINDOWS\system32\msvcrt.dll
16:27:28.0781 0964 C:\WINDOWS\system32\msvcrt.dll - ok
16:27:28.0781 0964 [ 64416C6E07606720C1ECE6DD374BDFFD ] C:\WINDOWS\system32\crypt32.dll
16:27:28.0781 0964 C:\WINDOWS\system32\crypt32.dll - ok
16:27:28.0796 0964 [ 04D898830DF96A17A20FD35D7590F87E ] C:\WINDOWS\system32\msasn1.dll
16:27:28.0796 0964 C:\WINDOWS\system32\msasn1.dll - ok
16:27:28.0796 0964 [ 013C1148C1EC025596896E093F60F608 ] C:\WINDOWS\system32\nddeapi.dll
16:27:28.0796 0964 C:\WINDOWS\system32\nddeapi.dll - ok
16:27:28.0796 0964 [ 318230E845919255EF3C5D5E1E863631 ] C:\WINDOWS\system32\netapi32.dll
16:27:28.0796 0964 C:\WINDOWS\system32\netapi32.dll - ok
16:27:28.0812 0964 [ FCFA1C55971CC229D353B3A15ACCD995 ] C:\WINDOWS\system32\profmap.dll
16:27:28.0812 0964 C:\WINDOWS\system32\profmap.dll - ok
16:27:28.0812 0964 [ 9CFCB3CA3D83B4EAA133F0644A2C6F31 ] C:\WINDOWS\system32\psapi.dll
16:27:28.0812 0964 C:\WINDOWS\system32\psapi.dll - ok
16:27:28.0812 0964 [ 43D13C80EBEC0135A3611E0F616F179B ] C:\WINDOWS\system32\userenv.dll
16:27:28.0812 0964 C:\WINDOWS\system32\userenv.dll - ok
16:27:28.0828 0964 [ AF11C591F2F4AFF4A6CF699D376F618B ] C:\WINDOWS\system32\regapi.dll
16:27:28.0828 0964 C:\WINDOWS\system32\regapi.dll - ok
16:27:28.0828 0964 [ 24192246760E0E64435522E246B1D6C2 ] C:\WINDOWS\system32\setupapi.dll
16:27:28.0828 0964 C:\WINDOWS\system32\setupapi.dll - ok
16:27:28.0828 0964 [ C7CE131408739B0B3A318BE2D0032719 ] C:\WINDOWS\system32\version.dll
16:27:28.0828 0964 C:\WINDOWS\system32\version.dll - ok
16:27:28.0843 0964 [ 430CEB794F6E6EF8AC86958C242366D6 ] C:\WINDOWS\system32\winsta.dll
16:27:28.0843 0964 C:\WINDOWS\system32\winsta.dll - ok
16:27:28.0843 0964 [ FFC01A72D1C25CCB39F61B202CE60819 ] C:\WINDOWS\system32\imagehlp.dll
16:27:28.0843 0964 C:\WINDOWS\system32\imagehlp.dll - ok
16:27:28.0843 0964 [ 95F5C420E9BDD4C3569602911420A774 ] C:\WINDOWS\system32\wintrust.dll
16:27:28.0843 0964 C:\WINDOWS\system32\wintrust.dll - ok
16:27:28.0843 0964 [ 0DA85218E92526972A821587E6A8BF8F ] C:\WINDOWS\system32\imm32.dll
16:27:28.0843 0964 C:\WINDOWS\system32\imm32.dll - ok
16:27:28.0859 0964 [ 9789E95E1D88EEB4B922BF3EA7779C28 ] C:\WINDOWS\system32\ws2help.dll
16:27:28.0859 0964 C:\WINDOWS\system32\ws2help.dll - ok
16:27:28.0859 0964 [ 2CCC474EB85CEAA3E1FA1726580A3E5A ] C:\WINDOWS\system32\ws2_32.dll
16:27:28.0859 0964 C:\WINDOWS\system32\ws2_32.dll - ok
16:27:28.0859 0964 [ 56C5B179FE3308B655EB6208C3256FEC ] C:\WINDOWS\system32\kbdus.dll
16:27:28.0859 0964 C:\WINDOWS\system32\kbdus.dll - ok
16:27:28.0875 0964 [ D7B7A57C0E57C836F18CF12A4C62A1CA ] C:\WINDOWS\system32\msgina.dll
16:27:28.0875 0964 C:\WINDOWS\system32\msgina.dll - ok
16:27:28.0875 0964 [ 93AFB83FBC1F9443CAC722FCA63D73BF ] C:\WINDOWS\system32\comctl32.dll
16:27:28.0875 0964 C:\WINDOWS\system32\comctl32.dll - ok
16:27:28.0875 0964 [ 86987A5000DFA3EBE2275C0456BCF2FE ] C:\WINDOWS\system32\comdlg32.dll
16:27:28.0875 0964 C:\WINDOWS\system32\comdlg32.dll - ok
16:27:28.0890 0964 [ 40B0F98BAD16AD5DEF894E88C3EF8014 ] C:\WINDOWS\system32\odbc32.dll
16:27:28.0890 0964 C:\WINDOWS\system32\odbc32.dll - ok
16:27:28.0890 0964 [ 6843D54BC4A40CC8C5741AF750233D10 ] C:\WINDOWS\system32\shell32.dll
16:27:28.0890 0964 C:\WINDOWS\system32\shell32.dll - ok
16:27:28.0906 0964 [ C448A248B743F5FB935C787A5D97268B ] C:\WINDOWS\system32\shlwapi.dll
16:27:28.0906 0964 C:\WINDOWS\system32\shlwapi.dll - ok
16:27:28.0906 0964 [ 694503348B586E99D56C0E30AB5B3EF8 ] C:\WINDOWS\system32\sxs.dll
16:27:28.0906 0964 C:\WINDOWS\system32\sxs.dll - ok
16:27:28.0906 0964 [ 736B12B725AEB2B07F0241A9F680CB10 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
16:27:28.0906 0964 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll - ok
16:27:28.0906 0964 [ 6B7C6B32F8E84D56C6260D684019FEA2 ] C:\WINDOWS\system32\odbcint.dll
16:27:28.0906 0964 C:\WINDOWS\system32\odbcint.dll - ok
16:27:28.0921 0964 [ 99BC0B50F511924348BE19C7C7313BBF ] C:\WINDOWS\system32\shsvcs.dll
16:27:28.0921 0964 C:\WINDOWS\system32\shsvcs.dll - ok
16:27:28.0921 0964 [ 6BAD1BED9872E62049E487FB91AE2F3A ] C:\WINDOWS\system32\ole32.dll
16:27:28.0921 0964 C:\WINDOWS\system32\ole32.dll - ok
16:27:28.0921 0964 [ 96E1C926F22EE1BFBAE82901A35F6BF3 ] C:\WINDOWS\system32\sfc.dll
16:27:28.0921 0964 C:\WINDOWS\system32\sfc.dll - ok
16:27:28.0937 0964 [ 6B5DB6789177A4FD0DEBC248041D0739 ] C:\WINDOWS\system32\sfc_os.dll
16:27:28.0937 0964 C:\WINDOWS\system32\sfc_os.dll - ok
16:27:28.0937 0964 [ CF492D7E9AF1C628B3536D20EF6F5CC7 ] C:\WINDOWS\system32\apphelp.dll
16:27:28.0937 0964 C:\WINDOWS\system32\apphelp.dll - ok
16:27:28.0937 0964 [ BF2466B3E18E970D8A976FB95FC1CA85 ] C:\WINDOWS\system32\lsass.exe
16:27:28.0937 0964 C:\WINDOWS\system32\lsass.exe - ok
16:27:28.0953 0964 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
16:27:28.0953 0964 C:\WINDOWS\system32\services.exe - ok
16:27:28.0953 0964 [ E20B95BAEDB550F32DD489265C1DA1F6 ] C:\WINDOWS\system32\drivers\wanarp.sys
16:27:28.0953 0964 C:\WINDOWS\system32\drivers\wanarp.sys - ok
16:27:28.0953 0964 [ BD31DC6DBE9333C4FBD4BDF0899F2160 ] C:\WINDOWS\system32\lsasrv.dll
16:27:28.0953 0964 C:\WINDOWS\system32\lsasrv.dll - ok
16:27:28.0968 0964 [ EC29A79F1E76DC509E24D401F29D0678 ] C:\WINDOWS\system32\ncobjapi.dll
16:27:28.0968 0964 C:\WINDOWS\system32\ncobjapi.dll - ok
16:27:28.0968 0964 [ F404830F3CD9BF8F2515E489C0CDA297 ] C:\WINDOWS\system32\msvcp60.dll
16:27:28.0968 0964 C:\WINDOWS\system32\msvcp60.dll - ok
16:27:28.0968 0964 [ B24A42A413E694AD73FDFB7FBD492C31 ] C:\WINDOWS\system32\scesrv.dll
16:27:28.0968 0964 C:\WINDOWS\system32\scesrv.dll - ok
16:27:28.0984 0964 [ 389496118B3B03C2328024AF320132AC ] C:\WINDOWS\system32\dnsapi.dll
16:27:28.0984 0964 C:\WINDOWS\system32\dnsapi.dll - ok
16:27:28.0984 0964 [ DD7BD97FB8BD800963789158A5E4B41D ] C:\WINDOWS\system32\mpr.dll
16:27:28.0984 0964 C:\WINDOWS\system32\mpr.dll - ok
16:27:28.0984 0964 [ EC4C0D9BFD9F7E33F8B395AD54E13063 ] C:\WINDOWS\system32\ntdsapi.dll
16:27:28.0984 0964 C:\WINDOWS\system32\ntdsapi.dll - ok
16:27:29.0000 0964 [ 2EDFC2A8893435723AD80481803C6D5C ] C:\WINDOWS\system32\umpnpmgr.dll
16:27:29.0000 0964 C:\WINDOWS\system32\umpnpmgr.dll - ok
16:27:29.0000 0964 [ 1F03103598BD817B1078DAB1326DDE11 ] C:\WINDOWS\system32\shimeng.dll
16:27:29.0000 0964 C:\WINDOWS\system32\shimeng.dll - ok
16:27:29.0000 0964 [ 0492CF5870F0E616B0C71695A433D162 ] C:\WINDOWS\system32\wldap32.dll
16:27:29.0000 0964 C:\WINDOWS\system32\wldap32.dll - ok
16:27:29.0015 0964 [ EA9EE60B408878E5F2012F9C783836DB ] C:\WINDOWS\AppPatch\acadproc.dll
16:27:29.0015 0964 C:\WINDOWS\AppPatch\acadproc.dll - ok
16:27:29.0015 0964 [ 8329A39D5A402A75A74301D6A62ECDA1 ] C:\WINDOWS\system32\samlib.dll
16:27:29.0015 0964 C:\WINDOWS\system32\samlib.dll - ok
16:27:29.0015 0964 [ F05B8CDB7FE0E55DCCFB1D946CE80064 ] C:\WINDOWS\system32\samsrv.dll
16:27:29.0015 0964 C:\WINDOWS\system32\samsrv.dll - ok
16:27:29.0031 0964 [ 17A1D675C12BBF80CAAC54A4855C41D0 ] C:\WINDOWS\system32\cryptdll.dll
16:27:29.0031 0964 C:\WINDOWS\system32\cryptdll.dll - ok
16:27:29.0031 0964 [ 310C15FD8358B2C4CD7A5B98A112883F ] C:\WINDOWS\AppPatch\acgenral.dll
16:27:29.0031 0964 C:\WINDOWS\AppPatch\acgenral.dll - ok
16:27:29.0031 0964 [ 1B2BE5777F69A71778F52FFEE1C798D6 ] C:\WINDOWS\system32\oleaut32.dll
16:27:29.0031 0964 C:\WINDOWS\system32\oleaut32.dll - ok
16:27:29.0031 0964 [ 4A953F13942867BA8FB41F141EC1B80C ] C:\WINDOWS\system32\winmm.dll
16:27:29.0031 0964 C:\WINDOWS\system32\winmm.dll - ok
16:27:29.0046 0964 [ 2098AB52BD5316E59AA36F3437B13BE6 ] C:\WINDOWS\system32\msacm32.dll
16:27:29.0046 0964 C:\WINDOWS\system32\msacm32.dll - ok
16:27:29.0046 0964 [ 7A2CC3719B255E6B5D74396183B7715B ] C:\WINDOWS\system32\uxtheme.dll
16:27:29.0046 0964 C:\WINDOWS\system32\uxtheme.dll - ok
16:27:29.0046 0964 [ F24B12786D60A17008319E3F2AEE7799 ] C:\WINDOWS\system32\msapsspc.dll
16:27:29.0046 0964 C:\WINDOWS\system32\msapsspc.dll - ok
16:27:29.0062 0964 [ 7A660EDC0757849DF5F8706FB6E9F740 ] C:\WINDOWS\system32\msvcrt40.dll
16:27:29.0062 0964 C:\WINDOWS\system32\msvcrt40.dll - ok
16:27:29.0062 0964 [ 3D76DD0CBC536E0F8C45D23ED230BEB2 ] C:\WINDOWS\system32\digest.dll
16:27:29.0062 0964 C:\WINDOWS\system32\digest.dll - ok
16:27:29.0062 0964 [ 0F64207B49390C8063C36AE7CBF9C2DB ] C:\WINDOWS\system32\schannel.dll
16:27:29.0062 0964 C:\WINDOWS\system32\schannel.dll - ok
16:27:29.0078 0964 [ A4388DF80E52695AE92EE5F3F61F1619 ] C:\WINDOWS\system32\msnsspc.dll
16:27:29.0078 0964 C:\WINDOWS\system32\msnsspc.dll - ok
16:27:29.0078 0964 [ 5733177BCF16EE78B99543C9B0AB81EA ] C:\WINDOWS\system32\msctfime.ime
16:27:29.0078 0964 C:\WINDOWS\system32\msctfime.ime - ok
16:27:29.0078 0964 [ C6BB1D1500DB4A0E224CB65E6C7E8A80 ] C:\WINDOWS\system32\msprivs.dll
16:27:29.0078 0964 C:\WINDOWS\system32\msprivs.dll - ok
16:27:29.0093 0964 [ 1E644E3533DCE2B580A663AE1ACBD539 ] C:\WINDOWS\system32\atmfd.dll
16:27:29.0093 0964 C:\WINDOWS\system32\atmfd.dll - ok
16:27:29.0093 0964 [ A525C96C51D55111FDF3BEA9FFFFC7AE ] C:\WINDOWS\system32\kerberos.dll
16:27:29.0093 0964 C:\WINDOWS\system32\kerberos.dll - ok
16:27:29.0093 0964 [ 517561A1113B04E51D936CD018DE1C1F ] C:\WINDOWS\system32\msv1_0.dll
16:27:29.0093 0964 C:\WINDOWS\system32\msv1_0.dll - ok
16:27:29.0109 0964 [ AF07DC9B7CC455629E732340C7B15F3A ] C:\WINDOWS\system32\iphlpapi.dll
16:27:29.0109 0964 C:\WINDOWS\system32\iphlpapi.dll - ok
16:27:29.0109 0964 [ 1B7F071C51B77C272875C3A23E1E4550 ] C:\WINDOWS\system32\netlogon.dll
16:27:29.0109 0964 C:\WINDOWS\system32\netlogon.dll - ok
16:27:29.0109 0964 [ 54AF4B1D5459500EF0937F6D33B1914F ] C:\WINDOWS\system32\w32time.dll
16:27:29.0109 0964 C:\WINDOWS\system32\w32time.dll - ok
16:27:29.0125 0964 [ 3AAF9B35939FF9E58CCD18D41655C2FC ] C:\WINDOWS\system32\wdigest.dll
16:27:29.0125 0964 C:\WINDOWS\system32\wdigest.dll - ok
16:27:29.0125 0964 [ 54DAE3EA34802B4ED9AE1C6B1209FA56 ] C:\WINDOWS\system32\rsaenh.dll
16:27:29.0125 0964 C:\WINDOWS\system32\rsaenh.dll - ok
16:27:29.0125 0964 [ 02988B904C386B500CD08639C4C20EEA ] C:\WINDOWS\system32\winscard.dll
16:27:29.0125 0964 C:\WINDOWS\system32\winscard.dll - ok
16:27:29.0140 0964 [ 0E2735281FBB9A764D5584C2A5DCBA59 ] C:\WINDOWS\system32\wtsapi32.dll
16:27:29.0140 0964 C:\WINDOWS\system32\wtsapi32.dll - ok
16:27:29.0140 0964 [ A86BB5E61BF3E39B62AB4C7E7085A084 ] C:\WINDOWS\system32\scecli.dll
16:27:29.0140 0964 C:\WINDOWS\system32\scecli.dll - ok
16:27:29.0140 0964 [ C6D0B4BF12036D1EE092D2F5EF436FC7 ] C:\Program Files\Emsisoft Anti-Malware\a2service.exe
16:27:29.0140 0964 C:\Program Files\Emsisoft Anti-Malware\a2service.exe - ok
16:27:29.0140 0964 [ AFFC87E2501FCE8F09D4C10BA6421CCF ] C:\WINDOWS\system32\msimg32.dll
16:27:29.0140 0964 C:\WINDOWS\system32\msimg32.dll - ok
16:27:29.0156 0964 [ BD83ABA61E8ACCC8D9FFB869F29418CE ] C:\WINDOWS\system32\winspool.drv
16:27:29.0156 0964 C:\WINDOWS\system32\winspool.drv - ok
16:27:29.0156 0964 [ AEF53C9AFF3688876D476F36288A56D2 ] C:\Program Files\Emsisoft Anti-Malware\a2engine.dll
16:27:29.0156 0964 C:\Program Files\Emsisoft Anti-Malware\a2engine.dll - ok
16:27:29.0156 0964 [ 1755023407FDE00D9916505A557569D5 ] C:\Program Files\Emsisoft Anti-Malware\bdcore.dll
16:27:29.0156 0964 C:\Program Files\Emsisoft Anti-Malware\bdcore.dll - ok
16:27:29.0156 0964 [ 67156D5A9AC356DC99D7BCCB388E3316 ] C:\WINDOWS\system32\wsock32.dll
16:27:29.0156 0964 C:\WINDOWS\system32\wsock32.dll - ok
16:27:29.0171 0964 [ 943337D786A56729263071623BBB9DE5 ] C:\WINDOWS\system32\mswsock.dll
16:27:29.0171 0964 C:\WINDOWS\system32\mswsock.dll - ok
16:27:29.0171 0964 [ 4E6C4FB949FB4D0952F718EF9D87C204 ] C:\Program Files\Emsisoft Anti-Malware\quarantine.dll
16:27:29.0171 0964 C:\Program Files\Emsisoft Anti-Malware\quarantine.dll - ok
16:27:29.0171 0964 [ 2081A5B5E4ABA206A0A8A1A97DF0FB23 ] C:\WINDOWS\system32\logonui.exe
16:27:29.0171 0964 C:\WINDOWS\system32\logonui.exe - ok
16:27:29.0187 0964 [ 3D41A9326F0376FC73AF961DD23B1FB1 ] C:\WINDOWS\system32\duser.dll
16:27:29.0187 0964 C:\WINDOWS\system32\duser.dll - ok
16:27:29.0187 0964 [ 20200EE3CFE10E9F0C028D8653BE11C6 ] C:\WINDOWS\system32\oleacc.dll
16:27:29.0187 0964 C:\WINDOWS\system32\oleacc.dll - ok
16:27:29.0187 0964 [ 3F00B08A6BD8FAC25DCFF48E9955800F ] C:\Program Files\Emsisoft Anti-Malware\a2core32.dll
16:27:29.0187 0964 C:\Program Files\Emsisoft Anti-Malware\a2core32.dll - ok
16:27:29.0187 0964 [ F137A0CA70003DB20448D540651FA003 ] C:\WINDOWS\system32\clbcatq.dll
16:27:29.0203 0964 C:\WINDOWS\system32\clbcatq.dll - ok
16:27:29.0203 0964 [ EB38F568D21259B410D252A40B39366A ] C:\Program Files\Emsisoft Anti-Malware\a2dix86.dll
16:27:29.0203 0964 C:\Program Files\Emsisoft Anti-Malware\a2dix86.dll - ok
16:27:29.0203 0964 [ 5D43C9A33F18C707BA169AFDA88BDF30 ] C:\WINDOWS\system32\fltlib.dll
16:27:29.0203 0964 C:\WINDOWS\system32\fltlib.dll - ok
16:27:29.0203 0964 [ 1280A158C722FA95A80FB7AEBE78FA7D ] C:\WINDOWS\system32\comres.dll
16:27:29.0203 0964 C:\WINDOWS\system32\comres.dll - ok
16:27:29.0218 0964 [ EC4D3CEF7D1DCF9DCD98A94BDE71E244 ] C:\Program Files\Emsisoft Anti-Malware\a2update.dll
16:27:29.0218 0964 C:\Program Files\Emsisoft Anti-Malware\a2update.dll - ok
16:27:29.0218 0964 [ E5EDBD51476DB5001ABF5C82AE5C3DD1 ] C:\WINDOWS\system32\shgina.dll
16:27:29.0218 0964 C:\WINDOWS\system32\shgina.dll - ok
16:27:29.0218 0964 [ 549290DBC280C887681D7652978DBBE0 ] C:\WINDOWS\system32\ntmarta.dll
16:27:29.0218 0964 C:\WINDOWS\system32\ntmarta.dll - ok
16:27:29.0234 0964 [ 27C6D03BCDB8CFEB96B716F3D8BE3E18 ] C:\WINDOWS\system32\svchost.exe
16:27:29.0234 0964 C:\WINDOWS\system32\svchost.exe - ok
16:27:29.0234 0964 [ 6B27A5C03DFB94B4245739065431322C ] C:\WINDOWS\system32\rpcss.dll
16:27:29.0234 0964 C:\WINDOWS\system32\rpcss.dll - ok
16:27:29.0234 0964 [ 16403217AB6FC5C30C14C6B12098AD4B ] C:\WINDOWS\system32\xpsp2res.dll
16:27:29.0234 0964 C:\WINDOWS\system32\xpsp2res.dll - ok
16:27:29.0234 0964 [ 6D4FEB43EE538FC5428CC7F0565AA656 ] C:\WINDOWS\system32\eventlog.dll
16:27:29.0234 0964 C:\WINDOWS\system32\eventlog.dll - ok
16:27:29.0250 0964 [ 3CB32D3B8CBE79899D63280BB7A83CD9 ] C:\WINDOWS\system32\hnetcfg.dll
16:27:29.0250 0964 C:\WINDOWS\system32\hnetcfg.dll - ok
16:27:29.0250 0964 [ 4E3D06D6E68EEDB52565080F55B460D3 ] C:\WINDOWS\system32\wshtcpip.dll
16:27:29.0250 0964 C:\WINDOWS\system32\wshtcpip.dll - ok
16:27:29.0250 0964 [ D72B9EC3337B247A666F098F3D6B43DE ] C:\WINDOWS\system32\winrnr.dll
16:27:29.0250 0964 C:\WINDOWS\system32\winrnr.dll - ok
16:27:29.0265 0964 [ 6F9BEF24C578D5D6740E080BEDD6A448 ] C:\WINDOWS\system32\rasadhlp.dll
16:27:29.0265 0964 C:\WINDOWS\system32\rasadhlp.dll - ok
16:27:29.0265 0964 [ F927A4434C5028758A842943EF1A3849 ] C:\WINDOWS\system32\drivers\ndisuio.sys
16:27:29.0265 0964 C:\WINDOWS\system32\drivers\ndisuio.sys - ok
16:27:29.0265 0964 [ 515A7FAE2070C2B0242B2353443E2F11 ] C:\WINDOWS\system32\cscdll.dll
16:27:29.0265 0964 C:\WINDOWS\system32\cscdll.dll - ok
16:27:29.0265 0964 [ 5E38D7684A49CACFB752B046357E0589 ] C:\WINDOWS\system32\dhcpcsvc.dll
16:27:29.0265 0964 C:\WINDOWS\system32\dhcpcsvc.dll - ok
16:27:29.0281 0964 [ E2092F0A1D7ABC243F9C2362483D150D ] C:\WINDOWS\system32\dimsntfy.dll
16:27:29.0281 0964 C:\WINDOWS\system32\dimsntfy.dll - ok
16:27:29.0281 0964 [ 02CF580510234E519736559A7F19EA20 ] C:\WINDOWS\system32\WgaLogon.dll
16:27:29.0281 0964 C:\WINDOWS\system32\WgaLogon.dll - ok
16:27:29.0281 0964 [ 2CC34E8BB667EEF78899546E12649196 ] C:\WINDOWS\system32\wlnotify.dll
16:27:29.0281 0964 C:\WINDOWS\system32\wlnotify.dll - ok
16:27:29.0296 0964 [ ACFEE2392503DD5E457363A0510B8BCB ] C:\WINDOWS\system32\msxml3.dll
16:27:29.0296 0964 C:\WINDOWS\system32\msxml3.dll - ok
16:27:29.0296 0964 [ C1E735BA11FE4466C9BD9F541220453A ] C:\Program Files\IBM\Client Access\Shared\cwbnetnt.dll
16:27:29.0296 0964 C:\Program Files\IBM\Client Access\Shared\cwbnetnt.dll - ok
16:27:29.0296 0964 [ 5F7E24FA9EAB896051FFB87F840730D2 ] C:\WINDOWS\system32\dnsrslvr.dll
16:27:29.0296 0964 C:\WINDOWS\system32\dnsrslvr.dll - ok
16:27:29.0296 0964 [ A7E06854EA2A20AEE8EC32BD8C754298 ] C:\WINDOWS\system32\mpnotify.exe
16:27:29.0296 0964 C:\WINDOWS\system32\mpnotify.exe - ok
16:27:29.0312 0964 [ 9A979A47866B6EB4951C8345C244BB2D ] C:\WINDOWS\system32\cwbcore.dll
16:27:29.0312 0964 C:\WINDOWS\system32\cwbcore.dll - ok
16:27:29.0312 0964 [ A7DB739AE99A796D91580147E919CC59 ] C:\WINDOWS\system32\lmhsvc.dll
16:27:29.0312 0964 C:\WINDOWS\system32\lmhsvc.dll - ok
16:27:29.0312 0964 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] C:\WINDOWS\system32\wzcsvc.dll
16:27:29.0312 0964 C:\WINDOWS\system32\wzcsvc.dll - ok
16:27:29.0328 0964 [ F432EB8D1D84A565167107E2EF001473 ] C:\Program Files\Emsisoft Anti-Malware\a2wsc.dll
16:27:29.0328 0964 C:\Program Files\Emsisoft Anti-Malware\a2wsc.dll - ok
16:27:29.0328 0964 [ 205ADD80FF8099B1A8101EB490B933D1 ] C:\WINDOWS\system32\wbem\wbemprox.dll
16:27:29.0328 0964 C:\WINDOWS\system32\wbem\wbemprox.dll - ok
16:27:29.0328 0964 [ D95C71052E5EF63B55997FB31483D02F ] C:\WINDOWS\system32\wbem\wbemcomn.dll
16:27:29.0328 0964 C:\WINDOWS\system32\wbem\wbemcomn.dll - ok
16:27:29.0328 0964 [ E6EF7BC927D9F8F9BA1584BFC39E0C6F ] C:\WINDOWS\system32\eapolqec.dll
16:27:29.0328 0964 C:\WINDOWS\system32\eapolqec.dll - ok
16:27:29.0343 0964 [ 876CCF164E08D6B903CD14398E056DD2 ] C:\WINDOWS\system32\rtutils.dll
16:27:29.0343 0964 C:\WINDOWS\system32\rtutils.dll - ok
16:27:29.0343 0964 [ 7B0770526801F05D58C51A3DFB87B4BD ] C:\WINDOWS\system32\wmi.dll
16:27:29.0343 0964 C:\WINDOWS\system32\wmi.dll - ok
16:27:29.0343 0964 [ 224FB925C641DA16CEB6D60F40CA4C75 ] C:\WINDOWS\system32\atl.dll
16:27:29.0343 0964 C:\WINDOWS\system32\atl.dll - ok
16:27:29.0359 0964 [ 8AE93AACC648921BAACB8602991AC4B3 ] C:\WINDOWS\system32\qutil.dll
16:27:29.0359 0964 C:\WINDOWS\system32\qutil.dll - ok
16:27:29.0359 0964 [ BD1508C2A1FD4EF502CEFA7127722E23 ] C:\WINDOWS\system32\cwbunpls.dll
16:27:29.0359 0964 C:\WINDOWS\system32\cwbunpls.dll - ok
16:27:29.0359 0964 [ 8E2CC37BA87D8F681066E0E9C8A19F73 ] C:\WINDOWS\system32\dot3api.dll
16:27:29.0359 0964 C:\WINDOWS\system32\dot3api.dll - ok
16:27:29.0359 0964 [ F5B754CDEA20BBB3A31E16A776EDE6D6 ] C:\WINDOWS\system32\esent.dll
16:27:29.0359 0964 C:\WINDOWS\system32\esent.dll - ok
16:27:29.0375 0964 [ F6F2BFC17069EB335ACCEEF7595F9302 ] C:\WINDOWS\system32\mfc42u.dll
16:27:29.0375 0964 C:\WINDOWS\system32\mfc42u.dll - ok
16:27:29.0375 0964 [ 585992D78B671AAA075C02241309795D ] C:\WINDOWS\system32\msvcirt.dll
16:27:29.0375 0964 C:\WINDOWS\system32\msvcirt.dll - ok
16:27:29.0375 0964 [ C14AA05881A35B6D6BB8D55B117EE22D ] C:\WINDOWS\system32\shfolder.dll
16:27:29.0375 0964 C:\WINDOWS\system32\shfolder.dll - ok
16:27:29.0390 0964 [ 085ED2E391A871C7BAE87E0228B546BA ] C:\WINDOWS\system32\cscui.dll
16:27:29.0390 0964 C:\WINDOWS\system32\cscui.dll - ok
16:27:29.0390 0964 [ A39BE37C9237DB5F1990D61B268EA555 ] C:\WINDOWS\system32\rastls.dll
16:27:29.0390 0964 C:\WINDOWS\system32\rastls.dll - ok
16:27:29.0390 0964 [ 6E4BE11D50F8A8DE2BAD644C9C9DE8D3 ] C:\WINDOWS\system32\cryptui.dll
16:27:29.0390 0964 C:\WINDOWS\system32\cryptui.dll - ok
16:27:29.0390 0964 [ 50A166237A0FA771261275A405646CC0 ] C:\WINDOWS\system32\powrprof.dll
16:27:29.0390 0964 C:\WINDOWS\system32\powrprof.dll - ok
16:27:29.0406 0964 [ 6B1774334E2975AA60596E54F5EA1430 ] C:\WINDOWS\system32\wininet.dll
16:27:29.0406 0964 C:\WINDOWS\system32\wininet.dll - ok
16:27:29.0406 0964 [ 6C26DCF01E2A92F183B97D434017268A ] C:\WINDOWS\system32\dpcdll.dll
16:27:29.0406 0964 C:\WINDOWS\system32\dpcdll.dll - ok
16:27:29.0406 0964 [ 10753A3ADC3E39A3B10CC3F08E98E6B4 ] C:\WINDOWS\system32\normaliz.dll
16:27:29.0406 0964 C:\WINDOWS\system32\normaliz.dll - ok
16:27:29.0421 0964 [ A93AEE1928A9D7CE3E16D24EC7380F89 ] C:\WINDOWS\system32\userinit.exe
16:27:29.0421 0964 C:\WINDOWS\system32\userinit.exe - ok
16:27:29.0421 0964 [ B1296D52B0D2096EC4759EEEB806D759 ] C:\WINDOWS\system32\WgaTray.exe
16:27:29.0421 0964 C:\WINDOWS\system32\WgaTray.exe - ok
16:27:29.0421 0964 [ FDF44991CB9A33C901FFCBDF19CE95BE ] C:\WINDOWS\system32\urlmon.dll
16:27:29.0421 0964 C:\WINDOWS\system32\urlmon.dll - ok
16:27:29.0421 0964 [ 12896823FB95BFB3DC9B46BCAEDC9923 ] C:\WINDOWS\explorer.exe
16:27:29.0421 0964 C:\WINDOWS\explorer.exe - ok
16:27:29.0437 0964 [ AD850C33A8AC45CF66574E62D1645272 ] C:\WINDOWS\system32\iertutil.dll
16:27:29.0437 0964 C:\WINDOWS\system32\iertutil.dll - ok
16:27:29.0437 0964 [ E392E172687BE172F8600C5F41AB03D9 ] C:\WINDOWS\system32\browseui.dll
16:27:29.0437 0964 C:\WINDOWS\system32\browseui.dll - ok
16:27:29.0437 0964 [ EA5B8BECA3F279C757578CD7F1E95855 ] C:\WINDOWS\system32\mprapi.dll
16:27:29.0437 0964 C:\WINDOWS\system32\mprapi.dll - ok
16:27:29.0453 0964 [ 26CB10FA893F940AB09713FF46DCDADE ] C:\WINDOWS\system32\shdocvw.dll
16:27:29.0453 0964 C:\WINDOWS\system32\shdocvw.dll - ok
16:27:29.0453 0964 [ 2CDAE321B8E878A278BA2D2FA013060B ] C:\WINDOWS\system32\activeds.dll
16:27:29.0453 0964 C:\WINDOWS\system32\activeds.dll - ok
16:27:29.0453 0964 [ 0D84657DBF93DB98673DEFDF2B29E25A ] C:\WINDOWS\system32\adsldpc.dll
16:27:29.0453 0964 C:\WINDOWS\system32\adsldpc.dll - ok
16:27:29.0453 0964 [ 92C4F48B62B0B876194584C3FF09CCB6 ] C:\WINDOWS\system32\rasapi32.dll
16:27:29.0453 0964 C:\WINDOWS\system32\rasapi32.dll - ok
16:27:29.0468 0964 [ 4DEF926F6A0545AE486A03C84F2EE482 ] C:\WINDOWS\system32\rasman.dll
16:27:29.0468 0964 C:\WINDOWS\system32\rasman.dll - ok
16:27:29.0468 0964 [ 00AABF131B4823785818DB99A075A313 ] C:\WINDOWS\system32\tapi32.dll
16:27:29.0468 0964 C:\WINDOWS\system32\tapi32.dll - ok
16:27:29.0468 0964 [ CC26451A90025F6C55F64146C333DEA5 ] C:\WINDOWS\system32\LegitCheckControl.dll
16:27:29.0468 0964 C:\WINDOWS\system32\LegitCheckControl.dll - ok
16:27:29.0484 0964 [ C1FAEA15E41F62D7BFA7FBC395C24BA6 ] C:\WINDOWS\system32\riched20.dll
16:27:29.0484 0964 C:\WINDOWS\system32\riched20.dll - ok
16:27:29.0484 0964 [ 56CE97FF94B7662A300D359CD6F4D601 ] C:\WINDOWS\system32\raschap.dll
16:27:29.0484 0964 C:\WINDOWS\system32\raschap.dll - ok
16:27:29.0484 0964 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] C:\WINDOWS\system32\netman.dll
16:27:29.0484 0964 C:\WINDOWS\system32\netman.dll - ok
16:27:29.0484 0964 [ 062F837C1FBDB6A0A75F82EFC2EE8E74 ] C:\WINDOWS\system32\netshell.dll
16:27:29.0484 0964 C:\WINDOWS\system32\netshell.dll - ok
16:27:29.0500 0964 [ B4ED498E3BFEE64E952BC44FC6057DB8 ] C:\WINDOWS\system32\desk.cpl
16:27:29.0500 0964 C:\WINDOWS\system32\desk.cpl - ok
16:27:29.0500 0964 [ A314EEA2A503A8E04085201E436384A5 ] C:\WINDOWS\system32\themeui.dll
16:27:29.0500 0964 C:\WINDOWS\system32\themeui.dll - ok
16:27:29.0500 0964 [ 2975C66459C426C20BC22D639DF6B611 ] C:\Program Files\SUPERAntiSpyware\SASSEH.DLL
16:27:29.0500 0964 C:\Program Files\SUPERAntiSpyware\SASSEH.DLL - ok
16:27:29.0515 0964 [ 235892E493845D64D890163CFEF90E97 ] C:\WINDOWS\system32\credui.dll
16:27:29.0515 0964 C:\WINDOWS\system32\credui.dll - ok
16:27:29.0515 0964 [ 4E8F3230BAC8C1CAADF01A8C728E1C5C ] C:\WINDOWS\system32\dot3dlg.dll
16:27:29.0515 0964 C:\WINDOWS\system32\dot3dlg.dll - ok
16:27:29.0515 0964 [ CA04959077AFE36369D37B3504740C87 ] C:\WINDOWS\system32\onex.dll
16:27:29.0515 0964 C:\WINDOWS\system32\onex.dll - ok
16:27:29.0515 0964 [ 6D778E0F95447E6546553EEEA709D03C ] C:\WINDOWS\system32\cmd.exe
16:27:29.0515 0964 C:\WINDOWS\system32\cmd.exe - ok
16:27:29.0531 0964 [ 5DB625E7D095604010CF84DE2D8ACFA6 ] C:\WINDOWS\system32\eappcfg.dll
16:27:29.0531 0964 C:\WINDOWS\system32\eappcfg.dll - ok
16:27:29.0531 0964 [ 3618313F7DFB605571A48FCF55D7868F ] C:\WINDOWS\system32\ieframe.dll
16:27:29.0531 0964 C:\WINDOWS\system32\ieframe.dll - ok
16:27:29.0531 0964 [ ABC4206543450C0666D152F4B65833B8 ] C:\WINDOWS\system32\eappprxy.dll
16:27:29.0531 0964 C:\WINDOWS\system32\eappprxy.dll - ok
16:27:29.0546 0964 [ 767FF54A552732CE772C2302025FA82F ] C:\WINDOWS\system32\wzcsapi.dll
16:27:29.0546 0964 C:\WINDOWS\system32\wzcsapi.dll - ok
16:27:29.0546 0964 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] C:\WINDOWS\system32\schedsvc.dll
16:27:29.0546 0964 C:\WINDOWS\system32\schedsvc.dll - ok
16:27:29.0546 0964 [ E47E364C96467FD54FA44D59F927C3AB ] C:\WINDOWS\system32\msidle.dll
16:27:29.0546 0964 C:\WINDOWS\system32\msidle.dll - ok
16:27:29.0546 0964 [ 60784F891563FB1B767F70117FC2428F ] C:\WINDOWS\system32\spoolsv.exe
16:27:29.0546 0964 C:\WINDOWS\system32\spoolsv.exe - ok
16:27:29.0562 0964 [ DEF7A7882BEC100FE0B2CE2549188F9D ] C:\WINDOWS\system32\audiosrv.dll
16:27:29.0562 0964 C:\WINDOWS\system32\audiosrv.dll - ok
16:27:29.0562 0964 [ A8888A5327621856C0CEC4E385F69309 ] C:\WINDOWS\system32\wkssvc.dll
16:27:29.0562 0964 C:\WINDOWS\system32\wkssvc.dll - ok
16:27:29.0562 0964 [ EBC984F0CE40E0DAF0454D806EC2A7EC ] C:\DOCUME~1\Dwayne\LOCALS~1\temp\00ED85F4-14C0-46AA-A6E1-2EBDDEF90A28.exe
16:27:29.0562 0964 C:\DOCUME~1\Dwayne\LOCALS~1\temp\00ED85F4-14C0-46AA-A6E1-2EBDDEF90A28.exe - ok
16:27:29.0578 0964 [ 684559A03CBC1D05BA120A18B0D8BA5D ] C:\WINDOWS\system32\winhttp.dll
16:27:29.0578 0964 C:\WINDOWS\system32\winhttp.dll - ok
16:27:29.0578 0964 [ 912B67BB8249925A5C972FC5839EAE09 ] C:\WINDOWS\system32\actxprxy.dll
16:27:29.0578 0964 C:\WINDOWS\system32\actxprxy.dll - ok
16:27:29.0578 0964 [ A70A2D85AD143D6BB823C246CEB699A5 ] C:\WINDOWS\system32\ntshrui.dll
16:27:29.0578 0964 C:\WINDOWS\system32\ntshrui.dll - ok
16:27:29.0593 0964 [ 680B56A8B62D1BCF4A0B2AAAD03D88E4 ] C:\WINDOWS\system32\wdmaud.drv
16:27:29.0593 0964 C:\WINDOWS\system32\wdmaud.drv - ok
16:27:29.0593 0964 [ 6768ACF64B18196494413695F0C3A00F ] C:\WINDOWS\system32\drivers\wdmaud.sys
16:27:29.0593 0964 C:\WINDOWS\system32\drivers\wdmaud.sys - ok
16:27:29.0593 0964 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] C:\WINDOWS\system32\drivers\sysaudio.sys
16:27:29.0593 0964 C:\WINDOWS\system32\drivers\sysaudio.sys - ok
16:27:29.0593 0964 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] C:\WINDOWS\system32\drivers\splitter.sys
16:27:29.0593 0964 C:\WINDOWS\system32\drivers\splitter.sys - ok
16:27:29.0609 0964 [ 8BED39E3C35D6A489438B8141717A557 ] C:\WINDOWS\system32\drivers\aec.sys
16:27:29.0609 0964 C:\WINDOWS\system32\drivers\aec.sys - ok
16:27:29.0609 0964 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] C:\WINDOWS\system32\drivers\swmidi.sys
16:27:29.0609 0964 C:\WINDOWS\system32\drivers\swmidi.sys - ok
16:27:29.0609 0964 [ 8A208DFCF89792A484E76C40E5F50B45 ] C:\WINDOWS\system32\drivers\dmusic.sys
16:27:29.0609 0964 C:\WINDOWS\system32\drivers\dmusic.sys - ok
16:27:29.0625 0964 [ 692BCF44383D056AED41B045A323D378 ] C:\WINDOWS\system32\drivers\kmixer.sys
16:27:29.0625 0964 C:\WINDOWS\system32\drivers\kmixer.sys - ok
16:27:29.0625 0964 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] C:\WINDOWS\system32\drivers\drmkaud.sys
16:27:29.0625 0964 C:\WINDOWS\system32\drivers\drmkaud.sys - ok
16:27:29.0625 0964 [ 91790D6749EBED90E2C40479C0A91879 ] C:\WINDOWS\system32\verclsid.exe
16:27:29.0625 0964 C:\WINDOWS\system32\verclsid.exe - ok
16:27:29.0625 0964 [ 9A3BD5F55AADFF859539142F6328A66E ] C:\WINDOWS\system32\msacm32.drv
16:27:29.0625 0964 C:\WINDOWS\system32\msacm32.drv - ok
16:27:29.0640 0964 [ 5C12660A97822F6E61576943B49AAAD6 ] C:\WINDOWS\system32\midimap.dll
16:27:29.0640 0964 C:\WINDOWS\system32\midimap.dll - ok
16:27:29.0640 0964 [ D3F72D50DE53F9F1F55240115AF4D42E ] C:\WINDOWS\system32\msi.dll
16:27:29.0640 0964 C:\WINDOWS\system32\msi.dll - ok
16:27:29.0640 0964 [ 2DC5A8019E2387987905F77C664E4BE2 ] C:\WINDOWS\system32\linkinfo.dll
16:27:29.0640 0964 C:\WINDOWS\system32\linkinfo.dll - ok
16:27:29.0656 0964 [ 0FFA9E2711A0228467BF08228D5B620F ] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
16:27:29.0656 0964 C:\Program Files\Compaq\SetRefresh\SetRefresh.exe - ok
16:27:29.0656 0964 [ DE3C66F8825A712F2DDA4C5A593CFFB9 ] C:\Program Files\IBM\Client Access\cwbsvstr.exe
16:27:29.0656 0964 C:\Program Files\IBM\Client Access\cwbsvstr.exe - ok
16:27:29.0656 0964 [ CAAC54D29A26FA30CB3D348F3F34EAE7 ] C:\WINDOWS\system32\cwbad1.dll
16:27:29.0656 0964 C:\WINDOWS\system32\cwbad1.dll - ok
16:27:29.0656 0964 [ 4B36A184E01AD9485E97D62D45B3B084 ] C:\WINDOWS\system32\cwbsof.dll
16:27:29.0656 0964 C:\WINDOWS\system32\cwbsof.dll - ok
16:27:29.0671 0964 [ 7ACF8AC59C58F3F0D2EA5F6CC2EF14DE ] C:\WINDOWS\system32\cwbunpla.dll
16:27:29.0671 0964 C:\WINDOWS\system32\cwbunpla.dll - ok
16:27:29.0671 0964 [ AE4CA88901F936D846123AE8AFFA49BA ] C:\WINDOWS\system32\cwbrc.dll
16:27:29.0671 0964 C:\WINDOWS\system32\cwbrc.dll - ok
16:27:29.0671 0964 [ DDE4A991F26179573D2CFA7A093F56FA ] C:\WINDOWS\system32\hkcmd.exe
16:27:29.0671 0964 C:\WINDOWS\system32\hkcmd.exe - ok
16:27:29.0687 0964 [ E79977B1ECC05C53F0194750457BBB37 ] C:\WINDOWS\system32\igfxtray.exe
16:27:29.0687 0964 C:\WINDOWS\system32\igfxtray.exe - ok
16:27:29.0687 0964 [ 2A939FBFDF1C16D912B90F28F6FCE2EF ] C:\WINDOWS\system32\cwbunssl.dll
16:27:29.0687 0964 C:\WINDOWS\system32\cwbunssl.dll - ok
16:27:29.0687 0964 [ D0127023AF6070D5B479B1AE65B107A2 ] C:\WINDOWS\system32\hccutils.dll
16:27:29.0687 0964 C:\WINDOWS\system32\hccutils.dll - ok
16:27:29.0687 0964 [ EAF47A526B911B0961D3FECEB442E0C4 ] C:\WINDOWS\system32\igfxpers.exe
16:27:29.0687 0964 C:\WINDOWS\system32\igfxpers.exe - ok
16:27:29.0703 0964 [ 0ED7CBAD7E9EF03A5960AE37EA55B9C9 ] C:\WINDOWS\system32\cwbsv.dll
16:27:29.0703 0964 C:\WINDOWS\system32\cwbsv.dll - ok
16:27:29.0703 0964 [ C4D123B9D816679F1954E8E0894A887C ] C:\WINDOWS\system32\cwbco.dll
16:27:29.0703 0964 C:\WINDOWS\system32\cwbco.dll - ok
16:27:29.0703 0964 [ 37498FC7751B9453D435826EEA2B2B57 ] C:\WINDOWS\system32\cwbad.dll
16:27:29.0703 0964 C:\WINDOWS\system32\cwbad.dll - ok
16:27:29.0718 0964 [ D25E93CC09C8ABDC377467EEDE718EFA ] C:\WINDOWS\system32\cwbnl.dll
16:27:29.0718 0964 C:\WINDOWS\system32\cwbnl.dll - ok
16:27:29.0718 0964 [ 6C29375A447F9925CD0073A8FBD8BE1B ] C:\WINDOWS\system32\cwbbsspi.dll
16:27:29.0718 0964 C:\WINDOWS\system32\cwbbsspi.dll - ok
16:27:29.0718 0964 [ E8B3498B6EEFF2491F2ADC9021BEC4FD ] C:\WINDOWS\system32\cwbbspc.dll
16:27:29.0718 0964 C:\WINDOWS\system32\cwbbspc.dll - ok
16:27:29.0718 0964 [ 305532803E711149A21C29B33199244D ] C:\WINDOWS\system32\cwbrw.dll
16:27:29.0718 0964 C:\WINDOWS\system32\cwbrw.dll - ok
16:27:29.0734 0964 [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\WINDOWS\system32\drivers\34712309.sys
16:27:29.0734 0964 C:\WINDOWS\system32\drivers\34712309.sys - ok
16:27:29.0734 0964 [ 6131CA2667859E1B8E751F73EFF8A526 ] C:\WINDOWS\system32\cwbunplp.exe
16:27:29.0734 0964 C:\WINDOWS\system32\cwbunplp.exe - ok
16:27:29.0734 0964 [ BE240B2C948D91D4C11DCA8653A8B604 ] C:\WINDOWS\system32\igfxsrvc.exe
16:27:29.0734 0964 C:\WINDOWS\system32\igfxsrvc.exe - ok
16:27:29.0750 0964 [ 111A6C912BCB557065326571DBDB69EC ] C:\Program Files\IBM\Client Access\Mri2924\cwbsomri.dll
16:27:29.0750 0964 C:\Program Files\IBM\Client Access\Mri2924\cwbsomri.dll - ok
16:27:29.0750 0964 [ 7BF126DC48C76F9F175F451042B6B3E8 ] C:\Program Files\IBM\Client Access\cwbckver.exe
16:27:29.0750 0964 C:\Program Files\IBM\Client Access\cwbckver.exe - ok
16:27:29.0750 0964 [ 0D489AC3245DC9AE907B7E6DD6AB3B92 ] C:\Program Files\IBM\Client Access\cwbwlwiz.exe
16:27:29.0750 0964 C:\Program Files\IBM\Client Access\cwbwlwiz.exe - ok
16:27:29.0750 0964 [ 083DC7EA73FFD3C7DE9FD19DDBC8D0AA ] C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe
16:27:29.0750 0964 C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe - ok
16:27:29.0765 0964 [ CBB024AD5BDAA16C604321947B6E5B33 ] C:\Program Files\IBM\Client Access\Emulator\pcsw32x.dll
16:27:29.0765 0964 C:\Program Files\IBM\Client Access\Emulator\pcsw32x.dll - ok
16:27:29.0765 0964 [ 2012C8B28D825B5436D9A52DAB2B1B78 ] C:\WINDOWS\system32\cwbuiutl.dll
16:27:29.0765 0964 C:\WINDOWS\system32\cwbuiutl.dll - ok
16:27:29.0765 0964 [ 76848CB1AA5818DB47D5F5986E0A7485 ] C:\WINDOWS\system32\mfc42.dll
16:27:29.0765 0964 C:\WINDOWS\system32\mfc42.dll - ok
16:27:29.0781 0964 [ 09A350F25D94D18190A8988E25671844 ] C:\WINDOWS\system32\igfxsrvc.dll
16:27:29.0781 0964 C:\WINDOWS\system32\igfxsrvc.dll - ok
16:27:29.0781 0964 [ 58C8809D7486DB2D9C6A24A8630A5478 ] C:\WINDOWS\system32\igfxdev.dll
16:27:29.0781 0964 C:\WINDOWS\system32\igfxdev.dll - ok
16:27:29.0781 0964 [ CA956FA0D33EA9FEBE516B5FCA0A0819 ] C:\WINDOWS\system32\igfxres.dll
16:27:29.0781 0964 C:\WINDOWS\system32\igfxres.dll - ok
16:27:29.0796 0964 [ CC8915DB4E33E8FB29CA0D2DBF75306E ] C:\WINDOWS\system32\webcheck.dll
16:27:29.0796 0964 C:\WINDOWS\system32\webcheck.dll - ok
16:27:29.0796 0964 [ B714735C12A70171DE28657948FD91F1 ] C:\WINDOWS\system32\mlang.dll
16:27:29.0796 0964 C:\WINDOWS\system32\mlang.dll - ok
16:27:29.0796 0964 [ 50512FC9B7878E3C2C147BC17326A7DB ] C:\WINDOWS\system32\stobject.dll
16:27:29.0796 0964 C:\WINDOWS\system32\stobject.dll - ok
16:27:29.0796 0964 [ 231A0B0E3BA7ABFE469A8262FAA1FD71 ] C:\WINDOWS\system32\batmeter.dll
16:27:29.0796 0964 C:\WINDOWS\system32\batmeter.dll - ok
16:27:29.0812 0964 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] C:\Program Files\SUPERAntiSpyware\SASCore.exe
16:27:29.0812 0964 C:\Program Files\SUPERAntiSpyware\SASCore.exe - ok
16:27:29.0812 0964 [ 8A1F4965B53F418483137B4F5815F775 ] C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
16:27:29.0812 0964 C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe - ok
16:27:29.0812 0964 [ ED8CEE58C1E4C5893F5B2FD686A272BF ] C:\WINDOWS\system32\drivers\ASPI32.SYS
16:27:29.0812 0964 C:\WINDOWS\system32\drivers\ASPI32.SYS - ok
16:27:29.0828 0964 [ 736574FDC37397FFEF8AACAE4A468A99 ] C:\Program Files\Broadcom\MgmtAgent\BMAPI.dll
16:27:29.0828 0964 C:\Program Files\Broadcom\MgmtAgent\BMAPI.dll - ok
16:27:29.0828 0964 [ 5F0CE62E0831CF972EC6949FD3E37DA7 ] C:\WINDOWS\system32\cfgmgr32.dll
16:27:29.0828 0964 C:\WINDOWS\system32\cfgmgr32.dll - ok
16:27:29.0828 0964 [ 00709952D444EAE14DBBD30D36FBAE0F ] C:\WINDOWS\system32\certcli.dll
16:27:29.0828 0964 C:\WINDOWS\system32\certcli.dll - ok
16:27:29.0828 0964 [ 3D4E199942E29207970E04315D02AD3B ] C:\WINDOWS\system32\cryptsvc.dll
16:27:29.0828 0964 C:\WINDOWS\system32\cryptsvc.dll - ok
16:27:29.0843 0964 [ 57EDEC2E5F59F0335E92F35184BC8631 ] C:\WINDOWS\system32\dmserver.dll
16:27:29.0843 0964 C:\WINDOWS\system32\dmserver.dll - ok
16:27:29.0843 0964 [ BC93B4A066477954555966D77FEC9ECB ] C:\WINDOWS\system32\ersvc.dll
16:27:29.0843 0964 C:\WINDOWS\system32\ersvc.dll - ok
16:27:29.0843 0964 [ E4AE0CBC0B55A5FAA6996E38CE6C981B ] C:\Program Files\Java\jre6\bin\jqs.exe
16:27:29.0843 0964 C:\Program Files\Java\jre6\bin\jqs.exe - ok
16:27:29.0859 0964 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
16:27:29.0859 0964 C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll - ok
16:27:29.0859 0964 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Program Files\Java\jre6\bin\msvcr71.dll
16:27:29.0859 0964 C:\Program Files\Java\jre6\bin\msvcr71.dll - ok
16:27:29.0859 0964 [ D4991D98F2DB73C60D042F1AEF79EFAE ] C:\WINDOWS\system32\es.dll
16:27:29.0859 0964 C:\WINDOWS\system32\es.dll - ok
16:27:29.0859 0964 [ 369F7B1A4F358B976176556A1A331F36 ] C:\WINDOWS\system32\odbcbcp.dll
16:27:29.0859 0964 C:\WINDOWS\system32\odbcbcp.dll - ok
16:27:29.0875 0964 [ 62CF83A6989312A0DD39BBFFB3D1C166 ] C:\WINDOWS\system32\pdh.dll
16:27:29.0875 0964 C:\WINDOWS\system32\pdh.dll - ok
16:27:29.0875 0964 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] C:\WINDOWS\system32\srvsvc.dll
16:27:29.0875 0964 C:\WINDOWS\system32\srvsvc.dll - ok
16:27:29.0875 0964 [ 986B1FF5814366D71E0AC5755C88F2D3 ] C:\WINDOWS\system32\msgsvc.dll
16:27:29.0875 0964 C:\WINDOWS\system32\msgsvc.dll - ok
16:27:29.0890 0964 [ 20FD44370267CCD0A64A1B31861C21D2 ] C:\WINDOWS\system32\netmsg.dll
16:27:29.0890 0964 C:\WINDOWS\system32\netmsg.dll - ok
16:27:29.0890 0964 [ 837608240884733792DDAE81E50B802A ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
16:27:29.0890 0964 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe - ok
16:27:29.0890 0964 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] C:\WINDOWS\system32\drivers\srv.sys
16:27:29.0890 0964 C:\WINDOWS\system32\drivers\srv.sys - ok
16:27:29.0890 0964 [ ACDAFCD14EC0ECE89198503746A5C147 ] C:\WINDOWS\system32\perfos.dll
16:27:29.0890 0964 C:\WINDOWS\system32\perfos.dll - ok
16:27:29.0906 0964 [ ABFB673B24A9B3287761D497529FB5B9 ] C:\WINDOWS\system32\perfdisk.dll
16:27:29.0906 0964 C:\WINDOWS\system32\perfdisk.dll - ok
16:27:29.0906 0964 [ 1C4D0F52B4238B9388F2A28DD0903588 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
16:27:29.0906 0964 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll - ok
16:27:29.0906 0964 [ E1F3AB2CC3521E68F242FB4D60C52AE3 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
16:27:29.0906 0964 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll - ok
16:27:29.0921 0964 [ D6D4130C0BBC0D18C2DA703CC38260A9 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlos.dll
16:27:29.0921 0964 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlos.dll - ok
16:27:29.0921 0964 [ E111CED19D6A9FF9BBA5C219D0C5A3CE ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll
16:27:29.0921 0964 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll - ok
16:27:29.0921 0964 [ 7B193BA3F0245D5867B71AD1CF631474 ] C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll
16:27:29.0921 0964 C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll - ok
16:27:29.0921 0964 [ 332760FBA1655FCFD35BD6F4FD871300 ] C:\WINDOWS\system32\ipsecsvc.dll
16:27:29.0921 0964 C:\WINDOWS\system32\ipsecsvc.dll - ok
16:27:29.0937 0964 [ 1AF54261C283BAFB021B3D84A7BAE978 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLBOOT.dll
16:27:29.0937 0964 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLBOOT.dll - ok
16:27:29.0937 0964 [ C5FF8682EADA5B3B27A865F1C3EF9270 ] C:\WINDOWS\system32\oakley.dll
16:27:29.0937 0964 C:\WINDOWS\system32\oakley.dll - ok
16:27:29.0937 0964 [ 853D0D0C6F02D7BFDF1CF99DD7553732 ] C:\WINDOWS\system32\pstorsvc.dll
16:27:29.0937 0964 C:\WINDOWS\system32\pstorsvc.dll - ok
16:27:29.0953 0964 [ 248712EA6BA17B9FF0C542A3828375DD ] C:\WINDOWS\system32\winipsec.dll
16:27:29.0953 0964 C:\WINDOWS\system32\winipsec.dll - ok
16:27:29.0953 0964 [ 247FE8DEFBB95A4319C7B4B215F92891 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.rll
16:27:29.0953 0964 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.rll - ok
16:27:29.0953 0964 [ 22D89D84E8E081CDA529DBF8C0255A38 ] C:\WINDOWS\system32\psbase.dll
16:27:29.0953 0964 C:\WINDOWS\system32\psbase.dll - ok
16:27:29.0953 0964 [ 5B19B557B0C188210A56A6B699D90B8F ] C:\WINDOWS\system32\regsvc.dll
16:27:29.0953 0964 C:\WINDOWS\system32\regsvc.dll - ok
16:27:29.0968 0964 [ CBE612E2BB6A10E3563336191EDA1250 ] C:\WINDOWS\system32\seclogon.dll
16:27:29.0968 0964 C:\WINDOWS\system32\seclogon.dll - ok
16:27:29.0968 0964 [ 26EBC39857138FADAD68FBC3683E64F1 ] C:\Program Files\Java\jre6\bin\awt.dll
16:27:29.0968 0964 C:\Program Files\Java\jre6\bin\awt.dll - ok
16:27:29.0968 0964 [ FEDE68BF80052BAD393AFD5C2E60DCB0 ] C:\WINDOWS\system32\dssenh.dll
16:27:29.0968 0964 C:\WINDOWS\system32\dssenh.dll - ok
16:27:29.0984 0964 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] C:\WINDOWS\system32\sens.dll
16:27:29.0984 0964 C:\WINDOWS\system32\sens.dll - ok
16:27:29.0984 0964 [ 7784111F64DB31AE96D86359301D9079 ] C:\Program Files\Java\jre6\bin\client\jvm.dll
16:27:29.0984 0964 C:\Program Files\Java\jre6\bin\client\jvm.dll - ok
16:27:29.0984 0964 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
16:27:29.0984 0964 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe - ok
16:27:30.0000 0964 [ 83F41D0D89645D7235C051AB1D9523AC ] C:\WINDOWS\system32\ipnathlp.dll
16:27:30.0000 0964 C:\WINDOWS\system32\ipnathlp.dll - ok
16:27:30.0000 0964 [ D89083C4EB02DACA8F944B0E05E57F9D ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
16:27:30.0000 0964 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe - ok
16:27:30.0000 0964 [ D1E2786D29A34009A54868B6B0449296 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll
16:27:30.0000 0964 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll - ok
16:27:30.0000 0964 [ ACACB8B14E66109B8ACD6644B5574B9A ] C:\WINDOWS\system32\vssapi.dll
16:27:30.0000 0964 C:\WINDOWS\system32\vssapi.dll - ok
16:27:30.0015 0964 [ 3805DF0AC4296A34BA4BF93B346CC378 ] C:\WINDOWS\system32\srsvc.dll
16:27:30.0015 0964 C:\WINDOWS\system32\srsvc.dll - ok
16:27:30.0015 0964 [ F9D3C78CFE15271D80790677C893CE45 ] C:\WINDOWS\system32\cabinet.dll
16:27:30.0015 0964 C:\WINDOWS\system32\cabinet.dll - ok
16:27:30.0015 0964 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] C:\WINDOWS\system32\wiaservc.dll
16:27:30.0015 0964 C:\WINDOWS\system32\wiaservc.dll - ok
16:27:30.0031 0964 [ 08A73B0E7EE6E32983B5F9E540A8E380 ] C:\WINDOWS\system32\mscoree.dll
16:27:30.0031 0964 C:\WINDOWS\system32\mscoree.dll - ok
16:27:30.0031 0964 [ A06CE3399D16DB864F55FAEB1F1927A9 ] C:\WINDOWS\system32\browser.dll
16:27:30.0031 0964 C:\WINDOWS\system32\browser.dll - ok
16:27:30.0031 0964 [ 4AC2FA4A6F0DF2511BAC13393C06EFF1 ] C:\WINDOWS\system32\mscms.dll
16:27:30.0031 0964 C:\WINDOWS\system32\mscms.dll - ok
16:27:30.0031 0964 [ 8BCD11D38FCE43A519246A91CC40DE6A ] C:\WINDOWS\system32\security.dll
16:27:30.0031 0964 C:\WINDOWS\system32\security.dll - ok
16:27:30.0046 0964 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] C:\WINDOWS\system32\wuauserv.dll
16:27:30.0046 0964 C:\WINDOWS\system32\wuauserv.dll - ok
16:27:30.0046 0964 [ 2D0E4ED081963804CCC196A0929275B5 ] C:\WINDOWS\system32\wbem\wmisvc.dll
16:27:30.0046 0964 C:\WINDOWS\system32\wbem\wmisvc.dll - ok
16:27:30.0046 0964 [ D2F77E5DC1800BBC2CFFB5E76586B293 ] C:\WINDOWS\system32\wuaueng.dll
16:27:30.0046 0964 C:\WINDOWS\system32\wuaueng.dll - ok
16:27:30.0062 0964 [ 8FED1E0A491D4990853D23F21C59C730 ] C:\WINDOWS\system32\advpack.dll
16:27:30.0062 0964 C:\WINDOWS\system32\advpack.dll - ok
16:27:30.0062 0964 [ B85E95679B5ADC12311BCD3F5385D623 ] C:\WINDOWS\system32\mspatcha.dll
16:27:30.0062 0964 C:\WINDOWS\system32\mspatcha.dll - ok
16:27:30.0062 0964 [ DEFAB035A25D3719AF0860B61EDC6440 ] C:\Program Files\Java\jre6\bin\dcpr.dll
16:27:30.0062 0964 C:\Program Files\Java\jre6\bin\dcpr.dll - ok
16:27:30.0062 0964 [ 55BCA12F7F523D35CA3CB833C725F54E ] C:\WINDOWS\system32\trkwks.dll
16:27:30.0062 0964 C:\WINDOWS\system32\trkwks.dll - ok
16:27:30.0078 0964 [ 7C278E6408D1DCE642230C0585A854D5 ] C:\WINDOWS\system32\wscsvc.dll
16:27:30.0078 0964 C:\WINDOWS\system32\wscsvc.dll - ok
16:27:30.0078 0964 [ ED0C0DF222209E43AD9AFBF3FE87DDE0 ] C:\WINDOWS\system32\comsvcs.dll
16:27:30.0078 0964 C:\WINDOWS\system32\comsvcs.dll - ok
16:27:30.0078 0964 [ E6234ED19F2FD53C14B336B74F57A68D ] C:\Program Files\Java\jre6\bin\deploy.dll
16:27:30.0078 0964 C:\Program Files\Java\jre6\bin\deploy.dll - ok
16:27:30.0093 0964 [ E6E6E69EFF79B1FCB98EB42CFC0702C5 ] C:\Program Files\Java\jre6\bin\fontmanager.dll
16:27:30.0093 0964 C:\Program Files\Java\jre6\bin\fontmanager.dll - ok
16:27:30.0093 0964 [ 920EF9E4A7073478B1BAF91C12E4DD7E ] C:\Program Files\Java\jre6\bin\hpi.dll
16:27:30.0093 0964 C:\Program Files\Java\jre6\bin\hpi.dll - ok
16:27:30.0093 0964 [ 690D97864735E8ECD87F55777E266690 ] C:\WINDOWS\system32\colbact.dll
16:27:30.0093 0964 C:\WINDOWS\system32\colbact.dll - ok
16:27:30.0093 0964 [ 36795A645EAA47FE31D2A8F136A2C69B ] C:\WINDOWS\system32\mtxclu.dll
16:27:30.0093 0964 C:\WINDOWS\system32\mtxclu.dll - ok
16:27:30.0109 0964 [ 77F2E73B9507A383CC149A359409D735 ] C:\Program Files\Java\jre6\bin\java.dll
16:27:30.0109 0964 C:\Program Files\Java\jre6\bin\java.dll - ok
16:27:30.0109 0964 [ DF82E222578DBE59FCBBD69A02E4C806 ] C:\WINDOWS\system32\clusapi.dll
16:27:30.0109 0964 C:\WINDOWS\system32\clusapi.dll - ok
16:27:30.0109 0964 [ 7D19D8FE3B8301E77CFD93A300DDC8FB ] C:\Program Files\Java\jre6\bin\javaw.exe
16:27:30.0109 0964 C:\Program Files\Java\jre6\bin\javaw.exe - ok
16:27:30.0125 0964 [ F51EBB6FC536A6B2D588FD668D3A8249 ] C:\WINDOWS\system32\resutils.dll
16:27:30.0125 0964 C:\WINDOWS\system32\resutils.dll - ok
16:27:30.0125 0964 [ F0BF811622F2DD6C8E26EE4600D83731 ] C:\WINDOWS\system32\wbem\wbemcore.dll
16:27:30.0125 0964 C:\WINDOWS\system32\wbem\wbemcore.dll - ok
16:27:30.0125 0964 [ D58BE81020DE13AEA25096B20755D89F ] C:\Program Files\Java\jre6\bin\jp2native.dll
16:27:30.0125 0964 C:\Program Files\Java\jre6\bin\jp2native.dll - ok
16:27:30.0140 0964 [ F19D5B47D36FF9A034071DF26CBCB89A ] C:\Program Files\Java\jre6\bin\jpeg.dll
16:27:30.0140 0964 C:\Program Files\Java\jre6\bin\jpeg.dll - ok
16:27:30.0140 0964 [ 79E3A8C328E7E569C32B0998377D9742 ] C:\WINDOWS\system32\spoolss.dll
16:27:30.0140 0964 C:\WINDOWS\system32\spoolss.dll - ok
16:27:30.0140 0964 [ 2BBBDDF6DC89FCDA0F41BA1143A1CBEA ] C:\Program Files\Java\jre6\bin\net.dll
16:27:30.0140 0964 C:\Program Files\Java\jre6\bin\net.dll - ok
16:27:30.0140 0964 [ E4616430709F440CF1809D88DC2366EA ] C:\WINDOWS\system32\wbem\esscli.dll
16:27:30.0140 0964 C:\WINDOWS\system32\wbem\esscli.dll - ok
16:27:30.0156 0964 [ EAA50607F83F8805D2A7EF5E128DBD3A ] C:\Program Files\Java\jre6\bin\nio.dll
16:27:30.0156 0964 C:\Program Files\Java\jre6\bin\nio.dll - ok
16:27:30.0156 0964 [ AA897735D5AB916297A6823A9B2D61B1 ] C:\WINDOWS\system32\localspl.dll
16:27:30.0156 0964 C:\WINDOWS\system32\localspl.dll - ok
16:27:30.0156 0964 [ 378A0AEFB11D8B0DC8C27B9F7604B88D ] C:\WINDOWS\system32\wbem\fastprox.dll
16:27:30.0156 0964 C:\WINDOWS\system32\wbem\fastprox.dll - ok
16:27:30.0156 0964 [ FAC23E5F45EC88EFDEFA4765771D0D10 ] C:\Program Files\Java\jre6\bin\regutils.dll
16:27:30.0156 0964 C:\Program Files\Java\jre6\bin\regutils.dll - ok
16:27:30.0171 0964 [ 5D3D1AB0EF4EA55B731863050482C111 ] C:\WINDOWS\system32\cnbjmon.dll
16:27:30.0171 0964 C:\WINDOWS\system32\cnbjmon.dll - ok
16:27:30.0171 0964 [ 010472D0AE758227C6F6E6933549C219 ] C:\WINDOWS\system32\wbem\wbemsvc.dll
16:27:30.0171 0964 C:\WINDOWS\system32\wbem\wbemsvc.dll - ok
16:27:30.0171 0964 [ 58C8D45C571AA9235FB296B383B89887 ] C:\WINDOWS\system32\cpwmon2k.dll
16:27:30.0171 0964 C:\WINDOWS\system32\cpwmon2k.dll - ok
16:27:30.0187 0964 [ 3273D1565BF30225C115B480A3BB2C9D ] C:\WINDOWS\system32\wbem\wmiutils.dll
16:27:30.0187 0964 C:\WINDOWS\system32\wbem\wmiutils.dll - ok
16:27:30.0187 0964 [ C33D36BAF2E8C48F7C60C410E0D591EC ] C:\Program Files\Java\jre6\bin\verify.dll
16:27:30.0187 0964 C:\Program Files\Java\jre6\bin\verify.dll - ok
16:27:30.0187 0964 [ 152CD4CA28C8F40BB281DAF6AD65A216 ] C:\Program Files\Java\jre6\bin\zip.dll
16:27:30.0187 0964 C:\Program Files\Java\jre6\bin\zip.dll - ok
16:27:30.0187 0964 [ 7A3D29AC6E5F67442EC8096BDE4A4E5E ] C:\WINDOWS\system32\pdfc_port.dll
16:27:30.0187 0964 C:\WINDOWS\system32\pdfc_port.dll - ok
16:27:30.0203 0964 [ 222DE7F5EDB9DDBE628384A1A8BE59CE ] C:\WINDOWS\system32\pjlmon.dll
16:27:30.0203 0964 C:\WINDOWS\system32\pjlmon.dll - ok
16:27:30.0203 0964 [ AE0382AD9C73D343D85E1A50C80B7C20 ] C:\WINDOWS\system32\tcpmon.dll
16:27:30.0203 0964 C:\WINDOWS\system32\tcpmon.dll - ok
16:27:30.0203 0964 [ 942A17D2901A31EA68627CBFFCD268CC ] C:\WINDOWS\system32\wbem\repdrvfs.dll
16:27:30.0203 0964 C:\WINDOWS\system32\wbem\repdrvfs.dll - ok
16:27:30.0218 0964 [ F26385E8BA4549B5186B774EC0E45D86 ] C:\WINDOWS\system32\usbmon.dll
16:27:30.0218 0964 C:\WINDOWS\system32\usbmon.dll - ok
16:27:30.0218 0964 [ EEE7F12D9FF46F68FBC0DA059A359E9E ] C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
16:27:30.0218 0964 C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - ok
16:27:30.0218 0964 [ 071143F687B4F887E21461CA6CC7EB29 ] C:\WINDOWS\system32\wbem\wmiprvsd.dll
16:27:30.0218 0964 C:\WINDOWS\system32\wbem\wmiprvsd.dll - ok
16:27:30.0234 0964 [ 22DD6D7D4BFE2B8CE705CC950C8AEA4C ] C:\WINDOWS\system32\win32spl.dll
16:27:30.0234 0964 C:\WINDOWS\system32\win32spl.dll - ok
16:27:30.0234 0964 [ B41D53899E37CC43DA85DA19998BEE81 ] C:\WINDOWS\system32\netrap.dll
16:27:30.0234 0964 C:\WINDOWS\system32\netrap.dll - ok
16:27:30.0234 0964 [ EE4C651A217B01D636B5364AC77DA892 ] C:\WINDOWS\system32\inetpp.dll
16:27:30.0234 0964 C:\WINDOWS\system32\inetpp.dll - ok
16:27:30.0234 0964 [ 26D881D27CBE51D3614E68D7313EA026 ] C:\WINDOWS\system32\wbem\wbemess.dll
16:27:30.0234 0964 C:\WINDOWS\system32\wbem\wbemess.dll - ok
16:27:30.0250 0964 [ 8C54260D3263ED4E9BEA132FEB3BFCB1 ] C:\WINDOWS\system32\wuapi.dll
16:27:30.0250 0964 C:\WINDOWS\system32\wuapi.dll - ok
16:27:30.0250 0964 [ D26451B540720A7313A9BCBE794DAF62 ] C:\WINDOWS\system32\wbem\ncprov.dll
16:27:30.0250 0964 C:\WINDOWS\system32\wbem\ncprov.dll - ok
16:27:30.0250 0964 [ 6404807ABC7AF52FA3792697AE638B50 ] C:\WINDOWS\system32\wbem\wbemcons.dll
16:27:30.0250 0964 C:\WINDOWS\system32\wbem\wbemcons.dll - ok
16:27:30.0250 0964 ============================================================
16:27:30.0250 0964 Scan finished
16:27:30.0250 0964 ============================================================
16:27:30.0265 0616 Detected object count: 0
16:27:30.0265 0616 Actual detected object count: 0
16:27:41.0906 1088 ============================================================
16:27:41.0906 1088 Scan started
16:27:41.0906 1088 Mode: Manual; SigCheck; TDLFS;
16:27:41.0906 1088 ============================================================
16:27:42.0046 1088 ================ Scan system memory ========================
16:27:42.0046 1088 System memory - ok
16:27:42.0046 1088 ================ Scan services =============================
16:27:42.0093 1088 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
16:27:42.0250 1088 !SASCORE - ok
16:27:42.0312 1088 [ A8A4E18857CDFD8D9AB81E2C9EAF89B5 ] a2acc C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys
16:27:43.0109 1088 a2acc - ok
16:27:43.0187 1088 [ C6D0B4BF12036D1EE092D2F5EF436FC7 ] a2AntiMalware C:\Program Files\Emsisoft Anti-Malware\a2service.exe
16:27:43.0328 1088 a2AntiMalware - ok
16:27:43.0343 1088 [ F7EABCA8375EA2DC6F35C4BCA4757515 ] A2DDA C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
16:27:43.0375 1088 A2DDA - ok
16:27:43.0453 1088 Abiosdsk - ok
16:27:43.0453 1088 abp480n5 - ok
16:27:43.0484 1088 [ 0F2D66D5F08EBE2F77BB904288DCF6F0 ] ac97intc C:\WINDOWS\system32\drivers\ac97intc.sys
16:27:44.0828 1088 ac97intc - ok
16:27:44.0859 1088 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
16:27:45.0031 1088 ACPI - ok
16:27:45.0046 1088 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
16:27:45.0156 1088 ACPIEC - ok
16:27:45.0171 1088 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
16:27:45.0312 1088 adpu160m - ok
16:27:45.0328 1088 [ 0EA9B1F0C6C90A509C8603775366ADB7 ] adpu320 C:\WINDOWS\system32\DRIVERS\adpu320.sys
16:27:45.0328 1088 adpu320 ( UnsignedFile.Multi.Generic ) - warning
16:27:45.0328 1088 adpu320 - detected UnsignedFile.Multi.Generic (1)
16:27:45.0343 1088 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
16:27:45.0468 1088 aec - ok
16:27:45.0500 1088 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
16:27:45.0546 1088 AFD - ok
16:27:45.0562 1088 Aha154x - ok
16:27:45.0578 1088 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
16:27:45.0703 1088 aic78u2 - ok
16:27:45.0718 1088 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
16:27:45.0828 1088 aic78xx - ok
16:27:45.0859 1088 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
16:27:45.0984 1088 Alerter - ok
16:27:46.0000 1088 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
16:27:46.0046 1088 ALG - ok
16:27:46.0062 1088 AliIde - ok
16:27:46.0062 1088 amsint - ok
16:27:46.0078 1088 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
16:27:46.0125 1088 AppMgmt - ok
16:27:46.0140 1088 asc - ok
16:27:46.0140 1088 asc3350p - ok
16:27:46.0140 1088 asc3550 - ok
16:27:46.0171 1088 [ ED8CEE58C1E4C5893F5B2FD686A272BF ] Aspi32 C:\WINDOWS\system32\drivers\Aspi32.sys
16:27:46.0187 1088 Aspi32 ( UnsignedFile.Multi.Generic ) - warning
16:27:46.0187 1088 Aspi32 - detected UnsignedFile.Multi.Generic (1)
16:27:46.0250 1088 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
16:27:46.0265 1088 aspnet_state - ok
16:27:46.0281 1088 aswArKrn - ok
16:27:46.0312 1088 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
16:27:46.0437 1088 AsyncMac - ok
16:27:46.0453 1088 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
16:27:46.0578 1088 atapi - ok
16:27:46.0593 1088 Atdisk - ok
16:27:46.0625 1088 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
16:27:46.0750 1088 Atmarpc - ok
16:27:46.0796 1088 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
16:27:46.0921 1088 AudioSrv - ok
16:27:46.0937 1088 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
16:27:47.0062 1088 audstub - ok
16:27:47.0093 1088 [ DB22E7062FD88CDD1CC8C99CE59E6B2B ] avgtp C:\WINDOWS\system32\drivers\avgtpx86.sys
16:27:47.0109 1088 avgtp - ok
16:27:47.0140 1088 [ E951D262C9144C05D3B21CCDDA6C7E47 ] b57w2k C:\WINDOWS\system32\DRIVERS\b57xp32.sys
16:27:47.0156 1088 b57w2k - ok
16:27:47.0187 1088 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
16:27:47.0296 1088 Beep - ok
16:27:47.0328 1088 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
16:27:47.0453 1088 BITS - ok
16:27:47.0484 1088 [ 673C79036AB4A47BB8AD555D84FFE42D ] Blfp C:\WINDOWS\system32\DRIVERS\baspxp32.sys
16:27:47.0531 1088 Blfp - ok
16:27:47.0546 1088 [ 8A1F4965B53F418483137B4F5815F775 ] BrcmMgmtAgent C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
16:27:47.0562 1088 BrcmMgmtAgent ( UnsignedFile.Multi.Generic ) - warning
16:27:47.0562 1088 BrcmMgmtAgent - detected UnsignedFile.Multi.Generic (1)
16:27:47.0593 1088 [ A06CE3399D16DB864F55FAEB1F1927A9 ] Browser C:\WINDOWS\System32\browser.dll
16:27:47.0718 1088 Browser - ok
16:27:47.0859 1088 catchme - ok
16:27:47.0890 1088 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
16:27:48.0015 1088 cbidf2k - ok
16:27:48.0015 1088 cd20xrnt - ok
16:27:48.0046 1088 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
16:27:48.0171 1088 Cdaudio - ok
16:27:48.0187 1088 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
16:27:48.0312 1088 Cdfs - ok
16:27:48.0343 1088 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
16:27:48.0468 1088 Cdrom - ok
16:27:48.0468 1088 Changer - ok
16:27:48.0500 1088 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
16:27:48.0609 1088 CiSvc - ok
16:27:48.0640 1088 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
16:27:48.0765 1088 ClipSrv - ok
16:27:48.0796 1088 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:27:48.0812 1088 clr_optimization_v2.0.50727_32 - ok
16:27:48.0812 1088 CmdIde - ok
16:27:48.0828 1088 COMSysApp - ok
16:27:48.0828 1088 Cpqarray - ok
16:27:48.0843 1088 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
16:27:48.0984 1088 CryptSvc - ok
16:27:49.0015 1088 [ C6EE25C79A9AE5A53C29830843D4DCF9 ] Cwbrxd C:\WINDOWS\CWBRXD.EXE
16:27:49.0046 1088 Cwbrxd ( UnsignedFile.Multi.Generic ) - warning
16:27:49.0046 1088 Cwbrxd - detected UnsignedFile.Multi.Generic (1)
16:27:49.0046 1088 dac2w2k - ok
16:27:49.0062 1088 dac960nt - ok
16:27:49.0109 1088 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
16:27:49.0140 1088 DcomLaunch - ok
16:27:49.0171 1088 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
16:27:49.0296 1088 Dhcp - ok
16:27:49.0312 1088 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
16:27:49.0421 1088 Disk - ok
16:27:49.0421 1088 dmadmin - ok
16:27:49.0468 1088 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
16:27:49.0593 1088 dmboot - ok
16:27:49.0609 1088 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
16:27:49.0718 1088 dmio - ok
16:27:49.0750 1088 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
16:27:49.0859 1088 dmload - ok
16:27:49.0875 1088 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
16:27:50.0000 1088 dmserver - ok
16:27:50.0031 1088 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
16:27:50.0140 1088 DMusic - ok
16:27:50.0187 1088 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
16:27:50.0250 1088 Dnscache - ok
16:27:50.0281 1088 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
16:27:50.0390 1088 Dot3svc - ok
16:27:50.0406 1088 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
16:27:50.0546 1088 dpti2o - ok
16:27:50.0578 1088 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
16:27:50.0703 1088 drmkaud - ok
16:27:50.0718 1088 [ 80CEAFB317A9E8A184644B1E22E0BE6E ] E1000 C:\WINDOWS\system32\DRIVERS\e1000325.sys
16:27:50.0734 1088 E1000 - ok
16:27:50.0750 1088 [ 3FCA03CBCA11269F973B70FA483C88EF ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
16:27:50.0890 1088 E100B - ok
16:27:50.0921 1088 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
16:27:51.0046 1088 EapHost - ok
16:27:51.0062 1088 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
16:27:51.0187 1088 ERSvc - ok
16:27:51.0218 1088 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
16:27:51.0234 1088 Eventlog - ok
16:27:51.0281 1088 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll
16:27:51.0328 1088 EventSystem - ok
16:27:51.0343 1088 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
16:27:51.0453 1088 Fastfat - ok
16:27:51.0484 1088 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
16:27:51.0515 1088 FastUserSwitchingCompatibility - ok
16:27:51.0546 1088 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
16:27:51.0671 1088 Fdc - ok
16:27:51.0703 1088 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
16:27:51.0828 1088 Fips - ok
16:27:51.0859 1088 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
16:27:51.0968 1088 Flpydisk - ok
16:27:52.0000 1088 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
16:27:52.0125 1088 FltMgr - ok
16:27:52.0171 1088 [ D5F52D403F29A37F3F6C0912197E7797 ] Fog Service C:\Program Files\FOG\FOGService.exe
16:27:52.0171 1088 Fog Service ( UnsignedFile.Multi.Generic ) - warning
16:27:52.0171 1088 Fog Service - detected UnsignedFile.Multi.Generic (1)
16:27:52.0218 1088 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
16:27:52.0234 1088 FontCache3.0.0.0 - ok
16:27:52.0281 1088 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
16:27:52.0390 1088 Fs_Rec - ok
16:27:52.0421 1088 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
16:27:52.0546 1088 Ftdisk - ok
16:27:52.0562 1088 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
16:27:52.0671 1088 Gpc - ok
16:27:52.0703 1088 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
16:27:52.0828 1088 HDAudBus - ok
16:27:52.0906 1088 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
16:27:53.0046 1088 helpsvc - ok
16:27:53.0062 1088 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
16:27:53.0187 1088 HidServ - ok
16:27:53.0203 1088 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
16:27:53.0328 1088 HidUsb - ok
16:27:53.0359 1088 [ 7EAB073BF5949ED639660787A01B623D ] hitmanpro37 C:\WINDOWS\system32\drivers\hitmanpro37.sys
16:27:53.0375 1088 hitmanpro37 - ok
16:27:53.0406 1088 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
16:27:53.0531 1088 hkmsvc - ok
16:27:53.0531 1088 hpn - ok
16:27:53.0578 1088 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
16:27:53.0609 1088 HTTP - ok
16:27:53.0625 1088 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
16:27:53.0750 1088 HTTPFilter - ok
16:27:53.0750 1088 i2omgmt - ok
16:27:53.0765 1088 i2omp - ok
16:27:53.0781 1088 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
16:27:53.0921 1088 i8042prt - ok
16:27:53.0937 1088 [ 06B7EF73BA5F302EECC294CDF7E19702 ] i81x C:\WINDOWS\system32\DRIVERS\i81xnt5.sys
16:27:54.0062 1088 i81x - ok
16:27:54.0078 1088 [ 7B5B44EFE5EB9DADFB8EE29700885D23 ] iAimFP0 C:\WINDOWS\system32\DRIVERS\wADV01nt.sys
16:27:54.0203 1088 iAimFP0 - ok
16:27:54.0203 1088 [ EB1F6BAB6C22EDE0BA551B527475F7E9 ] iAimFP1 C:\WINDOWS\system32\DRIVERS\wADV02NT.sys
16:27:54.0328 1088 iAimFP1 - ok
16:27:54.0359 1088 [ 03CE989D846C1AA81145CB22FCB86D06 ] iAimFP2 C:\WINDOWS\system32\DRIVERS\wADV05NT.sys
16:27:54.0453 1088 iAimFP2 - ok
16:27:54.0468 1088 [ 525849B4469DE021D5D61B4DB9BE3A9D ] iAimFP3 C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys
16:27:54.0593 1088 iAimFP3 - ok
16:27:54.0609 1088 [ 589C2BCDB5BD602BF7B63D210407EF8C ] iAimFP4 C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys
16:27:54.0718 1088 iAimFP4 - ok
16:27:54.0734 1088 [ 0308AEF61941E4AF478FA1A0F83812F5 ] iAimFP5 C:\WINDOWS\system32\DRIVERS\wADV07nt.sys
16:27:54.0859 1088 iAimFP5 - ok
16:27:54.0890 1088 [ 714038A8AA5DE08E12062202CD7EAEB5 ] iAimFP6 C:\WINDOWS\system32\DRIVERS\wADV08nt.sys
16:27:55.0000 1088 iAimFP6 - ok
16:27:55.0015 1088 [ 7BB3AA595E4507A788DE1CDC63F4C8C4 ] iAimFP7 C:\WINDOWS\system32\DRIVERS\wADV09nt.sys
16:27:55.0140 1088 iAimFP7 - ok
16:27:55.0140 1088 [ D83BDD5C059667A2F647A6BE5703A4D2 ] iAimTV0 C:\WINDOWS\system32\DRIVERS\wATV01nt.sys
16:27:55.0265 1088 iAimTV0 - ok
16:27:55.0281 1088 [ ED968D23354DAA0D7C621580C012A1F6 ] iAimTV1 C:\WINDOWS\system32\DRIVERS\wATV02NT.sys
16:27:55.0390 1088 iAimTV1 - ok
16:27:55.0421 1088 [ D738273F218A224C1DDAC04203F27A84 ] iAimTV3 C:\WINDOWS\system32\DRIVERS\wATV04nt.sys
16:27:55.0546 1088 iAimTV3 - ok
16:27:55.0562 1088 [ 0052D118995CBAB152DAABE6106D1442 ] iAimTV4 C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys
16:27:55.0687 1088 iAimTV4 - ok
16:27:55.0718 1088 [ 791CC45DE6E50445BE72E8AD6401FF45 ] iAimTV5 C:\WINDOWS\system32\DRIVERS\wATV10nt.sys
16:27:55.0828 1088 iAimTV5 - ok
16:27:55.0828 1088 [ 352FA0E98BC461CE1CE5D41F64DB558D ] iAimTV6 C:\WINDOWS\system32\DRIVERS\wATV06nt.sys
16:27:55.0953 1088 iAimTV6 - ok
16:27:56.0078 1088 [ 2AAE7BE67911F4AEC9AD28E9CFB9096F ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
16:27:56.0265 1088 ialm - ok
16:27:56.0296 1088 [ E5A0034847537EAEE3C00349D5C34C5F ] iaStor C:\WINDOWS\system32\DRIVERS\iaStor.sys
16:27:56.0312 1088 iaStor - ok
16:27:56.0375 1088 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
16:27:56.0421 1088 idsvc - ok
16:27:56.0437 1088 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
16:27:56.0578 1088 Imapi - ok
16:27:56.0609 1088 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
16:27:56.0750 1088 ImapiService - ok
16:27:56.0765 1088 ini910u - ok
16:27:56.0890 1088 [ A07D4742186B3CC41B0EDDECBBCEC34A ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:27:57.0078 1088 IntcAzAudAddService - ok
16:27:57.0093 1088 [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
16:27:57.0218 1088 IntelIde - ok
16:27:57.0250 1088 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
16:27:57.0359 1088 intelppm - ok
16:27:57.0375 1088 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
16:27:57.0500 1088 Ip6Fw - ok
16:27:57.0531 1088 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
16:27:57.0640 1088 IpInIp - ok
16:27:57.0656 1088 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
16:27:57.0796 1088 IpNat - ok
16:27:57.0828 1088 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
16:27:57.0953 1088 IPSec - ok
16:27:57.0984 1088 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
16:27:58.0046 1088 IRENUM - ok
16:27:58.0046 1088 Irmon - ok
16:27:58.0078 1088 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
16:27:58.0187 1088 isapnp - ok
16:27:58.0250 1088 [ E4AE0CBC0B55A5FAA6996E38CE6C981B ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
16:27:58.0265 1088 JavaQuickStarterService - ok
16:27:58.0281 1088 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
16:27:58.0406 1088 Kbdclass - ok
16:27:58.0421 1088 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
16:27:58.0546 1088 kbdhid - ok
16:27:58.0562 1088 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
16:27:58.0703 1088 kmixer - ok
16:27:58.0734 1088 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
16:27:58.0796 1088 KSecDD - ok
16:27:58.0828 1088 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
16:27:58.0859 1088 lanmanserver - ok
16:27:58.0890 1088 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
16:27:58.0937 1088 lanmanworkstation - ok
16:27:58.0937 1088 lbrtfdc - ok
16:27:58.0968 1088 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
16:27:59.0093 1088 LmHosts - ok
16:27:59.0156 1088 [ DDF15A42E27E8EFE27B18FD403151A86 ] MatSvc C:\Program Files\Microsoft Fix it Center\Matsvc.exe
16:27:59.0187 1088 MatSvc - ok
16:27:59.0203 1088 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
16:27:59.0328 1088 Messenger - ok
16:27:59.0359 1088 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
16:27:59.0484 1088 mnmdd - ok
16:27:59.0515 1088 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
16:27:59.0640 1088 mnmsrvc - ok
16:27:59.0671 1088 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
16:27:59.0812 1088 Modem - ok
16:27:59.0828 1088 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
16:27:59.0937 1088 Mouclass - ok
16:27:59.0968 1088 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
16:28:00.0093 1088 mouhid - ok
16:28:00.0125 1088 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
16:28:00.0250 1088 MountMgr - ok
16:28:00.0265 1088 MpKsl722956cb - ok
16:28:00.0265 1088 mraid35x - ok
16:28:00.0281 1088 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
16:28:00.0406 1088 MRxDAV - ok
16:28:00.0437 1088 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
16:28:00.0484 1088 MRxSmb - ok
16:28:00.0515 1088 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
16:28:00.0625 1088 MSDTC - ok
16:28:00.0656 1088 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
16:28:00.0781 1088 Msfs - ok
16:28:00.0781 1088 MSIServer - ok
16:28:00.0812 1088 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
16:28:00.0921 1088 MSKSSRV - ok
16:28:00.0937 1088 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
16:28:01.0046 1088 MSPCLOCK - ok
16:28:01.0062 1088 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
16:28:01.0187 1088 MSPQM - ok
16:28:01.0203 1088 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
16:28:01.0328 1088 mssmbios - ok
16:28:01.0375 1088 MSSQL$SQLEXPRESS - ok
16:28:01.0406 1088 [ 1D89EB4E2A99CABD4E81225F4F4C4B25 ] MSSQLServerADHelper c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe
16:28:01.0421 1088 MSSQLServerADHelper - ok
16:28:01.0468 1088 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
16:28:01.0500 1088 Mup - ok
16:28:01.0531 1088 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
16:28:01.0656 1088 napagent - ok
16:28:01.0687 1088 [ 8716356E49A665BDC7B114725B60A456 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
16:28:01.0734 1088 NDIS - ok
16:28:01.0765 1088 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
16:28:01.0828 1088 NdisTapi - ok
16:28:01.0843 1088 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
16:28:01.0968 1088 Ndisuio - ok
16:28:02.0000 1088 [ 5526CFEBB619F7F763BD6A2E1B618078 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
16:28:02.0015 1088 NdisWan - ok
16:28:02.0046 1088 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
16:28:02.0093 1088 NDProxy - ok
16:28:02.0125 1088 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
16:28:02.0234 1088 NetBIOS - ok
16:28:02.0265 1088 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
16:28:02.0406 1088 NetBT - ok
16:28:02.0437 1088 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
16:28:02.0562 1088 NetDDE - ok
16:28:02.0578 1088 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
16:28:02.0703 1088 NetDDEdsdm - ok
16:28:02.0718 1088 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
16:28:02.0843 1088 Netlogon - ok
16:28:02.0890 1088 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
16:28:03.0046 1088 Netman - ok
16:28:03.0140 1088 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:28:03.0156 1088 NetTcpPortSharing - ok
16:28:03.0187 1088 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
16:28:03.0218 1088 Nla - ok
16:28:03.0265 1088 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
16:28:03.0390 1088 Npfs - ok
16:28:03.0421 1088 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
16:28:03.0578 1088 Ntfs - ok
16:28:03.0593 1088 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
16:28:03.0750 1088 NtLmSsp - ok
16:28:03.0781 1088 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
16:28:03.0906 1088 NtmsSvc - ok
16:28:03.0937 1088 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
16:28:04.0062 1088 Null - ok
16:28:04.0078 1088 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
16:28:04.0218 1088 NwlnkFlt - ok
16:28:04.0218 1088 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
16:28:04.0328 1088 NwlnkFwd - ok
16:28:04.0343 1088 nypfwcpf - ok
16:28:04.0359 1088 [ C90018BAFDC7098619A4A95B046B30F3 ] P3 C:\WINDOWS\system32\DRIVERS\p3.sys
16:28:04.0484 1088 P3 - ok
16:28:04.0515 1088 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
16:28:04.0671 1088 Parport - ok
16:28:04.0687 1088 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
16:28:04.0796 1088 PartMgr - ok
16:28:04.0843 1088 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
16:28:04.0968 1088 ParVdm - ok
16:28:04.0984 1088 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
16:28:05.0109 1088 PCI - ok
16:28:05.0125 1088 PCIDump - ok
16:28:05.0171 1088 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
16:28:05.0281 1088 PCIIde - ok
16:28:05.0328 1088 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
16:28:05.0484 1088 Pcmcia - ok
16:28:05.0484 1088 PDCOMP - ok
16:28:05.0531 1088 pdfcDispatcher - ok
16:28:05.0531 1088 PDFRAME - ok
16:28:05.0531 1088 PDRELI - ok
16:28:05.0546 1088 PDRFRAME - ok
16:28:05.0546 1088 perc2 - ok
16:28:05.0562 1088 perc2hib - ok
16:28:05.0593 1088 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
16:28:05.0609 1088 PlugPlay - ok
16:28:05.0625 1088 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
16:28:05.0734 1088 PolicyAgent - ok
16:28:05.0781 1088 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
16:28:05.0906 1088 PptpMiniport - ok
16:28:05.0937 1088 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
16:28:06.0031 1088 ProtectedStorage - ok
16:28:06.0062 1088 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
16:28:06.0203 1088 PSched - ok
16:28:06.0203 1088 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
16:28:06.0328 1088 Ptilink - ok
16:28:06.0328 1088 ql1080 - ok
16:28:06.0343 1088 Ql10wnt - ok
16:28:06.0343 1088 ql12160 - ok
16:28:06.0359 1088 ql1240 - ok
16:28:06.0359 1088 ql1280 - ok
16:28:06.0390 1088 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
16:28:06.0500 1088 RasAcd - ok
16:28:06.0531 1088 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
16:28:06.0671 1088 RasAuto - ok
16:28:06.0671 1088 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
16:28:06.0781 1088 Rasl2tp - ok
16:28:06.0812 1088 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
16:28:06.0953 1088 RasMan - ok
16:28:06.0984 1088 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
16:28:07.0078 1088 RasPppoe - ok
16:28:07.0109 1088 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
16:28:07.0218 1088 Raspti - ok
16:28:07.0234 1088 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
16:28:07.0375 1088 Rdbss - ok
16:28:07.0421 1088 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
16:28:07.0531 1088 RDPCDD - ok
16:28:07.0578 1088 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:28:07.0703 1088 rdpdr - ok
16:28:07.0734 1088 [ 6589DB6E5969F8EEE594CF71171C5028 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
16:28:07.0765 1088 RDPWD - ok
16:28:07.0796 1088 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
16:28:07.0906 1088 RDSessMgr - ok
16:28:07.0937 1088 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
16:28:08.0046 1088 redbook - ok
16:28:08.0093 1088 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
16:28:08.0218 1088 RemoteAccess - ok
16:28:08.0234 1088 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
16:28:08.0343 1088 RemoteRegistry - ok
16:28:08.0375 1088 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
16:28:08.0500 1088 RpcLocator - ok
16:28:08.0531 1088 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\System32\rpcss.dll
16:28:08.0562 1088 RpcSs - ok
16:28:08.0593 1088 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
16:28:08.0718 1088 RSVP - ok
16:28:08.0718 1088 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
16:28:08.0953 1088 SamSs - ok
16:28:09.0000 1088 [ 39763504067962108505BFF25F024345 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
16:28:09.0031 1088 SASDIFSV - ok
16:28:09.0031 1088 [ 77B9FC20084B48408AD3E87570EB4A85 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
16:28:09.0078 1088 SASKUTIL - ok
16:28:09.0109 1088 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
16:28:09.0343 1088 SCardSvr - ok
16:28:09.0390 1088 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
16:28:09.0531 1088 Schedule - ok
16:28:09.0562 1088 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
16:28:09.0640 1088 Secdrv - ok
16:28:09.0671 1088 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
16:28:09.0796 1088 seclogon - ok
16:28:09.0812 1088 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
16:28:09.0953 1088 SENS - ok
16:28:09.0968 1088 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
16:28:10.0078 1088 serenum - ok
16:28:10.0093 1088 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
16:28:10.0250 1088 Serial - ok
16:28:10.0265 1088 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
16:28:10.0390 1088 Sfloppy - ok
16:28:10.0453 1088 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
16:28:10.0609 1088 SharedAccess - ok
16:28:10.0640 1088 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
16:28:10.0687 1088 ShellHWDetection - ok
16:28:10.0687 1088 Simbad - ok
16:28:10.0703 1088 Sparrow - ok
16:28:10.0718 1088 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
16:28:10.0843 1088 splitter - ok
16:28:10.0875 1088 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
16:28:10.0937 1088 Spooler - ok
16:28:10.0953 1088 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] SQLBrowser c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
16:28:10.0968 1088 SQLBrowser - ok
16:28:11.0000 1088 [ D89083C4EB02DACA8F944B0E05E57F9D ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
16:28:11.0015 1088 SQLWriter - ok
16:28:11.0062 1088 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
16:28:11.0140 1088 sr - ok
16:28:11.0171 1088 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
16:28:11.0250 1088 srservice - ok
16:28:11.0281 1088 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
16:28:11.0375 1088 Srv - ok
16:28:11.0421 1088 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
16:28:11.0500 1088 SSDPSRV - ok
16:28:11.0593 1088 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
16:28:11.0750 1088 stisvc - ok
16:28:11.0781 1088 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
16:28:11.0921 1088 swenum - ok
16:28:11.0921 1088 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
16:28:12.0062 1088 swmidi - ok
16:28:12.0062 1088 SwPrv - ok
16:28:12.0109 1088 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
16:28:12.0218 1088 symc810 - ok
16:28:12.0218 1088 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
16:28:12.0359 1088 symc8xx - ok
16:28:12.0375 1088 [ F2B7E8416F508368AC6730E2AE1C614F ] Symmpi C:\WINDOWS\system32\DRIVERS\symmpi.sys
16:28:12.0421 1088 Symmpi ( UnsignedFile.Multi.Generic ) - warning
16:28:12.0421 1088 Symmpi - detected UnsignedFile.Multi.Generic (1)
16:28:12.0437 1088 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
16:28:12.0578 1088 sym_hi - ok
16:28:12.0593 1088 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
16:28:12.0734 1088 sym_u3 - ok
16:28:12.0750 1088 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
16:28:12.0890 1088 sysaudio - ok
16:28:12.0921 1088 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
16:28:13.0046 1088 SysmonLog - ok
16:28:13.0078 1088 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
16:28:13.0187 1088 TapiSrv - ok
16:28:13.0218 1088 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
16:28:13.0250 1088 Tcpip - ok
16:28:13.0265 1088 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
16:28:13.0375 1088 TDPIPE - ok
16:28:13.0406 1088 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
16:28:13.0515 1088 TDTCP - ok
16:28:13.0546 1088 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
16:28:13.0687 1088 TermDD - ok
16:28:13.0718 1088 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
16:28:13.0843 1088 TermService - ok
16:28:13.0875 1088 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
16:28:13.0890 1088 Themes - ok
16:28:13.0921 1088 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
16:28:13.0968 1088 TlntSvr - ok
16:28:13.0984 1088 TosIde - ok
16:28:14.0015 1088 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
16:28:14.0140 1088 TrkWks - ok
16:28:14.0171 1088 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
16:28:14.0296 1088 Udfs - ok
16:28:14.0296 1088 ultra - ok
16:28:14.0328 1088 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
16:28:14.0390 1088 upnphost - ok
16:28:14.0406 1088 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
16:28:14.0515 1088 UPS - ok
16:28:14.0546 1088 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
16:28:14.0671 1088 usbccgp - ok
16:28:14.0703 1088 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
16:28:14.0828 1088 usbehci - ok
16:28:14.0843 1088 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
16:28:14.0968 1088 usbhub - ok
16:28:15.0000 1088 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
16:28:15.0125 1088 USBSTOR - ok
16:28:15.0140 1088 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
16:28:15.0250 1088 usbuhci - ok
16:28:15.0265 1088 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
16:28:15.0390 1088 VgaSave - ok
16:28:15.0421 1088 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
16:28:15.0546 1088 ViaIde - ok
16:28:15.0562 1088 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
16:28:15.0687 1088 VolSnap - ok
16:28:15.0718 1088 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
16:28:15.0781 1088 VSS - ok
16:28:15.0812 1088 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\system32\w32time.dll
16:28:15.0921 1088 W32Time - ok
16:28:15.0968 1088 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
16:28:16.0093 1088 Wanarp - ok
16:28:16.0093 1088 WDICA - ok
16:28:16.0125 1088 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
16:28:16.0250 1088 wdmaud - ok
16:28:16.0265 1088 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
16:28:16.0406 1088 WebClient - ok
16:28:16.0468 1088 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
16:28:16.0593 1088 winmgmt - ok
16:28:16.0625 1088 [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
16:28:16.0734 1088 WmdmPmSN - ok
16:28:16.0765 1088 [ E76F8807070ED04E7408A86D6D3A6137 ] Wmi C:\WINDOWS\System32\advapi32.dll
16:28:16.0796 1088 Wmi - ok
16:28:16.0812 1088 [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
16:28:16.0921 1088 WmiAcpi - ok
16:28:16.0953 1088 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
16:28:17.0093 1088 WmiApSrv - ok
16:28:17.0125 1088 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
16:28:17.0250 1088 WS2IFSL - ok
16:28:17.0265 1088 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
16:28:17.0406 1088 wscsvc - ok
16:28:17.0437 1088 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
16:28:17.0562 1088 wuauserv - ok
16:28:17.0609 1088 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
16:28:17.0734 1088 WZCSVC - ok
16:28:17.0750 1088 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
16:28:17.0890 1088 xmlprov - ok
16:28:17.0906 1088 ================ Scan global ===============================
16:28:17.0937 1088 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
16:28:17.0984 1088 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:28:17.0984 1088 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:28:18.0000 1088 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
16:28:18.0000 1088 [Global] - ok

16:28:18.0015 1088 ================ Scan MBR ==================================
16:28:18.0031 1088 [ 4975BDBEDA8A3AFB2AEADEFC06CE9E12 ] \Device\Harddisk0\DR0
16:28:18.0250 1088 \Device\Harddisk0\DR0 - ok
16:28:18.0250 1088 ================ Scan VBR ==================================
16:28:18.0281 1088 [ DD55B00384CAA514AD015B417D2AA37C ] \Device\Harddisk0\DR0\Partition1
16:28:18.0281 1088 \Device\Harddisk0\DR0\Partition1 - ok
16:28:18.0281 1088 ================ Scan active images ========================
16:28:18.0296 1088 [ E28726B72C46821A28830E077D39A55B ] C:\WINDOWS\system32\drivers\videoprt.sys
16:28:18.0296 1088 C:\WINDOWS\system32\drivers\videoprt.sys - ok
16:28:18.0296 1088 [ 2AAE7BE67911F4AEC9AD28E9CFB9096F ] C:\WINDOWS\system32\drivers\igxpmp32.sys
16:28:18.0296 1088 C:\WINDOWS\system32\drivers\igxpmp32.sys - ok
16:28:18.0296 1088 [ 791912E524CC2CC6F50B5F2B52D1EB71 ] C:\WINDOWS\system32\drivers\usbport.sys
16:28:18.0296 1088 C:\WINDOWS\system32\drivers\usbport.sys - ok
16:28:18.0296 1088 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] C:\WINDOWS\system32\drivers\usbuhci.sys
16:28:18.0296 1088 C:\WINDOWS\system32\drivers\usbuhci.sys - ok
16:28:18.0312 1088 [ 573C7D0A32852B48F3058CFD8026F511 ] C:\WINDOWS\system32\drivers\hdaudbus.sys
16:28:18.0312 1088 C:\WINDOWS\system32\drivers\hdaudbus.sys - ok
16:28:18.0312 1088 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] C:\WINDOWS\system32\drivers\usbehci.sys
16:28:18.0312 1088 C:\WINDOWS\system32\drivers\usbehci.sys - ok
16:28:18.0312 1088 [ E951D262C9144C05D3B21CCDDA6C7E47 ] C:\WINDOWS\system32\drivers\b57xp32.sys
16:28:18.0312 1088 C:\WINDOWS\system32\drivers\b57xp32.sys - ok
16:28:18.0328 1088 [ 4A0B06AA8943C1E332520F7440C0AA30 ] C:\WINDOWS\system32\drivers\i8042prt.sys
16:28:18.0328 1088 C:\WINDOWS\system32\drivers\i8042prt.sys - ok
16:28:18.0328 1088 [ 463C1EC80CD17420A542B7F36A36F128 ] C:\WINDOWS\system32\drivers\kbdclass.sys
16:28:18.0328 1088 C:\WINDOWS\system32\drivers\kbdclass.sys - ok
16:28:18.0328 1088 [ 35C9E97194C8CFB8430125F8DBC34D04 ] C:\WINDOWS\system32\drivers\mouclass.sys
16:28:18.0328 1088 C:\WINDOWS\system32\drivers\mouclass.sys - ok
16:28:18.0343 1088 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] C:\WINDOWS\system32\drivers\parport.sys
16:28:18.0343 1088 C:\WINDOWS\system32\drivers\parport.sys - ok
16:28:18.0343 1088 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] C:\WINDOWS\system32\drivers\serial.sys
16:28:18.0343 1088 C:\WINDOWS\system32\drivers\serial.sys - ok
16:28:18.0343 1088 [ 1F4260CC5B42272D71F79E570A27A4FE ] C:\WINDOWS\system32\drivers\cdrom.sys
16:28:18.0343 1088 C:\WINDOWS\system32\drivers\cdrom.sys - ok
16:28:18.0359 1088 [ 0753515F78DF7F271A5E61C20BCD36A1 ] C:\WINDOWS\system32\drivers\ks.sys
16:28:18.0359 1088 C:\WINDOWS\system32\drivers\ks.sys - ok
16:28:18.0359 1088 [ F828DD7E1419B6653894A8F97A0094C5 ] C:\WINDOWS\system32\drivers\redbook.sys
16:28:18.0359 1088 C:\WINDOWS\system32\drivers\redbook.sys - ok
16:28:18.0359 1088 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] C:\WINDOWS\system32\drivers\serenum.sys
16:28:18.0359 1088 C:\WINDOWS\system32\drivers\serenum.sys - ok
16:28:18.0375 1088 [ D9F724AA26C010A217C97606B160ED68 ] C:\WINDOWS\system32\drivers\audstub.sys
16:28:18.0375 1088 C:\WINDOWS\system32\drivers\audstub.sys - ok
16:28:18.0375 1088 [ 8C953733D8F36EB2133F5BB58808B66B ] C:\WINDOWS\system32\drivers\intelppm.sys
16:28:18.0375 1088 C:\WINDOWS\system32\drivers\intelppm.sys - ok
16:28:18.0390 1088 [ 0109C4F3850DFBAB279542515386AE22 ] C:\WINDOWS\system32\drivers\ndistapi.sys
16:28:18.0390 1088 C:\WINDOWS\system32\drivers\ndistapi.sys - ok
16:28:18.0390 1088 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] C:\WINDOWS\system32\drivers\rasl2tp.sys
16:28:18.0390 1088 C:\WINDOWS\system32\drivers\rasl2tp.sys - ok
16:28:18.0390 1088 [ C42584FD66CE9E17403AEBCA199F7BDB ] C:\WINDOWS\system32\drivers\wmiacpi.sys
16:28:18.0390 1088 C:\WINDOWS\system32\drivers\wmiacpi.sys - ok
16:28:18.0406 1088 [ 5526CFEBB619F7F763BD6A2E1B618078 ] C:\WINDOWS\system32\drivers\ndiswan.sys
16:28:18.0406 1088 C:\WINDOWS\system32\drivers\ndiswan.sys - ok
16:28:18.0406 1088 [ 5BC962F2654137C9909C3D4603587DEE ] C:\WINDOWS\system32\drivers\raspppoe.sys
16:28:18.0406 1088 C:\WINDOWS\system32\drivers\raspppoe.sys - ok
16:28:18.0406 1088 [ 0539D5E53587F82D1B4FD74C5BE205CF ] C:\WINDOWS\system32\drivers\tdi.sys
16:28:18.0406 1088 C:\WINDOWS\system32\drivers\tdi.sys - ok
16:28:18.0421 1088 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] C:\WINDOWS\system32\drivers\msgpc.sys
16:28:18.0421 1088 C:\WINDOWS\system32\drivers\msgpc.sys - ok
16:28:18.0421 1088 [ 09298EC810B07E5D582CB3A3F9255424 ] C:\WINDOWS\system32\drivers\psched.sys
16:28:18.0421 1088 C:\WINDOWS\system32\drivers\psched.sys - ok
16:28:18.0421 1088 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] C:\WINDOWS\system32\drivers\raspptp.sys
16:28:18.0421 1088 C:\WINDOWS\system32\drivers\raspptp.sys - ok
16:28:18.0421 1088 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] C:\WINDOWS\system32\drivers\ptilink.sys
16:28:18.0421 1088 C:\WINDOWS\system32\drivers\ptilink.sys - ok
16:28:18.0437 1088 [ FDBB1D60066FCFBB7452FD8F9829B242 ] C:\WINDOWS\system32\drivers\raspti.sys
16:28:18.0437 1088 C:\WINDOWS\system32\drivers\raspti.sys - ok
16:28:18.0437 1088 [ 15CABD0F7C00C47C70124907916AF3F1 ] C:\WINDOWS\system32\drivers\rdpdr.sys
16:28:18.0437 1088 C:\WINDOWS\system32\drivers\rdpdr.sys - ok
16:28:18.0437 1088 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] C:\WINDOWS\system32\drivers\swenum.sys
16:28:18.0437 1088 C:\WINDOWS\system32\drivers\swenum.sys - ok
16:28:18.0453 1088 [ 88155247177638048422893737429D9E ] C:\WINDOWS\system32\drivers\termdd.sys
16:28:18.0453 1088 C:\WINDOWS\system32\drivers\termdd.sys - ok
16:28:18.0453 1088 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] C:\WINDOWS\system32\drivers\mssmbios.sys
16:28:18.0453 1088 C:\WINDOWS\system32\drivers\mssmbios.sys - ok
16:28:18.0453 1088 [ 9282BD12DFB069D3889EB3FCC1000A9B ] C:\WINDOWS\system32\drivers\ndproxy.sys
16:28:18.0453 1088 C:\WINDOWS\system32\drivers\ndproxy.sys - ok
16:28:18.0468 1088 [ 596EB39B50D6EBD9B734DC4AE0544693 ] C:\WINDOWS\system32\drivers\usbd.sys
16:28:18.0468 1088 C:\WINDOWS\system32\drivers\usbd.sys - ok
16:28:18.0468 1088 [ 1AB3CDDE553B6E064D2E754EFE20285C ] C:\WINDOWS\system32\drivers\usbhub.sys
16:28:18.0468 1088 C:\WINDOWS\system32\drivers\usbhub.sys - ok
16:28:18.0468 1088 [ 6CB08593487F5701D2D2254E693EAFCE ] C:\WINDOWS\system32\drivers\drmk.sys
16:28:18.0468 1088 C:\WINDOWS\system32\drivers\drmk.sys - ok
16:28:18.0484 1088 [ E82A496C3961EFC6828B508C310CE98F ] C:\WINDOWS\system32\drivers\portcls.sys
16:28:18.0484 1088 C:\WINDOWS\system32\drivers\portcls.sys - ok
16:28:18.0484 1088 [ A07D4742186B3CC41B0EDDECBBCEC34A ] C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:28:18.0484 1088 C:\WINDOWS\system32\drivers\RtkHDAud.sys - ok
16:28:18.0484 1088 [ DB22E7062FD88CDD1CC8C99CE59E6B2B ] C:\WINDOWS\system32\drivers\avgtpx86.sys
16:28:18.0484 1088 C:\WINDOWS\system32\drivers\avgtpx86.sys - ok
16:28:18.0500 1088 [ DA1F27D85E0D1525F6621372E7B685E9 ] C:\WINDOWS\system32\drivers\beep.sys
16:28:18.0500 1088 C:\WINDOWS\system32\drivers\beep.sys - ok
16:28:18.0500 1088 [ C1B486A7658353D33A10CC15211A873B ] C:\WINDOWS\system32\drivers\cdaudio.sys
16:28:18.0500 1088 C:\WINDOWS\system32\drivers\cdaudio.sys - ok
16:28:18.0500 1088 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] C:\WINDOWS\system32\drivers\fs_rec.sys
16:28:18.0500 1088 C:\WINDOWS\system32\drivers\fs_rec.sys - ok
16:28:18.0515 1088 [ 96ECCF28FDBF1B2CC12725818A63628D ] C:\WINDOWS\system32\drivers\hidparse.sys
16:28:18.0515 1088 C:\WINDOWS\system32\drivers\hidparse.sys - ok
16:28:18.0515 1088 [ 9EF487A186DEA361AA06913A75B3FA99 ] C:\WINDOWS\system32\drivers\kbdhid.sys
16:28:18.0515 1088 C:\WINDOWS\system32\drivers\kbdhid.sys - ok
16:28:18.0515 1088 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] C:\WINDOWS\system32\drivers\null.sys
16:28:18.0515 1088 C:\WINDOWS\system32\drivers\null.sys - ok
16:28:18.0531 1088 [ 8E6B8C671615D126FDC553D1E2DE5562 ] C:\WINDOWS\system32\drivers\sfloppy.sys
16:28:18.0531 1088 C:\WINDOWS\system32\drivers\sfloppy.sys - ok
16:28:18.0531 1088 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] C:\WINDOWS\system32\drivers\vga.sys
16:28:18.0531 1088 C:\WINDOWS\system32\drivers\vga.sys - ok
16:28:18.0531 1088 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] C:\WINDOWS\system32\drivers\mnmdd.sys
16:28:18.0531 1088 C:\WINDOWS\system32\drivers\mnmdd.sys - ok
16:28:18.0546 1088 [ 4912D5B403614CE99C28420F75353332 ] C:\WINDOWS\system32\drivers\rdpcdd.sys
16:28:18.0546 1088 C:\WINDOWS\system32\drivers\rdpcdd.sys - ok
16:28:18.0546 1088 [ 23C74D75E36E7158768DD63D92789A91 ] C:\WINDOWS\system32\drivers\ipsec.sys
16:28:18.0546 1088 C:\WINDOWS\system32\drivers\ipsec.sys - ok
16:28:18.0546 1088 [ C941EA2454BA8350021D774DAF0F1027 ] C:\WINDOWS\system32\drivers\msfs.sys
16:28:18.0546 1088 C:\WINDOWS\system32\drivers\msfs.sys - ok
16:28:18.0562 1088 [ 3182D64AE053D6FB034F44B6DEF8034A ] C:\WINDOWS\system32\drivers\npfs.sys
16:28:18.0562 1088 C:\WINDOWS\system32\drivers\npfs.sys - ok
16:28:18.0562 1088 [ FE0D99D6F31E4FAD8159F690D68DED9C ] C:\WINDOWS\system32\drivers\rasacd.sys
16:28:18.0562 1088 C:\WINDOWS\system32\drivers\rasacd.sys - ok
16:28:18.0562 1088 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] C:\WINDOWS\system32\drivers\tcpip.sys
16:28:18.0562 1088 C:\WINDOWS\system32\drivers\tcpip.sys - ok
16:28:18.0578 1088 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] C:\WINDOWS\system32\drivers\netbt.sys
16:28:18.0578 1088 C:\WINDOWS\system32\drivers\netbt.sys - ok
16:28:18.0578 1088 [ CC748EA12C6EFFDE940EE98098BF96BB ] C:\WINDOWS\system32\drivers\ipnat.sys
16:28:18.0578 1088 C:\WINDOWS\system32\drivers\ipnat.sys - ok
16:28:18.0578 1088 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] C:\WINDOWS\system32\drivers\ws2ifsl.sys
16:28:18.0578 1088 C:\WINDOWS\system32\drivers\ws2ifsl.sys - ok
16:28:18.0593 1088 [ 39763504067962108505BFF25F024345 ] C:\Program Files\SUPERAntiSpyware\sasdifsv.sys
16:28:18.0593 1088 C:\Program Files\SUPERAntiSpyware\sasdifsv.sys - ok
16:28:18.0593 1088 [ 77B9FC20084B48408AD3E87570EB4A85 ] C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
16:28:18.0593 1088 C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS - ok
16:28:18.0593 1088 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] C:\WINDOWS\system32\drivers\afd.sys
16:28:18.0593 1088 C:\WINDOWS\system32\drivers\afd.sys - ok
16:28:18.0609 1088 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] C:\WINDOWS\system32\drivers\netbios.sys
16:28:18.0609 1088 C:\WINDOWS\system32\drivers\netbios.sys - ok
16:28:18.0609 1088 [ C90018BAFDC7098619A4A95B046B30F3 ] C:\WINDOWS\system32\drivers\p3.sys
16:28:18.0609 1088 C:\WINDOWS\system32\drivers\p3.sys - ok
16:28:18.0609 1088 [ 7AD224AD1A1437FE28D89CF22B17780A ] C:\WINDOWS\system32\drivers\rdbss.sys
16:28:18.0609 1088 C:\WINDOWS\system32\drivers\rdbss.sys - ok
16:28:18.0625 1088 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] C:\WINDOWS\system32\drivers\mrxsmb.sys
16:28:18.0625 1088 C:\WINDOWS\system32\drivers\mrxsmb.sys - ok
16:28:18.0625 1088 [ 083A052659F5310DD8B6A6CB05EDCF8E ] C:\WINDOWS\system32\drivers\imapi.sys
16:28:18.0625 1088 C:\WINDOWS\system32\drivers\imapi.sys - ok
16:28:18.0625 1088 [ F7EABCA8375EA2DC6F35C4BCA4757515 ] C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
16:28:18.0625 1088 C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys - ok
16:28:18.0640 1088 [ D45926117EB9FA946A6AF572FBE1CAA3 ] C:\WINDOWS\system32\drivers\fips.sys
16:28:18.0640 1088 C:\WINDOWS\system32\drivers\fips.sys - ok
16:28:18.0640 1088 [ F8F0D25CA553E39DDE485D8FC7FCCE89 ] C:\WINDOWS\system32\ntdll.dll
16:28:18.0640 1088 C:\WINDOWS\system32\ntdll.dll - ok
16:28:18.0640 1088 [ 5F816C1F539266D2D4C78694239DA0B5 ] C:\WINDOWS\system32\smss.exe
16:28:18.0640 1088 C:\WINDOWS\system32\smss.exe - ok
16:28:18.0656 1088 [ 23043C91A0F9DFB4B9E9F87B680863B4 ] C:\WINDOWS\system32\autochk.exe
16:28:18.0656 1088 C:\WINDOWS\system32\autochk.exe - ok
16:28:18.0656 1088 [ 9DD07AF82244867CA36681EA2D29CE79 ] C:\WINDOWS\system32\sfcfiles.dll
16:28:18.0656 1088 C:\WINDOWS\system32\sfcfiles.dll - ok
16:28:18.0656 1088 [ 1AF592532532A402ED7C060F6954004F ] C:\WINDOWS\system32\drivers\hidclass.sys
16:28:18.0656 1088 C:\WINDOWS\system32\drivers\hidclass.sys - ok
16:28:18.0671 1088 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] C:\WINDOWS\system32\drivers\hidusb.sys
16:28:18.0671 1088 C:\WINDOWS\system32\drivers\hidusb.sys - ok
16:28:18.0671 1088 [ C885B02847F5D2FD45A24E219ED93B32 ] C:\WINDOWS\system32\drivers\cdfs.sys
16:28:18.0671 1088 C:\WINDOWS\system32\drivers\cdfs.sys - ok
16:28:18.0671 1088 [ B1C303E17FB9D46E87A98E4BA6769685 ] C:\WINDOWS\system32\drivers\mouhid.sys
16:28:18.0671 1088 C:\WINDOWS\system32\drivers\mouhid.sys - ok
16:28:18.0687 1088 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] C:\WINDOWS\system32\drivers\atapi.sys
16:28:18.0687 1088 C:\WINDOWS\system32\drivers\atapi.sys - ok
16:28:18.0687 1088 [ 2F31B7F954BED437F2C75026C65CAF7B ] C:\WINDOWS\system32\drivers\wmilib.sys
16:28:18.0687 1088 C:\WINDOWS\system32\drivers\wmilib.sys - ok
16:28:18.0687 1088 [ FE97D0343ACFDEBDD578FC67CC91FA87 ] C:\WINDOWS\system32\drivers\dxapi.sys
16:28:18.0687 1088 C:\WINDOWS\system32\drivers\dxapi.sys - ok
16:28:18.0703 1088 [ 9A10AACBFDC4922715375FB4065EC930 ] C:\WINDOWS\system32\watchdog.sys
16:28:18.0703 1088 C:\WINDOWS\system32\watchdog.sys - ok
16:28:18.0703 1088 [ DFF851C4D8977A26F95B929A0B89BB5D ] C:\WINDOWS\system32\win32k.sys
16:28:18.0703 1088 C:\WINDOWS\system32\win32k.sys - ok
16:28:18.0703 1088 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
16:28:18.0703 1088 C:\WINDOWS\system32\basesrv.dll - ok
16:28:18.0718 1088 [ DD40363ABAD230A84C5E2178B11EFA88 ] C:\WINDOWS\system32\csrsrv.dll
16:28:18.0718 1088 C:\WINDOWS\system32\csrsrv.dll - ok
16:28:18.0718 1088 [ 44F275C64738EA2056E3D9580C23B60F ] C:\WINDOWS\system32\csrss.exe
16:28:18.0718 1088 C:\WINDOWS\system32\csrss.exe - ok
16:28:18.0718 1088 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:28:18.0718 1088 C:\WINDOWS\system32\winsrv.dll - ok
16:28:18.0734 1088 [ 8B1F3320AEBB536E021A5014409862DE ] C:\WINDOWS\system32\gdi32.dll
16:28:18.0734 1088 C:\WINDOWS\system32\gdi32.dll - ok
16:28:18.0734 1088 [ B921FB870C9AC0D509B2CCABBBBE95F3 ] C:\WINDOWS\system32\kernel32.dll
16:28:18.0734 1088 C:\WINDOWS\system32\kernel32.dll - ok
16:28:18.0734 1088 [ B26B135FF1B9F60C9388B4A7D16F600B ] C:\WINDOWS\system32\user32.dll
16:28:18.0734 1088 C:\WINDOWS\system32\user32.dll - ok
16:28:18.0750 1088 [ AC7280566A7BB85CB3291F04DDC1198E ] C:\WINDOWS\system32\drivers\dxg.sys
16:28:18.0750 1088 C:\WINDOWS\system32\drivers\dxg.sys - ok
16:28:18.0750 1088 [ A73F5D6705B1D820C19B18782E176EFD ] C:\WINDOWS\system32\drivers\dxgthk.sys
16:28:18.0750 1088 C:\WINDOWS\system32\drivers\dxgthk.sys - ok
16:28:18.0750 1088 [ E95967EB24F5036998947E771E5BE734 ] C:\WINDOWS\system32\igxpgd32.dll
16:28:18.0750 1088 C:\WINDOWS\system32\igxpgd32.dll - ok
16:28:18.0750 1088 [ 9326C80A449CE799977207138B9F7FEE ] C:\WINDOWS\system32\igxprd32.dll
16:28:18.0750 1088 C:\WINDOWS\system32\igxprd32.dll - ok
16:28:18.0765 1088 [ ECB7591870F8BFB1A4C17B718AD5A4AA ] C:\WINDOWS\system32\vga.dll
16:28:18.0765 1088 C:\WINDOWS\system32\vga.dll - ok
16:28:18.0765 1088 [ EE34119CD544A50A0D5F6E0750DAA389 ] C:\WINDOWS\system32\igxpdv32.dll
16:28:18.0765 1088 C:\WINDOWS\system32\igxpdv32.dll - ok
16:28:18.0765 1088 [ 2680FC3AA485925DCFE9ADF853FCF267 ] C:\WINDOWS\system32\igxpdx32.dll
16:28:18.0765 1088 C:\WINDOWS\system32\igxpdx32.dll - ok
16:28:18.0781 1088 [ ED0EF0A136DEC83DF69F04118870003E ] C:\WINDOWS\system32\winlogon.exe
16:28:18.0781 1088 C:\WINDOWS\system32\winlogon.exe - ok
16:28:18.0781 1088 [ E76F8807070ED04E7408A86D6D3A6137 ] C:\WINDOWS\system32\advapi32.dll
16:28:18.0781 1088 C:\WINDOWS\system32\advapi32.dll - ok
16:28:18.0781 1088 [ D4502F124289A31976130CCCB014C9AA ] C:\WINDOWS\system32\rpcrt4.dll
16:28:18.0781 1088 C:\WINDOWS\system32\rpcrt4.dll - ok
16:28:18.0796 1088 [ 5357826C8A8DD6A07F17C48BB45BE46E ] C:\WINDOWS\system32\secur32.dll
16:28:18.0796 1088 C:\WINDOWS\system32\secur32.dll - ok
16:28:18.0796 1088 [ 714705F29A917993536A6AB2DEDB0B7F ] C:\WINDOWS\system32\authz.dll
16:28:18.0796 1088 C:\WINDOWS\system32\authz.dll - ok
16:28:18.0796 1088 [ 355EDBB4D412B01F1740C17E3F50FA00 ] C:\WINDOWS\system32\msvcrt.dll
16:28:18.0796 1088 C:\WINDOWS\system32\msvcrt.dll - ok
16:28:18.0812 1088 [ 64416C6E07606720C1ECE6DD374BDFFD ] C:\WINDOWS\system32\crypt32.dll
16:28:18.0812 1088 C:\WINDOWS\system32\crypt32.dll - ok
16:28:18.0812 1088 [ 04D898830DF96A17A20FD35D7590F87E ] C:\WINDOWS\system32\msasn1.dll
16:28:18.0812 1088 C:\WINDOWS\system32\msasn1.dll - ok
16:28:18.0812 1088 [ 013C1148C1EC025596896E093F60F608 ] C:\WINDOWS\system32\nddeapi.dll
16:28:18.0812 1088 C:\WINDOWS\system32\nddeapi.dll - ok
16:28:18.0828 1088 [ 318230E845919255EF3C5D5E1E863631 ] C:\WINDOWS\system32\netapi32.dll
16:28:18.0828 1088 C:\WINDOWS\system32\netapi32.dll - ok
16:28:18.0828 1088 [ FCFA1C55971CC229D353B3A15ACCD995 ] C:\WINDOWS\system32\profmap.dll
16:28:18.0828 1088 C:\WINDOWS\system32\profmap.dll - ok
16:28:18.0828 1088 [ 9CFCB3CA3D83B4EAA133F0644A2C6F31 ] C:\WINDOWS\system32\psapi.dll
16:28:18.0828 1088 C:\WINDOWS\system32\psapi.dll - ok
16:28:18.0843 1088 [ 43D13C80EBEC0135A3611E0F616F179B ] C:\WINDOWS\system32\userenv.dll
16:28:18.0843 1088 C:\WINDOWS\system32\userenv.dll - ok
16:28:18.0843 1088 [ AF11C591F2F4AFF4A6CF699D376F618B ] C:\WINDOWS\system32\regapi.dll
16:28:18.0843 1088 C:\WINDOWS\system32\regapi.dll - ok
16:28:18.0843 1088 [ 24192246760E0E64435522E246B1D6C2 ] C:\WINDOWS\system32\setupapi.dll
16:28:18.0843 1088 C:\WINDOWS\system32\setupapi.dll - ok
16:28:18.0859 1088 [ C7CE131408739B0B3A318BE2D0032719 ] C:\WINDOWS\system32\version.dll
16:28:18.0859 1088 C:\WINDOWS\system32\version.dll - ok
16:28:18.0859 1088 [ 430CEB794F6E6EF8AC86958C242366D6 ] C:\WINDOWS\system32\winsta.dll
16:28:18.0859 1088 C:\WINDOWS\system32\winsta.dll - ok
16:28:18.0859 1088 [ FFC01A72D1C25CCB39F61B202CE60819 ] C:\WINDOWS\system32\imagehlp.dll
16:28:18.0859 1088 C:\WINDOWS\system32\imagehlp.dll - ok
16:28:18.0875 1088 [ 95F5C420E9BDD4C3569602911420A774 ] C:\WINDOWS\system32\wintrust.dll
16:28:18.0875 1088 C:\WINDOWS\system32\wintrust.dll - ok
16:28:18.0875 1088 [ 0DA85218E92526972A821587E6A8BF8F ] C:\WINDOWS\system32\imm32.dll
16:28:18.0875 1088 C:\WINDOWS\system32\imm32.dll - ok
16:28:18.0875 1088 [ 9789E95E1D88EEB4B922BF3EA7779C28 ] C:\WINDOWS\system32\ws2help.dll
16:28:18.0875 1088 C:\WINDOWS\system32\ws2help.dll - ok
16:28:18.0875 1088 [ 2CCC474EB85CEAA3E1FA1726580A3E5A ] C:\WINDOWS\system32\ws2_32.dll
16:28:18.0875 1088 C:\WINDOWS\system32\ws2_32.dll - ok
16:28:18.0890 1088 [ 56C5B179FE3308B655EB6208C3256FEC ] C:\WINDOWS\system32\kbdus.dll
16:28:18.0890 1088 C:\WINDOWS\system32\kbdus.dll - ok
16:28:18.0890 1088 [ D7B7A57C0E57C836F18CF12A4C62A1CA ] C:\WINDOWS\system32\msgina.dll
16:28:18.0890 1088 C:\WINDOWS\system32\msgina.dll - ok
16:28:18.0890 1088 [ 93AFB83FBC1F9443CAC722FCA63D73BF ] C:\WINDOWS\system32\comctl32.dll
16:28:18.0890 1088 C:\WINDOWS\system32\comctl32.dll - ok
16:28:18.0906 1088 [ 86987A5000DFA3EBE2275C0456BCF2FE ] C:\WINDOWS\system32\comdlg32.dll
16:28:18.0906 1088 C:\WINDOWS\system32\comdlg32.dll - ok
16:28:18.0906 1088 [ 40B0F98BAD16AD5DEF894E88C3EF8014 ] C:\WINDOWS\system32\odbc32.dll
16:28:18.0906 1088 C:\WINDOWS\system32\odbc32.dll - ok
16:28:18.0906 1088 [ 6843D54BC4A40CC8C5741AF750233D10 ] C:\WINDOWS\system32\shell32.dll
16:28:18.0906 1088 C:\WINDOWS\system32\shell32.dll - ok
16:28:18.0906 1088 [ C448A248B743F5FB935C787A5D97268B ] C:\WINDOWS\system32\shlwapi.dll
16:28:18.0906 1088 C:\WINDOWS\system32\shlwapi.dll - ok
16:28:18.0921 1088 [ 694503348B586E99D56C0E30AB5B3EF8 ] C:\WINDOWS\system32\sxs.dll
16:28:18.0921 1088 C:\WINDOWS\system32\sxs.dll - ok
16:28:18.0921 1088 [ 736B12B725AEB2B07F0241A9F680CB10 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
16:28:18.0921 1088 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll - ok
16:28:18.0921 1088 [ 6B7C6B32F8E84D56C6260D684019FEA2 ] C:\WINDOWS\system32\odbcint.dll
16:28:18.0921 1088 C:\WINDOWS\system32\odbcint.dll - ok
16:28:18.0937 1088 [ 99BC0B50F511924348BE19C7C7313BBF ] C:\WINDOWS\system32\shsvcs.dll
16:28:18.0937 1088 C:\WINDOWS\system32\shsvcs.dll - ok
16:28:18.0937 1088 [ 6BAD1BED9872E62049E487FB91AE2F3A ] C:\WINDOWS\system32\ole32.dll
16:28:18.0937 1088 C:\WINDOWS\system32\ole32.dll - ok
16:28:18.0937 1088 [ 96E1C926F22EE1BFBAE82901A35F6BF3 ] C:\WINDOWS\system32\sfc.dll
16:28:18.0937 1088 C:\WINDOWS\system32\sfc.dll - ok
16:28:18.0937 1088 [ 6B5DB6789177A4FD0DEBC248041D0739 ] C:\WINDOWS\system32\sfc_os.dll
16:28:18.0937 1088 C:\WINDOWS\system32\sfc_os.dll - ok
16:28:18.0953 1088 [ CF492D7E9AF1C628B3536D20EF6F5CC7 ] C:\WINDOWS\system32\apphelp.dll
16:28:18.0953 1088 C:\WINDOWS\system32\apphelp.dll - ok
16:28:18.0953 1088 [ BF2466B3E18E970D8A976FB95FC1CA85 ] C:\WINDOWS\system32\lsass.exe
16:28:18.0953 1088 C:\WINDOWS\system32\lsass.exe - ok
16:28:18.0953 1088 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
16:28:18.0953 1088 C:\WINDOWS\system32\services.exe - ok
16:28:18.0968 1088 [ E20B95BAEDB550F32DD489265C1DA1F6 ] C:\WINDOWS\system32\drivers\wanarp.sys
16:28:18.0968 1088 C:\WINDOWS\system32\drivers\wanarp.sys - ok
16:28:18.0968 1088 [ BD31DC6DBE9333C4FBD4BDF0899F2160 ] C:\WINDOWS\system32\lsasrv.dll
16:28:18.0968 1088 C:\WINDOWS\system32\lsasrv.dll - ok
16:28:18.0968 1088 [ EC29A79F1E76DC509E24D401F29D0678 ] C:\WINDOWS\system32\ncobjapi.dll
16:28:18.0968 1088 C:\WINDOWS\system32\ncobjapi.dll - ok
16:28:18.0968 1088 [ F404830F3CD9BF8F2515E489C0CDA297 ] C:\WINDOWS\system32\msvcp60.dll
16:28:18.0968 1088 C:\WINDOWS\system32\msvcp60.dll - ok
16:28:18.0984 1088 [ B24A42A413E694AD73FDFB7FBD492C31 ] C:\WINDOWS\system32\scesrv.dll
16:28:18.0984 1088 C:\WINDOWS\system32\scesrv.dll - ok
16:28:18.0984 1088 [ 389496118B3B03C2328024AF320132AC ] C:\WINDOWS\system32\dnsapi.dll
16:28:18.0984 1088 C:\WINDOWS\system32\dnsapi.dll - ok
16:28:18.0984 1088 [ DD7BD97FB8BD800963789158A5E4B41D ] C:\WINDOWS\system32\mpr.dll
16:28:18.0984 1088 C:\WINDOWS\system32\mpr.dll - ok
16:28:19.0000 1088 [ EC4C0D9BFD9F7E33F8B395AD54E13063 ] C:\WINDOWS\system32\ntdsapi.dll
16:28:19.0000 1088 C:\WINDOWS\system32\ntdsapi.dll - ok
16:28:19.0000 1088 [ 2EDFC2A8893435723AD80481803C6D5C ] C:\WINDOWS\system32\umpnpmgr.dll
16:28:19.0000 1088 C:\WINDOWS\system32\umpnpmgr.dll - ok
16:28:19.0000 1088 [ 1F03103598BD817B1078DAB1326DDE11 ] C:\WINDOWS\system32\shimeng.dll
16:28:19.0000 1088 C:\WINDOWS\system32\shimeng.dll - ok
16:28:19.0000 1088 [ 0492CF5870F0E616B0C71695A433D162 ] C:\WINDOWS\system32\wldap32.dll
16:28:19.0000 1088 C:\WINDOWS\system32\wldap32.dll - ok
16:28:19.0015 1088 [ EA9EE60B408878E5F2012F9C783836DB ] C:\WINDOWS\AppPatch\acadproc.dll
16:28:19.0015 1088 C:\WINDOWS\AppPatch\acadproc.dll - ok
16:28:19.0015 1088 [ 8329A39D5A402A75A74301D6A62ECDA1 ] C:\WINDOWS\system32\samlib.dll
16:28:19.0015 1088 C:\WINDOWS\system32\samlib.dll - ok
16:28:19.0015 1088 [ F05B8CDB7FE0E55DCCFB1D946CE80064 ] C:\WINDOWS\system32\samsrv.dll
16:28:19.0015 1088 C:\WINDOWS\system32\samsrv.dll - ok
16:28:19.0031 1088 [ 17A1D675C12BBF80CAAC54A4855C41D0 ] C:\WINDOWS\system32\cryptdll.dll
16:28:19.0031 1088 C:\WINDOWS\system32\cryptdll.dll - ok
16:28:19.0031 1088 [ 310C15FD8358B2C4CD7A5B98A112883F ] C:\WINDOWS\AppPatch\acgenral.dll
16:28:19.0031 1088 C:\WINDOWS\AppPatch\acgenral.dll - ok
16:28:19.0031 1088 [ 1B2BE5777F69A71778F52FFEE1C798D6 ] C:\WINDOWS\system32\oleaut32.dll
16:28:19.0031 1088 C:\WINDOWS\system32\oleaut32.dll - ok
16:28:19.0031 1088 [ 4A953F13942867BA8FB41F141EC1B80C ] C:\WINDOWS\system32\winmm.dll
16:28:19.0031 1088 C:\WINDOWS\system32\winmm.dll - ok
16:28:19.0046 1088 [ 2098AB52BD5316E59AA36F3437B13BE6 ] C:\WINDOWS\system32\msacm32.dll
16:28:19.0046 1088 C:\WINDOWS\system32\msacm32.dll - ok
16:28:19.0046 1088 [ 7A2CC3719B255E6B5D74396183B7715B ] C:\WINDOWS\system32\uxtheme.dll
16:28:19.0046 1088 C:\WINDOWS\system32\uxtheme.dll - ok
16:28:19.0046 1088 [ F24B12786D60A17008319E3F2AEE7799 ] C:\WINDOWS\system32\msapsspc.dll
16:28:19.0046 1088 C:\WINDOWS\system32\msapsspc.dll - ok
16:28:19.0062 1088 [ 7A660EDC0757849DF5F8706FB6E9F740 ] C:\WINDOWS\system32\msvcrt40.dll
16:28:19.0062 1088 C:\WINDOWS\system32\msvcrt40.dll - ok
16:28:19.0062 1088 [ 3D76DD0CBC536E0F8C45D23ED230BEB2 ] C:\WINDOWS\system32\digest.dll
16:28:19.0062 1088 C:\WINDOWS\system32\digest.dll - ok
16:28:19.0062 1088 [ 0F64207B49390C8063C36AE7CBF9C2DB ] C:\WINDOWS\system32\schannel.dll
16:28:19.0062 1088 C:\WINDOWS\system32\schannel.dll - ok
16:28:19.0078 1088 [ A4388DF80E52695AE92EE5F3F61F1619 ] C:\WINDOWS\system32\msnsspc.dll
16:28:19.0078 1088 C:\WINDOWS\system32\msnsspc.dll - ok
16:28:19.0078 1088 [ 5733177BCF16EE78B99543C9B0AB81EA ] C:\WINDOWS\system32\msctfime.ime
16:28:19.0078 1088 C:\WINDOWS\system32\msctfime.ime - ok
16:28:19.0078 1088 [ C6BB1D1500DB4A0E224CB65E6C7E8A80 ] C:\WINDOWS\system32\msprivs.dll
16:28:19.0078 1088 C:\WINDOWS\system32\msprivs.dll - ok
16:28:19.0078 1088 [ 1E644E3533DCE2B580A663AE1ACBD539 ] C:\WINDOWS\system32\atmfd.dll
16:28:19.0078 1088 C:\WINDOWS\system32\atmfd.dll - ok
16:28:19.0093 1088 [ A525C96C51D55111FDF3BEA9FFFFC7AE ] C:\WINDOWS\system32\kerberos.dll
16:28:19.0093 1088 C:\WINDOWS\system32\kerberos.dll - ok
16:28:19.0093 1088 [ 517561A1113B04E51D936CD018DE1C1F ] C:\WINDOWS\system32\msv1_0.dll
16:28:19.0093 1088 C:\WINDOWS\system32\msv1_0.dll - ok
16:28:19.0093 1088 [ AF07DC9B7CC455629E732340C7B15F3A ] C:\WINDOWS\system32\iphlpapi.dll
16:28:19.0093 1088 C:\WINDOWS\system32\iphlpapi.dll - ok
16:28:19.0109 1088 [ 1B7F071C51B77C272875C3A23E1E4550 ] C:\WINDOWS\system32\netlogon.dll
16:28:19.0109 1088 C:\WINDOWS\system32\netlogon.dll - ok
16:28:19.0109 1088 [ 54AF4B1D5459500EF0937F6D33B1914F ] C:\WINDOWS\system32\w32time.dll
16:28:19.0109 1088 C:\WINDOWS\system32\w32time.dll - ok
16:28:19.0109 1088 [ 3AAF9B35939FF9E58CCD18D41655C2FC ] C:\WINDOWS\system32\wdigest.dll
16:28:19.0109 1088 C:\WINDOWS\system32\wdigest.dll - ok
16:28:19.0109 1088 [ 54DAE3EA34802B4ED9AE1C6B1209FA56 ] C:\WINDOWS\system32\rsaenh.dll
16:28:19.0109 1088 C:\WINDOWS\system32\rsaenh.dll - ok
16:28:19.0125 1088 [ 02988B904C386B500CD08639C4C20EEA ] C:\WINDOWS\system32\winscard.dll
16:28:19.0125 1088 C:\WINDOWS\system32\winscard.dll - ok
16:28:19.0125 1088 [ 0E2735281FBB9A764D5584C2A5DCBA59 ] C:\WINDOWS\system32\wtsapi32.dll
16:28:19.0125 1088 C:\WINDOWS\system32\wtsapi32.dll - ok
16:28:19.0125 1088 [ A86BB5E61BF3E39B62AB4C7E7085A084 ] C:\WINDOWS\system32\scecli.dll
16:28:19.0125 1088 C:\WINDOWS\system32\scecli.dll - ok
16:28:19.0125 1088 [ C6D0B4BF12036D1EE092D2F5EF436FC7 ] C:\Program Files\Emsisoft Anti-Malware\a2service.exe
16:28:19.0140 1088 C:\Program Files\Emsisoft Anti-Malware\a2service.exe - ok
16:28:19.0140 1088 [ AFFC87E2501FCE8F09D4C10BA6421CCF ] C:\WINDOWS\system32\msimg32.dll
16:28:19.0140 1088 C:\WINDOWS\system32\msimg32.dll - ok
16:28:19.0140 1088 [ BD83ABA61E8ACCC8D9FFB869F29418CE ] C:\WINDOWS\system32\winspool.drv
16:28:19.0140 1088 C:\WINDOWS\system32\winspool.drv - ok
16:28:19.0140 1088 [ AEF53C9AFF3688876D476F36288A56D2 ] C:\Program Files\Emsisoft Anti-Malware\a2engine.dll
16:28:19.0140 1088 C:\Program Files\Emsisoft Anti-Malware\a2engine.dll - ok
16:28:19.0156 1088 [ 1755023407FDE00D9916505A557569D5 ] C:\Program Files\Emsisoft Anti-Malware\bdcore.dll
16:28:19.0156 1088 C:\Program Files\Emsisoft Anti-Malware\bdcore.dll - ok
16:28:19.0156 1088 [ 67156D5A9AC356DC99D7BCCB388E3316 ] C:\WINDOWS\system32\wsock32.dll
16:28:19.0156 1088 C:\WINDOWS\system32\wsock32.dll - ok
16:28:19.0156 1088 [ 943337D786A56729263071623BBB9DE5 ] C:\WINDOWS\system32\mswsock.dll
16:28:19.0156 1088 C:\WINDOWS\system32\mswsock.dll - ok
16:28:19.0171 1088 [ 4E6C4FB949FB4D0952F718EF9D87C204 ] C:\Program Files\Emsisoft Anti-Malware\quarantine.dll
16:28:19.0171 1088 C:\Program Files\Emsisoft Anti-Malware\quarantine.dll - ok
16:28:19.0171 1088 [ 2081A5B5E4ABA206A0A8A1A97DF0FB23 ] C:\WINDOWS\system32\logonui.exe
16:28:19.0171 1088 C:\WINDOWS\system32\logonui.exe - ok
16:28:19.0171 1088 [ 3D41A9326F0376FC73AF961DD23B1FB1 ] C:\WINDOWS\system32\duser.dll
16:28:19.0171 1088 C:\WINDOWS\system32\duser.dll - ok
16:28:19.0171 1088 [ 20200EE3CFE10E9F0C028D8653BE11C6 ] C:\WINDOWS\system32\oleacc.dll
16:28:19.0171 1088 C:\WINDOWS\system32\oleacc.dll - ok
16:28:19.0187 1088 [ 3F00B08A6BD8FAC25DCFF48E9955800F ] C:\Program Files\Emsisoft Anti-Malware\a2core32.dll
16:28:19.0187 1088 C:\Program Files\Emsisoft Anti-Malware\a2core32.dll - ok
16:28:19.0187 1088 [ F137A0CA70003DB20448D540651FA003 ] C:\WINDOWS\system32\clbcatq.dll
16:28:19.0187 1088 C:\WINDOWS\system32\clbcatq.dll - ok
16:28:19.0187 1088 [ EB38F568D21259B410D252A40B39366A ] C:\Program Files\Emsisoft Anti-Malware\a2dix86.dll
16:28:19.0187 1088 C:\Program Files\Emsisoft Anti-Malware\a2dix86.dll - ok
16:28:19.0203 1088 [ 5D43C9A33F18C707BA169AFDA88BDF30 ] C:\WINDOWS\system32\fltlib.dll
16:28:19.0203 1088 C:\WINDOWS\system32\fltlib.dll - ok
16:28:19.0203 1088 [ 1280A158C722FA95A80FB7AEBE78FA7D ] C:\WINDOWS\system32\comres.dll
16:28:19.0203 1088 C:\WINDOWS\system32\comres.dll - ok
16:28:19.0203 1088 [ EC4D3CEF7D1DCF9DCD98A94BDE71E244 ] C:\Program Files\Emsisoft Anti-Malware\a2update.dll
16:28:19.0203 1088 C:\Program Files\Emsisoft Anti-Malware\a2update.dll - ok
16:28:19.0203 1088 [ E5EDBD51476DB5001ABF5C82AE5C3DD1 ] C:\WINDOWS\system32\shgina.dll
16:28:19.0203 1088 C:\WINDOWS\system32\shgina.dll - ok
16:28:19.0218 1088 [ 549290DBC280C887681D7652978DBBE0 ] C:\WINDOWS\system32\ntmarta.dll
16:28:19.0218 1088 C:\WINDOWS\system32\ntmarta.dll - ok
16:28:19.0218 1088 [ 27C6D03BCDB8CFEB96B716F3D8BE3E18 ] C:\WINDOWS\system32\svchost.exe
16:28:19.0218 1088 C:\WINDOWS\system32\svchost.exe - ok
16:28:19.0218 1088 [ 6B27A5C03DFB94B4245739065431322C ] C:\WINDOWS\system32\rpcss.dll
16:28:19.0218 1088 C:\WINDOWS\system32\rpcss.dll - ok
16:28:19.0234 1088 [ 16403217AB6FC5C30C14C6B12098AD4B ] C:\WINDOWS\system32\xpsp2res.dll
16:28:19.0234 1088 C:\WINDOWS\system32\xpsp2res.dll - ok
16:28:19.0234 1088 [ 6D4FEB43EE538FC5428CC7F0565AA656 ] C:\WINDOWS\system32\eventlog.dll
16:28:19.0234 1088 C:\WINDOWS\system32\eventlog.dll - ok
16:28:19.0234 1088 [ 3CB32D3B8CBE79899D63280BB7A83CD9 ] C:\WINDOWS\system32\hnetcfg.dll
16:28:19.0234 1088 C:\WINDOWS\system32\hnetcfg.dll - ok
16:28:19.0234 1088 [ 4E3D06D6E68EEDB52565080F55B460D3 ] C:\WINDOWS\system32\wshtcpip.dll
16:28:19.0234 1088 C:\WINDOWS\system32\wshtcpip.dll - ok
16:28:19.0250 1088 [ D72B9EC3337B247A666F098F3D6B43DE ] C:\WINDOWS\system32\winrnr.dll
16:28:19.0250 1088 C:\WINDOWS\system32\winrnr.dll - ok
16:28:19.0250 1088 [ 6F9BEF24C578D5D6740E080BEDD6A448 ] C:\WINDOWS\system32\rasadhlp.dll
16:28:19.0250 1088 C:\WINDOWS\system32\rasadhlp.dll - ok
16:28:19.0250 1088 [ F927A4434C5028758A842943EF1A3849 ] C:\WINDOWS\system32\drivers\ndisuio.sys
16:28:19.0250 1088 C:\WINDOWS\system32\drivers\ndisuio.sys - ok
16:28:19.0265 1088 [ 515A7FAE2070C2B0242B2353443E2F11 ] C:\WINDOWS\system32\cscdll.dll
16:28:19.0265 1088 C:\WINDOWS\system32\cscdll.dll - ok
16:28:19.0265 1088 [ 5E38D7684A49CACFB752B046357E0589 ] C:\WINDOWS\system32\dhcpcsvc.dll
16:28:19.0265 1088 C:\WINDOWS\system32\dhcpcsvc.dll - ok
16:28:19.0265 1088 [ E2092F0A1D7ABC243F9C2362483D150D ] C:\WINDOWS\system32\dimsntfy.dll
16:28:19.0265 1088 C:\WINDOWS\system32\dimsntfy.dll - ok
16:28:19.0281 1088 [ 02CF580510234E519736559A7F19EA20 ] C:\WINDOWS\system32\WgaLogon.dll
16:28:19.0281 1088 C:\WINDOWS\system32\WgaLogon.dll - ok
16:28:19.0281 1088 [ 2CC34E8BB667EEF78899546E12649196 ] C:\WINDOWS\system32\wlnotify.dll
16:28:19.0281 1088 C:\WINDOWS\system32\wlnotify.dll - ok
16:28:19.0281 1088 [ ACFEE2392503DD5E457363A0510B8BCB ] C:\WINDOWS\system32\msxml3.dll
16:28:19.0281 1088 C:\WINDOWS\system32\msxml3.dll - ok
16:28:19.0281 1088 [ C1E735BA11FE4466C9BD9F541220453A ] C:\Program Files\IBM\Client Access\Shared\cwbnetnt.dll
16:28:19.0281 1088 C:\Program Files\IBM\Client Access\Shared\cwbnetnt.dll - ok
16:28:19.0296 1088 [ 5F7E24FA9EAB896051FFB87F840730D2 ] C:\WINDOWS\system32\dnsrslvr.dll
16:28:19.0296 1088 C:\WINDOWS\system32\dnsrslvr.dll - ok
16:28:19.0296 1088 [ A7E06854EA2A20AEE8EC32BD8C754298 ] C:\WINDOWS\system32\mpnotify.exe
16:28:19.0296 1088 C:\WINDOWS\system32\mpnotify.exe - ok
16:28:19.0296 1088 [ 9A979A47866B6EB4951C8345C244BB2D ] C:\WINDOWS\system32\cwbcore.dll
16:28:19.0296 1088 C:\WINDOWS\system32\cwbcore.dll - ok
16:28:19.0312 1088 [ A7DB739AE99A796D91580147E919CC59 ] C:\WINDOWS\system32\lmhsvc.dll
16:28:19.0312 1088 C:\WINDOWS\system32\lmhsvc.dll - ok
16:28:19.0312 1088 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] C:\WINDOWS\system32\wzcsvc.dll
16:28:19.0312 1088 C:\WINDOWS\system32\wzcsvc.dll - ok
16:28:19.0312 1088 [ F432EB8D1D84A565167107E2EF001473 ] C:\Program Files\Emsisoft Anti-Malware\a2wsc.dll
16:28:19.0312 1088 C:\Program Files\Emsisoft Anti-Malware\a2wsc.dll - ok
16:28:19.0312 1088 [ 205ADD80FF8099B1A8101EB490B933D1 ] C:\WINDOWS\system32\wbem\wbemprox.dll
16:28:19.0312 1088 C:\WINDOWS\system32\wbem\wbemprox.dll - ok
16:28:19.0328 1088 [ D95C71052E5EF63B55997FB31483D02F ] C:\WINDOWS\system32\wbem\wbemcomn.dll
16:28:19.0328 1088 C:\WINDOWS\system32\wbem\wbemcomn.dll - ok
16:28:19.0328 1088 [ E6EF7BC927D9F8F9BA1584BFC39E0C6F ] C:\WINDOWS\system32\eapolqec.dll
16:28:19.0328 1088 C:\WINDOWS\system32\eapolqec.dll - ok
16:28:19.0328 1088 [ 876CCF164E08D6B903CD14398E056DD2 ] C:\WINDOWS\system32\rtutils.dll
16:28:19.0328 1088 C:\WINDOWS\system32\rtutils.dll - ok
16:28:19.0343 1088 [ 7B0770526801F05D58C51A3DFB87B4BD ] C:\WINDOWS\system32\wmi.dll
16:28:19.0343 1088 C:\WINDOWS\system32\wmi.dll - ok
16:28:19.0343 1088 [ 224FB925C641DA16CEB6D60F40CA4C75 ] C:\WINDOWS\system32\atl.dll
16:28:19.0343 1088 C:\WINDOWS\system32\atl.dll - ok
16:28:19.0343 1088 [ 8AE93AACC648921BAACB8602991AC4B3 ] C:\WINDOWS\system32\qutil.dll
16:28:19.0343 1088 C:\WINDOWS\system32\qutil.dll - ok
16:28:19.0343 1088 [ BD1508C2A1FD4EF502CEFA7127722E23 ] C:\WINDOWS\system32\cwbunpls.dll
16:28:19.0343 1088 C:\WINDOWS\system32\cwbunpls.dll - ok
16:28:19.0359 1088 [ 8E2CC37BA87D8F681066E0E9C8A19F73 ] C:\WINDOWS\system32\dot3api.dll
16:28:19.0359 1088 C:\WINDOWS\system32\dot3api.dll - ok
16:28:19.0359 1088 [ F5B754CDEA20BBB3A31E16A776EDE6D6 ] C:\WINDOWS\system32\esent.dll
16:28:19.0359 1088 C:\WINDOWS\system32\esent.dll - ok
16:28:19.0359 1088 [ F6F2BFC17069EB335ACCEEF7595F9302 ] C:\WINDOWS\system32\mfc42u.dll
16:28:19.0359 1088 C:\WINDOWS\system32\mfc42u.dll - ok
16:28:19.0375 1088 [ 585992D78B671AAA075C02241309795D ] C:\WINDOWS\system32\msvcirt.dll
16:28:19.0375 1088 C:\WINDOWS\system32\msvcirt.dll - ok
16:28:19.0375 1088 [ C14AA05881A35B6D6BB8D55B117EE22D ] C:\WINDOWS\system32\shfolder.dll
16:28:19.0375 1088 C:\WINDOWS\system32\shfolder.dll - ok
16:28:19.0375 1088 [ 085ED2E391A871C7BAE87E0228B546BA ] C:\WINDOWS\system32\cscui.dll
16:28:19.0375 1088 C:\WINDOWS\system32\cscui.dll - ok
16:28:19.0375 1088 [ A39BE37C9237DB5F1990D61B268EA555 ] C:\WINDOWS\system32\rastls.dll
16:28:19.0375 1088 C:\WINDOWS\system32\rastls.dll - ok
16:28:19.0390 1088 [ 6E4BE11D50F8A8DE2BAD644C9C9DE8D3 ] C:\WINDOWS\system32\cryptui.dll
16:28:19.0390 1088 C:\WINDOWS\system32\cryptui.dll - ok
16:28:19.0390 1088 [ 50A166237A0FA771261275A405646CC0 ] C:\WINDOWS\system32\powrprof.dll
16:28:19.0390 1088 C:\WINDOWS\system32\powrprof.dll - ok
16:28:19.0390 1088 [ 6B1774334E2975AA60596E54F5EA1430 ] C:\WINDOWS\system32\wininet.dll
16:28:19.0390 1088 C:\WINDOWS\system32\wininet.dll - ok
16:28:19.0406 1088 [ 6C26DCF01E2A92F183B97D434017268A ] C:\WINDOWS\system32\dpcdll.dll
16:28:19.0406 1088 C:\WINDOWS\system32\dpcdll.dll - ok
16:28:19.0406 1088 [ 10753A3ADC3E39A3B10CC3F08E98E6B4 ] C:\WINDOWS\system32\normaliz.dll
16:28:19.0406 1088 C:\WINDOWS\system32\normaliz.dll - ok
16:28:19.0406 1088 [ A93AEE1928A9D7CE3E16D24EC7380F89 ] C:\WINDOWS\system32\userinit.exe
16:28:19.0406 1088 C:\WINDOWS\system32\userinit.exe - ok
16:28:19.0406 1088 [ B1296D52B0D2096EC4759EEEB806D759 ] C:\WINDOWS\system32\WgaTray.exe
16:28:19.0406 1088 C:\WINDOWS\system32\WgaTray.exe - ok
16:28:19.0421 1088 [ FDF44991CB9A33C901FFCBDF19CE95BE ] C:\WINDOWS\system32\urlmon.dll
16:28:19.0421 1088 C:\WINDOWS\system32\urlmon.dll - ok
16:28:19.0421 1088 [ 12896823FB95BFB3DC9B46BCAEDC9923 ] C:\WINDOWS\explorer.exe
16:28:19.0421 1088 C:\WINDOWS\explorer.exe - ok
16:28:19.0421 1088 [ AD850C33A8AC45CF66574E62D1645272 ] C:\WINDOWS\system32\iertutil.dll
16:28:19.0421 1088 C:\WINDOWS\system32\iertutil.dll - ok
16:28:19.0437 1088 [ E392E172687BE172F8600C5F41AB03D9 ] C:\WINDOWS\system32\browseui.dll
16:28:19.0437 1088 C:\WINDOWS\system32\browseui.dll - ok
16:28:19.0437 1088 [ EA5B8BECA3F279C757578CD7F1E95855 ] C:\WINDOWS\system32\mprapi.dll
16:28:19.0437 1088 C:\WINDOWS\system32\mprapi.dll - ok
16:28:19.0437 1088 [ 26CB10FA893F940AB09713FF46DCDADE ] C:\WINDOWS\system32\shdocvw.dll
16:28:19.0437 1088 C:\WINDOWS\system32\shdocvw.dll - ok
16:28:19.0437 1088 [ 2CDAE321B8E878A278BA2D2FA013060B ] C:\WINDOWS\system32\activeds.dll
16:28:19.0437 1088 C:\WINDOWS\system32\activeds.dll - ok
16:28:19.0453 1088 [ 0D84657DBF93DB98673DEFDF2B29E25A ] C:\WINDOWS\system32\adsldpc.dll
16:28:19.0453 1088 C:\WINDOWS\system32\adsldpc.dll - ok
16:28:19.0453 1088 [ 92C4F48B62B0B876194584C3FF09CCB6 ] C:\WINDOWS\system32\rasapi32.dll
16:28:19.0453 1088 C:\WINDOWS\system32\rasapi32.dll - ok
16:28:19.0453 1088 [ 4DEF926F6A0545AE486A03C84F2EE482 ] C:\WINDOWS\system32\rasman.dll
16:28:19.0453 1088 C:\WINDOWS\system32\rasman.dll - ok
16:28:19.0468 1088 [ 00AABF131B4823785818DB99A075A313 ] C:\WINDOWS\system32\tapi32.dll
16:28:19.0468 1088 C:\WINDOWS\system32\tapi32.dll - ok
16:28:19.0468 1088 [ CC26451A90025F6C55F64146C333DEA5 ] C:\WINDOWS\system32\LegitCheckControl.dll
16:28:19.0468 1088 C:\WINDOWS\system32\LegitCheckControl.dll - ok
16:28:19.0468 1088 [ C1FAEA15E41F62D7BFA7FBC395C24BA6 ] C:\WINDOWS\system32\riched20.dll
16:28:19.0468 1088 C:\WINDOWS\system32\riched20.dll - ok
16:28:19.0468 1088 [ 56CE97FF94B7662A300D359CD6F4D601 ] C:\WINDOWS\system32\raschap.dll
16:28:19.0468 1088 C:\WINDOWS\system32\raschap.dll - ok
16:28:19.0484 1088 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] C:\WINDOWS\system32\netman.dll
16:28:19.0484 1088 C:\WINDOWS\system32\netman.dll - ok
16:28:19.0484 1088 [ 062F837C1FBDB6A0A75F82EFC2EE8E74 ] C:\WINDOWS\system32\netshell.dll
16:28:19.0484 1088 C:\WINDOWS\system32\netshell.dll - ok
16:28:19.0484 1088 [ B4ED498E3BFEE64E952BC44FC6057DB8 ] C:\WINDOWS\system32\desk.cpl
16:28:19.0484 1088 C:\WINDOWS\system32\desk.cpl - ok
16:28:19.0500 1088 [ A314EEA2A503A8E04085201E436384A5 ] C:\WINDOWS\system32\themeui.dll
16:28:19.0500 1088 C:\WINDOWS\system32\themeui.dll - ok
16:28:19.0500 1088 [ 2975C66459C426C20BC22D639DF6B611 ] C:\Program Files\SUPERAntiSpyware\SASSEH.DLL
16:28:19.0500 1088 C:\Program Files\SUPERAntiSpyware\SASSEH.DLL - ok
16:28:19.0500 1088 [ 235892E493845D64D890163CFEF90E97 ] C:\WINDOWS\system32\credui.dll
16:28:19.0500 1088 C:\WINDOWS\system32\credui.dll - ok
16:28:19.0500 1088 [ 4E8F3230BAC8C1CAADF01A8C728E1C5C ] C:\WINDOWS\system32\dot3dlg.dll
16:28:19.0500 1088 C:\WINDOWS\system32\dot3dlg.dll - ok
16:28:19.0515 1088 [ CA04959077AFE36369D37B3504740C87 ] C:\WINDOWS\system32\onex.dll
16:28:19.0515 1088 C:\WINDOWS\system32\onex.dll - ok
16:28:19.0515 1088 [ 6D778E0F95447E6546553EEEA709D03C ] C:\WINDOWS\system32\cmd.exe
16:28:19.0515 1088 C:\WINDOWS\system32\cmd.exe - ok
16:28:19.0515 1088 [ 5DB625E7D095604010CF84DE2D8ACFA6 ] C:\WINDOWS\system32\eappcfg.dll
16:28:19.0515 1088 C:\WINDOWS\system32\eappcfg.dll - ok
16:28:19.0531 1088 [ 3618313F7DFB605571A48FCF55D7868F ] C:\WINDOWS\system32\ieframe.dll
16:28:19.0531 1088 C:\WINDOWS\system32\ieframe.dll - ok
16:28:19.0531 1088 [ ABC4206543450C0666D152F4B65833B8 ] C:\WINDOWS\system32\eappprxy.dll
16:28:19.0531 1088 C:\WINDOWS\system32\eappprxy.dll - ok
16:28:19.0531 1088 [ 767FF54A552732CE772C2302025FA82F ] C:\WINDOWS\system32\wzcsapi.dll
16:28:19.0531 1088 C:\WINDOWS\system32\wzcsapi.dll - ok
16:28:19.0531 1088 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] C:\WINDOWS\system32\schedsvc.dll
16:28:19.0546 1088 C:\WINDOWS\system32\schedsvc.dll - ok
16:28:19.0546 1088 [ E47E364C96467FD54FA44D59F927C3AB ] C:\WINDOWS\system32\msidle.dll
16:28:19.0546 1088 C:\WINDOWS\system32\msidle.dll - ok
16:28:19.0546 1088 [ 60784F891563FB1B767F70117FC2428F ] C:\WINDOWS\system32\spoolsv.exe
16:28:19.0546 1088 C:\WINDOWS\system32\spoolsv.exe - ok
16:28:19.0546 1088 [ DEF7A7882BEC100FE0B2CE2549188F9D ] C:\WINDOWS\system32\audiosrv.dll
16:28:19.0546 1088 C:\WINDOWS\system32\audiosrv.dll - ok
16:28:19.0562 1088 [ A8888A5327621856C0CEC4E385F69309 ] C:\WINDOWS\system32\wkssvc.dll
16:28:19.0562 1088 C:\WINDOWS\system32\wkssvc.dll - ok
16:28:19.0562 1088 [ EBC984F0CE40E0DAF0454D806EC2A7EC ] C:\DOCUME~1\Dwayne\LOCALS~1\temp\00ED85F4-14C0-46AA-A6E1-2EBDDEF90A28.exe
16:28:19.0562 1088 C:\DOCUME~1\Dwayne\LOCALS~1\temp\00ED85F4-14C0-46AA-A6E1-2EBDDEF90A28.exe - ok
16:28:19.0562 1088 [ 684559A03CBC1D05BA120A18B0D8BA5D ] C:\WINDOWS\system32\winhttp.dll
16:28:19.0562 1088 C:\WINDOWS\system32\winhttp.dll - ok
16:28:19.0578 1088 [ 912B67BB8249925A5C972FC5839EAE09 ] C:\WINDOWS\system32\actxprxy.dll
16:28:19.0578 1088 C:\WINDOWS\system32\actxprxy.dll - ok
16:28:19.0578 1088 [ A70A2D85AD143D6BB823C246CEB699A5 ] C:\WINDOWS\system32\ntshrui.dll
16:28:19.0578 1088 C:\WINDOWS\system32\ntshrui.dll - ok
16:28:19.0578 1088 [ 680B56A8B62D1BCF4A0B2AAAD03D88E4 ] C:\WINDOWS\system32\wdmaud.drv
16:28:19.0578 1088 C:\WINDOWS\system32\wdmaud.drv - ok
16:28:19.0578 1088 [ 6768ACF64B18196494413695F0C3A00F ] C:\WINDOWS\system32\drivers\wdmaud.sys
16:28:19.0578 1088 C:\WINDOWS\system32\drivers\wdmaud.sys - ok
16:28:19.0593 1088 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] C:\WINDOWS\system32\drivers\sysaudio.sys
16:28:19.0593 1088 C:\WINDOWS\system32\drivers\sysaudio.sys - ok
16:28:19.0593 1088 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] C:\WINDOWS\system32\drivers\splitter.sys
16:28:19.0593 1088 C:\WINDOWS\system32\drivers\splitter.sys - ok
16:28:19.0593 1088 [ 8BED39E3C35D6A489438B8141717A557 ] C:\WINDOWS\system32\drivers\aec.sys
16:28:19.0593 1088 C:\WINDOWS\system32\drivers\aec.sys - ok
16:28:19.0609 1088 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] C:\WINDOWS\system32\drivers\swmidi.sys
16:28:19.0609 1088 C:\WINDOWS\system32\drivers\swmidi.sys - ok
16:28:19.0609 1088 [ 8A208DFCF89792A484E76C40E5F50B45 ] C:\WINDOWS\system32\drivers\dmusic.sys
16:28:19.0609 1088 C:\WINDOWS\system32\drivers\dmusic.sys - ok
16:28:19.0609 1088 [ 692BCF44383D056AED41B045A323D378 ] C:\WINDOWS\system32\drivers\kmixer.sys
16:28:19.0609 1088 C:\WINDOWS\system32\drivers\kmixer.sys - ok
16:28:19.0609 1088 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] C:\WINDOWS\system32\drivers\drmkaud.sys
16:28:19.0609 1088 C:\WINDOWS\system32\drivers\drmkaud.sys - ok
16:28:19.0625 1088 [ 91790D6749EBED90E2C40479C0A91879 ] C:\WINDOWS\system32\verclsid.exe
16:28:19.0625 1088 C:\WINDOWS\system32\verclsid.exe - ok
16:28:19.0625 1088 [ 9A3BD5F55AADFF859539142F6328A66E ] C:\WINDOWS\system32\msacm32.drv
16:28:19.0625 1088 C:\WINDOWS\system32\msacm32.drv - ok
16:28:19.0625 1088 [ 5C12660A97822F6E61576943B49AAAD6 ] C:\WINDOWS\system32\midimap.dll
16:28:19.0625 1088 C:\WINDOWS\system32\midimap.dll - ok
16:28:19.0640 1088 [ D3F72D50DE53F9F1F55240115AF4D42E ] C:\WINDOWS\system32\msi.dll
16:28:19.0640 1088 C:\WINDOWS\system32\msi.dll - ok
16:28:19.0640 1088 [ 2DC5A8019E2387987905F77C664E4BE2 ] C:\WINDOWS\system32\linkinfo.dll
16:28:19.0640 1088 C:\WINDOWS\system32\linkinfo.dll - ok
16:28:19.0640 1088 [ 0FFA9E2711A0228467BF08228D5B620F ] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
16:28:19.0640 1088 C:\Program Files\Compaq\SetRefresh\SetRefresh.exe - ok
16:28:19.0640 1088 [ DE3C66F8825A712F2DDA4C5A593CFFB9 ] C:\Program Files\IBM\Client Access\cwbsvstr.exe
16:28:19.0640 1088 C:\Program Files\IBM\Client Access\cwbsvstr.exe - ok
16:28:19.0656 1088 [ CAAC54D29A26FA30CB3D348F3F34EAE7 ] C:\WINDOWS\system32\cwbad1.dll
16:28:19.0656 1088 C:\WINDOWS\system32\cwbad1.dll - ok
16:28:19.0656 1088 [ 4B36A184E01AD9485E97D62D45B3B084 ] C:\WINDOWS\system32\cwbsof.dll
16:28:19.0656 1088 C:\WINDOWS\system32\cwbsof.dll - ok
16:28:19.0656 1088 [ 7ACF8AC59C58F3F0D2EA5F6CC2EF14DE ] C:\WINDOWS\system32\cwbunpla.dll
16:28:19.0656 1088 C:\WINDOWS\system32\cwbunpla.dll - ok
16:28:19.0671 1088 [ AE4CA88901F936D846123AE8AFFA49BA ] C:\WINDOWS\system32\cwbrc.dll
16:28:19.0671 1088 C:\WINDOWS\system32\cwbrc.dll - ok
16:28:19.0671 1088 [ DDE4A991F26179573D2CFA7A093F56FA ] C:\WINDOWS\system32\hkcmd.exe
16:28:19.0671 1088 C:\WINDOWS\system32\hkcmd.exe - ok
16:28:19.0671 1088 [ E79977B1ECC05C53F0194750457BBB37 ] C:\WINDOWS\system32\igfxtray.exe
16:28:19.0671 1088 C:\WINDOWS\system32\igfxtray.exe - ok
16:28:19.0671 1088 [ 2A939FBFDF1C16D912B90F28F6FCE2EF ] C:\WINDOWS\system32\cwbunssl.dll
16:28:19.0671 1088 C:\WINDOWS\system32\cwbunssl.dll - ok
16:28:19.0687 1088 [ D0127023AF6070D5B479B1AE65B107A2 ] C:\WINDOWS\system32\hccutils.dll
16:28:19.0687 1088 C:\WINDOWS\system32\hccutils.dll - ok
16:28:19.0687 1088 [ EAF47A526B911B0961D3FECEB442E0C4 ] C:\WINDOWS\system32\igfxpers.exe
16:28:19.0687 1088 C:\WINDOWS\system32\igfxpers.exe - ok
16:28:19.0687 1088 [ 0ED7CBAD7E9EF03A5960AE37EA55B9C9 ] C:\WINDOWS\system32\cwbsv.dll
16:28:19.0687 1088 C:\WINDOWS\system32\cwbsv.dll - ok
16:28:19.0703 1088 [ C4D123B9D816679F1954E8E0894A887C ] C:\WINDOWS\system32\cwbco.dll
16:28:19.0703 1088 C:\WINDOWS\system32\cwbco.dll - ok
16:28:19.0703 1088 [ 37498FC7751B9453D435826EEA2B2B57 ] C:\WINDOWS\system32\cwbad.dll
16:28:19.0703 1088 C:\WINDOWS\system32\cwbad.dll - ok
16:28:19.0703 1088 [ D25E93CC09C8ABDC377467EEDE718EFA ] C:\WINDOWS\system32\cwbnl.dll
16:28:19.0703 1088 C:\WINDOWS\system32\cwbnl.dll - ok
16:28:19.0703 1088 [ 6C29375A447F9925CD0073A8FBD8BE1B ] C:\WINDOWS\system32\cwbbsspi.dll
16:28:19.0703 1088 C:\WINDOWS\system32\cwbbsspi.dll - ok
16:28:19.0718 1088 [ E8B3498B6EEFF2491F2ADC9021BEC4FD ] C:\WINDOWS\system32\cwbbspc.dll
16:28:19.0718 1088 C:\WINDOWS\system32\cwbbspc.dll - ok
16:28:19.0718 1088 [ 305532803E711149A21C29B33199244D ] C:\WINDOWS\system32\cwbrw.dll
16:28:19.0718 1088 C:\WINDOWS\system32\cwbrw.dll - ok
16:28:19.0718 1088 [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\WINDOWS\system32\drivers\34712309.sys
16:28:19.0718 1088 C:\WINDOWS\system32\drivers\34712309.sys - ok
16:28:19.0734 1088 [ 6131CA2667859E1B8E751F73EFF8A526 ] C:\WINDOWS\system32\cwbunplp.exe
16:28:19.0734 1088 C:\WINDOWS\system32\cwbunplp.exe - ok
16:28:19.0734 1088 [ BE240B2C948D91D4C11DCA8653A8B604 ] C:\WINDOWS\system32\igfxsrvc.exe
16:28:19.0734 1088 C:\WINDOWS\system32\igfxsrvc.exe - ok
16:28:19.0734 1088 [ 111A6C912BCB557065326571DBDB69EC ] C:\Program Files\IBM\Client Access\Mri2924\cwbsomri.dll
16:28:19.0734 1088 C:\Program Files\IBM\Client Access\Mri2924\cwbsomri.dll - ok
16:28:19.0734 1088 [ 7BF126DC48C76F9F175F451042B6B3E8 ] C:\Program Files\IBM\Client Access\cwbckver.exe
16:28:19.0734 1088 C:\Program Files\IBM\Client Access\cwbckver.exe - ok
16:28:19.0750 1088 [ 0D489AC3245DC9AE907B7E6DD6AB3B92 ] C:\Program Files\IBM\Client Access\cwbwlwiz.exe
16:28:19.0750 1088 C:\Program Files\IBM\Client Access\cwbwlwiz.exe - ok
16:28:19.0750 1088 [ 083DC7EA73FFD3C7DE9FD19DDBC8D0AA ] C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe
16:28:19.0750 1088 C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe - ok
16:28:19.0750 1088 [ CBB024AD5BDAA16C604321947B6E5B33 ] C:\Program Files\IBM\Client Access\Emulator\pcsw32x.dll
16:28:19.0750 1088 C:\Program Files\IBM\Client Access\Emulator\pcsw32x.dll - ok
16:28:19.0765 1088 [ 2012C8B28D825B5436D9A52DAB2B1B78 ] C:\WINDOWS\system32\cwbuiutl.dll
16:28:19.0765 1088 C:\WINDOWS\system32\cwbuiutl.dll - ok
16:28:19.0765 1088 [ 76848CB1AA5818DB47D5F5986E0A7485 ] C:\WINDOWS\system32\mfc42.dll
16:28:19.0765 1088 C:\WINDOWS\system32\mfc42.dll - ok
16:28:19.0765 1088 [ 09A350F25D94D18190A8988E25671844 ] C:\WINDOWS\system32\igfxsrvc.dll
16:28:19.0765 1088 C:\WINDOWS\system32\igfxsrvc.dll - ok
16:28:19.0781 1088 [ 58C8809D7486DB2D9C6A24A8630A5478 ] C:\WINDOWS\system32\igfxdev.dll
16:28:19.0781 1088 C:\WINDOWS\system32\igfxdev.dll - ok
16:28:19.0781 1088 [ CA956FA0D33EA9FEBE516B5FCA0A0819 ] C:\WINDOWS\system32\igfxres.dll
16:28:19.0781 1088 C:\WINDOWS\system32\igfxres.dll - ok
16:28:19.0781 1088 [ CC8915DB4E33E8FB29CA0D2DBF75306E ] C:\WINDOWS\system32\webcheck.dll
16:28:19.0781 1088 C:\WINDOWS\system32\webcheck.dll - ok
16:28:19.0781 1088 [ B714735C12A70171DE28657948FD91F1 ] C:\WINDOWS\system32\mlang.dll
16:28:19.0781 1088 C:\WINDOWS\system32\mlang.dll - ok
16:28:19.0796 1088 [ 50512FC9B7878E3C2C147BC17326A7DB ] C:\WINDOWS\system32\stobject.dll
16:28:19.0796 1088 C:\WINDOWS\system32\stobject.dll - ok
16:28:19.0796 1088 [ 231A0B0E3BA7ABFE469A8262FAA1FD71 ] C:\WINDOWS\system32\batmeter.dll
16:28:19.0796 1088 C:\WINDOWS\system32\batmeter.dll - ok
16:28:19.0796 1088 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] C:\Program Files\SUPERAntiSpyware\SASCore.exe
16:28:19.0796 1088 C:\Program Files\SUPERAntiSpyware\SASCore.exe - ok
16:28:19.0812 1088 [ 8A1F4965B53F418483137B4F5815F775 ] C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
16:28:19.0812 1088 C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe - ok
16:28:19.0812 1088 [ ED8CEE58C1E4C5893F5B2FD686A272BF ] C:\WINDOWS\system32\drivers\ASPI32.SYS
16:28:19.0812 1088 C:\WINDOWS\system32\drivers\ASPI32.SYS - ok
16:28:19.0812 1088 [ 736574FDC37397FFEF8AACAE4A468A99 ] C:\Program Files\Broadcom\MgmtAgent\BMAPI.dll
16:28:19.0812 1088 C:\Program Files\Broadcom\MgmtAgent\BMAPI.dll - ok
16:28:19.0812 1088 [ 5F0CE62E0831CF972EC6949FD3E37DA7 ] C:\WINDOWS\system32\cfgmgr32.dll
16:28:19.0812 1088 C:\WINDOWS\system32\cfgmgr32.dll - ok
16:28:19.0828 1088 [ 00709952D444EAE14DBBD30D36FBAE0F ] C:\WINDOWS\system32\certcli.dll
16:28:19.0828 1088 C:\WINDOWS\system32\certcli.dll - ok
16:28:19.0828 1088 [ 3D4E199942E29207970E04315D02AD3B ] C:\WINDOWS\system32\cryptsvc.dll
16:28:19.0828 1088 C:\WINDOWS\system32\cryptsvc.dll - ok
16:28:19.0828 1088 [ 57EDEC2E5F59F0335E92F35184BC8631 ] C:\WINDOWS\system32\dmserver.dll
16:28:19.0828 1088 C:\WINDOWS\system32\dmserver.dll - ok
16:28:19.0843 1088 [ BC93B4A066477954555966D77FEC9ECB ] C:\WINDOWS\system32\ersvc.dll
16:28:19.0843 1088 C:\WINDOWS\system32\ersvc.dll - ok
16:28:19.0843 1088 [ E4AE0CBC0B55A5FAA6996E38CE6C981B ] C:\Program Files\Java\jre6\bin\jqs.exe
16:28:19.0843 1088 C:\Program Files\Java\jre6\bin\jqs.exe - ok
16:28:19.0843 1088 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
16:28:19.0843 1088 C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll - ok
16:28:19.0843 1088 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Program Files\Java\jre6\bin\msvcr71.dll
16:28:19.0843 1088 C:\Program Files\Java\jre6\bin\msvcr71.dll - ok
16:28:19.0859 1088 [ D4991D98F2DB73C60D042F1AEF79EFAE ] C:\WINDOWS\system32\es.dll
16:28:19.0859 1088 C:\WINDOWS\system32\es.dll - ok
16:28:19.0859 1088 [ 369F7B1A4F358B976176556A1A331F36 ] C:\WINDOWS\system32\odbcbcp.dll
16:28:19.0859 1088 C:\WINDOWS\system32\odbcbcp.dll - ok
16:28:19.0859 1088 [ 62CF83A6989312A0DD39BBFFB3D1C166 ] C:\WINDOWS\system32\pdh.dll
16:28:19.0859 1088 C:\WINDOWS\system32\pdh.dll - ok
16:28:19.0875 1088 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] C:\WINDOWS\system32\srvsvc.dll
16:28:19.0875 1088 C:\WINDOWS\system32\srvsvc.dll - ok
16:28:19.0875 1088 [ 986B1FF5814366D71E0AC5755C88F2D3 ] C:\WINDOWS\system32\msgsvc.dll
16:28:19.0875 1088 C:\WINDOWS\system32\msgsvc.dll - ok
16:28:19.0875 1088 [ 20FD44370267CCD0A64A1B31861C21D2 ] C:\WINDOWS\system32\netmsg.dll
16:28:19.0875 1088 C:\WINDOWS\system32\netmsg.dll - ok
16:28:19.0875 1088 [ 837608240884733792DDAE81E50B802A ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
16:28:19.0875 1088 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe - ok
16:28:19.0890 1088 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] C:\WINDOWS\system32\drivers\srv.sys
16:28:19.0890 1088 C:\WINDOWS\system32\drivers\srv.sys - ok
16:28:19.0890 1088 [ ACDAFCD14EC0ECE89198503746A5C147 ] C:\WINDOWS\system32\perfos.dll
16:28:19.0890 1088 C:\WINDOWS\system32\perfos.dll - ok
16:28:19.0890 1088 [ ABFB673B24A9B3287761D497529FB5B9 ] C:\WINDOWS\system32\perfdisk.dll
16:28:19.0890 1088 C:\WINDOWS\system32\perfdisk.dll - ok
16:28:19.0906 1088 [ 1C4D0F52B4238B9388F2A28DD0903588 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
16:28:19.0906 1088 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll - ok
16:28:19.0906 1088 [ E1F3AB2CC3521E68F242FB4D60C52AE3 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
16:28:19.0906 1088 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll - ok
16:28:19.0906 1088 [ D6D4130C0BBC0D18C2DA703CC38260A9 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlos.dll
16:28:19.0906 1088 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlos.dll - ok
16:28:19.0906 1088 [ E111CED19D6A9FF9BBA5C219D0C5A3CE ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll
16:28:19.0906 1088 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll - ok
16:28:19.0921 1088 [ 7B193BA3F0245D5867B71AD1CF631474 ] C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll
16:28:19.0921 1088 C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll - ok
16:28:19.0921 1088 [ 332760FBA1655FCFD35BD6F4FD871300 ] C:\WINDOWS\system32\ipsecsvc.dll
16:28:19.0921 1088 C:\WINDOWS\system32\ipsecsvc.dll - ok
16:28:19.0921 1088 [ 1AF54261C283BAFB021B3D84A7BAE978 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLBOOT.dll
16:28:19.0921 1088 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLBOOT.dll - ok
16:28:19.0937 1088 [ C5FF8682EADA5B3B27A865F1C3EF9270 ] C:\WINDOWS\system32\oakley.dll
16:28:19.0937 1088 C:\WINDOWS\system32\oakley.dll - ok
16:28:19.0937 1088 [ 853D0D0C6F02D7BFDF1CF99DD7553732 ] C:\WINDOWS\system32\pstorsvc.dll
16:28:19.0937 1088 C:\WINDOWS\system32\pstorsvc.dll - ok
16:28:19.0937 1088 [ 248712EA6BA17B9FF0C542A3828375DD ] C:\WINDOWS\system32\winipsec.dll
16:28:19.0937 1088 C:\WINDOWS\system32\winipsec.dll - ok
16:28:19.0937 1088 [ 247FE8DEFBB95A4319C7B4B215F92891 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.rll
16:28:19.0937 1088 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.rll - ok
16:28:19.0953 1088 [ 22D89D84E8E081CDA529DBF8C0255A38 ] C:\WINDOWS\system32\psbase.dll
16:28:19.0953 1088 C:\WINDOWS\system32\psbase.dll - ok
16:28:19.0953 1088 [ 5B19B557B0C188210A56A6B699D90B8F ] C:\WINDOWS\system32\regsvc.dll
16:28:19.0953 1088 C:\WINDOWS\system32\regsvc.dll - ok
16:28:19.0953 1088 [ CBE612E2BB6A10E3563336191EDA1250 ] C:\WINDOWS\system32\seclogon.dll
16:28:19.0953 1088 C:\WINDOWS\system32\seclogon.dll - ok
16:28:19.0968 1088 [ 26EBC39857138FADAD68FBC3683E64F1 ] C:\Program Files\Java\jre6\bin\awt.dll
16:28:19.0968 1088 C:\Program Files\Java\jre6\bin\awt.dll - ok
16:28:19.0968 1088 [ FEDE68BF80052BAD393AFD5C2E60DCB0 ] C:\WINDOWS\system32\dssenh.dll
16:28:19.0968 1088 C:\WINDOWS\system32\dssenh.dll - ok
16:28:19.0968 1088 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] C:\WINDOWS\system32\sens.dll
16:28:19.0968 1088 C:\WINDOWS\system32\sens.dll - ok
16:28:19.0968 1088 [ 7784111F64DB31AE96D86359301D9079 ] C:\Program Files\Java\jre6\bin\client\jvm.dll
16:28:19.0968 1088 C:\Program Files\Java\jre6\bin\client\jvm.dll - ok
16:28:19.0984 1088 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
16:28:19.0984 1088 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe - ok
16:28:19.0984 1088 [ 83F41D0D89645D7235C051AB1D9523AC ] C:\WINDOWS\system32\ipnathlp.dll
16:28:19.0984 1088 C:\WINDOWS\system32\ipnathlp.dll - ok
16:28:19.0984 1088 [ D89083C4EB02DACA8F944B0E05E57F9D ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
16:28:19.0984 1088 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe - ok
16:28:20.0000 1088 [ D1E2786D29A34009A54868B6B0449296 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll
16:28:20.0000 1088 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll - ok
16:28:20.0000 1088 [ ACACB8B14E66109B8ACD6644B5574B9A ] C:\WINDOWS\system32\vssapi.dll
16:28:20.0000 1088 C:\WINDOWS\system32\vssapi.dll - ok
16:28:20.0000 1088 [ 3805DF0AC4296A34BA4BF93B346CC378 ] C:\WINDOWS\system32\srsvc.dll
16:28:20.0000 1088 C:\WINDOWS\system32\srsvc.dll - ok
16:28:20.0015 1088 [ F9D3C78CFE15271D80790677C893CE45 ] C:\WINDOWS\system32\cabinet.dll
16:28:20.0015 1088 C:\WINDOWS\system32\cabinet.dll - ok
16:28:20.0015 1088 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] C:\WINDOWS\system32\wiaservc.dll
16:28:20.0015 1088 C:\WINDOWS\system32\wiaservc.dll - ok
16:28:20.0015 1088 [ 08A73B0E7EE6E32983B5F9E540A8E380 ] C:\WINDOWS\system32\mscoree.dll
16:28:20.0015 1088 C:\WINDOWS\system32\mscoree.dll - ok
16:28:20.0015 1088 [ A06CE3399D16DB864F55FAEB1F1927A9 ] C:\WINDOWS\system32\browser.dll
16:28:20.0015 1088 C:\WINDOWS\system32\browser.dll - ok
16:28:20.0031 1088 [ 4AC2FA4A6F0DF2511BAC13393C06EFF1 ] C:\WINDOWS\system32\mscms.dll
16:28:20.0031 1088 C:\WINDOWS\system32\mscms.dll - ok
16:28:20.0031 1088 [ 8BCD11D38FCE43A519246A91CC40DE6A ] C:\WINDOWS\system32\security.dll
16:28:20.0031 1088 C:\WINDOWS\system32\security.dll - ok
16:28:20.0031 1088 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] C:\WINDOWS\system32\wuauserv.dll
16:28:20.0031 1088 C:\WINDOWS\system32\wuauserv.dll - ok
16:28:20.0046 1088 [ 2D0E4ED081963804CCC196A0929275B5 ] C:\WINDOWS\system32\wbem\wmisvc.dll
16:28:20.0046 1088 C:\WINDOWS\system32\wbem\wmisvc.dll - ok
16:28:20.0046 1088 [ D2F77E5DC1800BBC2CFFB5E76586B293 ] C:\WINDOWS\system32\wuaueng.dll
16:28:20.0046 1088 C:\WINDOWS\system32\wuaueng.dll - ok
16:28:20.0046 1088 [ 8FED1E0A491D4990853D23F21C59C730 ] C:\WINDOWS\system32\advpack.dll
16:28:20.0046 1088 C:\WINDOWS\system32\advpack.dll - ok
16:28:20.0046 1088 [ B85E95679B5ADC12311BCD3F5385D623 ] C:\WINDOWS\system32\mspatcha.dll
16:28:20.0046 1088 C:\WINDOWS\system32\mspatcha.dll - ok
16:28:20.0062 1088 [ DEFAB035A25D3719AF0860B61EDC6440 ] C:\Program Files\Java\jre6\bin\dcpr.dll
16:28:20.0062 1088 C:\Program Files\Java\jre6\bin\dcpr.dll - ok
16:28:20.0062 1088 [ 55BCA12F7F523D35CA3CB833C725F54E ] C:\WINDOWS\system32\trkwks.dll
16:28:20.0062 1088 C:\WINDOWS\system32\trkwks.dll - ok
16:28:20.0062 1088 [ 7C278E6408D1DCE642230C0585A854D5 ] C:\WINDOWS\system32\wscsvc.dll
16:28:20.0062 1088 C:\WINDOWS\system32\wscsvc.dll - ok
16:28:20.0078 1088 [ ED0C0DF222209E43AD9AFBF3FE87DDE0 ] C:\WINDOWS\system32\comsvcs.dll
16:28:20.0078 1088 C:\WINDOWS\system32\comsvcs.dll - ok
16:28:20.0078 1088 [ E6234ED19F2FD53C14B336B74F57A68D ] C:\Program Files\Java\jre6\bin\deploy.dll
16:28:20.0078 1088 C:\Program Files\Java\jre6\bin\deploy.dll - ok
16:28:20.0078 1088 [ E6E6E69EFF79B1FCB98EB42CFC0702C5 ] C:\Program Files\Java\jre6\bin\fontmanager.dll
16:28:20.0078 1088 C:\Program Files\Java\jre6\bin\fontmanager.dll - ok
16:28:20.0078 1088 [ 920EF9E4A7073478B1BAF91C12E4DD7E ] C:\Program Files\Java\jre6\bin\hpi.dll
16:28:20.0093 1088 C:\Program Files\Java\jre6\bin\hpi.dll - ok
16:28:20.0093 1088 [ 690D97864735E8ECD87F55777E266690 ] C:\WINDOWS\system32\colbact.dll
16:28:20.0093 1088 C:\WINDOWS\system32\colbact.dll - ok
16:28:20.0093 1088 [ 36795A645EAA47FE31D2A8F136A2C69B ] C:\WINDOWS\system32\mtxclu.dll
16:28:20.0093 1088 C:\WINDOWS\system32\mtxclu.dll - ok
16:28:20.0093 1088 [ 77F2E73B9507A383CC149A359409D735 ] C:\Program Files\Java\jre6\bin\java.dll
16:28:20.0093 1088 C:\Program Files\Java\jre6\bin\java.dll - ok
16:28:20.0109 1088 [ DF82E222578DBE59FCBBD69A02E4C806 ] C:\WINDOWS\system32\clusapi.dll
16:28:20.0109 1088 C:\WINDOWS\system32\clusapi.dll - ok
16:28:20.0109 1088 [ 7D19D8FE3B8301E77CFD93A300DDC8FB ] C:\Program Files\Java\jre6\bin\javaw.exe
16:28:20.0109 1088 C:\Program Files\Java\jre6\bin\javaw.exe - ok
16:28:20.0109 1088 [ F51EBB6FC536A6B2D588FD668D3A8249 ] C:\WINDOWS\system32\resutils.dll
16:28:20.0109 1088 C:\WINDOWS\system32\resutils.dll - ok
16:28:20.0125 1088 [ F0BF811622F2DD6C8E26EE4600D83731 ] C:\WINDOWS\system32\wbem\wbemcore.dll
16:28:20.0125 1088 C:\WINDOWS\system32\wbem\wbemcore.dll - ok
16:28:20.0125 1088 [ D58BE81020DE13AEA25096B20755D89F ] C:\Program Files\Java\jre6\bin\jp2native.dll
16:28:20.0125 1088 C:\Program Files\Java\jre6\bin\jp2native.dll - ok
16:28:20.0125 1088 [ F19D5B47D36FF9A034071DF26CBCB89A ] C:\Program Files\Java\jre6\bin\jpeg.dll
16:28:20.0125 1088 C:\Program Files\Java\jre6\bin\jpeg.dll - ok
16:28:20.0125 1088 [ 79E3A8C328E7E569C32B0998377D9742 ] C:\WINDOWS\system32\spoolss.dll
16:28:20.0125 1088 C:\WINDOWS\system32\spoolss.dll - ok
16:28:20.0140 1088 [ 2BBBDDF6DC89FCDA0F41BA1143A1CBEA ] C:\Program Files\Java\jre6\bin\net.dll
16:28:20.0140 1088 C:\Program Files\Java\jre6\bin\net.dll - ok
16:28:20.0140 1088 [ E4616430709F440CF1809D88DC2366EA ] C:\WINDOWS\system32\wbem\esscli.dll
16:28:20.0140 1088 C:\WINDOWS\system32\wbem\esscli.dll - ok
16:28:20.0140 1088 [ EAA50607F83F8805D2A7EF5E128DBD3A ] C:\Program Files\Java\jre6\bin\nio.dll
16:28:20.0140 1088 C:\Program Files\Java\jre6\bin\nio.dll - ok
16:28:20.0140 1088 [ AA897735D5AB916297A6823A9B2D61B1 ] C:\WINDOWS\system32\localspl.dll
16:28:20.0140 1088 C:\WINDOWS\system32\localspl.dll - ok
16:28:20.0156 1088 [ 378A0AEFB11D8B0DC8C27B9F7604B88D ] C:\WINDOWS\system32\wbem\fastprox.dll
16:28:20.0156 1088 C:\WINDOWS\system32\wbem\fastprox.dll - ok
16:28:20.0156 1088 [ FAC23E5F45EC88EFDEFA4765771D0D10 ] C:\Program Files\Java\jre6\bin\regutils.dll
16:28:20.0156 1088 C:\Program Files\Java\jre6\bin\regutils.dll - ok
16:28:20.0156 1088 [ 5D3D1AB0EF4EA55B731863050482C111 ] C:\WINDOWS\system32\cnbjmon.dll
16:28:20.0156 1088 C:\WINDOWS\system32\cnbjmon.dll - ok
16:28:20.0171 1088 [ 010472D0AE758227C6F6E6933549C219 ] C:\WINDOWS\system32\wbem\wbemsvc.dll
16:28:20.0171 1088 C:\WINDOWS\system32\wbem\wbemsvc.dll - ok
16:28:20.0171 1088 [ 58C8D45C571AA9235FB296B383B89887 ] C:\WINDOWS\system32\cpwmon2k.dll
16:28:20.0171 1088 C:\WINDOWS\system32\cpwmon2k.dll - ok
16:28:20.0171 1088 [ 3273D1565BF30225C115B480A3BB2C9D ] C:\WINDOWS\system32\wbem\wmiutils.dll
16:28:20.0171 1088 C:\WINDOWS\system32\wbem\wmiutils.dll - ok
16:28:20.0171 1088 [ C33D36BAF2E8C48F7C60C410E0D591EC ] C:\Program Files\Java\jre6\bin\verify.dll
16:28:20.0171 1088 C:\Program Files\Java\jre6\bin\verify.dll - ok
16:28:20.0187 1088 [ 152CD4CA28C8F40BB281DAF6AD65A216 ] C:\Program Files\Java\jre6\bin\zip.dll
16:28:20.0187 1088 C:\Program Files\Java\jre6\bin\zip.dll - ok
16:28:20.0187 1088 [ 7A3D29AC6E5F67442EC8096BDE4A4E5E ] C:\WINDOWS\system32\pdfc_port.dll
16:28:20.0187 1088 C:\WINDOWS\system32\pdfc_port.dll - ok
16:28:20.0187 1088 [ 222DE7F5EDB9DDBE628384A1A8BE59CE ] C:\WINDOWS\system32\pjlmon.dll
16:28:20.0187 1088 C:\WINDOWS\system32\pjlmon.dll - ok
16:28:20.0203 1088 [ AE0382AD9C73D343D85E1A50C80B7C20 ] C:\WINDOWS\system32\tcpmon.dll
16:28:20.0203 1088 C:\WINDOWS\system32\tcpmon.dll - ok
16:28:20.0203 1088 [ 942A17D2901A31EA68627CBFFCD268CC ] C:\WINDOWS\system32\wbem\repdrvfs.dll
16:28:20.0203 1088 C:\WINDOWS\system32\wbem\repdrvfs.dll - ok
16:28:20.0203 1088 [ F26385E8BA4549B5186B774EC0E45D86 ] C:\WINDOWS\system32\usbmon.dll
16:28:20.0203 1088 C:\WINDOWS\system32\usbmon.dll - ok
16:28:20.0218 1088 [ EEE7F12D9FF46F68FBC0DA059A359E9E ] C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
16:28:20.0218 1088 C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - ok
16:28:20.0218 1088 [ 071143F687B4F887E21461CA6CC7EB29 ] C:\WINDOWS\system32\wbem\wmiprvsd.dll
16:28:20.0218 1088 C:\WINDOWS\system32\wbem\wmiprvsd.dll - ok
16:28:20.0218 1088 [ 22DD6D7D4BFE2B8CE705CC950C8AEA4C ] C:\WINDOWS\system32\win32spl.dll
16:28:20.0218 1088 C:\WINDOWS\system32\win32spl.dll - ok
16:28:20.0218 1088 [ B41D53899E37CC43DA85DA19998BEE81 ] C:\WINDOWS\system32\netrap.dll
16:28:20.0218 1088 C:\WINDOWS\system32\netrap.dll - ok
16:28:20.0234 1088 [ EE4C651A217B01D636B5364AC77DA892 ] C:\WINDOWS\system32\inetpp.dll
16:28:20.0234 1088 C:\WINDOWS\system32\inetpp.dll - ok
16:28:20.0234 1088 [ 26D881D27CBE51D3614E68D7313EA026 ] C:\WINDOWS\system32\wbem\wbemess.dll
16:28:20.0234 1088 C:\WINDOWS\system32\wbem\wbemess.dll - ok
16:28:20.0234 1088 [ 8C54260D3263ED4E9BEA132FEB3BFCB1 ] C:\WINDOWS\system32\wuapi.dll
16:28:20.0234 1088 C:\WINDOWS\system32\wuapi.dll - ok
16:28:20.0250 1088 [ D26451B540720A7313A9BCBE794DAF62 ] C:\WINDOWS\system32\wbem\ncprov.dll
16:28:20.0250 1088 C:\WINDOWS\system32\wbem\ncprov.dll - ok
16:28:20.0250 1088 [ 6404807ABC7AF52FA3792697AE638B50 ] C:\WINDOWS\system32\wbem\wbemcons.dll
16:28:20.0250 1088 C:\WINDOWS\system32\wbem\wbemcons.dll - ok
16:28:20.0250 1088 ============================================================
16:28:20.0250 1088 Scan finished
16:28:20.0250 1088 ============================================================
16:28:20.0359 0416 Detected object count: 6
16:28:20.0359 0416 Actual detected object count: 6
16:28:32.0640 0416 adpu320 ( UnsignedFile.Multi.Generic ) - skipped by user
16:28:32.0640 0416 adpu320 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:28:32.0640 0416 Aspi32 ( UnsignedFile.Multi.Generic ) - skipped by user
16:28:32.0640 0416 Aspi32 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:28:32.0640 0416 BrcmMgmtAgent ( UnsignedFile.Multi.Generic ) - skipped by user
16:28:32.0640 0416 BrcmMgmtAgent ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:28:32.0640 0416 Cwbrxd ( UnsignedFile.Multi.Generic ) - skipped by user
16:28:32.0640 0416 Cwbrxd ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:28:32.0640 0416 Fog Service ( UnsignedFile.Multi.Generic ) - skipped by user
16:28:32.0640 0416 Fog Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:28:32.0640 0416 Symmpi ( UnsignedFile.Multi.Generic ) - skipped by user
16:28:32.0640 0416 Symmpi ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:28:51.0203 2128 ============================================================
16:28:51.0203 2128 Scan started
16:28:51.0203 2128 Mode: Manual; SigCheck; TDLFS;
16:28:51.0203 2128 ============================================================
16:28:51.0937 2128 ================ Scan system memory ========================
16:28:51.0937 2128 System memory - ok
16:28:51.0937 2128 ================ Scan services =============================
16:28:52.0000 2128 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
16:28:52.0015 2128 !SASCORE - ok
16:28:52.0078 2128 [ A8A4E18857CDFD8D9AB81E2C9EAF89B5 ] a2acc C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys
16:28:52.0109 2128 a2acc - ok
16:28:52.0187 2128 [ C6D0B4BF12036D1EE092D2F5EF436FC7 ] a2AntiMalware C:\Program Files\Emsisoft Anti-Malware\a2service.exe
16:28:52.0312 2128 a2AntiMalware - ok
16:28:52.0328 2128 [ F7EABCA8375EA2DC6F35C4BCA4757515 ] A2DDA C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
16:28:52.0343 2128 A2DDA - ok
16:28:52.0437 2128 Abiosdsk - ok
16:28:52.0437 2128 abp480n5 - ok
16:28:52.0468 2128 [ 0F2D66D5F08EBE2F77BB904288DCF6F0 ] ac97intc C:\WINDOWS\system32\drivers\ac97intc.sys
16:28:52.0609 2128 ac97intc - ok
16:28:52.0640 2128 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
16:28:52.0765 2128 ACPI - ok
16:28:52.0781 2128 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
16:28:52.0890 2128 ACPIEC - ok
16:28:52.0906 2128 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
16:28:53.0046 2128 adpu160m - ok
16:28:53.0062 2128 [ 0EA9B1F0C6C90A509C8603775366ADB7 ] adpu320 C:\WINDOWS\system32\DRIVERS\adpu320.sys
16:28:53.0062 2128 adpu320 ( UnsignedFile.Multi.Generic ) - warning
16:28:53.0062 2128 adpu320 - detected UnsignedFile.Multi.Generic (1)
16:28:53.0078 2128 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
16:28:53.0203 2128 aec - ok
16:28:53.0218 2128 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
16:28:53.0250 2128 AFD - ok
16:28:53.0250 2128 Aha154x - ok
16:28:53.0281 2128 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
16:28:53.0390 2128 aic78u2 - ok
16:28:53.0390 2128 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
16:28:53.0500 2128 aic78xx - ok
16:28:53.0531 2128 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
16:28:53.0656 2128 Alerter - ok
16:28:53.0671 2128 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
16:28:53.0734 2128 ALG - ok
16:28:53.0734 2128 AliIde - ok
16:28:53.0734 2128 amsint - ok
16:28:53.0765 2128 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
16:28:53.0812 2128 AppMgmt - ok
16:28:53.0812 2128 asc - ok
16:28:53.0828 2128 asc3350p - ok
16:28:53.0828 2128 asc3550 - ok
16:28:53.0859 2128 [ ED8CEE58C1E4C5893F5B2FD686A272BF ] Aspi32 C:\WINDOWS\system32\drivers\Aspi32.sys
16:28:53.0859 2128 Aspi32 ( UnsignedFile.Multi.Generic ) - warning
16:28:53.0859 2128 Aspi32 - detected UnsignedFile.Multi.Generic (1)
16:28:53.0937 2128 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
16:28:53.0953 2128 aspnet_state - ok
16:28:53.0968 2128 aswArKrn - ok
16:28:54.0000 2128 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
16:28:54.0109 2128 AsyncMac - ok
16:28:54.0125 2128 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
16:28:54.0250 2128 atapi - ok
16:28:54.0250 2128 Atdisk - ok
16:28:54.0265 2128 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
16:28:54.0390 2128 Atmarpc - ok
16:28:54.0421 2128 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
16:28:54.0531 2128 AudioSrv - ok
16:28:54.0562 2128 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
16:28:54.0671 2128 audstub - ok
16:28:54.0718 2128 [ DB22E7062FD88CDD1CC8C99CE59E6B2B ] avgtp C:\WINDOWS\system32\drivers\avgtpx86.sys
16:28:54.0734 2128 avgtp - ok
16:28:54.0765 2128 [ E951D262C9144C05D3B21CCDDA6C7E47 ] b57w2k C:\WINDOWS\system32\DRIVERS\b57xp32.sys
16:28:54.0781 2128 b57w2k - ok
16:28:54.0781 2128 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
16:28:54.0906 2128 Beep - ok
16:28:54.0937 2128 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
16:28:55.0062 2128 BITS - ok
16:28:55.0093 2128 [ 673C79036AB4A47BB8AD555D84FFE42D ] Blfp C:\WINDOWS\system32\DRIVERS\baspxp32.sys
16:28:55.0125 2128 Blfp - ok
16:28:55.0156 2128 [ 8A1F4965B53F418483137B4F5815F775 ] BrcmMgmtAgent C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
16:28:55.0156 2128 BrcmMgmtAgent ( UnsignedFile.Multi.Generic ) - warning
16:28:55.0156 2128 BrcmMgmtAgent - detected UnsignedFile.Multi.Generic (1)
16:28:55.0187 2128 [ A06CE3399D16DB864F55FAEB1F1927A9 ] Browser C:\WINDOWS\System32\browser.dll
16:28:55.0312 2128 Browser - ok
16:28:55.0453 2128 catchme - ok
16:28:55.0468 2128 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
16:28:55.0578 2128 cbidf2k - ok
16:28:55.0578 2128 cd20xrnt - ok
16:28:55.0609 2128 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
16:28:55.0718 2128 Cdaudio - ok
16:28:55.0750 2128 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
16:28:55.0875 2128 Cdfs - ok
16:28:55.0890 2128 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
16:28:56.0015 2128 Cdrom - ok
16:28:56.0015 2128 Changer - ok
16:28:56.0046 2128 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
16:28:56.0156 2128 CiSvc - ok
16:28:56.0187 2128 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
16:28:56.0296 2128 ClipSrv - ok
16:28:56.0312 2128 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:28:56.0328 2128 clr_optimization_v2.0.50727_32 - ok
16:28:56.0328 2128 CmdIde - ok
16:28:56.0343 2128 COMSysApp - ok
16:28:56.0343 2128 Cpqarray - ok
16:28:56.0359 2128 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
16:28:56.0484 2128 CryptSvc - ok
16:28:56.0515 2128 [ C6EE25C79A9AE5A53C29830843D4DCF9 ] Cwbrxd C:\WINDOWS\CWBRXD.EXE
16:28:56.0531 2128 Cwbrxd ( UnsignedFile.Multi.Generic ) - warning
16:28:56.0531 2128 Cwbrxd - detected UnsignedFile.Multi.Generic (1)
16:28:56.0531 2128 dac2w2k - ok
16:28:56.0531 2128 dac960nt - ok
16:28:56.0578 2128 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
16:28:56.0609 2128 DcomLaunch - ok
16:28:56.0640 2128 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
16:28:56.0750 2128 Dhcp - ok
16:28:56.0765 2128 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
16:28:56.0875 2128 Disk - ok
16:28:56.0875 2128 dmadmin - ok
16:28:56.0921 2128 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
16:28:57.0031 2128 dmboot - ok
16:28:57.0046 2128 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
16:28:57.0156 2128 dmio - ok
16:28:57.0171 2128 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
16:28:57.0265 2128 dmload - ok
16:28:57.0296 2128 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
16:28:57.0421 2128 dmserver - ok
16:28:57.0453 2128 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
16:28:57.0562 2128 DMusic - ok
16:28:57.0593 2128 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
16:28:57.0625 2128 Dnscache - ok
16:28:57.0656 2128 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
16:28:57.0765 2128 Dot3svc - ok
16:28:57.0796 2128 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
16:28:57.0906 2128 dpti2o - ok
16:28:57.0937 2128 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
16:28:58.0046 2128 drmkaud - ok
16:28:58.0062 2128 [ 80CEAFB317A9E8A184644B1E22E0BE6E ] E1000 C:\WINDOWS\system32\DRIVERS\e1000325.sys
16:28:58.0078 2128 E1000 - ok
16:28:58.0093 2128 [ 3FCA03CBCA11269F973B70FA483C88EF ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
16:28:58.0234 2128 E100B - ok
16:28:58.0250 2128 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
16:28:58.0375 2128 EapHost - ok
16:28:58.0390 2128 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
16:28:58.0515 2128 ERSvc - ok
16:28:58.0531 2128 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
16:28:58.0546 2128 Eventlog - ok
16:28:58.0593 2128 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll
16:28:58.0609 2128 EventSystem - ok
16:28:58.0625 2128 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
16:28:58.0734 2128 Fastfat - ok
16:28:58.0765 2128 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
16:28:58.0781 2128 FastUserSwitchingCompatibility - ok
16:28:58.0812 2128 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
16:28:58.0937 2128 Fdc - ok
16:28:58.0953 2128 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
16:28:59.0062 2128 Fips - ok
16:28:59.0093 2128 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
16:28:59.0203 2128 Flpydisk - ok
16:28:59.0234 2128 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
16:28:59.0359 2128 FltMgr - ok
16:28:59.0390 2128 [ D5F52D403F29A37F3F6C0912197E7797 ] Fog Service C:\Program Files\FOG\FOGService.exe
16:28:59.0406 2128 Fog Service ( UnsignedFile.Multi.Generic ) - warning
16:28:59.0406 2128 Fog Service - detected UnsignedFile.Multi.Generic (1)
16:28:59.0437 2128 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
16:28:59.0468 2128 FontCache3.0.0.0 - ok
16:28:59.0500 2128 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
16:28:59.0593 2128 Fs_Rec - ok
16:28:59.0625 2128 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
16:28:59.0750 2128 Ftdisk - ok
16:28:59.0781 2128 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
16:28:59.0875 2128 Gpc - ok
16:28:59.0906 2128 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
16:29:00.0015 2128 HDAudBus - ok
16:29:00.0078 2128 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
16:29:00.0203 2128 helpsvc - ok
16:29:00.0218 2128 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
16:29:00.0328 2128 HidServ - ok
16:29:00.0359 2128 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
16:29:00.0468 2128 HidUsb - ok
16:29:00.0515 2128 [ 7EAB073BF5949ED639660787A01B623D ] hitmanpro37 C:\WINDOWS\system32\drivers\hitmanpro37.sys
16:29:00.0531 2128 hitmanpro37 - ok
16:29:00.0562 2128 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
16:29:00.0671 2128 hkmsvc - ok
16:29:00.0671 2128 hpn - ok
16:29:00.0718 2128 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
16:29:00.0734 2128 HTTP - ok
16:29:00.0750 2128 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
16:29:00.0875 2128 HTTPFilter - ok
16:29:00.0875 2128 i2omgmt - ok
16:29:00.0875 2128 i2omp - ok
16:29:00.0906 2128 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
16:29:01.0031 2128 i8042prt - ok
16:29:01.0062 2128 [ 06B7EF73BA5F302EECC294CDF7E19702 ] i81x C:\WINDOWS\system32\DRIVERS\i81xnt5.sys
16:29:01.0187 2128 i81x - ok
16:29:01.0203 2128 [ 7B5B44EFE5EB9DADFB8EE29700885D23 ] iAimFP0 C:\WINDOWS\system32\DRIVERS\wADV01nt.sys
16:29:01.0312 2128 iAimFP0 - ok
16:29:01.0343 2128 [ EB1F6BAB6C22EDE0BA551B527475F7E9 ] iAimFP1 C:\WINDOWS\system32\DRIVERS\wADV02NT.sys
16:29:01.0437 2128 iAimFP1 - ok
16:29:01.0468 2128 [ 03CE989D846C1AA81145CB22FCB86D06 ] iAimFP2 C:\WINDOWS\system32\DRIVERS\wADV05NT.sys
16:29:01.0578 2128 iAimFP2 - ok
16:29:01.0593 2128 [ 525849B4469DE021D5D61B4DB9BE3A9D ] iAimFP3 C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys
16:29:01.0703 2128 iAimFP3 - ok
16:29:01.0718 2128 [ 589C2BCDB5BD602BF7B63D210407EF8C ] iAimFP4 C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys
16:29:01.0828 2128 iAimFP4 - ok
16:29:01.0828 2128 [ 0308AEF61941E4AF478FA1A0F83812F5 ] iAimFP5 C:\WINDOWS\system32\DRIVERS\wADV07nt.sys
16:29:01.0937 2128 iAimFP5 - ok
16:29:01.0968 2128 [ 714038A8AA5DE08E12062202CD7EAEB5 ] iAimFP6 C:\WINDOWS\system32\DRIVERS\wADV08nt.sys
16:29:02.0078 2128 iAimFP6 - ok
16:29:02.0093 2128 [ 7BB3AA595E4507A788DE1CDC63F4C8C4 ] iAimFP7 C:\WINDOWS\system32\DRIVERS\wADV09nt.sys
16:29:02.0203 2128 iAimFP7 - ok
16:29:02.0218 2128 [ D83BDD5C059667A2F647A6BE5703A4D2 ] iAimTV0 C:\WINDOWS\system32\DRIVERS\wATV01nt.sys
16:29:02.0328 2128 iAimTV0 - ok
16:29:02.0359 2128 [ ED968D23354DAA0D7C621580C012A1F6 ] iAimTV1 C:\WINDOWS\system32\DRIVERS\wATV02NT.sys
16:29:02.0468 2128 iAimTV1 - ok
16:29:02.0500 2128 [ D738273F218A224C1DDAC04203F27A84 ] iAimTV3 C:\WINDOWS\system32\DRIVERS\wATV04nt.sys
16:29:02.0625 2128 iAimTV3 - ok
16:29:02.0656 2128 [ 0052D118995CBAB152DAABE6106D1442 ] iAimTV4 C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys
16:29:02.0765 2128 iAimTV4 - ok
16:29:02.0796 2128 [ 791CC45DE6E50445BE72E8AD6401FF45 ] iAimTV5 C:\WINDOWS\system32\DRIVERS\wATV10nt.sys
16:29:02.0906 2128 iAimTV5 - ok
16:29:02.0937 2128 [ 352FA0E98BC461CE1CE5D41F64DB558D ] iAimTV6 C:\WINDOWS\system32\DRIVERS\wATV06nt.sys
16:29:03.0031 2128 iAimTV6 - ok
16:29:03.0156 2128 [ 2AAE7BE67911F4AEC9AD28E9CFB9096F ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
16:29:03.0312 2128 ialm - ok
16:29:03.0343 2128 [ E5A0034847537EAEE3C00349D5C34C5F ] iaStor C:\WINDOWS\system32\DRIVERS\iaStor.sys
16:29:03.0375 2128 iaStor - ok
16:29:03.0437 2128 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
16:29:03.0484 2128 idsvc - ok
16:29:03.0500 2128 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
16:29:03.0640 2128 Imapi - ok
16:29:03.0671 2128 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
16:29:03.0812 2128 ImapiService - ok
16:29:03.0812 2128 ini910u - ok
16:29:03.0953 2128 [ A07D4742186B3CC41B0EDDECBBCEC34A ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:29:04.0140 2128 IntcAzAudAddService - ok
16:29:04.0171 2128 [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
16:29:04.0265 2128 IntelIde - ok
16:29:04.0296 2128 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
16:29:04.0390 2128 intelppm - ok
16:29:04.0406 2128 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
16:29:04.0515 2128 Ip6Fw - ok
16:29:04.0546 2128 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
16:29:04.0671 2128 IpInIp - ok
16:29:04.0687 2128 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
16:29:04.0812 2128 IpNat - ok
16:29:04.0843 2128 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
16:29:04.0968 2128 IPSec - ok
16:29:05.0000 2128 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
16:29:05.0062 2128 IRENUM - ok
16:29:05.0062 2128 Irmon - ok
16:29:05.0078 2128 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
16:29:05.0171 2128 isapnp - ok
16:29:05.0234 2128 [ E4AE0CBC0B55A5FAA6996E38CE6C981B ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
16:29:05.0250 2128 JavaQuickStarterService - ok
16:29:05.0265 2128 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
16:29:05.0359 2128 Kbdclass - ok
16:29:05.0375 2128 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
16:29:05.0468 2128 kbdhid - ok
16:29:05.0500 2128 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
16:29:05.0640 2128 kmixer - ok
16:29:05.0671 2128 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
16:29:05.0687 2128 KSecDD - ok
16:29:05.0718 2128 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
16:29:05.0750 2128 lanmanserver - ok
16:29:05.0765 2128 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
16:29:05.0781 2128 lanmanworkstation - ok
16:29:05.0796 2128 lbrtfdc - ok
16:29:05.0828 2128 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
16:29:05.0937 2128 LmHosts - ok
16:29:06.0000 2128 [ DDF15A42E27E8EFE27B18FD403151A86 ] MatSvc C:\Program Files\Microsoft Fix it Center\Matsvc.exe
16:29:06.0015 2128 MatSvc - ok
16:29:06.0031 2128 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
16:29:06.0140 2128 Messenger - ok
16:29:06.0171 2128 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
16:29:06.0265 2128 mnmdd - ok
16:29:06.0296 2128 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
16:29:06.0406 2128 mnmsrvc - ok
16:29:06.0437 2128 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
16:29:06.0546 2128 Modem - ok
16:29:06.0578 2128 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
16:29:06.0703 2128 Mouclass - ok
16:29:06.0734 2128 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
16:29:06.0843 2128 mouhid - ok
16:29:06.0859 2128 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
16:29:06.0968 2128 MountMgr - ok
16:29:06.0984 2128 MpKsl722956cb - ok
16:29:07.0000 2128 mraid35x - ok
16:29:07.0015 2128 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
16:29:07.0125 2128 MRxDAV - ok
16:29:07.0156 2128 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
16:29:07.0187 2128 MRxSmb - ok
16:29:07.0218 2128 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
16:29:07.0328 2128 MSDTC - ok
16:29:07.0343 2128 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
16:29:07.0437 2128 Msfs - ok
16:29:07.0453 2128 MSIServer - ok
16:29:07.0468 2128 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
16:29:07.0562 2128 MSKSSRV - ok
16:29:08.0906 2128 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
16:29:09.0093 2128 MSPCLOCK - ok
16:29:09.0109 2128 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
16:29:09.0281 2128 MSPQM - ok
16:29:09.0312 2128 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
16:29:09.0421 2128 mssmbios - ok
16:29:09.0531 2128 MSSQL$SQLEXPRESS - ok
16:29:09.0609 2128 [ 1D89EB4E2A99CABD4E81225F4F4C4B25 ] MSSQLServerADHelper c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe
16:29:09.0625 2128 MSSQLServerADHelper - ok
16:29:09.0671 2128 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
16:29:09.0687 2128 Mup - ok
16:29:09.0734 2128 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
16:29:09.0859 2128 napagent - ok
16:29:09.0890 2128 [ 8716356E49A665BDC7B114725B60A456 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
16:29:09.0937 2128 NDIS - ok
16:29:09.0968 2128 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
16:29:10.0031 2128 NdisTapi - ok
16:29:10.0078 2128 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
16:29:10.0281 2128 Ndisuio - ok
16:29:10.0312 2128 [ 5526CFEBB619F7F763BD6A2E1B618078 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
16:29:10.0421 2128 NdisWan - ok
16:29:10.0421 2128 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
16:29:10.0515 2128 NDProxy - ok
16:29:10.0546 2128 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
16:29:10.0812 2128 NetBIOS - ok
16:29:10.0828 2128 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
16:29:11.0046 2128 NetBT - ok
16:29:11.0125 2128 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
16:29:11.0437 2128 NetDDE - ok
16:29:11.0437 2128 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
16:29:11.0765 2128 NetDDEdsdm - ok
16:29:11.0828 2128 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
16:29:12.0062 2128 Netlogon - ok
16:29:12.0093 2128 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
16:29:12.0406 2128 Netman - ok
16:29:12.0578 2128 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:29:12.0593 2128 NetTcpPortSharing - ok
16:29:12.0656 2128 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
16:29:12.0734 2128 Nla - ok
16:29:12.0781 2128 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
16:29:12.0937 2128 Npfs - ok
16:29:12.0968 2128 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
16:29:13.0109 2128 Ntfs - ok
16:29:13.0125 2128 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
16:29:13.0250 2128 NtLmSsp - ok
16:29:13.0281 2128 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
16:29:13.0390 2128 NtmsSvc - ok
16:29:13.0421 2128 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
16:29:13.0515 2128 Null - ok
16:29:13.0546 2128 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
16:29:13.0671 2128 NwlnkFlt - ok
16:29:13.0671 2128 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
16:29:13.0796 2128 NwlnkFwd - ok
16:29:13.0812 2128 nypfwcpf - ok
16:29:13.0828 2128 [ C90018BAFDC7098619A4A95B046B30F3 ] P3 C:\WINDOWS\system32\DRIVERS\p3.sys
16:29:13.0937 2128 P3 - ok
16:29:13.0968 2128 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
16:29:14.0093 2128 Parport - ok
16:29:14.0109 2128 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
16:29:14.0203 2128 PartMgr - ok
16:29:14.0265 2128 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
16:29:14.0375 2128 ParVdm - ok
16:29:14.0390 2128 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
16:29:14.0500 2128 PCI - ok
16:29:14.0500 2128 PCIDump - ok
16:29:14.0515 2128 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
16:29:14.0625 2128 PCIIde - ok
16:29:14.0656 2128 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
16:29:14.0765 2128 Pcmcia - ok
16:29:14.0765 2128 PDCOMP - ok
16:29:14.0796 2128 pdfcDispatcher - ok
16:29:14.0812 2128 PDFRAME - ok
16:29:14.0812 2128 PDRELI - ok
16:29:14.0828 2128 PDRFRAME - ok
16:29:14.0828 2128 perc2 - ok
16:29:14.0828 2128 perc2hib - ok
16:29:14.0875 2128 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
16:29:14.0890 2128 PlugPlay - ok
16:29:14.0890 2128 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
16:29:14.0984 2128 PolicyAgent - ok
16:29:15.0031 2128 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
16:29:15.0156 2128 PptpMiniport - ok
16:29:15.0156 2128 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
16:29:15.0265 2128 ProtectedStorage - ok
16:29:15.0281 2128 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
16:29:15.0390 2128 PSched - ok
16:29:15.0406 2128 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
16:29:15.0500 2128 Ptilink - ok
16:29:15.0515 2128 ql1080 - ok
16:29:15.0515 2128 Ql10wnt - ok
16:29:15.0531 2128 ql12160 - ok
16:29:15.0531 2128 ql1240 - ok
16:29:15.0546 2128 ql1280 - ok
16:29:15.0562 2128 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
16:29:15.0671 2128 RasAcd - ok
16:29:15.0687 2128 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
16:29:15.0812 2128 RasAuto - ok
16:29:15.0843 2128 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
16:29:15.0937 2128 Rasl2tp - ok
16:29:15.0968 2128 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
16:29:16.0078 2128 RasMan - ok
16:29:16.0078 2128 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
16:29:16.0187 2128 RasPppoe - ok
16:29:16.0203 2128 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
16:29:16.0312 2128 Raspti - ok
16:29:16.0328 2128 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
16:29:16.0453 2128 Rdbss - ok
16:29:16.0500 2128 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
16:29:16.0593 2128 RDPCDD - ok
16:29:16.0687 2128 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:29:18.0062 2128 rdpdr - ok
16:29:18.0093 2128 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:29:18.0218 2128 rdpdr - ok
16:29:18.0250 2128 [ 6589DB6E5969F8EEE594CF71171C5028 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
16:29:18.0281 2128 RDPWD - ok
16:29:18.0328 2128 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
16:29:18.0421 2128 RDSessMgr - ok
16:29:18.0437 2128 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
16:29:18.0546 2128 redbook - ok
16:29:18.0687 2128 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
16:29:18.0812 2128 RemoteAccess - ok
16:29:18.0812 2128 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
16:29:18.0937 2128 RemoteRegistry - ok
16:29:19.0000 2128 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
16:29:19.0093 2128 RpcLocator - ok
16:29:19.0125 2128 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\System32\rpcss.dll
16:29:19.0140 2128 RpcSs - ok
16:29:19.0171 2128 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
16:29:19.0265 2128 RSVP - ok
16:29:19.0296 2128 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
16:29:19.0390 2128 SamSs - ok
16:29:19.0406 2128 [ 39763504067962108505BFF25F024345 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
16:29:19.0421 2128 SASDIFSV - ok
16:29:19.0437 2128 [ 77B9FC20084B48408AD3E87570EB4A85 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
16:29:19.0453 2128 SASKUTIL - ok
16:29:19.0484 2128 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
16:29:19.0625 2128 SCardSvr - ok
16:29:19.0656 2128 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
16:29:19.0765 2128 Schedule - ok
16:29:19.0812 2128 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
16:29:19.0875 2128 Secdrv - ok
16:29:19.0890 2128 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
16:29:20.0000 2128 seclogon - ok
16:29:20.0031 2128 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
16:29:20.0156 2128 SENS - ok
16:29:20.0171 2128 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
16:29:20.0265 2128 serenum - ok
16:29:20.0296 2128 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
16:29:20.0390 2128 Serial - ok
16:29:20.0421 2128 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
16:29:20.0531 2128 Sfloppy - ok
16:29:20.0562 2128 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
16:29:20.0687 2128 SharedAccess - ok
16:29:20.0703 2128 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
16:29:20.0718 2128 ShellHWDetection - ok
16:29:20.0718 2128 Simbad - ok
16:29:20.0734 2128 Sparrow - ok
16:29:20.0750 2128 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
16:29:20.0859 2128 splitter - ok
16:29:20.0906 2128 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
16:29:20.0921 2128 Spooler - ok
16:29:20.0921 2128 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] SQLBrowser c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
16:29:20.0953 2128 SQLBrowser - ok
16:29:20.0984 2128 [ D89083C4EB02DACA8F944B0E05E57F9D ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
16:29:21.0000 2128 SQLWriter - ok
16:29:21.0031 2128 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
16:29:21.0093 2128 sr - ok
16:29:21.0109 2128 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
16:29:21.0187 2128 srservice - ok
16:29:21.0203 2128 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
16:29:21.0218 2128 Srv - ok
16:29:21.0250 2128 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
16:29:21.0296 2128 SSDPSRV - ok
16:29:21.0328 2128 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
16:29:21.0421 2128 stisvc - ok
16:29:21.0453 2128 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
16:29:21.0562 2128 swenum - ok
16:29:21.0593 2128 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
16:29:21.0703 2128 swmidi - ok
16:29:21.0703 2128 SwPrv - ok
16:29:21.0750 2128 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
16:29:21.0828 2128 symc810 - ok
16:29:21.0843 2128 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
16:29:21.0937 2128 symc8xx - ok
16:29:21.0953 2128 [ F2B7E8416F508368AC6730E2AE1C614F ] Symmpi C:\WINDOWS\system32\DRIVERS\symmpi.sys
16:29:21.0968 2128 Symmpi ( UnsignedFile.Multi.Generic ) - warning
16:29:21.0968 2128 Symmpi - detected UnsignedFile.Multi.Generic (1)
16:29:21.0968 2128 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
16:29:22.0062 2128 sym_hi - ok
16:29:22.0078 2128 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
16:29:22.0171 2128 sym_u3 - ok
16:29:22.0203 2128 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
16:29:22.0312 2128 sysaudio - ok
16:29:22.0343 2128 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
16:29:22.0453 2128 SysmonLog - ok
16:29:22.0484 2128 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
16:29:22.0578 2128 TapiSrv - ok
16:29:22.0625 2128 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
16:29:22.0640 2128 Tcpip - ok
16:29:22.0671 2128 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
16:29:22.0781 2128 TDPIPE - ok
16:29:22.0796 2128 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
16:29:22.0906 2128 TDTCP - ok
16:29:22.0921 2128 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
16:29:23.0031 2128 TermDD - ok
16:29:23.0062 2128 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
16:29:23.0187 2128 TermService - ok
16:29:23.0203 2128 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
16:29:23.0218 2128 Themes - ok
16:29:23.0250 2128 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
16:29:23.0296 2128 TlntSvr - ok
16:29:23.0312 2128 TosIde - ok
16:29:23.0343 2128 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
16:29:23.0453 2128 TrkWks - ok
16:29:23.0468 2128 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
16:29:23.0578 2128 Udfs - ok
16:29:23.0578 2128 ultra - ok
16:29:23.0609 2128 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
16:29:23.0671 2128 upnphost - ok
16:29:23.0703 2128 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
16:29:23.0781 2128 UPS - ok
16:29:23.0812 2128 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
16:29:23.0921 2128 usbccgp - ok
16:29:23.0953 2128 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
16:29:24.0046 2128 usbehci - ok
16:29:24.0062 2128 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
16:29:24.0156 2128 usbhub - ok
16:29:24.0171 2128 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
16:29:24.0281 2128 USBSTOR - ok
16:29:24.0312 2128 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
16:29:24.0406 2128 usbuhci - ok
16:29:24.0421 2128 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
16:29:24.0515 2128 VgaSave - ok
16:29:24.0531 2128 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
16:29:24.0640 2128 ViaIde - ok
16:29:24.0656 2128 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
16:29:24.0765 2128 VolSnap - ok
16:29:24.0812 2128 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
16:29:24.0859 2128 VSS - ok
16:29:24.0890 2128 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\system32\w32time.dll
16:29:25.0000 2128 W32Time - ok
16:29:25.0046 2128 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
16:29:25.0156 2128 Wanarp - ok
16:29:25.0156 2128 WDICA - ok
16:29:25.0171 2128 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
16:29:25.0265 2128 wdmaud - ok
16:29:25.0296 2128 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
16:29:25.0406 2128 WebClient - ok
16:29:25.0484 2128 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
16:29:25.0578 2128 winmgmt - ok
16:29:25.0625 2128 [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
16:29:25.0734 2128 WmdmPmSN - ok
16:29:25.0765 2128 [ E76F8807070ED04E7408A86D6D3A6137 ] Wmi C:\WINDOWS\System32\advapi32.dll
16:29:25.0796 2128 Wmi - ok
16:29:25.0812 2128 [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
16:29:25.0906 2128 WmiAcpi - ok
16:29:25.0937 2128 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
16:29:26.0031 2128 WmiApSrv - ok
16:29:26.0062 2128 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
16:29:27.0812 2128 WS2IFSL - ok
16:29:27.0843 2128 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
16:29:27.0953 2128 wscsvc - ok
16:29:27.0984 2128 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
16:29:28.0093 2128 wuauserv - ok
16:29:28.0140 2128 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
16:29:28.0234 2128 WZCSVC - ok
16:29:28.0265 2128 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
16:29:28.0375 2128 xmlprov - ok

16:29:28.0390 2128 ================ Scan global ===============================
16:29:28.0406 2128 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
16:29:28.0437 2128 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:29:28.0453 2128 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:29:28.0468 2128 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
16:29:28.0468 2128 [Global] - ok
16:29:28.0468 2128 ================ Scan MBR ==================================
16:29:28.0484 2128 [ 4975BDBEDA8A3AFB2AEADEFC06CE9E12 ] \Device\Harddisk0\DR0
16:29:28.0687 2128 \Device\Harddisk0\DR0 - ok
16:29:28.0687 2128 ================ Scan VBR ==================================
16:29:28.0718 2128 [ DD55B00384CAA514AD015B417D2AA37C ] \Device\Harddisk0\DR0\Partition1
16:29:28.0718 2128 \Device\Harddisk0\DR0\Partition1 - ok
16:29:28.0718 2128 ================ Scan active images ========================
16:29:28.0718 2128 [ E28726B72C46821A28830E077D39A55B ] C:\WINDOWS\system32\drivers\videoprt.sys
16:29:28.0718 2128 C:\WINDOWS\system32\drivers\videoprt.sys - ok
16:29:28.0718 2128 [ 2AAE7BE67911F4AEC9AD28E9CFB9096F ] C:\WINDOWS\system32\drivers\igxpmp32.sys
16:29:28.0718 2128 C:\WINDOWS\system32\drivers\igxpmp32.sys - ok
16:29:28.0734 2128 [ 791912E524CC2CC6F50B5F2B52D1EB71 ] C:\WINDOWS\system32\drivers\usbport.sys
16:29:28.0734 2128 C:\WINDOWS\system32\drivers\usbport.sys - ok
16:29:28.0734 2128 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] C:\WINDOWS\system32\drivers\usbuhci.sys
16:29:28.0734 2128 C:\WINDOWS\system32\drivers\usbuhci.sys - ok
16:29:28.0750 2128 [ 573C7D0A32852B48F3058CFD8026F511 ] C:\WINDOWS\system32\drivers\hdaudbus.sys
16:29:28.0750 2128 C:\WINDOWS\system32\drivers\hdaudbus.sys - ok
16:29:28.0750 2128 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] C:\WINDOWS\system32\drivers\usbehci.sys
16:29:28.0750 2128 C:\WINDOWS\system32\drivers\usbehci.sys - ok
16:29:28.0750 2128 [ E951D262C9144C05D3B21CCDDA6C7E47 ] C:\WINDOWS\system32\drivers\b57xp32.sys
16:29:28.0750 2128 C:\WINDOWS\system32\drivers\b57xp32.sys - ok
16:29:28.0750 2128 [ 4A0B06AA8943C1E332520F7440C0AA30 ] C:\WINDOWS\system32\drivers\i8042prt.sys
16:29:28.0750 2128 C:\WINDOWS\system32\drivers\i8042prt.sys - ok
16:29:28.0765 2128 [ 463C1EC80CD17420A542B7F36A36F128 ] C:\WINDOWS\system32\drivers\kbdclass.sys
16:29:28.0765 2128 C:\WINDOWS\system32\drivers\kbdclass.sys - ok
16:29:28.0765 2128 [ 35C9E97194C8CFB8430125F8DBC34D04 ] C:\WINDOWS\system32\drivers\mouclass.sys
16:29:28.0765 2128 C:\WINDOWS\system32\drivers\mouclass.sys - ok
16:29:28.0765 2128 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] C:\WINDOWS\system32\drivers\parport.sys
16:29:28.0765 2128 C:\WINDOWS\system32\drivers\parport.sys - ok
16:29:28.0781 2128 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] C:\WINDOWS\system32\drivers\serial.sys
16:29:28.0781 2128 C:\WINDOWS\system32\drivers\serial.sys - ok
16:29:28.0781 2128 [ 1F4260CC5B42272D71F79E570A27A4FE ] C:\WINDOWS\system32\drivers\cdrom.sys
16:29:28.0781 2128 C:\WINDOWS\system32\drivers\cdrom.sys - ok
16:29:28.0781 2128 [ 0753515F78DF7F271A5E61C20BCD36A1 ] C:\WINDOWS\system32\drivers\ks.sys
16:29:28.0781 2128 C:\WINDOWS\system32\drivers\ks.sys - ok
16:29:28.0781 2128 [ F828DD7E1419B6653894A8F97A0094C5 ] C:\WINDOWS\system32\drivers\redbook.sys
16:29:28.0781 2128 C:\WINDOWS\system32\drivers\redbook.sys - ok
16:29:28.0796 2128 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] C:\WINDOWS\system32\drivers\serenum.sys
16:29:28.0796 2128 C:\WINDOWS\system32\drivers\serenum.sys - ok
16:29:28.0796 2128 [ D9F724AA26C010A217C97606B160ED68 ] C:\WINDOWS\system32\drivers\audstub.sys
16:29:28.0796 2128 C:\WINDOWS\system32\drivers\audstub.sys - ok
16:29:28.0796 2128 [ 8C953733D8F36EB2133F5BB58808B66B ] C:\WINDOWS\system32\drivers\intelppm.sys
16:29:28.0796 2128 C:\WINDOWS\system32\drivers\intelppm.sys - ok
16:29:28.0812 2128 [ 0109C4F3850DFBAB279542515386AE22 ] C:\WINDOWS\system32\drivers\ndistapi.sys
16:29:28.0812 2128 C:\WINDOWS\system32\drivers\ndistapi.sys - ok
16:29:28.0812 2128 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] C:\WINDOWS\system32\drivers\rasl2tp.sys
16:29:28.0812 2128 C:\WINDOWS\system32\drivers\rasl2tp.sys - ok
16:29:28.0812 2128 [ C42584FD66CE9E17403AEBCA199F7BDB ] C:\WINDOWS\system32\drivers\wmiacpi.sys
16:29:28.0812 2128 C:\WINDOWS\system32\drivers\wmiacpi.sys - ok
16:29:28.0812 2128 [ 5526CFEBB619F7F763BD6A2E1B618078 ] C:\WINDOWS\system32\drivers\ndiswan.sys
16:29:28.0812 2128 C:\WINDOWS\system32\drivers\ndiswan.sys - ok
16:29:28.0828 2128 [ 5BC962F2654137C9909C3D4603587DEE ] C:\WINDOWS\system32\drivers\raspppoe.sys
16:29:28.0828 2128 C:\WINDOWS\system32\drivers\raspppoe.sys - ok
16:29:28.0828 2128 [ 0539D5E53587F82D1B4FD74C5BE205CF ] C:\WINDOWS\system32\drivers\tdi.sys
16:29:28.0828 2128 C:\WINDOWS\system32\drivers\tdi.sys - ok
16:29:28.0828 2128 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] C:\WINDOWS\system32\drivers\msgpc.sys
16:29:28.0828 2128 C:\WINDOWS\system32\drivers\msgpc.sys - ok
16:29:28.0843 2128 [ 09298EC810B07E5D582CB3A3F9255424 ] C:\WINDOWS\system32\drivers\psched.sys
16:29:28.0843 2128 C:\WINDOWS\system32\drivers\psched.sys - ok
16:29:28.0843 2128 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] C:\WINDOWS\system32\drivers\raspptp.sys
16:29:28.0843 2128 C:\WINDOWS\system32\drivers\raspptp.sys - ok
16:29:28.0843 2128 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] C:\WINDOWS\system32\drivers\ptilink.sys
16:29:28.0843 2128 C:\WINDOWS\system32\drivers\ptilink.sys - ok
16:29:28.0843 2128 [ FDBB1D60066FCFBB7452FD8F9829B242 ] C:\WINDOWS\system32\drivers\raspti.sys
16:29:28.0843 2128 C:\WINDOWS\system32\drivers\raspti.sys - ok
16:29:28.0859 2128 [ 15CABD0F7C00C47C70124907916AF3F1 ] C:\WINDOWS\system32\drivers\rdpdr.sys
16:29:28.0859 2128 C:\WINDOWS\system32\drivers\rdpdr.sys - ok
16:29:28.0859 2128 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] C:\WINDOWS\system32\drivers\swenum.sys
16:29:28.0859 2128 C:\WINDOWS\system32\drivers\swenum.sys - ok
16:29:28.0859 2128 [ 88155247177638048422893737429D9E ] C:\WINDOWS\system32\drivers\termdd.sys
16:29:28.0859 2128 C:\WINDOWS\system32\drivers\termdd.sys - ok
16:29:28.0875 2128 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] C:\WINDOWS\system32\drivers\mssmbios.sys
16:29:28.0875 2128 C:\WINDOWS\system32\drivers\mssmbios.sys - ok
16:29:28.0875 2128 [ 9282BD12DFB069D3889EB3FCC1000A9B ] C:\WINDOWS\system32\drivers\ndproxy.sys
16:29:28.0875 2128 C:\WINDOWS\system32\drivers\ndproxy.sys - ok
16:29:28.0875 2128 [ 596EB39B50D6EBD9B734DC4AE0544693 ] C:\WINDOWS\system32\drivers\usbd.sys
16:29:28.0875 2128 C:\WINDOWS\system32\drivers\usbd.sys - ok
16:29:28.0875 2128 [ 1AB3CDDE553B6E064D2E754EFE20285C ] C:\WINDOWS\system32\drivers\usbhub.sys
16:29:28.0890 2128 C:\WINDOWS\system32\drivers\usbhub.sys - ok
16:29:28.0890 2128 [ 6CB08593487F5701D2D2254E693EAFCE ] C:\WINDOWS\system32\drivers\drmk.sys
16:29:28.0890 2128 C:\WINDOWS\system32\drivers\drmk.sys - ok
16:29:28.0890 2128 [ E82A496C3961EFC6828B508C310CE98F ] C:\WINDOWS\system32\drivers\portcls.sys
16:29:28.0890 2128 C:\WINDOWS\system32\drivers\portcls.sys - ok
16:29:28.0890 2128 [ A07D4742186B3CC41B0EDDECBBCEC34A ] C:\WINDOWS\system32\drivers\RtkHDAud.sys
16:29:28.0890 2128 C:\WINDOWS\system32\drivers\RtkHDAud.sys - ok
16:29:28.0906 2128 [ DB22E7062FD88CDD1CC8C99CE59E6B2B ] C:\WINDOWS\system32\drivers\avgtpx86.sys
16:29:28.0906 2128 C:\WINDOWS\system32\drivers\avgtpx86.sys - ok
16:29:28.0906 2128 [ DA1F27D85E0D1525F6621372E7B685E9 ] C:\WINDOWS\system32\drivers\beep.sys
16:29:28.0906 2128 C:\WINDOWS\system32\drivers\beep.sys - ok
16:29:28.0906 2128 [ C1B486A7658353D33A10CC15211A873B ] C:\WINDOWS\system32\drivers\cdaudio.sys
16:29:28.0906 2128 C:\WINDOWS\system32\drivers\cdaudio.sys - ok
16:29:28.0921 2128 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] C:\WINDOWS\system32\drivers\fs_rec.sys
16:29:28.0921 2128 C:\WINDOWS\system32\drivers\fs_rec.sys - ok
16:29:28.0921 2128 [ 96ECCF28FDBF1B2CC12725818A63628D ] C:\WINDOWS\system32\drivers\hidparse.sys
16:29:28.0921 2128 C:\WINDOWS\system32\drivers\hidparse.sys - ok
16:29:28.0921 2128 [ 9EF487A186DEA361AA06913A75B3FA99 ] C:\WINDOWS\system32\drivers\kbdhid.sys
16:29:28.0921 2128 C:\WINDOWS\system32\drivers\kbdhid.sys - ok
16:29:28.0921 2128 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] C:\WINDOWS\system32\drivers\null.sys
16:29:28.0921 2128 C:\WINDOWS\system32\drivers\null.sys - ok
16:29:28.0937 2128 [ 8E6B8C671615D126FDC553D1E2DE5562 ] C:\WINDOWS\system32\drivers\sfloppy.sys
16:29:28.0937 2128 C:\WINDOWS\system32\drivers\sfloppy.sys - ok
16:29:28.0937 2128 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] C:\WINDOWS\system32\drivers\vga.sys
16:29:28.0937 2128 C:\WINDOWS\system32\drivers\vga.sys - ok
16:29:28.0937 2128 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] C:\WINDOWS\system32\drivers\mnmdd.sys
16:29:28.0937 2128 C:\WINDOWS\system32\drivers\mnmdd.sys - ok
16:29:28.0953 2128 [ 4912D5B403614CE99C28420F75353332 ] C:\WINDOWS\system32\drivers\rdpcdd.sys
16:29:28.0953 2128 C:\WINDOWS\system32\drivers\rdpcdd.sys - ok
16:29:28.0953 2128 [ 23C74D75E36E7158768DD63D92789A91 ] C:\WINDOWS\system32\drivers\ipsec.sys
16:29:28.0953 2128 C:\WINDOWS\system32\drivers\ipsec.sys - ok
16:29:28.0953 2128 [ C941EA2454BA8350021D774DAF0F1027 ] C:\WINDOWS\system32\drivers\msfs.sys
16:29:28.0953 2128 C:\WINDOWS\system32\drivers\msfs.sys - ok
16:29:28.0953 2128 [ 3182D64AE053D6FB034F44B6DEF8034A ] C:\WINDOWS\system32\drivers\npfs.sys
16:29:28.0953 2128 C:\WINDOWS\system32\drivers\npfs.sys - ok
16:29:28.0968 2128 [ FE0D99D6F31E4FAD8159F690D68DED9C ] C:\WINDOWS\system32\drivers\rasacd.sys
16:29:28.0968 2128 C:\WINDOWS\system32\drivers\rasacd.sys - ok
16:29:28.0968 2128 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] C:\WINDOWS\system32\drivers\tcpip.sys
16:29:28.0968 2128 C:\WINDOWS\system32\drivers\tcpip.sys - ok
16:29:28.0968 2128 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] C:\WINDOWS\system32\drivers\netbt.sys
16:29:28.0968 2128 C:\WINDOWS\system32\drivers\netbt.sys - ok
16:29:28.0968 2128 [ CC748EA12C6EFFDE940EE98098BF96BB ] C:\WINDOWS\system32\drivers\ipnat.sys
16:29:28.0968 2128 C:\WINDOWS\system32\drivers\ipnat.sys - ok
16:29:28.0984 2128 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] C:\WINDOWS\system32\drivers\ws2ifsl.sys
16:29:28.0984 2128 C:\WINDOWS\system32\drivers\ws2ifsl.sys - ok
16:29:28.0984 2128 [ 39763504067962108505BFF25F024345 ] C:\Program Files\SUPERAntiSpyware\sasdifsv.sys
16:29:28.0984 2128 C:\Program Files\SUPERAntiSpyware\sasdifsv.sys - ok
16:29:28.0984 2128 [ 77B9FC20084B48408AD3E87570EB4A85 ] C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
16:29:28.0984 2128 C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS - ok
16:29:29.0000 2128 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] C:\WINDOWS\system32\drivers\afd.sys
16:29:29.0000 2128 C:\WINDOWS\system32\drivers\afd.sys - ok
16:29:29.0000 2128 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] C:\WINDOWS\system32\drivers\netbios.sys
16:29:29.0000 2128 C:\WINDOWS\system32\drivers\netbios.sys - ok
16:29:29.0000 2128 [ C90018BAFDC7098619A4A95B046B30F3 ] C:\WINDOWS\system32\drivers\p3.sys
16:29:29.0000 2128 C:\WINDOWS\system32\drivers\p3.sys - ok
16:29:29.0015 2128 [ 7AD224AD1A1437FE28D89CF22B17780A ] C:\WINDOWS\system32\drivers\rdbss.sys
16:29:29.0015 2128 C:\WINDOWS\system32\drivers\rdbss.sys - ok
16:29:29.0015 2128 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] C:\WINDOWS\system32\drivers\mrxsmb.sys
16:29:29.0015 2128 C:\WINDOWS\system32\drivers\mrxsmb.sys - ok
16:29:29.0015 2128 [ 083A052659F5310DD8B6A6CB05EDCF8E ] C:\WINDOWS\system32\drivers\imapi.sys
16:29:29.0015 2128 C:\WINDOWS\system32\drivers\imapi.sys - ok
16:29:29.0015 2128 [ F7EABCA8375EA2DC6F35C4BCA4757515 ] C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
16:29:29.0015 2128 C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys - ok
16:29:29.0031 2128 [ D45926117EB9FA946A6AF572FBE1CAA3 ] C:\WINDOWS\system32\drivers\fips.sys
16:29:29.0031 2128 C:\WINDOWS\system32\drivers\fips.sys - ok
16:29:29.0031 2128 [ F8F0D25CA553E39DDE485D8FC7FCCE89 ] C:\WINDOWS\system32\ntdll.dll
16:29:29.0031 2128 C:\WINDOWS\system32\ntdll.dll - ok
16:29:29.0031 2128 [ 5F816C1F539266D2D4C78694239DA0B5 ] C:\WINDOWS\system32\smss.exe
16:29:29.0031 2128 C:\WINDOWS\system32\smss.exe - ok
16:29:29.0046 2128 [ 23043C91A0F9DFB4B9E9F87B680863B4 ] C:\WINDOWS\system32\autochk.exe
16:29:29.0046 2128 C:\WINDOWS\system32\autochk.exe - ok
16:29:29.0046 2128 [ 9DD07AF82244867CA36681EA2D29CE79 ] C:\WINDOWS\system32\sfcfiles.dll
16:29:29.0046 2128 C:\WINDOWS\system32\sfcfiles.dll - ok
16:29:29.0046 2128 [ 1AF592532532A402ED7C060F6954004F ] C:\WINDOWS\system32\drivers\hidclass.sys
16:29:29.0046 2128 C:\WINDOWS\system32\drivers\hidclass.sys - ok
16:29:29.0046 2128 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] C:\WINDOWS\system32\drivers\hidusb.sys
16:29:29.0046 2128 C:\WINDOWS\system32\drivers\hidusb.sys - ok
16:29:29.0062 2128 [ C885B02847F5D2FD45A24E219ED93B32 ] C:\WINDOWS\system32\drivers\cdfs.sys
16:29:29.0062 2128 C:\WINDOWS\system32\drivers\cdfs.sys - ok
16:29:29.0062 2128 [ B1C303E17FB9D46E87A98E4BA6769685 ] C:\WINDOWS\system32\drivers\mouhid.sys
16:29:29.0062 2128 C:\WINDOWS\system32\drivers\mouhid.sys - ok
16:29:29.0062 2128 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] C:\WINDOWS\system32\drivers\atapi.sys
16:29:29.0062 2128 C:\WINDOWS\system32\drivers\atapi.sys - ok
16:29:29.0078 2128 [ 2F31B7F954BED437F2C75026C65CAF7B ] C:\WINDOWS\system32\drivers\wmilib.sys
16:29:29.0078 2128 C:\WINDOWS\system32\drivers\wmilib.sys - ok
16:29:29.0078 2128 [ FE97D0343ACFDEBDD578FC67CC91FA87 ] C:\WINDOWS\system32\drivers\dxapi.sys
16:29:29.0078 2128 C:\WINDOWS\system32\drivers\dxapi.sys - ok
16:29:29.0078 2128 [ 9A10AACBFDC4922715375FB4065EC930 ] C:\WINDOWS\system32\watchdog.sys
16:29:29.0078 2128 C:\WINDOWS\system32\watchdog.sys - ok
16:29:29.0078 2128 [ DFF851C4D8977A26F95B929A0B89BB5D ] C:\WINDOWS\system32\win32k.sys
16:29:29.0078 2128 C:\WINDOWS\system32\win32k.sys - ok
16:29:29.0093 2128 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
16:29:29.0093 2128 C:\WINDOWS\system32\basesrv.dll - ok
16:29:29.0093 2128 [ DD40363ABAD230A84C5E2178B11EFA88 ] C:\WINDOWS\system32\csrsrv.dll
16:29:29.0093 2128 C:\WINDOWS\system32\csrsrv.dll - ok
16:29:29.0093 2128 [ 44F275C64738EA2056E3D9580C23B60F ] C:\WINDOWS\system32\csrss.exe
16:29:29.0093 2128 C:\WINDOWS\system32\csrss.exe - ok
16:29:29.0109 2128 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
16:29:29.0109 2128 C:\WINDOWS\system32\winsrv.dll - ok
16:29:29.0109 2128 [ 8B1F3320AEBB536E021A5014409862DE ] C:\WINDOWS\system32\gdi32.dll
16:29:29.0109 2128 C:\WINDOWS\system32\gdi32.dll - ok
16:29:29.0109 2128 [ B921FB870C9AC0D509B2CCABBBBE95F3 ] C:\WINDOWS\system32\kernel32.dll
16:29:29.0109 2128 C:\WINDOWS\system32\kernel32.dll - ok
16:29:29.0125 2128 [ B26B135FF1B9F60C9388B4A7D16F600B ] C:\WINDOWS\system32\user32.dll
16:29:29.0125 2128 C:\WINDOWS\system32\user32.dll - ok
16:29:29.0125 2128 [ AC7280566A7BB85CB3291F04DDC1198E ] C:\WINDOWS\system32\drivers\dxg.sys
16:29:29.0125 2128 C:\WINDOWS\system32\drivers\dxg.sys - ok
16:29:29.0125 2128 [ A73F5D6705B1D820C19B18782E176EFD ] C:\WINDOWS\system32\drivers\dxgthk.sys
16:29:29.0125 2128 C:\WINDOWS\system32\drivers\dxgthk.sys - ok
16:29:29.0125 2128 [ E95967EB24F5036998947E771E5BE734 ] C:\WINDOWS\system32\igxpgd32.dll
16:29:29.0140 2128 C:\WINDOWS\system32\igxpgd32.dll - ok
16:29:29.0140 2128 [ 9326C80A449CE799977207138B9F7FEE ] C:\WINDOWS\system32\igxprd32.dll
16:29:29.0140 2128 C:\WINDOWS\system32\igxprd32.dll - ok
16:29:29.0140 2128 [ ECB7591870F8BFB1A4C17B718AD5A4AA ] C:\WINDOWS\system32\vga.dll
16:29:29.0140 2128 C:\WINDOWS\system32\vga.dll - ok
16:29:29.0140 2128 [ EE34119CD544A50A0D5F6E0750DAA389 ] C:\WINDOWS\system32\igxpdv32.dll
16:29:29.0140 2128 C:\WINDOWS\system32\igxpdv32.dll - ok
16:29:29.0156 2128 [ 2680FC3AA485925DCFE9ADF853FCF267 ] C:\WINDOWS\system32\igxpdx32.dll
16:29:29.0156 2128 C:\WINDOWS\system32\igxpdx32.dll - ok
16:29:29.0156 2128 [ ED0EF0A136DEC83DF69F04118870003E ] C:\WINDOWS\system32\winlogon.exe
16:29:29.0156 2128 C:\WINDOWS\system32\winlogon.exe - ok
16:29:29.0156 2128 [ E76F8807070ED04E7408A86D6D3A6137 ] C:\WINDOWS\system32\advapi32.dll
16:29:29.0156 2128 C:\WINDOWS\system32\advapi32.dll - ok
16:29:29.0171 2128 [ D4502F124289A31976130CCCB014C9AA ] C:\WINDOWS\system32\rpcrt4.dll
16:29:29.0171 2128 C:\WINDOWS\system32\rpcrt4.dll - ok
16:29:29.0171 2128 [ 5357826C8A8DD6A07F17C48BB45BE46E ] C:\WINDOWS\system32\secur32.dll
16:29:29.0171 2128 C:\WINDOWS\system32\secur32.dll - ok
16:29:29.0171 2128 [ 714705F29A917993536A6AB2DEDB0B7F ] C:\WINDOWS\system32\authz.dll
16:29:29.0171 2128 C:\WINDOWS\system32\authz.dll - ok
16:29:29.0171 2128 [ 355EDBB4D412B01F1740C17E3F50FA00 ] C:\WINDOWS\system32\msvcrt.dll
16:29:29.0171 2128 C:\WINDOWS\system32\msvcrt.dll - ok
16:29:29.0187 2128 [ 64416C6E07606720C1ECE6DD374BDFFD ] C:\WINDOWS\system32\crypt32.dll
16:29:29.0187 2128 C:\WINDOWS\system32\crypt32.dll - ok
16:29:29.0187 2128 [ 04D898830DF96A17A20FD35D7590F87E ] C:\WINDOWS\system32\msasn1.dll
16:29:29.0187 2128 C:\WINDOWS\system32\msasn1.dll - ok
16:29:29.0187 2128 [ 013C1148C1EC025596896E093F60F608 ] C:\WINDOWS\system32\nddeapi.dll
16:29:29.0187 2128 C:\WINDOWS\system32\nddeapi.dll - ok
16:29:29.0203 2128 [ 318230E845919255EF3C5D5E1E863631 ] C:\WINDOWS\system32\netapi32.dll
16:29:29.0203 2128 C:\WINDOWS\system32\netapi32.dll - ok
16:29:29.0203 2128 [ FCFA1C55971CC229D353B3A15ACCD995 ] C:\WINDOWS\system32\profmap.dll
16:29:29.0203 2128 C:\WINDOWS\system32\profmap.dll - ok
16:29:29.0203 2128 [ 9CFCB3CA3D83B4EAA133F0644A2C6F31 ] C:\WINDOWS\system32\psapi.dll
16:29:29.0203 2128 C:\WINDOWS\system32\psapi.dll - ok
16:29:29.0203 2128 [ 43D13C80EBEC0135A3611E0F616F179B ] C:\WINDOWS\system32\userenv.dll
16:29:29.0203 2128 C:\WINDOWS\system32\userenv.dll - ok
16:29:29.0218 2128 [ AF11C591F2F4AFF4A6CF699D376F618B ] C:\WINDOWS\system32\regapi.dll
16:29:29.0218 2128 C:\WINDOWS\system32\regapi.dll - ok
16:29:29.0218 2128 [ 24192246760E0E64435522E246B1D6C2 ] C:\WINDOWS\system32\setupapi.dll
16:29:29.0218 2128 C:\WINDOWS\system32\setupapi.dll - ok
16:29:29.0218 2128 [ C7CE131408739B0B3A318BE2D0032719 ] C:\WINDOWS\system32\version.dll
16:29:29.0218 2128 C:\WINDOWS\system32\version.dll - ok
16:29:29.0234 2128 [ 430CEB794F6E6EF8AC86958C242366D6 ] C:\WINDOWS\system32\winsta.dll
16:29:29.0234 2128 C:\WINDOWS\system32\winsta.dll - ok
16:29:29.0234 2128 [ FFC01A72D1C25CCB39F61B202CE60819 ] C:\WINDOWS\system32\imagehlp.dll
16:29:29.0234 2128 C:\WINDOWS\system32\imagehlp.dll - ok
16:29:29.0234 2128 [ 95F5C420E9BDD4C3569602911420A774 ] C:\WINDOWS\system32\wintrust.dll
16:29:29.0234 2128 C:\WINDOWS\system32\wintrust.dll - ok
16:29:29.0234 2128 [ 0DA85218E92526972A821587E6A8BF8F ] C:\WINDOWS\system32\imm32.dll
16:29:29.0234 2128 C:\WINDOWS\system32\imm32.dll - ok
16:29:29.0250 2128 [ 9789E95E1D88EEB4B922BF3EA7779C28 ] C:\WINDOWS\system32\ws2help.dll
16:29:29.0250 2128 C:\WINDOWS\system32\ws2help.dll - ok
16:29:29.0250 2128 [ 2CCC474EB85CEAA3E1FA1726580A3E5A ] C:\WINDOWS\system32\ws2_32.dll
16:29:29.0250 2128 C:\WINDOWS\system32\ws2_32.dll - ok
16:29:29.0250 2128 [ 56C5B179FE3308B655EB6208C3256FEC ] C:\WINDOWS\system32\kbdus.dll
16:29:29.0250 2128 C:\WINDOWS\system32\kbdus.dll - ok
16:29:29.0265 2128 [ D7B7A57C0E57C836F18CF12A4C62A1CA ] C:\WINDOWS\system32\msgina.dll
16:29:29.0265 2128 C:\WINDOWS\system32\msgina.dll - ok
16:29:29.0265 2128 [ 93AFB83FBC1F9443CAC722FCA63D73BF ] C:\WINDOWS\system32\comctl32.dll
16:29:29.0265 2128 C:\WINDOWS\system32\comctl32.dll - ok
16:29:29.0265 2128 [ 86987A5000DFA3EBE2275C0456BCF2FE ] C:\WINDOWS\system32\comdlg32.dll
16:29:29.0265 2128 C:\WINDOWS\system32\comdlg32.dll - ok
16:29:29.0265 2128 [ 40B0F98BAD16AD5DEF894E88C3EF8014 ] C:\WINDOWS\system32\odbc32.dll
16:29:29.0265 2128 C:\WINDOWS\system32\odbc32.dll - ok
16:29:29.0281 2128 [ 6843D54BC4A40CC8C5741AF750233D10 ] C:\WINDOWS\system32\shell32.dll
16:29:29.0281 2128 C:\WINDOWS\system32\shell32.dll - ok
16:29:29.0281 2128 [ C448A248B743F5FB935C787A5D97268B ] C:\WINDOWS\system32\shlwapi.dll
16:29:29.0281 2128 C:\WINDOWS\system32\shlwapi.dll - ok
16:29:29.0281 2128 [ 694503348B586E99D56C0E30AB5B3EF8 ] C:\WINDOWS\system32\sxs.dll
16:29:29.0281 2128 C:\WINDOWS\system32\sxs.dll - ok
16:29:29.0296 2128 [ 736B12B725AEB2B07F0241A9F680CB10 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
16:29:29.0296 2128 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll - ok
16:29:29.0296 2128 [ 6B7C6B32F8E84D56C6260D684019FEA2 ] C:\WINDOWS\system32\odbcint.dll
16:29:29.0296 2128 C:\WINDOWS\system32\odbcint.dll - ok
16:29:29.0296 2128 [ 99BC0B50F511924348BE19C7C7313BBF ] C:\WINDOWS\system32\shsvcs.dll
16:29:29.0296 2128 C:\WINDOWS\system32\shsvcs.dll - ok
16:29:29.0296 2128 [ 6BAD1BED9872E62049E487FB91AE2F3A ] C:\WINDOWS\system32\ole32.dll
16:29:29.0296 2128 C:\WINDOWS\system32\ole32.dll - ok
16:29:29.0312 2128 [ 96E1C926F22EE1BFBAE82901A35F6BF3 ] C:\WINDOWS\system32\sfc.dll
16:29:29.0312 2128 C:\WINDOWS\system32\sfc.dll - ok
16:29:29.0312 2128 [ 6B5DB6789177A4FD0DEBC248041D0739 ] C:\WINDOWS\system32\sfc_os.dll
16:29:29.0312 2128 C:\WINDOWS\system32\sfc_os.dll - ok
16:29:29.0312 2128 [ CF492D7E9AF1C628B3536D20EF6F5CC7 ] C:\WINDOWS\system32\apphelp.dll
16:29:29.0312 2128 C:\WINDOWS\system32\apphelp.dll - ok
16:29:29.0328 2128 [ BF2466B3E18E970D8A976FB95FC1CA85 ] C:\WINDOWS\system32\lsass.exe
16:29:29.0328 2128 C:\WINDOWS\system32\lsass.exe - ok
16:29:29.0328 2128 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
16:29:29.0328 2128 C:\WINDOWS\system32\services.exe - ok
16:29:29.0328 2128 [ E20B95BAEDB550F32DD489265C1DA1F6 ] C:\WINDOWS\system32\drivers\wanarp.sys
16:29:29.0328 2128 C:\WINDOWS\system32\drivers\wanarp.sys - ok
16:29:29.0328 2128 [ BD31DC6DBE9333C4FBD4BDF0899F2160 ] C:\WINDOWS\system32\lsasrv.dll
16:29:29.0328 2128 C:\WINDOWS\system32\lsasrv.dll - ok
16:29:29.0343 2128 [ EC29A79F1E76DC509E24D401F29D0678 ] C:\WINDOWS\system32\ncobjapi.dll
16:29:29.0343 2128 C:\WINDOWS\system32\ncobjapi.dll - ok
16:29:29.0343 2128 [ F404830F3CD9BF8F2515E489C0CDA297 ] C:\WINDOWS\system32\msvcp60.dll
16:29:29.0343 2128 C:\WINDOWS\system32\msvcp60.dll - ok
16:29:29.0343 2128 [ B24A42A413E694AD73FDFB7FBD492C31 ] C:\WINDOWS\system32\scesrv.dll
16:29:29.0343 2128 C:\WINDOWS\system32\scesrv.dll - ok
16:29:29.0359 2128 [ 389496118B3B03C2328024AF320132AC ] C:\WINDOWS\system32\dnsapi.dll
16:29:29.0359 2128 C:\WINDOWS\system32\dnsapi.dll - ok
16:29:29.0359 2128 [ DD7BD97FB8BD800963789158A5E4B41D ] C:\WINDOWS\system32\mpr.dll
16:29:29.0359 2128 C:\WINDOWS\system32\mpr.dll - ok
16:29:29.0359 2128 [ EC4C0D9BFD9F7E33F8B395AD54E13063 ] C:\WINDOWS\system32\ntdsapi.dll
16:29:29.0359 2128 C:\WINDOWS\system32\ntdsapi.dll - ok
16:29:29.0375 2128 [ 2EDFC2A8893435723AD80481803C6D5C ] C:\WINDOWS\system32\umpnpmgr.dll
16:29:29.0375 2128 C:\WINDOWS\system32\umpnpmgr.dll - ok
16:29:29.0375 2128 [ 1F03103598BD817B1078DAB1326DDE11 ] C:\WINDOWS\system32\shimeng.dll
16:29:29.0375 2128 C:\WINDOWS\system32\shimeng.dll - ok
16:29:29.0375 2128 [ 0492CF5870F0E616B0C71695A433D162 ] C:\WINDOWS\system32\wldap32.dll
16:29:29.0375 2128 C:\WINDOWS\system32\wldap32.dll - ok
16:29:29.0375 2128 [ EA9EE60B408878E5F2012F9C783836DB ] C:\WINDOWS\AppPatch\acadproc.dll
16:29:29.0375 2128 C:\WINDOWS\AppPatch\acadproc.dll - ok
16:29:29.0390 2128 [ 8329A39D5A402A75A74301D6A62ECDA1 ] C:\WINDOWS\system32\samlib.dll
16:29:29.0390 2128 C:\WINDOWS\system32\samlib.dll - ok
16:29:29.0390 2128 [ F05B8CDB7FE0E55DCCFB1D946CE80064 ] C:\WINDOWS\system32\samsrv.dll
16:29:29.0390 2128 C:\WINDOWS\system32\samsrv.dll - ok
16:29:29.0390 2128 [ 17A1D675C12BBF80CAAC54A4855C41D0 ] C:\WINDOWS\system32\cryptdll.dll
16:29:29.0390 2128 C:\WINDOWS\system32\cryptdll.dll - ok
16:29:29.0406 2128 [ 310C15FD8358B2C4CD7A5B98A112883F ] C:\WINDOWS\AppPatch\acgenral.dll
16:29:29.0406 2128 C:\WINDOWS\AppPatch\acgenral.dll - ok
16:29:29.0406 2128 [ 1B2BE5777F69A71778F52FFEE1C798D6 ] C:\WINDOWS\system32\oleaut32.dll
16:29:29.0406 2128 C:\WINDOWS\system32\oleaut32.dll - ok
16:29:29.0406 2128 [ 4A953F13942867BA8FB41F141EC1B80C ] C:\WINDOWS\system32\winmm.dll
16:29:29.0406 2128 C:\WINDOWS\system32\winmm.dll - ok
16:29:29.0406 2128 [ 2098AB52BD5316E59AA36F3437B13BE6 ] C:\WINDOWS\system32\msacm32.dll
16:29:29.0406 2128 C:\WINDOWS\system32\msacm32.dll - ok
16:29:29.0421 2128 [ 7A2CC3719B255E6B5D74396183B7715B ] C:\WINDOWS\system32\uxtheme.dll
16:29:29.0421 2128 C:\WINDOWS\system32\uxtheme.dll - ok
16:29:29.0421 2128 [ F24B12786D60A17008319E3F2AEE7799 ] C:\WINDOWS\system32\msapsspc.dll
16:29:29.0421 2128 C:\WINDOWS\system32\msapsspc.dll - ok
16:29:29.0421 2128 [ 7A660EDC0757849DF5F8706FB6E9F740 ] C:\WINDOWS\system32\msvcrt40.dll
16:29:29.0421 2128 C:\WINDOWS\system32\msvcrt40.dll - ok
16:29:29.0437 2128 [ 3D76DD0CBC536E0F8C45D23ED230BEB2 ] C:\WINDOWS\system32\digest.dll
16:29:29.0437 2128 C:\WINDOWS\system32\digest.dll - ok
16:29:29.0437 2128 [ 0F64207B49390C8063C36AE7CBF9C2DB ] C:\WINDOWS\system32\schannel.dll
16:29:29.0437 2128 C:\WINDOWS\system32\schannel.dll - ok
16:29:29.0437 2128 [ A4388DF80E52695AE92EE5F3F61F1619 ] C:\WINDOWS\system32\msnsspc.dll
16:29:29.0437 2128 C:\WINDOWS\system32\msnsspc.dll - ok
16:29:29.0437 2128 [ 5733177BCF16EE78B99543C9B0AB81EA ] C:\WINDOWS\system32\msctfime.ime
16:29:29.0437 2128 C:\WINDOWS\system32\msctfime.ime - ok
16:29:29.0453 2128 [ C6BB1D1500DB4A0E224CB65E6C7E8A80 ] C:\WINDOWS\system32\msprivs.dll
16:29:29.0453 2128 C:\WINDOWS\system32\msprivs.dll - ok
16:29:29.0453 2128 [ 1E644E3533DCE2B580A663AE1ACBD539 ] C:\WINDOWS\system32\atmfd.dll
16:29:29.0453 2128 C:\WINDOWS\system32\atmfd.dll - ok
16:29:29.0453 2128 [ A525C96C51D55111FDF3BEA9FFFFC7AE ] C:\WINDOWS\system32\kerberos.dll
16:29:29.0453 2128 C:\WINDOWS\system32\kerberos.dll - ok
16:29:29.0453 2128 [ 517561A1113B04E51D936CD018DE1C1F ] C:\WINDOWS\system32\msv1_0.dll
16:29:29.0453 2128 C:\WINDOWS\system32\msv1_0.dll - ok
16:29:29.0468 2128 [ AF07DC9B7CC455629E732340C7B15F3A ] C:\WINDOWS\system32\iphlpapi.dll
16:29:29.0468 2128 C:\WINDOWS\system32\iphlpapi.dll - ok
16:29:29.0468 2128 [ 1B7F071C51B77C272875C3A23E1E4550 ] C:\WINDOWS\system32\netlogon.dll
16:29:29.0468 2128 C:\WINDOWS\system32\netlogon.dll - ok
16:29:29.0468 2128 [ 54AF4B1D5459500EF0937F6D33B1914F ] C:\WINDOWS\system32\w32time.dll
16:29:29.0468 2128 C:\WINDOWS\system32\w32time.dll - ok
16:29:29.0484 2128 [ 3AAF9B35939FF9E58CCD18D41655C2FC ] C:\WINDOWS\system32\wdigest.dll
16:29:29.0484 2128 C:\WINDOWS\system32\wdigest.dll - ok
16:29:29.0484 2128 [ 54DAE3EA34802B4ED9AE1C6B1209FA56 ] C:\WINDOWS\system32\rsaenh.dll
16:29:29.0484 2128 C:\WINDOWS\system32\rsaenh.dll - ok
16:29:29.0484 2128 [ 02988B904C386B500CD08639C4C20EEA ] C:\WINDOWS\system32\winscard.dll
16:29:29.0484 2128 C:\WINDOWS\system32\winscard.dll - ok
16:29:29.0484 2128 [ 0E2735281FBB9A764D5584C2A5DCBA59 ] C:\WINDOWS\system32\wtsapi32.dll
16:29:29.0484 2128 C:\WINDOWS\system32\wtsapi32.dll - ok
16:29:29.0500 2128 [ A86BB5E61BF3E39B62AB4C7E7085A084 ] C:\WINDOWS\system32\scecli.dll
16:29:29.0500 2128 C:\WINDOWS\system32\scecli.dll - ok
16:29:29.0500 2128 [ C6D0B4BF12036D1EE092D2F5EF436FC7 ] C:\Program Files\Emsisoft Anti-Malware\a2service.exe
16:29:29.0500 2128 C:\Program Files\Emsisoft Anti-Malware\a2service.exe - ok
16:29:29.0500 2128 [ AFFC87E2501FCE8F09D4C10BA6421CCF ] C:\WINDOWS\system32\msimg32.dll
16:29:29.0500 2128 C:\WINDOWS\system32\msimg32.dll - ok
16:29:29.0515 2128 [ BD83ABA61E8ACCC8D9FFB869F29418CE ] C:\WINDOWS\system32\winspool.drv
16:29:29.0515 2128 C:\WINDOWS\system32\winspool.drv - ok
16:29:29.0515 2128 [ AEF53C9AFF3688876D476F36288A56D2 ] C:\Program Files\Emsisoft Anti-Malware\a2engine.dll
16:29:29.0515 2128 C:\Program Files\Emsisoft Anti-Malware\a2engine.dll - ok
16:29:29.0515 2128 [ 1755023407FDE00D9916505A557569D5 ] C:\Program Files\Emsisoft Anti-Malware\bdcore.dll
16:29:29.0515 2128 C:\Program Files\Emsisoft Anti-Malware\bdcore.dll - ok
16:29:29.0531 2128 [ 67156D5A9AC356DC99D7BCCB388E3316 ] C:\WINDOWS\system32\wsock32.dll
16:29:29.0531 2128 C:\WINDOWS\system32\wsock32.dll - ok
16:29:29.0531 2128 [ 943337D786A56729263071623BBB9DE5 ] C:\WINDOWS\system32\mswsock.dll
16:29:29.0531 2128 C:\WINDOWS\system32\mswsock.dll - ok
16:29:29.0531 2128 [ 4E6C4FB949FB4D0952F718EF9D87C204 ] C:\Program Files\Emsisoft Anti-Malware\quarantine.dll
16:29:29.0531 2128 C:\Program Files\Emsisoft Anti-Malware\quarantine.dll - ok
16:29:29.0531 2128 [ 2081A5B5E4ABA206A0A8A1A97DF0FB23 ] C:\WINDOWS\system32\logonui.exe
16:29:29.0531 2128 C:\WINDOWS\system32\logonui.exe - ok
16:29:29.0546 2128 [ 3D41A9326F0376FC73AF961DD23B1FB1 ] C:\WINDOWS\system32\duser.dll
16:29:29.0546 2128 C:\WINDOWS\system32\duser.dll - ok
16:29:29.0546 2128 [ 20200EE3CFE10E9F0C028D8653BE11C6 ] C:\WINDOWS\system32\oleacc.dll
16:29:29.0546 2128 C:\WINDOWS\system32\oleacc.dll - ok
16:29:29.0546 2128 [ 3F00B08A6BD8FAC25DCFF48E9955800F ] C:\Program Files\Emsisoft Anti-Malware\a2core32.dll
16:29:29.0546 2128 C:\Program Files\Emsisoft Anti-Malware\a2core32.dll - ok
16:29:29.0562 2128 [ F137A0CA70003DB20448D540651FA003 ] C:\WINDOWS\system32\clbcatq.dll
16:29:29.0562 2128 C:\WINDOWS\system32\clbcatq.dll - ok
16:29:29.0562 2128 [ EB38F568D21259B410D252A40B39366A ] C:\Program Files\Emsisoft Anti-Malware\a2dix86.dll
16:29:29.0562 2128 C:\Program Files\Emsisoft Anti-Malware\a2dix86.dll - ok
16:29:29.0562 2128 [ 5D43C9A33F18C707BA169AFDA88BDF30 ] C:\WINDOWS\system32\fltlib.dll
16:29:29.0562 2128 C:\WINDOWS\system32\fltlib.dll - ok
16:29:29.0562 2128 [ 1280A158C722FA95A80FB7AEBE78FA7D ] C:\WINDOWS\system32\comres.dll
16:29:29.0562 2128 C:\WINDOWS\system32\comres.dll - ok
16:29:29.0578 2128 [ EC4D3CEF7D1DCF9DCD98A94BDE71E244 ] C:\Program Files\Emsisoft Anti-Malware\a2update.dll
16:29:29.0578 2128 C:\Program Files\Emsisoft Anti-Malware\a2update.dll - ok
16:29:29.0578 2128 [ E5EDBD51476DB5001ABF5C82AE5C3DD1 ] C:\WINDOWS\system32\shgina.dll
16:29:29.0578 2128 C:\WINDOWS\system32\shgina.dll - ok
16:29:29.0578 2128 [ 549290DBC280C887681D7652978DBBE0 ] C:\WINDOWS\system32\ntmarta.dll
16:29:29.0578 2128 C:\WINDOWS\system32\ntmarta.dll - ok
16:29:29.0593 2128 [ 27C6D03BCDB8CFEB96B716F3D8BE3E18 ] C:\WINDOWS\system32\svchost.exe
16:29:29.0593 2128 C:\WINDOWS\system32\svchost.exe - ok
16:29:29.0593 2128 [ 6B27A5C03DFB94B4245739065431322C ] C:\WINDOWS\system32\rpcss.dll
16:29:29.0593 2128 C:\WINDOWS\system32\rpcss.dll - ok
16:29:29.0593 2128 [ 16403217AB6FC5C30C14C6B12098AD4B ] C:\WINDOWS\system32\xpsp2res.dll
16:29:29.0593 2128 C:\WINDOWS\system32\xpsp2res.dll - ok
16:29:29.0593 2128 [ 6D4FEB43EE538FC5428CC7F0565AA656 ] C:\WINDOWS\system32\eventlog.dll
16:29:29.0593 2128 C:\WINDOWS\system32\eventlog.dll - ok
16:29:29.0609 2128 [ 3CB32D3B8CBE79899D63280BB7A83CD9 ] C:\WINDOWS\system32\hnetcfg.dll
16:29:29.0609 2128 C:\WINDOWS\system32\hnetcfg.dll - ok
16:29:29.0609 2128 [ 4E3D06D6E68EEDB52565080F55B460D3 ] C:\WINDOWS\system32\wshtcpip.dll
16:29:29.0609 2128 C:\WINDOWS\system32\wshtcpip.dll - ok
16:29:29.0609 2128 [ D72B9EC3337B247A666F098F3D6B43DE ] C:\WINDOWS\system32\winrnr.dll
16:29:29.0609 2128 C:\WINDOWS\system32\winrnr.dll - ok
16:29:29.0625 2128 [ 6F9BEF24C578D5D6740E080BEDD6A448 ] C:\WINDOWS\system32\rasadhlp.dll
16:29:29.0625 2128 C:\WINDOWS\system32\rasadhlp.dll - ok
16:29:29.0625 2128 [ F927A4434C5028758A842943EF1A3849 ] C:\WINDOWS\system32\drivers\ndisuio.sys
16:29:29.0625 2128 C:\WINDOWS\system32\drivers\ndisuio.sys - ok
16:29:29.0625 2128 [ 515A7FAE2070C2B0242B2353443E2F11 ] C:\WINDOWS\system32\cscdll.dll
16:29:29.0625 2128 C:\WINDOWS\system32\cscdll.dll - ok
16:29:29.0640 2128 [ 5E38D7684A49CACFB752B046357E0589 ] C:\WINDOWS\system32\dhcpcsvc.dll
16:29:29.0640 2128 C:\WINDOWS\system32\dhcpcsvc.dll - ok
16:29:29.0640 2128 [ E2092F0A1D7ABC243F9C2362483D150D ] C:\WINDOWS\system32\dimsntfy.dll
16:29:29.0640 2128 C:\WINDOWS\system32\dimsntfy.dll - ok
16:29:29.0640 2128 [ 02CF580510234E519736559A7F19EA20 ] C:\WINDOWS\system32\WgaLogon.dll
16:29:29.0640 2128 C:\WINDOWS\system32\WgaLogon.dll - ok
16:29:29.0640 2128 [ 2CC34E8BB667EEF78899546E12649196 ] C:\WINDOWS\system32\wlnotify.dll
16:29:29.0640 2128 C:\WINDOWS\system32\wlnotify.dll - ok
16:29:29.0656 2128 [ ACFEE2392503DD5E457363A0510B8BCB ] C:\WINDOWS\system32\msxml3.dll
16:29:29.0656 2128 C:\WINDOWS\system32\msxml3.dll - ok
16:29:29.0656 2128 [ C1E735BA11FE4466C9BD9F541220453A ] C:\Program Files\IBM\Client Access\Shared\cwbnetnt.dll
16:29:29.0656 2128 C:\Program Files\IBM\Client Access\Shared\cwbnetnt.dll - ok
16:29:29.0656 2128 [ 5F7E24FA9EAB896051FFB87F840730D2 ] C:\WINDOWS\system32\dnsrslvr.dll
16:29:29.0656 2128 C:\WINDOWS\system32\dnsrslvr.dll - ok
16:29:29.0671 2128 [ A7E06854EA2A20AEE8EC32BD8C754298 ] C:\WINDOWS\system32\mpnotify.exe
16:29:29.0671 2128 C:\WINDOWS\system32\mpnotify.exe - ok
16:29:29.0671 2128 [ 9A979A47866B6EB4951C8345C244BB2D ] C:\WINDOWS\system32\cwbcore.dll
16:29:29.0671 2128 C:\WINDOWS\system32\cwbcore.dll - ok
16:29:29.0671 2128 [ A7DB739AE99A796D91580147E919CC59 ] C:\WINDOWS\system32\lmhsvc.dll
16:29:29.0671 2128 C:\WINDOWS\system32\lmhsvc.dll - ok
16:29:29.0671 2128 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] C:\WINDOWS\system32\wzcsvc.dll
16:29:29.0671 2128 C:\WINDOWS\system32\wzcsvc.dll - ok
16:29:29.0687 2128 [ F432EB8D1D84A565167107E2EF001473 ] C:\Program Files\Emsisoft Anti-Malware\a2wsc.dll
16:29:29.0687 2128 C:\Program Files\Emsisoft Anti-Malware\a2wsc.dll - ok
16:29:29.0687 2128 [ 205ADD80FF8099B1A8101EB490B933D1 ] C:\WINDOWS\system32\wbem\wbemprox.dll
16:29:29.0687 2128 C:\WINDOWS\system32\wbem\wbemprox.dll - ok
16:29:29.0687 2128 [ D95C71052E5EF63B55997FB31483D02F ] C:\WINDOWS\system32\wbem\wbemcomn.dll
16:29:29.0687 2128 C:\WINDOWS\system32\wbem\wbemcomn.dll - ok
16:29:29.0703 2128 [ E6EF7BC927D9F8F9BA1584BFC39E0C6F ] C:\WINDOWS\system32\eapolqec.dll
16:29:29.0703 2128 C:\WINDOWS\system32\eapolqec.dll - ok
16:29:29.0703 2128 [ 876CCF164E08D6B903CD14398E056DD2 ] C:\WINDOWS\system32\rtutils.dll
16:29:29.0703 2128 C:\WINDOWS\system32\rtutils.dll - ok
16:29:29.0703 2128 [ 7B0770526801F05D58C51A3DFB87B4BD ] C:\WINDOWS\system32\wmi.dll
16:29:29.0703 2128 C:\WINDOWS\system32\wmi.dll - ok
16:29:29.0703 2128 [ 224FB925C641DA16CEB6D60F40CA4C75 ] C:\WINDOWS\system32\atl.dll
16:29:29.0703 2128 C:\WINDOWS\system32\atl.dll - ok
16:29:29.0718 2128 [ 8AE93AACC648921BAACB8602991AC4B3 ] C:\WINDOWS\system32\qutil.dll
16:29:29.0718 2128 C:\WINDOWS\system32\qutil.dll - ok
16:29:29.0718 2128 [ BD1508C2A1FD4EF502CEFA7127722E23 ] C:\WINDOWS\system32\cwbunpls.dll
16:29:29.0718 2128 C:\WINDOWS\system32\cwbunpls.dll - ok
16:29:29.0718 2128 [ 8E2CC37BA87D8F681066E0E9C8A19F73 ] C:\WINDOWS\system32\dot3api.dll
16:29:29.0718 2128 C:\WINDOWS\system32\dot3api.dll - ok
16:29:29.0718 2128 [ F5B754CDEA20BBB3A31E16A776EDE6D6 ] C:\WINDOWS\system32\esent.dll
16:29:29.0718 2128 C:\WINDOWS\system32\esent.dll - ok
16:29:29.0734 2128 [ F6F2BFC17069EB335ACCEEF7595F9302 ] C:\WINDOWS\system32\mfc42u.dll
16:29:29.0734 2128 C:\WINDOWS\system32\mfc42u.dll - ok
16:29:29.0734 2128 [ 585992D78B671AAA075C02241309795D ] C:\WINDOWS\system32\msvcirt.dll
16:29:29.0734 2128 C:\WINDOWS\system32\msvcirt.dll - ok
16:29:29.0734 2128 [ C14AA05881A35B6D6BB8D55B117EE22D ] C:\WINDOWS\system32\shfolder.dll
16:29:29.0734 2128 C:\WINDOWS\system32\shfolder.dll - ok
16:29:29.0750 2128 [ 085ED2E391A871C7BAE87E0228B546BA ] C:\WINDOWS\system32\cscui.dll
16:29:29.0750 2128 C:\WINDOWS\system32\cscui.dll - ok
16:29:29.0750 2128 [ A39BE37C9237DB5F1990D61B268EA555 ] C:\WINDOWS\system32\rastls.dll
16:29:29.0750 2128 C:\WINDOWS\system32\rastls.dll - ok
16:29:29.0750 2128 [ 6E4BE11D50F8A8DE2BAD644C9C9DE8D3 ] C:\WINDOWS\system32\cryptui.dll
16:29:29.0750 2128 C:\WINDOWS\system32\cryptui.dll - ok
16:29:29.0765 2128 [ 50A166237A0FA771261275A405646CC0 ] C:\WINDOWS\system32\powrprof.dll
16:29:29.0765 2128 C:\WINDOWS\system32\powrprof.dll - ok
16:29:29.0765 2128 [ 6B1774334E2975AA60596E54F5EA1430 ] C:\WINDOWS\system32\wininet.dll
16:29:29.0765 2128 C:\WINDOWS\system32\wininet.dll - ok
16:29:29.0765 2128 [ 6C26DCF01E2A92F183B97D434017268A ] C:\WINDOWS\system32\dpcdll.dll
16:29:29.0765 2128 C:\WINDOWS\system32\dpcdll.dll - ok
16:29:29.0781 2128 [ 10753A3ADC3E39A3B10CC3F08E98E6B4 ] C:\WINDOWS\system32\normaliz.dll
16:29:29.0781 2128 C:\WINDOWS\system32\normaliz.dll - ok
16:29:29.0781 2128 [ A93AEE1928A9D7CE3E16D24EC7380F89 ] C:\WINDOWS\system32\userinit.exe
16:29:29.0781 2128 C:\WINDOWS\system32\userinit.exe - ok
16:29:29.0781 2128 [ B1296D52B0D2096EC4759EEEB806D759 ] C:\WINDOWS\system32\WgaTray.exe
16:29:29.0781 2128 C:\WINDOWS\system32\WgaTray.exe - ok
16:29:29.0781 2128 [ FDF44991CB9A33C901FFCBDF19CE95BE ] C:\WINDOWS\system32\urlmon.dll
16:29:29.0781 2128 C:\WINDOWS\system32\urlmon.dll - ok
16:29:29.0796 2128 [ 12896823FB95BFB3DC9B46BCAEDC9923 ] C:\WINDOWS\explorer.exe
16:29:29.0796 2128 C:\WINDOWS\explorer.exe - ok
16:29:29.0796 2128 [ AD850C33A8AC45CF66574E62D1645272 ] C:\WINDOWS\system32\iertutil.dll
16:29:29.0796 2128 C:\WINDOWS\system32\iertutil.dll - ok
16:29:29.0796 2128 [ E392E172687BE172F8600C5F41AB03D9 ] C:\WINDOWS\system32\browseui.dll
16:29:29.0796 2128 C:\WINDOWS\system32\browseui.dll - ok
16:29:29.0812 2128 [ EA5B8BECA3F279C757578CD7F1E95855 ] C:\WINDOWS\system32\mprapi.dll
16:29:29.0812 2128 C:\WINDOWS\system32\mprapi.dll - ok
16:29:29.0812 2128 [ 26CB10FA893F940AB09713FF46DCDADE ] C:\WINDOWS\system32\shdocvw.dll
16:29:29.0812 2128 C:\WINDOWS\system32\shdocvw.dll - ok
16:29:29.0812 2128 [ 2CDAE321B8E878A278BA2D2FA013060B ] C:\WINDOWS\system32\activeds.dll
16:29:29.0812 2128 C:\WINDOWS\system32\activeds.dll - ok
16:29:29.0812 2128 [ 0D84657DBF93DB98673DEFDF2B29E25A ] C:\WINDOWS\system32\adsldpc.dll
16:29:29.0812 2128 C:\WINDOWS\system32\adsldpc.dll - ok
16:29:29.0828 2128 [ 92C4F48B62B0B876194584C3FF09CCB6 ] C:\WINDOWS\system32\rasapi32.dll
16:29:29.0828 2128 C:\WINDOWS\system32\rasapi32.dll - ok
16:29:29.0828 2128 [ 4DEF926F6A0545AE486A03C84F2EE482 ] C:\WINDOWS\system32\rasman.dll
16:29:29.0828 2128 C:\WINDOWS\system32\rasman.dll - ok
16:29:29.0828 2128 [ 00AABF131B4823785818DB99A075A313 ] C:\WINDOWS\system32\tapi32.dll
16:29:29.0828 2128 C:\WINDOWS\system32\tapi32.dll - ok
16:29:29.0843 2128 [ CC26451A90025F6C55F64146C333DEA5 ] C:\WINDOWS\system32\LegitCheckControl.dll
16:29:29.0843 2128 C:\WINDOWS\system32\LegitCheckControl.dll - ok
16:29:29.0843 2128 [ C1FAEA15E41F62D7BFA7FBC395C24BA6 ] C:\WINDOWS\system32\riched20.dll
16:29:29.0843 2128 C:\WINDOWS\system32\riched20.dll - ok
16:29:29.0843 2128 [ 56CE97FF94B7662A300D359CD6F4D601 ] C:\WINDOWS\system32\raschap.dll
16:29:29.0843 2128 C:\WINDOWS\system32\raschap.dll - ok
16:29:29.0843 2128 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] C:\WINDOWS\system32\netman.dll
16:29:29.0843 2128 C:\WINDOWS\system32\netman.dll - ok
16:29:29.0859 2128 [ 062F837C1FBDB6A0A75F82EFC2EE8E74 ] C:\WINDOWS\system32\netshell.dll
16:29:29.0859 2128 C:\WINDOWS\system32\netshell.dll - ok
16:29:29.0859 2128 [ B4ED498E3BFEE64E952BC44FC6057DB8 ] C:\WINDOWS\system32\desk.cpl
16:29:29.0859 2128 C:\WINDOWS\system32\desk.cpl - ok
16:29:29.0859 2128 [ A314EEA2A503A8E04085201E436384A5 ] C:\WINDOWS\system32\themeui.dll
16:29:29.0859 2128 C:\WINDOWS\system32\themeui.dll - ok
16:29:29.0875 2128 [ 2975C66459C426C20BC22D639DF6B611 ] C:\Program Files\SUPERAntiSpyware\SASSEH.DLL
16:29:29.0875 2128 C:\Program Files\SUPERAntiSpyware\SASSEH.DLL - ok
16:29:29.0875 2128 [ 235892E493845D64D890163CFEF90E97 ] C:\WINDOWS\system32\credui.dll
16:29:29.0875 2128 C:\WINDOWS\system32\credui.dll - ok
16:29:29.0875 2128 [ 4E8F3230BAC8C1CAADF01A8C728E1C5C ] C:\WINDOWS\system32\dot3dlg.dll
16:29:29.0875 2128 C:\WINDOWS\system32\dot3dlg.dll - ok
16:29:29.0875 2128 [ CA04959077AFE36369D37B3504740C87 ] C:\WINDOWS\system32\onex.dll
16:29:29.0875 2128 C:\WINDOWS\system32\onex.dll - ok
16:29:29.0890 2128 [ 6D778E0F95447E6546553EEEA709D03C ] C:\WINDOWS\system32\cmd.exe
16:29:29.0890 2128 C:\WINDOWS\system32\cmd.exe - ok
16:29:29.0890 2128 [ 5DB625E7D095604010CF84DE2D8ACFA6 ] C:\WINDOWS\system32\eappcfg.dll
16:29:29.0890 2128 C:\WINDOWS\system32\eappcfg.dll - ok
16:29:29.0890 2128 [ 3618313F7DFB605571A48FCF55D7868F ] C:\WINDOWS\system32\ieframe.dll
16:29:29.0890 2128 C:\WINDOWS\system32\ieframe.dll - ok
16:29:29.0906 2128 [ ABC4206543450C0666D152F4B65833B8 ] C:\WINDOWS\system32\eappprxy.dll
16:29:29.0906 2128 C:\WINDOWS\system32\eappprxy.dll - ok
16:29:29.0906 2128 [ 767FF54A552732CE772C2302025FA82F ] C:\WINDOWS\system32\wzcsapi.dll
16:29:29.0906 2128 C:\WINDOWS\system32\wzcsapi.dll - ok
16:29:29.0906 2128 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] C:\WINDOWS\system32\schedsvc.dll
16:29:29.0906 2128 C:\WINDOWS\system32\schedsvc.dll - ok
16:29:29.0906 2128 [ E47E364C96467FD54FA44D59F927C3AB ] C:\WINDOWS\system32\msidle.dll
16:29:29.0906 2128 C:\WINDOWS\system32\msidle.dll - ok
16:29:29.0921 2128 [ 60784F891563FB1B767F70117FC2428F ] C:\WINDOWS\system32\spoolsv.exe
16:29:29.0921 2128 C:\WINDOWS\system32\spoolsv.exe - ok
16:29:29.0921 2128 [ DEF7A7882BEC100FE0B2CE2549188F9D ] C:\WINDOWS\system32\audiosrv.dll
16:29:29.0921 2128 C:\WINDOWS\system32\audiosrv.dll - ok
16:29:29.0921 2128 [ A8888A5327621856C0CEC4E385F69309 ] C:\WINDOWS\system32\wkssvc.dll
16:29:29.0921 2128 C:\WINDOWS\system32\wkssvc.dll - ok
16:29:29.0937 2128 [ EBC984F0CE40E0DAF0454D806EC2A7EC ] C:\DOCUME~1\Dwayne\LOCALS~1\temp\00ED85F4-14C0-46AA-A6E1-2EBDDEF90A28.exe
16:29:29.0937 2128 C:\DOCUME~1\Dwayne\LOCALS~1\temp\00ED85F4-14C0-46AA-A6E1-2EBDDEF90A28.exe - ok
16:29:29.0937 2128 [ 684559A03CBC1D05BA120A18B0D8BA5D ] C:\WINDOWS\system32\winhttp.dll
16:29:29.0937 2128 C:\WINDOWS\system32\winhttp.dll - ok
16:29:29.0937 2128 [ 912B67BB8249925A5C972FC5839EAE09 ] C:\WINDOWS\system32\actxprxy.dll
16:29:29.0937 2128 C:\WINDOWS\system32\actxprxy.dll - ok
16:29:29.0953 2128 [ A70A2D85AD143D6BB823C246CEB699A5 ] C:\WINDOWS\system32\ntshrui.dll
16:29:29.0953 2128 C:\WINDOWS\system32\ntshrui.dll - ok
16:29:29.0953 2128 [ 680B56A8B62D1BCF4A0B2AAAD03D88E4 ] C:\WINDOWS\system32\wdmaud.drv
16:29:29.0953 2128 C:\WINDOWS\system32\wdmaud.drv - ok
16:29:29.0953 2128 [ 6768ACF64B18196494413695F0C3A00F ] C:\WINDOWS\system32\drivers\wdmaud.sys
16:29:29.0953 2128 C:\WINDOWS\system32\drivers\wdmaud.sys - ok
16:29:29.0953 2128 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] C:\WINDOWS\system32\drivers\sysaudio.sys
16:29:29.0953 2128 C:\WINDOWS\system32\drivers\sysaudio.sys - ok
16:29:29.0968 2128 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] C:\WINDOWS\system32\drivers\splitter.sys
16:29:29.0968 2128 C:\WINDOWS\system32\drivers\splitter.sys - ok
16:29:29.0968 2128 [ 8BED39E3C35D6A489438B8141717A557 ] C:\WINDOWS\system32\drivers\aec.sys
16:29:29.0968 2128 C:\WINDOWS\system32\drivers\aec.sys - ok
16:29:29.0968 2128 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] C:\WINDOWS\system32\drivers\swmidi.sys
16:29:29.0968 2128 C:\WINDOWS\system32\drivers\swmidi.sys - ok
16:29:29.0968 2128 [ 8A208DFCF89792A484E76C40E5F50B45 ] C:\WINDOWS\system32\drivers\dmusic.sys
16:29:29.0968 2128 C:\WINDOWS\system32\drivers\dmusic.sys - ok
16:29:29.0984 2128 [ 692BCF44383D056AED41B045A323D378 ] C:\WINDOWS\system32\drivers\kmixer.sys
16:29:29.0984 2128 C:\WINDOWS\system32\drivers\kmixer.sys - ok
16:29:29.0984 2128 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] C:\WINDOWS\system32\drivers\drmkaud.sys
16:29:29.0984 2128 C:\WINDOWS\system32\drivers\drmkaud.sys - ok
16:29:29.0984 2128 [ 91790D6749EBED90E2C40479C0A91879 ] C:\WINDOWS\system32\verclsid.exe
16:29:29.0984 2128 C:\WINDOWS\system32\verclsid.exe - ok
16:29:30.0000 2128 [ 9A3BD5F55AADFF859539142F6328A66E ] C:\WINDOWS\system32\msacm32.drv
16:29:30.0000 2128 C:\WINDOWS\system32\msacm32.drv - ok
16:29:30.0000 2128 [ 5C12660A97822F6E61576943B49AAAD6 ] C:\WINDOWS\system32\midimap.dll
16:29:30.0000 2128 C:\WINDOWS\system32\midimap.dll - ok
16:29:30.0000 2128 [ D3F72D50DE53F9F1F55240115AF4D42E ] C:\WINDOWS\system32\msi.dll
16:29:30.0000 2128 C:\WINDOWS\system32\msi.dll - ok
16:29:30.0000 2128 [ 2DC5A8019E2387987905F77C664E4BE2 ] C:\WINDOWS\system32\linkinfo.dll
16:29:30.0000 2128 C:\WINDOWS\system32\linkinfo.dll - ok
16:29:30.0015 2128 [ 0FFA9E2711A0228467BF08228D5B620F ] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
16:29:30.0015 2128 C:\Program Files\Compaq\SetRefresh\SetRefresh.exe - ok
16:29:30.0015 2128 [ DE3C66F8825A712F2DDA4C5A593CFFB9 ] C:\Program Files\IBM\Client Access\cwbsvstr.exe
16:29:30.0015 2128 C:\Program Files\IBM\Client Access\cwbsvstr.exe - ok
16:29:30.0015 2128 [ CAAC54D29A26FA30CB3D348F3F34EAE7 ] C:\WINDOWS\system32\cwbad1.dll
16:29:30.0015 2128 C:\WINDOWS\system32\cwbad1.dll - ok
16:29:30.0031 2128 [ 4B36A184E01AD9485E97D62D45B3B084 ] C:\WINDOWS\system32\cwbsof.dll
16:29:30.0031 2128 C:\WINDOWS\system32\cwbsof.dll - ok
16:29:30.0031 2128 [ 7ACF8AC59C58F3F0D2EA5F6CC2EF14DE ] C:\WINDOWS\system32\cwbunpla.dll
16:29:30.0031 2128 C:\WINDOWS\system32\cwbunpla.dll - ok
16:29:30.0031 2128 [ AE4CA88901F936D846123AE8AFFA49BA ] C:\WINDOWS\system32\cwbrc.dll
16:29:30.0031 2128 C:\WINDOWS\system32\cwbrc.dll - ok
16:29:30.0031 2128 [ DDE4A991F26179573D2CFA7A093F56FA ] C:\WINDOWS\system32\hkcmd.exe
16:29:30.0031 2128 C:\WINDOWS\system32\hkcmd.exe - ok
16:29:30.0046 2128 [ E79977B1ECC05C53F0194750457BBB37 ] C:\WINDOWS\system32\igfxtray.exe
16:29:30.0046 2128 C:\WINDOWS\system32\igfxtray.exe - ok
16:29:30.0046 2128 [ 2A939FBFDF1C16D912B90F28F6FCE2EF ] C:\WINDOWS\system32\cwbunssl.dll
16:29:30.0046 2128 C:\WINDOWS\system32\cwbunssl.dll - ok
16:29:30.0046 2128 [ D0127023AF6070D5B479B1AE65B107A2 ] C:\WINDOWS\system32\hccutils.dll
16:29:30.0046 2128 C:\WINDOWS\system32\hccutils.dll - ok
16:29:30.0062 2128 [ EAF47A526B911B0961D3FECEB442E0C4 ] C:\WINDOWS\system32\igfxpers.exe
16:29:30.0062 2128 C:\WINDOWS\system32\igfxpers.exe - ok
16:29:30.0062 2128 [ 0ED7CBAD7E9EF03A5960AE37EA55B9C9 ] C:\WINDOWS\system32\cwbsv.dll
16:29:30.0062 2128 C:\WINDOWS\system32\cwbsv.dll - ok
16:29:30.0062 2128 [ C4D123B9D816679F1954E8E0894A887C ] C:\WINDOWS\system32\cwbco.dll
16:29:30.0062 2128 C:\WINDOWS\system32\cwbco.dll - ok
16:29:30.0078 2128 [ 37498FC7751B9453D435826EEA2B2B57 ] C:\WINDOWS\system32\cwbad.dll
16:29:30.0078 2128 C:\WINDOWS\system32\cwbad.dll - ok
16:29:30.0078 2128 [ D25E93CC09C8ABDC377467EEDE718EFA ] C:\WINDOWS\system32\cwbnl.dll
16:29:30.0078 2128 C:\WINDOWS\system32\cwbnl.dll - ok
16:29:30.0078 2128 [ 6C29375A447F9925CD0073A8FBD8BE1B ] C:\WINDOWS\system32\cwbbsspi.dll
16:29:30.0078 2128 C:\WINDOWS\system32\cwbbsspi.dll - ok
16:29:30.0078 2128 [ E8B3498B6EEFF2491F2ADC9021BEC4FD ] C:\WINDOWS\system32\cwbbspc.dll
16:29:30.0078 2128 C:\WINDOWS\system32\cwbbspc.dll - ok
16:29:30.0093 2128 [ 305532803E711149A21C29B33199244D ] C:\WINDOWS\system32\cwbrw.dll
16:29:30.0093 2128 C:\WINDOWS\system32\cwbrw.dll - ok
16:29:30.0093 2128 [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\WINDOWS\system32\drivers\34712309.sys
16:29:30.0093 2128 C:\WINDOWS\system32\drivers\34712309.sys - ok
16:29:30.0093 2128 [ 6131CA2667859E1B8E751F73EFF8A526 ] C:\WINDOWS\system32\cwbunplp.exe
16:29:30.0093 2128 C:\WINDOWS\system32\cwbunplp.exe - ok
16:29:30.0109 2128 [ BE240B2C948D91D4C11DCA8653A8B604 ] C:\WINDOWS\system32\igfxsrvc.exe
16:29:30.0109 2128 C:\WINDOWS\system32\igfxsrvc.exe - ok
16:29:30.0109 2128 [ 111A6C912BCB557065326571DBDB69EC ] C:\Program Files\IBM\Client Access\Mri2924\cwbsomri.dll
16:29:30.0109 2128 C:\Program Files\IBM\Client Access\Mri2924\cwbsomri.dll - ok
16:29:30.0109 2128 [ 7BF126DC48C76F9F175F451042B6B3E8 ] C:\Program Files\IBM\Client Access\cwbckver.exe
16:29:30.0109 2128 C:\Program Files\IBM\Client Access\cwbckver.exe - ok
16:29:30.0109 2128 [ 0D489AC3245DC9AE907B7E6DD6AB3B92 ] C:\Program Files\IBM\Client Access\cwbwlwiz.exe
16:29:30.0109 2128 C:\Program Files\IBM\Client Access\cwbwlwiz.exe - ok
16:29:30.0125 2128 [ 083DC7EA73FFD3C7DE9FD19DDBC8D0AA ] C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe
16:29:30.0125 2128 C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe - ok
16:29:30.0125 2128 [ CBB024AD5BDAA16C604321947B6E5B33 ] C:\Program Files\IBM\Client Access\Emulator\pcsw32x.dll
16:29:30.0125 2128 C:\Program Files\IBM\Client Access\Emulator\pcsw32x.dll - ok
16:29:30.0125 2128 [ 2012C8B28D825B5436D9A52DAB2B1B78 ] C:\WINDOWS\system32\cwbuiutl.dll
16:29:30.0125 2128 C:\WINDOWS\system32\cwbuiutl.dll - ok
16:29:30.0140 2128 [ 76848CB1AA5818DB47D5F5986E0A7485 ] C:\WINDOWS\system32\mfc42.dll
16:29:30.0140 2128 C:\WINDOWS\system32\mfc42.dll - ok
16:29:30.0140 2128 [ 09A350F25D94D18190A8988E25671844 ] C:\WINDOWS\system32\igfxsrvc.dll
16:29:30.0140 2128 C:\WINDOWS\system32\igfxsrvc.dll - ok
16:29:30.0140 2128 [ 58C8809D7486DB2D9C6A24A8630A5478 ] C:\WINDOWS\system32\igfxdev.dll
16:29:30.0140 2128 C:\WINDOWS\system32\igfxdev.dll - ok
16:29:30.0140 2128 [ CA956FA0D33EA9FEBE516B5FCA0A0819 ] C:\WINDOWS\system32\igfxres.dll
16:29:30.0140 2128 C:\WINDOWS\system32\igfxres.dll - ok
16:29:30.0156 2128 [ CC8915DB4E33E8FB29CA0D2DBF75306E ] C:\WINDOWS\system32\webcheck.dll
16:29:30.0156 2128 C:\WINDOWS\system32\webcheck.dll - ok
16:29:30.0156 2128 [ B714735C12A70171DE28657948FD91F1 ] C:\WINDOWS\system32\mlang.dll
16:29:30.0156 2128 C:\WINDOWS\system32\mlang.dll - ok
16:29:30.0156 2128 [ 50512FC9B7878E3C2C147BC17326A7DB ] C:\WINDOWS\system32\stobject.dll
16:29:30.0156 2128 C:\WINDOWS\system32\stobject.dll - ok
16:29:30.0171 2128 [ 231A0B0E3BA7ABFE469A8262FAA1FD71 ] C:\WINDOWS\system32\batmeter.dll
16:29:30.0171 2128 C:\WINDOWS\system32\batmeter.dll - ok
16:29:30.0171 2128 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] C:\Program Files\SUPERAntiSpyware\SASCore.exe
16:29:30.0171 2128 C:\Program Files\SUPERAntiSpyware\SASCore.exe - ok
16:29:30.0171 2128 [ 8A1F4965B53F418483137B4F5815F775 ] C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
16:29:30.0171 2128 C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe - ok
16:29:30.0171 2128 [ ED8CEE58C1E4C5893F5B2FD686A272BF ] C:\WINDOWS\system32\drivers\ASPI32.SYS
16:29:30.0171 2128 C:\WINDOWS\system32\drivers\ASPI32.SYS - ok
16:29:30.0187 2128 [ 736574FDC37397FFEF8AACAE4A468A99 ] C:\Program Files\Broadcom\MgmtAgent\BMAPI.dll
16:29:30.0187 2128 C:\Program Files\Broadcom\MgmtAgent\BMAPI.dll - ok
16:29:30.0187 2128 [ 5F0CE62E0831CF972EC6949FD3E37DA7 ] C:\WINDOWS\system32\cfgmgr32.dll
16:29:30.0187 2128 C:\WINDOWS\system32\cfgmgr32.dll - ok
16:29:30.0187 2128 [ 00709952D444EAE14DBBD30D36FBAE0F ] C:\WINDOWS\system32\certcli.dll
16:29:30.0187 2128 C:\WINDOWS\system32\certcli.dll - ok
16:29:30.0203 2128 [ 3D4E199942E29207970E04315D02AD3B ] C:\WINDOWS\system32\cryptsvc.dll
16:29:30.0203 2128 C:\WINDOWS\system32\cryptsvc.dll - ok
16:29:30.0203 2128 [ 57EDEC2E5F59F0335E92F35184BC8631 ] C:\WINDOWS\system32\dmserver.dll
16:29:30.0203 2128 C:\WINDOWS\system32\dmserver.dll - ok
16:29:30.0203 2128 [ BC93B4A066477954555966D77FEC9ECB ] C:\WINDOWS\system32\ersvc.dll
16:29:30.0203 2128 C:\WINDOWS\system32\ersvc.dll - ok
16:29:30.0203 2128 [ E4AE0CBC0B55A5FAA6996E38CE6C981B ] C:\Program Files\Java\jre6\bin\jqs.exe
16:29:30.0203 2128 C:\Program Files\Java\jre6\bin\jqs.exe - ok
16:29:30.0218 2128 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
16:29:30.0218 2128 C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll - ok
16:29:30.0218 2128 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Program Files\Java\jre6\bin\msvcr71.dll
16:29:30.0218 2128 C:\Program Files\Java\jre6\bin\msvcr71.dll - ok
16:29:30.0218 2128 [ D4991D98F2DB73C60D042F1AEF79EFAE ] C:\WINDOWS\system32\es.dll
16:29:30.0218 2128 C:\WINDOWS\system32\es.dll - ok
16:29:30.0234 2128 [ 369F7B1A4F358B976176556A1A331F36 ] C:\WINDOWS\system32\odbcbcp.dll
16:29:30.0234 2128 C:\WINDOWS\system32\odbcbcp.dll - ok
16:29:30.0234 2128 [ 62CF83A6989312A0DD39BBFFB3D1C166 ] C:\WINDOWS\system32\pdh.dll
16:29:30.0234 2128 C:\WINDOWS\system32\pdh.dll - ok
16:29:30.0234 2128 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] C:\WINDOWS\system32\srvsvc.dll
16:29:30.0234 2128 C:\WINDOWS\system32\srvsvc.dll - ok
16:29:30.0234 2128 [ 986B1FF5814366D71E0AC5755C88F2D3 ] C:\WINDOWS\system32\msgsvc.dll
16:29:30.0234 2128 C:\WINDOWS\system32\msgsvc.dll - ok
16:29:30.0250 2128 [ 20FD44370267CCD0A64A1B31861C21D2 ] C:\WINDOWS\system32\netmsg.dll
16:29:30.0250 2128 C:\WINDOWS\system32\netmsg.dll - ok
16:29:30.0250 2128 [ 837608240884733792DDAE81E50B802A ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
16:29:30.0250 2128 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe - ok
16:29:30.0250 2128 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] C:\WINDOWS\system32\drivers\srv.sys
16:29:30.0250 2128 C:\WINDOWS\system32\drivers\srv.sys - ok
16:29:30.0265 2128 [ ACDAFCD14EC0ECE89198503746A5C147 ] C:\WINDOWS\system32\perfos.dll
16:29:30.0265 2128 C:\WINDOWS\system32\perfos.dll - ok
16:29:30.0265 2128 [ ABFB673B24A9B3287761D497529FB5B9 ] C:\WINDOWS\system32\perfdisk.dll
16:29:30.0265 2128 C:\WINDOWS\system32\perfdisk.dll - ok
16:29:30.0265 2128 [ 1C4D0F52B4238B9388F2A28DD0903588 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
16:29:30.0265 2128 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll - ok
16:29:30.0265 2128 [ E1F3AB2CC3521E68F242FB4D60C52AE3 ] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
16:29:30.0265 2128 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll - ok
16:29:30.0281 2128 [ D6D4130C0BBC0D18C2DA703CC38260A9 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlos.dll
16:29:30.0281 2128 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlos.dll - ok
16:29:30.0281 2128 [ E111CED19D6A9FF9BBA5C219D0C5A3CE ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll
16:29:30.0281 2128 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll - ok
16:29:30.0281 2128 [ 7B193BA3F0245D5867B71AD1CF631474 ] C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll
16:29:30.0281 2128 C:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll - ok
16:29:30.0296 2128 [ 332760FBA1655FCFD35BD6F4FD871300 ] C:\WINDOWS\system32\ipsecsvc.dll
16:29:30.0296 2128 C:\WINDOWS\system32\ipsecsvc.dll - ok
16:29:30.0296 2128 [ 1AF54261C283BAFB021B3D84A7BAE978 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLBOOT.dll
16:29:30.0296 2128 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLBOOT.dll - ok
16:29:30.0296 2128 [ C5FF8682EADA5B3B27A865F1C3EF9270 ] C:\WINDOWS\system32\oakley.dll
16:29:30.0296 2128 C:\WINDOWS\system32\oakley.dll - ok
16:29:30.0312 2128 [ 853D0D0C6F02D7BFDF1CF99DD7553732 ] C:\WINDOWS\system32\pstorsvc.dll
16:29:30.0312 2128 C:\WINDOWS\system32\pstorsvc.dll - ok
16:29:30.0312 2128 [ 248712EA6BA17B9FF0C542A3828375DD ] C:\WINDOWS\system32\winipsec.dll
16:29:30.0312 2128 C:\WINDOWS\system32\winipsec.dll - ok
16:29:30.0312 2128 [ 247FE8DEFBB95A4319C7B4B215F92891 ] C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.rll
16:29:30.0312 2128 C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.rll - ok
16:29:30.0312 2128 [ 22D89D84E8E081CDA529DBF8C0255A38 ] C:\WINDOWS\system32\psbase.dll
16:29:30.0312 2128 C:\WINDOWS\system32\psbase.dll - ok
16:29:30.0328 2128 [ 5B19B557B0C188210A56A6B699D90B8F ] C:\WINDOWS\system32\regsvc.dll
16:29:30.0328 2128 C:\WINDOWS\system32\regsvc.dll - ok
16:29:30.0328 2128 [ CBE612E2BB6A10E3563336191EDA1250 ] C:\WINDOWS\system32\seclogon.dll
16:29:30.0328 2128 C:\WINDOWS\system32\seclogon.dll - ok
16:29:30.0328 2128 [ 26EBC39857138FADAD68FBC3683E64F1 ] C:\Program Files\Java\jre6\bin\awt.dll
16:29:30.0328 2128 C:\Program Files\Java\jre6\bin\awt.dll - ok
16:29:30.0343 2128 [ FEDE68BF80052BAD393AFD5C2E60DCB0 ] C:\WINDOWS\system32\dssenh.dll
16:29:30.0343 2128 C:\WINDOWS\system32\dssenh.dll - ok
16:29:30.0343 2128 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] C:\WINDOWS\system32\sens.dll
16:29:30.0343 2128 C:\WINDOWS\system32\sens.dll - ok
16:29:30.0343 2128 [ 7784111F64DB31AE96D86359301D9079 ] C:\Program Files\Java\jre6\bin\client\jvm.dll
16:29:30.0343 2128 C:\Program Files\Java\jre6\bin\client\jvm.dll - ok
16:29:30.0343 2128 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
16:29:30.0343 2128 C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe - ok
16:29:30.0359 2128 [ 83F41D0D89645D7235C051AB1D9523AC ] C:\WINDOWS\system32\ipnathlp.dll
16:29:30.0359 2128 C:\WINDOWS\system32\ipnathlp.dll - ok
16:29:30.0359 2128 [ D89083C4EB02DACA8F944B0E05E57F9D ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
16:29:30.0359 2128 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe - ok
16:29:30.0359 2128 [ D1E2786D29A34009A54868B6B0449296 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll
16:29:30.0359 2128 C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll - ok
16:29:30.0375 2128 [ ACACB8B14E66109B8ACD6644B5574B9A ] C:\WINDOWS\system32\vssapi.dll
16:29:30.0375 2128 C:\WINDOWS\system32\vssapi.dll - ok
16:29:30.0375 2128 [ 3805DF0AC4296A34BA4BF93B346CC378 ] C:\WINDOWS\system32\srsvc.dll
16:29:30.0375 2128 C:\WINDOWS\system32\srsvc.dll - ok
16:29:30.0375 2128 [ F9D3C78CFE15271D80790677C893CE45 ] C:\WINDOWS\system32\cabinet.dll
16:29:30.0375 2128 C:\WINDOWS\system32\cabinet.dll - ok
16:29:30.0375 2128 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] C:\WINDOWS\system32\wiaservc.dll
16:29:30.0375 2128 C:\WINDOWS\system32\wiaservc.dll - ok
16:29:30.0390 2128 [ 08A73B0E7EE6E32983B5F9E540A8E380 ] C:\WINDOWS\system32\mscoree.dll
16:29:30.0390 2128 C:\WINDOWS\system32\mscoree.dll - ok
16:29:30.0390 2128 [ A06CE3399D16DB864F55FAEB1F1927A9 ] C:\WINDOWS\system32\browser.dll
16:29:30.0390 2128 C:\WINDOWS\system32\browser.dll - ok
16:29:30.0390 2128 [ 4AC2FA4A6F0DF2511BAC13393C06EFF1 ] C:\WINDOWS\system32\mscms.dll
16:29:30.0390 2128 C:\WINDOWS\system32\mscms.dll - ok
16:29:30.0406 2128 [ 8BCD11D38FCE43A519246A91CC40DE6A ] C:\WINDOWS\system32\security.dll
16:29:30.0406 2128 C:\WINDOWS\system32\security.dll - ok
16:29:30.0406 2128 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] C:\WINDOWS\system32\wuauserv.dll
16:29:30.0406 2128 C:\WINDOWS\system32\wuauserv.dll - ok
16:29:30.0406 2128 [ 2D0E4ED081963804CCC196A0929275B5 ] C:\WINDOWS\system32\wbem\wmisvc.dll
16:29:30.0406 2128 C:\WINDOWS\system32\wbem\wmisvc.dll - ok
16:29:30.0406 2128 [ D2F77E5DC1800BBC2CFFB5E76586B293 ] C:\WINDOWS\system32\wuaueng.dll
16:29:30.0406 2128 C:\WINDOWS\system32\wuaueng.dll - ok
16:29:30.0421 2128 [ 8FED1E0A491D4990853D23F21C59C730 ] C:\WINDOWS\system32\advpack.dll
16:29:30.0421 2128 C:\WINDOWS\system32\advpack.dll - ok
16:29:30.0421 2128 [ B85E95679B5ADC12311BCD3F5385D623 ] C:\WINDOWS\system32\mspatcha.dll
16:29:30.0421 2128 C:\WINDOWS\system32\mspatcha.dll - ok
16:29:30.0421 2128 [ DEFAB035A25D3719AF0860B61EDC6440 ] C:\Program Files\Java\jre6\bin\dcpr.dll
16:29:30.0421 2128 C:\Program Files\Java\jre6\bin\dcpr.dll - ok
16:29:30.0437 2128 [ 55BCA12F7F523D35CA3CB833C725F54E ] C:\WINDOWS\system32\trkwks.dll
16:29:30.0437 2128 C:\WINDOWS\system32\trkwks.dll - ok
16:29:30.0437 2128 [ 7C278E6408D1DCE642230C0585A854D5 ] C:\WINDOWS\system32\wscsvc.dll
16:29:30.0437 2128 C:\WINDOWS\system32\wscsvc.dll - ok
16:29:30.0437 2128 [ ED0C0DF222209E43AD9AFBF3FE87DDE0 ] C:\WINDOWS\system32\comsvcs.dll
16:29:30.0437 2128 C:\WINDOWS\system32\comsvcs.dll - ok
16:29:30.0437 2128 [ E6234ED19F2FD53C14B336B74F57A68D ] C:\Program Files\Java\jre6\bin\deploy.dll
16:29:30.0437 2128 C:\Program Files\Java\jre6\bin\deploy.dll - ok
16:29:30.0453 2128 [ E6E6E69EFF79B1FCB98EB42CFC0702C5 ] C:\Program Files\Java\jre6\bin\fontmanager.dll
16:29:30.0453 2128 C:\Program Files\Java\jre6\bin\fontmanager.dll - ok
16:29:30.0453 2128 [ 920EF9E4A7073478B1BAF91C12E4DD7E ] C:\Program Files\Java\jre6\bin\hpi.dll
16:29:30.0453 2128 C:\Program Files\Java\jre6\bin\hpi.dll - ok
16:29:30.0453 2128 [ 690D97864735E8ECD87F55777E266690 ] C:\WINDOWS\system32\colbact.dll
16:29:30.0453 2128 C:\WINDOWS\system32\colbact.dll - ok
16:29:30.0468 2128 [ 36795A645EAA47FE31D2A8F136A2C69B ] C:\WINDOWS\system32\mtxclu.dll
16:29:30.0468 2128 C:\WINDOWS\system32\mtxclu.dll - ok
16:29:30.0468 2128 [ 77F2E73B9507A383CC149A359409D735 ] C:\Program Files\Java\jre6\bin\java.dll
16:29:30.0468 2128 C:\Program Files\Java\jre6\bin\java.dll - ok
16:29:30.0468 2128 [ DF82E222578DBE59FCBBD69A02E4C806 ] C:\WINDOWS\system32\clusapi.dll
16:29:30.0468 2128 C:\WINDOWS\system32\clusapi.dll - ok
16:29:30.0468 2128 [ 7D19D8FE3B8301E77CFD93A300DDC8FB ] C:\Program Files\Java\jre6\bin\javaw.exe
16:29:30.0468 2128 C:\Program Files\Java\jre6\bin\javaw.exe - ok
16:29:30.0484 2128 [ F51EBB6FC536A6B2D588FD668D3A8249 ] C:\WINDOWS\system32\resutils.dll
16:29:30.0484 2128 C:\WINDOWS\system32\resutils.dll - ok
16:29:30.0484 2128 [ F0BF811622F2DD6C8E26EE4600D83731 ] C:\WINDOWS\system32\wbem\wbemcore.dll
16:29:30.0484 2128 C:\WINDOWS\system32\wbem\wbemcore.dll - ok
16:29:30.0484 2128 [ D58BE81020DE13AEA25096B20755D89F ] C:\Program Files\Java\jre6\bin\jp2native.dll
16:29:30.0484 2128 C:\Program Files\Java\jre6\bin\jp2native.dll - ok
16:29:30.0500 2128 [ F19D5B47D36FF9A034071DF26CBCB89A ] C:\Program Files\Java\jre6\bin\jpeg.dll
16:29:30.0500 2128 C:\Program Files\Java\jre6\bin\jpeg.dll - ok
16:29:30.0500 2128 [ 79E3A8C328E7E569C32B0998377D9742 ] C:\WINDOWS\system32\spoolss.dll
16:29:30.0500 2128 C:\WINDOWS\system32\spoolss.dll - ok
16:29:30.0500 2128 [ 2BBBDDF6DC89FCDA0F41BA1143A1CBEA ] C:\Program Files\Java\jre6\bin\net.dll
16:29:30.0500 2128 C:\Program Files\Java\jre6\bin\net.dll - ok
16:29:30.0500 2128 [ E4616430709F440CF1809D88DC2366EA ] C:\WINDOWS\system32\wbem\esscli.dll
16:29:30.0500 2128 C:\WINDOWS\system32\wbem\esscli.dll - ok
16:29:30.0515 2128 [ EAA50607F83F8805D2A7EF5E128DBD3A ] C:\Program Files\Java\jre6\bin\nio.dll
16:29:30.0515 2128 C:\Program Files\Java\jre6\bin\nio.dll - ok
16:29:30.0515 2128 [ AA897735D5AB916297A6823A9B2D61B1 ] C:\WINDOWS\system32\localspl.dll
16:29:30.0515 2128 C:\WINDOWS\system32\localspl.dll - ok
16:29:30.0515 2128 [ 378A0AEFB11D8B0DC8C27B9F7604B88D ] C:\WINDOWS\system32\wbem\fastprox.dll
16:29:30.0515 2128 C:\WINDOWS\system32\wbem\fastprox.dll - ok
16:29:30.0531 2128 [ FAC23E5F45EC88EFDEFA4765771D0D10 ] C:\Program Files\Java\jre6\bin\regutils.dll
16:29:30.0531 2128 C:\Program Files\Java\jre6\bin\regutils.dll - ok
16:29:30.0531 2128 [ 5D3D1AB0EF4EA55B731863050482C111 ] C:\WINDOWS\system32\cnbjmon.dll
16:29:30.0531 2128 C:\WINDOWS\system32\cnbjmon.dll - ok
16:29:30.0531 2128 [ 010472D0AE758227C6F6E6933549C219 ] C:\WINDOWS\system32\wbem\wbemsvc.dll
16:29:30.0531 2128 C:\WINDOWS\system32\wbem\wbemsvc.dll - ok
16:29:30.0531 2128 [ 58C8D45C571AA9235FB296B383B89887 ] C:\WINDOWS\system32\cpwmon2k.dll
16:29:30.0531 2128 C:\WINDOWS\system32\cpwmon2k.dll - ok
16:29:30.0546 2128 [ 3273D1565BF30225C115B480A3BB2C9D ] C:\WINDOWS\system32\wbem\wmiutils.dll
16:29:30.0546 2128 C:\WINDOWS\system32\wbem\wmiutils.dll - ok
16:29:30.0546 2128 [ C33D36BAF2E8C48F7C60C410E0D591EC ] C:\Program Files\Java\jre6\bin\verify.dll
16:29:30.0546 2128 C:\Program Files\Java\jre6\bin\verify.dll - ok
16:29:30.0546 2128 [ 152CD4CA28C8F40BB281DAF6AD65A216 ] C:\Program Files\Java\jre6\bin\zip.dll
16:29:30.0546 2128 C:\Program Files\Java\jre6\bin\zip.dll - ok
16:29:30.0562 2128 [ 7A3D29AC6E5F67442EC8096BDE4A4E5E ] C:\WINDOWS\system32\pdfc_port.dll
16:29:30.0562 2128 C:\WINDOWS\system32\pdfc_port.dll - ok
16:29:30.0562 2128 [ 222DE7F5EDB9DDBE628384A1A8BE59CE ] C:\WINDOWS\system32\pjlmon.dll
16:29:30.0562 2128 C:\WINDOWS\system32\pjlmon.dll - ok
16:29:30.0562 2128 [ AE0382AD9C73D343D85E1A50C80B7C20 ] C:\WINDOWS\system32\tcpmon.dll
16:29:30.0562 2128 C:\WINDOWS\system32\tcpmon.dll - ok
16:29:30.0562 2128 [ 942A17D2901A31EA68627CBFFCD268CC ] C:\WINDOWS\system32\wbem\repdrvfs.dll
16:29:30.0562 2128 C:\WINDOWS\system32\wbem\repdrvfs.dll - ok
16:29:30.0578 2128 [ F26385E8BA4549B5186B774EC0E45D86 ] C:\WINDOWS\system32\usbmon.dll
16:29:30.0578 2128 C:\WINDOWS\system32\usbmon.dll - ok
16:29:30.0578 2128 [ EEE7F12D9FF46F68FBC0DA059A359E9E ] C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
16:29:30.0578 2128 C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - ok
16:29:30.0578 2128 [ 071143F687B4F887E21461CA6CC7EB29 ] C:\WINDOWS\system32\wbem\wmiprvsd.dll
16:29:30.0578 2128 C:\WINDOWS\system32\wbem\wmiprvsd.dll - ok
16:29:30.0593 2128 [ 22DD6D7D4BFE2B8CE705CC950C8AEA4C ] C:\WINDOWS\system32\win32spl.dll
16:29:30.0593 2128 C:\WINDOWS\system32\win32spl.dll - ok
16:29:30.0593 2128 [ B41D53899E37CC43DA85DA19998BEE81 ] C:\WINDOWS\system32\netrap.dll
16:29:30.0593 2128 C:\WINDOWS\system32\netrap.dll - ok
16:29:30.0593 2128 [ EE4C651A217B01D636B5364AC77DA892 ] C:\WINDOWS\system32\inetpp.dll
16:29:30.0593 2128 C:\WINDOWS\system32\inetpp.dll - ok
16:29:30.0609 2128 [ 26D881D27CBE51D3614E68D7313EA026 ] C:\WINDOWS\system32\wbem\wbemess.dll
16:29:30.0609 2128 C:\WINDOWS\system32\wbem\wbemess.dll - ok
16:29:30.0609 2128 [ 8C54260D3263ED4E9BEA132FEB3BFCB1 ] C:\WINDOWS\system32\wuapi.dll
16:29:30.0609 2128 C:\WINDOWS\system32\wuapi.dll - ok
16:29:30.0609 2128 [ D26451B540720A7313A9BCBE794DAF62 ] C:\WINDOWS\system32\wbem\ncprov.dll
16:29:30.0609 2128 C:\WINDOWS\system32\wbem\ncprov.dll - ok
16:29:30.0609 2128 [ 6404807ABC7AF52FA3792697AE638B50 ] C:\WINDOWS\system32\wbem\wbemcons.dll
16:29:30.0609 2128 C:\WINDOWS\system32\wbem\wbemcons.dll - ok
16:29:30.0625 2128 [ C14350FC0D47D806699C4F907FC6785B ] C:\WINDOWS\system32\cryptnet.dll
16:29:30.0625 2128 C:\WINDOWS\system32\cryptnet.dll - ok
16:29:30.0625 2128 [ 3CBA2210FA39C6ED7895634842E930DD ] C:\WINDOWS\system32\sensapi.dll
16:29:30.0625 2128 C:\WINDOWS\system32\sensapi.dll - ok
16:29:30.0625 2128 [ 9435C1C2D2111573111367F92F208C1F ] C:\PROGRA~1\COMMON~1\MICROS~1\DW\DWTRIG20.EXE
16:29:30.0625 2128 C:\PROGRA~1\COMMON~1\MICROS~1\DW\DWTRIG20.EXE - ok
16:29:30.0640 2128 [ 2DE1190196EE9555DB548A57622022EB ] C:\WINDOWS\system32\drprov.dll
16:29:30.0640 2128 C:\WINDOWS\system32\drprov.dll - ok
16:29:30.0640 2128 [ 36468087E22C57A83DF758B3F90DF73F ] C:\WINDOWS\system32\ntlanman.dll
16:29:30.0640 2128 C:\WINDOWS\system32\ntlanman.dll - ok
16:29:30.0640 2128 [ AC5DF42FE314C1446B1DAD237BFCFFE0 ] C:\WINDOWS\system32\netui0.dll
16:29:30.0640 2128 C:\WINDOWS\system32\netui0.dll - ok
16:29:30.0640 2128 [ ED5A816D8E11E03F1937AC3C56826EE4 ] C:\WINDOWS\system32\netui1.dll
16:29:30.0640 2128 C:\WINDOWS\system32\netui1.dll - ok
16:29:30.0656 2128 [ FB8F8EEC8D9C2157789472DD61CDC78B ] C:\WINDOWS\system32\davclnt.dll
16:29:30.0656 2128 C:\WINDOWS\system32\davclnt.dll - ok
16:29:30.0656 2128 [ 1AC028773C801805F3CF0F08735B8110 ] C:\Program Files\IBM\Client Access\Mri2924\cwbinres.dll
16:29:30.0656 2128 C:\Program Files\IBM\Client Access\Mri2924\cwbinres.dll - ok
16:29:30.0656 2128 [ ED7262E52C31CF1625B65039102BC16C ] C:\WINDOWS\system32\wuauclt.exe
16:29:30.0656 2128 C:\WINDOWS\system32\wuauclt.exe - ok
16:29:30.0671 2128 [ B3AFD779E404C8CAE092BA875782A55C ] C:\WINDOWS\system32\wuaucpl.cpl
16:29:30.0671 2128 C:\WINDOWS\system32\wuaucpl.cpl - ok
16:29:30.0671 2128 [ 7A7A6853855986ADFFC484DFB54FD9AD ] C:\WINDOWS\system32\wups.dll
16:29:30.0671 2128 C:\WINDOWS\system32\wups.dll - ok
16:29:30.0671 2128 ============================================================
16:29:30.0671 2128 Scan finished
16:29:30.0671 2128 ============================================================
16:29:30.0687 2120 Detected object count: 6
16:29:30.0687 2120 Actual detected object count: 6
16:29:38.0953 2120 adpu320 ( UnsignedFile.Multi.Generic ) - skipped by user
16:29:38.0953 2120 adpu320 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:29:38.0953 2120 Aspi32 ( UnsignedFile.Multi.Generic ) - skipped by user
16:29:38.0953 2120 Aspi32 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:29:38.0953 2120 BrcmMgmtAgent ( UnsignedFile.Multi.Generic ) - skipped by user
16:29:38.0953 2120 BrcmMgmtAgent ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:29:38.0953 2120 Cwbrxd ( UnsignedFile.Multi.Generic ) - skipped by user
16:29:38.0953 2120 Cwbrxd ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:29:38.0953 2120 Fog Service ( UnsignedFile.Multi.Generic ) - skipped by user
16:29:38.0953 2120 Fog Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:29:38.0953 2120 Symmpi ( UnsignedFile.Multi.Generic ) - skipped by user
16:29:38.0953 2120 Symmpi ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:30:03.0453 1864 Deinitialize success







Here is the aswMBR Log, as well:

aswMBR version 0.9.9.1707 Copyright© 2011 AVAST Software
Run date: 2013-01-09 16:30:45
-----------------------------
16:30:45.687 OS Version: Windows 5.1.2600 Service Pack 3
16:30:45.687 Number of processors: 1 586 0x1601
16:30:45.687 ComputerName: MASTER UserName: Dwayne
16:30:47.375 Initialize success
16:33:13.890 AVAST engine defs: 13010900
16:33:27.578 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
16:33:27.578 Disk 0 Vendor: ST3160318AS HP35 Size: 152627MB BusType: 3
16:33:27.593 Disk 0 MBR read successfully
16:33:27.593 Disk 0 MBR scan
16:33:27.625 Disk 0 Windows VISTA default MBR code
16:33:27.625 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 152625 MB offset 2048
16:33:27.640 Disk 0 scanning sectors +312578048
16:33:27.703 Disk 0 scanning C:\WINDOWS\system32\drivers
16:33:35.875 Service scanning
16:33:51.625 Modules scanning
16:33:55.125 Disk 0 trace - called modules:
16:33:55.140 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
16:33:55.140 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a8a1ab8]
16:33:55.656 3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> \Device\00000069[0x8a846f18]
16:33:55.656 5 ACPI.sys[b9f51620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8a86cd98]
16:33:57.640 AVAST engine scan C:\WINDOWS
16:34:46.250 AVAST engine scan C:\WINDOWS\system32
16:37:10.906 AVAST engine scan C:\WINDOWS\system32\drivers
16:37:26.531 AVAST engine scan C:\Documents and Settings\Dwayne
16:37:44.125 AVAST engine scan C:\Documents and Settings\All Users
16:37:54.625 Scan finished successfully
16:38:05.140 Disk 0 MBR has been saved successfully to "E:\MBR.dat"
16:38:05.437 The log file has been saved successfully to "E:\aswMBR.txt"

#10 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:14 AM

Posted 10 January 2013 - 05:08 AM

How is the computer doing now



gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#11 SkipDiver

SkipDiver
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 10 January 2013 - 08:09 AM

The computer is still real slow and can't access Windows Update.

Out of the HUGE log I sent you yesterday, is there anything else that can be fixed?

#12 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:14 AM

Posted 10 January 2013 - 01:09 PM

Hello


I want you to reset the DMA you can do this by this script here - Reset DMA

If you have problems when you click on the link try to right click on the link and select "Save Target As" and then save to your desktop.
Once it is on your desktop right click on the file and select "Run"

If you still can't run it then you can go here "Reset DMA" to see what I want to do



Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#13 SkipDiver

SkipDiver
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 10 January 2013 - 01:26 PM

Hey Gringo!

Ok. I've done that now and am restarting. That should fix what the virus did to the Microsoft Update access?

#14 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:14 AM

Posted 10 January 2013 - 02:06 PM

no that should fix the slowness of the computer
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#15 SkipDiver

SkipDiver
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Michigan
  • Local time:06:14 AM

Posted 10 January 2013 - 02:11 PM

It definetely made the computer faster than what it was, that is for sure. I also have "Access" to microsoft update, but will FAIL for every single update I have tried. Before it wouldn't even let me get to the page, it would show a microsoft error and give me a code. Now, I can get to the site, check what updates are needed ( a lot ) and start to download, but all fail.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users