Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer Running a lot Slower than Normal


  • Please log in to reply
7 replies to this topic

#1 leafsfan7524

leafsfan7524

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 21 March 2013 - 04:13 PM

Hi my computer has been running a lot slower than normal.  Is it possible someone can help with what program I can run to see which virues, malware etc I have and how to get rid of them?

 

Any help with this would be great!


Edited by hamluis, 22 March 2013 - 11:01 AM.
Moved from Vista to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 Keithuk

Keithuk

  • Members
  • 957 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:27 PM

Posted 21 March 2013 - 08:51 PM

So you've done a virus and malware scan and you want to know how to get rid of the viruses and malware?

 

Which anti-virus app are you using? There should be somewhere to delete them or move them to the vault.

 

The other problem with computer running slow is you have alot of apps running in the backgorund which are using memory if you don't need them don't have them running, msconfig Startup tab. How much memory do you have?


Keith

Windows ME (spare computer)
Windows XP 2002 Professional SP3 (desktop computer)
Windows 7 Professional SP1 32bit (laptop computer)

Windows 8 64bit spare drive for laptop computer


#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:27 AM

Posted 22 March 2013 - 11:16 AM

Hello and welcome.

 

Let's do a couple scans..

You can also look at this ... Slow Computer/browser? Check Here First; It May Not Be Malware

 

MiniToolBox
Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:

  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

 

 

 

Please Download TDSSkiller
Launch it.
Click on change parameters-Select TDLFS file system
Click on "Scan".
Please post the LOG report(log file should be in your C drive)
 
Do not change the default options on scan results.

 

 

 

ADW Cleaner

Please download AdwCleaner by Xplode onto your desktop.
•Close all open programs and internet browsers.
•Double click on adwcleaner.exe to run the tool.
•Click on Delete.
•Confirm each time with Ok.
•You will be prompted to restart your computer. A text file will open after the restart.
•Please post the contents of that logfile with your next reply.
•You can find the logfile at C:\AdwCleaner[S1].txt as well.

 


>>>>

Now I'd like us to scan your machine with ESET OnlineScan

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png  button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

NOTE:Sometimes if ESET finds no infections it will not create a log.


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 leafsfan7524

leafsfan7524
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 23 March 2013 - 09:18 AM

Thanks Boopme.  Here is the miniboxtool scan:

 

MiniToolBox by Farbar  Version:05-03-2013
Ran by Erin (administrator) on 23-03-2013 at 10:12:41
Running from "C:\Users\Erin\Desktop"
Windows Vista ™ Home Premium Service Pack 2 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

::1             localhost

127.0.0.1       localhost
127.0.0.1    www.007guard.com
127.0.0.1    007guard.com
127.0.0.1    008i.com
127.0.0.1    www.008k.com
127.0.0.1    008k.com
127.0.0.1    www.00hq.com
127.0.0.1    00hq.com
127.0.0.1    010402.com
127.0.0.1    www.032439.com
127.0.0.1    032439.com
127.0.0.1    www.0scan.com
127.0.0.1    0scan.com
127.0.0.1    1000gratisproben.com
127.0.0.1    www.1000gratisproben.com
127.0.0.1    www.1001namen.com
127.0.0.1    1001namen.com
127.0.0.1    www.100888290cs.com
127.0.0.1    100888290cs.com

There are 10001 more lines starting with "127.0.0.1"

========================= IP Configuration: ================================

Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller = Local Area Connection (Connected)
Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter = Wireless Network Connection (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# End of IPv4 configuration



Windows IP Configuration

   Host Name . . . . . . . . . . . . : Erin-PC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Wireless Network Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter
   Physical Address. . . . . . . . . : 00-15-AF-74-BF-6F
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller
   Physical Address. . . . . . . . . : 00-22-15-54-D6-F8
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::6473:ba87:bc2c:40ec%10(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.6(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : March-23-13 9:46:21 AM
   Lease Expires . . . . . . . . . . : March-24-13 9:46:21 AM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 251666965
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-10-DE-EA-DC-00-22-15-54-D6-F8
   DNS Servers . . . . . . . . . . . : 192.168.1.1
                                       64.71.255.198
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 18:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{FE729BFF-B2F9-4760-A875-7A141D5CB7B1}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 7:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 02-00-54-55-4E-01
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:953c:1091:142d:3f57:fef9(Preferred)
   Link-local IPv6 Address . . . . . : fe80::1091:142d:3f57:fef9%11(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : 6TO4 Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 13:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft 6to4 Adapter #3
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 16:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : 6TO4 Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 19:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{FE729BFF-B2F9-4760-A875-7A141D5CB7B1}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 24:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{616F2037-BC8A-4009-9A3B-481615B7FFD8}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 25:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{FE729BFF-B2F9-4760-A875-7A141D5CB7B1}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server:  my.router
Address:  192.168.1.1

Name:    google.com
Address:  74.125.226.40



Pinging google.com [74.125.226.3] with 32 bytes of data:

Reply from 74.125.226.3: bytes=32 time=11ms TTL=56

Reply from 74.125.226.3: bytes=32 time=9ms TTL=56



Ping statistics for 74.125.226.3:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 9ms, Maximum = 11ms, Average = 10ms

Server:  my.router
Address:  192.168.1.1

Name:    yahoo.com
Address:  98.138.253.109



Pinging yahoo.com [206.190.36.45] with 32 bytes of data:

Reply from 206.190.36.45: bytes=32 time=652ms TTL=51

Reply from 206.190.36.45: bytes=32 time=787ms TTL=51



Ping statistics for 206.190.36.45:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 652ms, Maximum = 787ms, Average = 719ms



Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
 12 ...00 15 af 74 bf 6f ...... Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter
 10 ...00 22 15 54 d6 f8 ...... Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller
  1 ........................... Software Loopback Interface 1
 26 ...00 00 00 00 00 00 00 e0  isatap.{FE729BFF-B2F9-4760-A875-7A141D5CB7B1}
 11 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
 14 ...00 00 00 00 00 00 00 e0  6TO4 Adapter
 13 ...00 00 00 00 00 00 00 e0  Microsoft 6to4 Adapter #3
 17 ...00 00 00 00 00 00 00 e0  6TO4 Adapter
 25 ...00 00 00 00 00 00 00 e0  isatap.{FE729BFF-B2F9-4760-A875-7A141D5CB7B1}
 27 ...00 00 00 00 00 00 00 e0  isatap.{616F2037-BC8A-4009-9A3B-481615B7FFD8}
 28 ...00 00 00 00 00 00 00 e0  isatap.{FE729BFF-B2F9-4760-A875-7A141D5CB7B1}
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1      192.168.1.6     20
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.1.0    255.255.255.0         On-link       192.168.1.6    276
      192.168.1.6  255.255.255.255         On-link       192.168.1.6    276
    192.168.1.255  255.255.255.255         On-link       192.168.1.6    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link       192.168.1.6    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link       192.168.1.6    276
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 11     18 ::/0                     On-link
  1    306 ::1/128                  On-link
 11     18 2001::/32                On-link
 11    266 2001:0:9d38:953c:1091:142d:3f57:fef9/128
                                    On-link
 10    276 fe80::/64                On-link
 11    266 fe80::/64                On-link
 11    266 fe80::1091:142d:3f57:fef9/128
                                    On-link
 10    276 fe80::6473:ba87:bc2c:40ec/128
                                    On-link
  1    306 ff00::/8                 On-link
 11    266 ff00::/8                 On-link
 10    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [48128] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [50176] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [19968] (Microsoft Corporation)
Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [61440] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [62976] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [27648] (Microsoft Corporation)
x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (03/23/2013 09:49:10 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (03/23/2013 09:47:37 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2013 02:59:33 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (03/21/2013 02:59:33 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (03/21/2013 02:58:05 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2013 01:47:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2013 10:02:51 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (03/21/2013 10:02:37 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2013 02:09:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5039

Error: (03/18/2013 02:09:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5039


System errors:
=============
Error: (03/23/2013 10:01:11 AM) (Source: DCOM) (User: Erin-PC)
Description: machine-defaultLocalActivation{000C101C-0000-0000-C000-000000000046}Erin-PCErinS-1-5-21-3365564117-3563449888-1516925811-1000LocalHost (Using LRPC)

Error: (03/23/2013 09:49:28 AM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (03/23/2013 09:49:28 AM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (03/23/2013 09:48:14 AM) (Source: Service Control Manager) (User: )
Description: Lbd

Error: (03/23/2013 09:48:14 AM) (Source: Service Control Manager) (User: )
Description: Nero BackItUp Scheduler 4.0%%2

Error: (03/21/2013 02:59:38 PM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069

Error: (03/21/2013 02:59:38 PM) (Source: Service Control Manager) (User: )
Description: nvUpdatusService.\UpdatusUser%%1330

Error: (03/21/2013 02:58:06 PM) (Source: Service Control Manager) (User: )
Description: Lbd

Error: (03/21/2013 02:58:06 PM) (Source: Service Control Manager) (User: )
Description: Nero BackItUp Scheduler 4.0%%2

Error: (03/21/2013 01:49:02 PM) (Source: Service Control Manager) (User: )
Description: NVIDIA Update Service Daemon%%1069


Microsoft Office Sessions:
=========================
Error: (03/23/2013 09:49:10 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe

Error: (03/23/2013 09:47:37 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2013 02:59:33 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe

Error: (03/21/2013 02:59:33 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe

Error: (03/21/2013 02:58:05 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2013 01:47:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2013 10:02:51 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe

Error: (03/21/2013 10:02:37 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2013 02:09:23 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5039

Error: (03/18/2013 02:09:23 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5039


CodeIntegrity Errors:
===================================
  Date: 2013-02-21 15:23:43.529
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\sbhips.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-21 15:23:43.326
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\sbhips.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-21 15:23:43.107
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\sbhips.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-21 15:23:42.624
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\sbhips.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-13 13:15:25.416
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-13 13:15:25.291
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-13 13:15:25.151
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-13 13:15:25.010
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-13 13:15:19.613
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-13 13:15:19.488
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.


=========================== Installed Programs ============================

Adobe Flash Player 10 ActiveX 64-bit (Version: 10.2.161.23)
Apple Mobile Device Support (Version: 6.1.0.13)
Bonjour (Version: 3.0.0.10)
CutePDF Writer 2.7
Facebook Plug-In
Garmin Communicator Plugin x64 (Version: 4.0.4)
iCloud (Version: 2.0.2.187)
iTunes (Version: 11.0.2.25)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
MobileMe Control Panel (Version: 3.1.8.0)
NVIDIA 3D Vision Driver 306.97 (Version: 306.97)
NVIDIA Control Panel 306.97 (Version: 306.97)
NVIDIA Display Control Panel (Version: 6.14.12.5896)
NVIDIA Graphics Driver 306.97 (Version: 306.97)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
PVSonyDll (Version: 1.00.0001)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)

========================= Memory info: ===================================

Percentage of memory in use: 26%
Total physical RAM: 8190.18 MB
Available physical RAM: 6052.05 MB
Total Pagefile: 16431.4 MB
Available Pagefile: 14244.69 MB
Total Virtual: 4095.88 MB
Available Virtual: 3995.96 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:931.51 GB) (Free:492.44 GB) NTFS

========================= Users: ========================================

User accounts for \\ERIN-PC

Administrator            Erin                     Guest                    
UpdatusUser              


**** End of log ****
 



#5 leafsfan7524

leafsfan7524
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 23 March 2013 - 09:23 AM

TDSSkiller:

 

10:20:03.0702 4784  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
10:20:04.0014 4784  ============================================================
10:20:04.0014 4784  Current date / time: 2013/03/23 10:20:04.0014
10:20:04.0014 4784  SystemInfo:
10:20:04.0014 4784  
10:20:04.0014 4784  OS Version: 6.0.6002 ServicePack: 2.0
10:20:04.0014 4784  Product type: Workstation
10:20:04.0014 4784  ComputerName: ERIN-PC
10:20:04.0014 4784  UserName: Erin
10:20:04.0014 4784  Windows directory: C:\Windows
10:20:04.0014 4784  System windows directory: C:\Windows
10:20:04.0014 4784  Running under WOW64
10:20:04.0014 4784  Processor architecture: Intel x64
10:20:04.0014 4784  Number of processors: 4
10:20:04.0014 4784  Page size: 0x1000
10:20:04.0014 4784  Boot type: Normal boot
10:20:04.0014 4784  ============================================================
10:20:06.0058 4784  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:20:06.0089 4784  ============================================================
10:20:06.0089 4784  \Device\Harddisk0\DR0:
10:20:06.0089 4784  MBR partitions:
10:20:06.0089 4784  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
10:20:06.0089 4784  ============================================================
10:20:06.0089 4784  C: <-> \Device\Harddisk0\DR0\Partition1
10:20:06.0089 4784  ============================================================
10:20:06.0089 4784  Initialize success
10:20:06.0089 4784  ============================================================
10:20:31.0158 6024  ============================================================
10:20:31.0158 6024  Scan started
10:20:31.0158 6024  Mode: Manual; TDLFS;
10:20:31.0158 6024  ============================================================
10:20:31.0782 6024  ================ Scan system memory ========================
10:20:31.0782 6024  System memory - ok
10:20:31.0782 6024  ================ Scan services =============================
10:20:31.0923 6024  [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI            C:\Windows\system32\drivers\acpi.sys
10:20:31.0923 6024  ACPI - ok
10:20:32.0016 6024  [ FB182AD520910442ABF146BB325DE79B ] Ad-Aware Service C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
10:20:32.0032 6024  Ad-Aware Service - ok
10:20:32.0126 6024  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
10:20:32.0126 6024  AdobeARMservice - ok
10:20:32.0235 6024  [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
10:20:32.0235 6024  AdobeFlashPlayerUpdateSvc - ok
10:20:32.0297 6024  [ F14215E37CF124104575073F782111D2 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
10:20:32.0297 6024  adp94xx - ok
10:20:32.0360 6024  [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci         C:\Windows\system32\drivers\adpahci.sys
10:20:32.0360 6024  adpahci - ok
10:20:32.0391 6024  [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys
10:20:32.0391 6024  adpu160m - ok
10:20:32.0406 6024  [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
10:20:32.0422 6024  adpu320 - ok
10:20:32.0469 6024  [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
10:20:32.0469 6024  AeLookupSvc - ok
10:20:32.0547 6024  [ C4F6CE6087760AD70960C9EB130E7943 ] AFD             C:\Windows\system32\drivers\afd.sys
10:20:32.0562 6024  AFD - ok
10:20:32.0594 6024  [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440          C:\Windows\system32\drivers\agp440.sys
10:20:32.0594 6024  agp440 - ok
10:20:32.0640 6024  [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx         C:\Windows\system32\drivers\djsvs.sys
10:20:32.0640 6024  aic78xx - ok
10:20:32.0656 6024  [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG             C:\Windows\System32\alg.exe
10:20:32.0672 6024  ALG - ok
10:20:32.0687 6024  [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide          C:\Windows\system32\drivers\aliide.sys
10:20:32.0687 6024  aliide - ok
10:20:32.0703 6024  [ 970FA5059E61E30D25307B99903E991E ] amdide          C:\Windows\system32\drivers\amdide.sys
10:20:32.0703 6024  amdide - ok
10:20:32.0734 6024  [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
10:20:32.0734 6024  AmdK8 - ok
10:20:32.0750 6024  [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo         C:\Windows\System32\appinfo.dll
10:20:32.0750 6024  Appinfo - ok
10:20:32.0843 6024  [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
10:20:32.0843 6024  Apple Mobile Device - ok
10:20:32.0874 6024  [ BA8417D4765F3988FF921F30F630E303 ] arc             C:\Windows\system32\drivers\arc.sys
10:20:32.0890 6024  arc - ok
10:20:32.0921 6024  [ 9D41C435619733B34CC16A511E644B11 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
10:20:32.0921 6024  arcsas - ok
10:20:32.0952 6024  [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
10:20:32.0968 6024  AsyncMac - ok
10:20:32.0999 6024  [ E68D9B3A3905619732F7FE039466A623 ] atapi           C:\Windows\system32\drivers\atapi.sys
10:20:32.0999 6024  atapi - ok
10:20:33.0093 6024  [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:20:33.0108 6024  AudioEndpointBuilder - ok
10:20:33.0124 6024  [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
10:20:33.0124 6024  AudioSrv - ok
10:20:33.0202 6024  [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE             C:\Windows\System32\bfe.dll
10:20:33.0218 6024  BFE - ok
10:20:33.0296 6024  [ 6D316F4859634071CC25C4FD4589AD2C ] BITS            C:\Windows\System32\qmgr.dll
10:20:33.0311 6024  BITS - ok
10:20:33.0358 6024  [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys
10:20:33.0374 6024  blbdrive - ok
10:20:33.0483 6024  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
10:20:33.0483 6024  Bonjour Service - ok
10:20:33.0530 6024  [ 2348447A80920B2493A9B582A23E81E1 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
10:20:33.0545 6024  bowser - ok
10:20:33.0561 6024  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys
10:20:33.0561 6024  BrFiltLo - ok
10:20:33.0576 6024  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys
10:20:33.0576 6024  BrFiltUp - ok
10:20:33.0608 6024  [ A1B39DE453433B115B4EA69EE0343816 ] Browser         C:\Windows\System32\browser.dll
10:20:33.0608 6024  Browser - ok
10:20:33.0623 6024  [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid         C:\Windows\system32\drivers\brserid.sys
10:20:33.0639 6024  Brserid - ok
10:20:33.0654 6024  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys
10:20:33.0670 6024  BrSerWdm - ok
10:20:33.0686 6024  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys
10:20:33.0686 6024  BrUsbMdm - ok
10:20:33.0701 6024  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys
10:20:33.0701 6024  BrUsbSer - ok
10:20:33.0732 6024  [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
10:20:33.0732 6024  BTHMODEM - ok
10:20:33.0748 6024  [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
10:20:33.0748 6024  cdfs - ok
10:20:33.0826 6024  [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
10:20:33.0842 6024  cdrom - ok
10:20:33.0888 6024  [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc     C:\Windows\System32\certprop.dll
10:20:33.0888 6024  CertPropSvc - ok
10:20:33.0904 6024  [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass        C:\Windows\system32\drivers\circlass.sys
10:20:33.0920 6024  circlass - ok
10:20:33.0966 6024  [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS            C:\Windows\system32\CLFS.sys
10:20:33.0966 6024  CLFS - ok
10:20:34.0029 6024  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:20:34.0029 6024  clr_optimization_v2.0.50727_32 - ok
10:20:34.0122 6024  [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
10:20:34.0138 6024  clr_optimization_v2.0.50727_64 - ok
10:20:34.0216 6024  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:20:34.0232 6024  clr_optimization_v4.0.30319_32 - ok
10:20:34.0310 6024  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
10:20:34.0310 6024  clr_optimization_v4.0.30319_64 - ok
10:20:34.0325 6024  [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide          C:\Windows\system32\drivers\cmdide.sys
10:20:34.0325 6024  cmdide - ok
10:20:34.0356 6024  [ 077028E1E346DFA29888215DF4A1EB80 ] COMMONFX.DLL    C:\Windows\system32\COMMONFX.DLL
10:20:34.0356 6024  COMMONFX.DLL - ok
10:20:34.0356 6024  [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
10:20:34.0372 6024  Compbatt - ok
10:20:34.0372 6024  COMSysApp - ok
10:20:34.0419 6024  [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
10:20:34.0419 6024  crcdisk - ok
10:20:34.0497 6024  [ CA78B312C44E4D52E842C2C8BD48E452 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
10:20:34.0497 6024  CryptSvc - ok
10:20:34.0544 6024  [ 44417CDF82B9CE83C947B922A23BD44B ] CT20XUT.DLL     C:\Windows\system32\CT20XUT.DLL
10:20:34.0544 6024  CT20XUT.DLL - ok
10:20:34.0590 6024  [ 215A7353585B0C8ED2763F8CCBFB8836 ] ctac32k         C:\Windows\system32\drivers\ctac32k.sys
10:20:34.0590 6024  ctac32k - ok
10:20:34.0653 6024  [ F01EAE063447AD5DA3BC73ED1B65AB88 ] ctaud2k         C:\Windows\system32\drivers\ctaud2k.sys
10:20:34.0684 6024  ctaud2k - ok
10:20:34.0715 6024  [ 0DF336A3117EAD1A9A7A303075116AE2 ] CTAUDFX.DLL     C:\Windows\system32\CTAUDFX.DLL
10:20:34.0715 6024  CTAUDFX.DLL - ok
10:20:34.0746 6024  [ 1DF7C82BB24EC7E69C2B82852C802CD7 ] CTEAPSFX.DLL    C:\Windows\system32\CTEAPSFX.DLL
10:20:34.0746 6024  CTEAPSFX.DLL - ok
10:20:34.0778 6024  [ F6C2CA02C5C608C56F0D67ACC73C875C ] CTEDSPFX.DLL    C:\Windows\system32\CTEDSPFX.DLL
10:20:34.0793 6024  CTEDSPFX.DLL - ok
10:20:34.0840 6024  [ 009A4EF4CD1FBDB2C785DFF1F9FB4294 ] CTEDSPIO.DLL    C:\Windows\system32\CTEDSPIO.DLL
10:20:34.0856 6024  CTEDSPIO.DLL - ok
10:20:34.0871 6024  [ 7C0A65D1CD442AB7EB909037B1FA5B37 ] CTEDSPSY.DLL    C:\Windows\system32\CTEDSPSY.DLL
10:20:34.0887 6024  CTEDSPSY.DLL - ok
10:20:34.0902 6024  [ A259FADC93FDE8A5032CFD9102F44F31 ] CTERFXFX.DLL    C:\Windows\system32\CTERFXFX.DLL
10:20:34.0902 6024  CTERFXFX.DLL - ok
10:20:34.0949 6024  [ 2268598627AD53313F544151A86D6E21 ] CTEXFIFX.DLL    C:\Windows\system32\CTEXFIFX.DLL
10:20:34.0996 6024  CTEXFIFX.DLL - ok
10:20:35.0058 6024  [ 80FA6CB0D105CBC0869A25B05ED3C2BE ] ctgame          C:\Windows\system32\DRIVERS\ctgame.sys
10:20:35.0058 6024  ctgame - ok
10:20:35.0105 6024  [ D7080BE7FB0351F8A5D589197DA084F9 ] CTHWIUT.DLL     C:\Windows\system32\CTHWIUT.DLL
10:20:35.0105 6024  CTHWIUT.DLL - ok
10:20:35.0152 6024  [ 3BD156AB70BA840FD36A536E3779442A ] ctprxy2k        C:\Windows\system32\drivers\ctprxy2k.sys
10:20:35.0152 6024  ctprxy2k - ok
10:20:35.0183 6024  [ 1025A95DB5A2F3F8FE3BDDDDECDE1CF8 ] CTSBLFX.DLL     C:\Windows\system32\CTSBLFX.DLL
10:20:35.0183 6024  CTSBLFX.DLL - ok
10:20:35.0199 6024  [ 84B7D52FA17517783A03C59B3ACDBC46 ] ctsfm2k         C:\Windows\system32\drivers\ctsfm2k.sys
10:20:35.0199 6024  ctsfm2k - ok
10:20:35.0246 6024  [ BA8E5B2291C01EF71CA80E25F0C79D55 ] ctxusbm         C:\Windows\system32\DRIVERS\ctxusbm.sys
10:20:35.0246 6024  ctxusbm - ok
10:20:35.0324 6024  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch      C:\Windows\system32\rpcss.dll
10:20:35.0339 6024  DcomLaunch - ok
10:20:35.0370 6024  [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
10:20:35.0386 6024  DfsC - ok
10:20:35.0760 6024  [ C647F468F7DE343DF8C143655C5557D4 ] DFSR            C:\Windows\system32\DFSR.exe
10:20:35.0901 6024  DFSR - ok
10:20:35.0979 6024  [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp            C:\Windows\System32\dhcpcsvc.dll
10:20:35.0979 6024  Dhcp - ok
10:20:36.0010 6024  [ B0107E40ECDB5FA692EBF832F295D905 ] disk            C:\Windows\system32\drivers\disk.sys
10:20:36.0026 6024  disk - ok
10:20:36.0119 6024  [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
10:20:36.0135 6024  Dnscache - ok
10:20:36.0197 6024  [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc         C:\Windows\System32\dot3svc.dll
10:20:36.0213 6024  dot3svc - ok
10:20:36.0228 6024  [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS             C:\Windows\system32\dps.dll
10:20:36.0228 6024  DPS - ok
10:20:36.0275 6024  [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
10:20:36.0275 6024  drmkaud - ok
10:20:36.0369 6024  [ B8E554E502D5123BC111F99D6A2181B4 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
10:20:36.0384 6024  DXGKrnl - ok
10:20:36.0416 6024  [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60           C:\Windows\system32\DRIVERS\E1G6032E.sys
10:20:36.0416 6024  E1G60 - ok
10:20:36.0447 6024  [ C2303883FD9BE49DC36A6400643002EA ] EapHost         C:\Windows\System32\eapsvc.dll
10:20:36.0462 6024  EapHost - ok
10:20:36.0525 6024  [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache          C:\Windows\system32\drivers\ecache.sys
10:20:36.0525 6024  Ecache - ok
10:20:36.0572 6024  [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
10:20:36.0587 6024  ehRecvr - ok
10:20:36.0603 6024  [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched         C:\Windows\ehome\ehsched.exe
10:20:36.0603 6024  ehSched - ok
10:20:36.0618 6024  [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart         C:\Windows\ehome\ehstart.dll
10:20:36.0634 6024  ehstart - ok
10:20:36.0712 6024  [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
10:20:36.0743 6024  elxstor - ok
10:20:36.0837 6024  [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt         C:\Windows\system32\emdmgmt.dll
10:20:36.0852 6024  EMDMgmt - ok
10:20:36.0884 6024  [ 9B6066B384187F51F67814E42170ED44 ] emupia          C:\Windows\system32\drivers\emupia2k.sys
10:20:36.0884 6024  emupia - ok
10:20:36.0899 6024  [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev          C:\Windows\system32\drivers\errdev.sys
10:20:36.0915 6024  ErrDev - ok
10:20:36.0946 6024  [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem     C:\Windows\system32\es.dll
10:20:36.0962 6024  EventSystem - ok
10:20:36.0993 6024  [ 486844F47B6636044A42454614ED4523 ] exfat           C:\Windows\system32\drivers\exfat.sys
10:20:37.0008 6024  exfat - ok
10:20:37.0055 6024  [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
10:20:37.0071 6024  fastfat - ok
10:20:37.0102 6024  [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
10:20:37.0102 6024  fdc - ok
10:20:37.0118 6024  [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost         C:\Windows\system32\fdPHost.dll
10:20:37.0133 6024  fdPHost - ok
10:20:37.0133 6024  [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub        C:\Windows\system32\fdrespub.dll
10:20:37.0149 6024  FDResPub - ok
10:20:37.0149 6024  [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
10:20:37.0164 6024  FileInfo - ok
10:20:37.0180 6024  [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
10:20:37.0180 6024  Filetrace - ok
10:20:37.0196 6024  [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
10:20:37.0211 6024  flpydisk - ok
10:20:37.0258 6024  [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
10:20:37.0258 6024  FltMgr - ok
10:20:37.0352 6024  [ BE1C5BD1CA7ED015BC6FA1AE67E592C8 ] FontCache       C:\Windows\system32\FntCache.dll
10:20:37.0352 6024  FontCache - ok
10:20:37.0430 6024  [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
10:20:37.0445 6024  FontCache3.0.0.0 - ok
10:20:37.0492 6024  [ 07DA62C960DDCCC2D35836AEAB4FC578 ] fssfltr         C:\Windows\system32\DRIVERS\fssfltr.sys
10:20:37.0508 6024  fssfltr - ok
10:20:37.0773 6024  [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
10:20:37.0866 6024  fsssvc - ok
10:20:37.0913 6024  [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
10:20:37.0913 6024  Fs_Rec - ok
10:20:37.0944 6024  [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
10:20:37.0960 6024  gagp30kx - ok
10:20:37.0991 6024  [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
10:20:37.0991 6024  GEARAspiWDM - ok
10:20:38.0038 6024  [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc           C:\Windows\System32\gpsvc.dll
10:20:38.0054 6024  gpsvc - ok
10:20:38.0132 6024  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
10:20:38.0132 6024  gupdate - ok
10:20:38.0163 6024  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
10:20:38.0178 6024  gupdatem - ok
10:20:38.0272 6024  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
10:20:38.0288 6024  gusvc - ok
10:20:38.0350 6024  [ D0CC0F0576547AAACEB3D99D94A17E3A ] ha10kx2k        C:\Windows\system32\drivers\ha10kx2k.sys
10:20:38.0350 6024  ha10kx2k - ok
10:20:38.0397 6024  [ CE5379007F203B1208D21B58E17E331F ] hap16v2k        C:\Windows\system32\drivers\hap16v2k.sys
10:20:38.0397 6024  hap16v2k - ok
10:20:38.0475 6024  [ 673B33D281D6610E95588DBD5DF999E6 ] hap17v2k        C:\Windows\system32\drivers\hap17v2k.sys
10:20:38.0490 6024  hap17v2k - ok
10:20:38.0522 6024  [ 68E732382B32417FF61FD663259B4B09 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:20:38.0522 6024  HdAudAddService - ok
10:20:38.0568 6024  [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
10:20:38.0600 6024  HDAudBus - ok
10:20:38.0615 6024  [ B4881C84A180E75B8C25DC1D726C375F ] HidBth          C:\Windows\system32\drivers\hidbth.sys
10:20:38.0615 6024  HidBth - ok
10:20:38.0631 6024  [ 4E77A77E2C986E8F88F996BB3E1AD829 ] HidIr           C:\Windows\system32\drivers\hidir.sys
10:20:38.0631 6024  HidIr - ok
10:20:38.0678 6024  [ 59361D38A297755D46A540E450202B2A ] hidserv         C:\Windows\system32\hidserv.dll
10:20:38.0678 6024  hidserv - ok
10:20:38.0724 6024  [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
10:20:38.0724 6024  HidUsb - ok
10:20:38.0756 6024  [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc          C:\Windows\system32\kmsvc.dll
10:20:38.0756 6024  hkmsvc - ok
10:20:38.0787 6024  [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys
10:20:38.0787 6024  HpCISSs - ok
10:20:38.0818 6024  [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
10:20:38.0849 6024  HTTP - ok
10:20:38.0849 6024  [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp           C:\Windows\system32\drivers\i2omp.sys
10:20:38.0849 6024  i2omp - ok
10:20:38.0896 6024  [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
10:20:38.0912 6024  i8042prt - ok
10:20:38.0927 6024  [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys
10:20:38.0927 6024  iaStorV - ok
10:20:39.0036 6024  [ DAF66902F08796F9C694901660E5A64A ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
10:20:39.0036 6024  IDriverT - ok
10:20:39.0130 6024  [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
10:20:39.0146 6024  idsvc - ok
10:20:39.0161 6024  [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
10:20:39.0177 6024  iirsp - ok
10:20:39.0239 6024  [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT          C:\Windows\System32\ikeext.dll
10:20:39.0239 6024  IKEEXT - ok
10:20:39.0255 6024  [ DF797A12176F11B2D301C5B234BB200E ] intelide        C:\Windows\system32\drivers\intelide.sys
10:20:39.0255 6024  intelide - ok
10:20:39.0270 6024  [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
10:20:39.0270 6024  intelppm - ok
10:20:39.0302 6024  [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
10:20:39.0317 6024  IPBusEnum - ok
10:20:39.0348 6024  [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:20:39.0364 6024  IpFilterDriver - ok
10:20:39.0395 6024  [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
10:20:39.0395 6024  iphlpsvc - ok
10:20:39.0395 6024  IpInIp - ok
10:20:39.0426 6024  [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys
10:20:39.0442 6024  IPMIDRV - ok
10:20:39.0458 6024  [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys
10:20:39.0458 6024  IPNAT - ok
10:20:39.0520 6024  [ 44886233135241F3990724082EB104EE ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
10:20:39.0536 6024  iPod Service - ok
10:20:39.0582 6024  [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
10:20:39.0598 6024  IRENUM - ok
10:20:39.0614 6024  [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
10:20:39.0614 6024  isapnp - ok
10:20:39.0645 6024  [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys
10:20:39.0645 6024  iScsiPrt - ok
10:20:39.0692 6024  [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys
10:20:39.0692 6024  iteatapi - ok
10:20:39.0723 6024  [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid         C:\Windows\system32\drivers\iteraid.sys
10:20:39.0723 6024  iteraid - ok
10:20:39.0754 6024  [ 423696F3BA6472DD17699209B933BC26 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
10:20:39.0754 6024  kbdclass - ok
10:20:39.0770 6024  [ DBDF75D51464FBC47D0104EC3D572C05 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
10:20:39.0770 6024  kbdhid - ok
10:20:39.0832 6024  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso          C:\Windows\system32\lsass.exe
10:20:39.0832 6024  KeyIso - ok
10:20:39.0894 6024  [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
10:20:39.0910 6024  KSecDD - ok
10:20:39.0972 6024  [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
10:20:39.0972 6024  ksthunk - ok
10:20:40.0019 6024  [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm           C:\Windows\system32\msdtckrm.dll
10:20:40.0019 6024  KtmRm - ok
10:20:40.0066 6024  [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer    C:\Windows\system32\srvsvc.dll
10:20:40.0066 6024  LanmanServer - ok
10:20:40.0128 6024  [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:20:40.0144 6024  LanmanWorkstation - ok
10:20:40.0160 6024  Lbd - ok
10:20:40.0253 6024  [ 53710476495886D9961BE46983A6A33F ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
10:20:40.0253 6024  LightScribeService - ok
10:20:40.0269 6024  [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
10:20:40.0269 6024  lltdio - ok
10:20:40.0316 6024  [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
10:20:40.0331 6024  lltdsvc - ok
10:20:40.0362 6024  [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts         C:\Windows\System32\lmhsvc.dll
10:20:40.0362 6024  lmhosts - ok
10:20:40.0394 6024  [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
10:20:40.0409 6024  LSI_FC - ok
10:20:40.0425 6024  [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
10:20:40.0425 6024  LSI_SAS - ok
10:20:40.0456 6024  [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
10:20:40.0456 6024  LSI_SCSI - ok
10:20:40.0456 6024  [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv           C:\Windows\system32\drivers\luafv.sys
10:20:40.0472 6024  luafv - ok
10:20:40.0518 6024  [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
10:20:40.0534 6024  Mcx2Svc - ok
10:20:40.0596 6024  [ 11F714F85530A2BD134074DC30E99FCA ] MDM             C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
10:20:40.0596 6024  MDM - ok
10:20:40.0628 6024  [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas         C:\Windows\system32\drivers\megasas.sys
10:20:40.0628 6024  megasas - ok
10:20:40.0674 6024  [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR          C:\Windows\system32\drivers\megasr.sys
10:20:40.0690 6024  MegaSR - ok
10:20:40.0721 6024  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS           C:\Windows\system32\mmcss.dll
10:20:40.0721 6024  MMCSS - ok
10:20:40.0737 6024  [ 59848D5CC74606F0EE7557983BB73C2E ] Modem           C:\Windows\system32\drivers\modem.sys
10:20:40.0768 6024  Modem - ok
10:20:40.0784 6024  [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
10:20:40.0799 6024  monitor - ok
10:20:40.0799 6024  [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
10:20:40.0799 6024  mouclass - ok
10:20:40.0815 6024  [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
10:20:40.0815 6024  mouhid - ok
10:20:40.0830 6024  [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys
10:20:40.0830 6024  MountMgr - ok
10:20:40.0955 6024  [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
10:20:41.0002 6024  MozillaMaintenance - ok
10:20:41.0080 6024  [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys
10:20:41.0096 6024  MpFilter - ok
10:20:41.0127 6024  [ F8276EB8698142884498A528DFEA8478 ] mpio            C:\Windows\system32\drivers\mpio.sys
10:20:41.0127 6024  mpio - ok
10:20:41.0142 6024  [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
10:20:41.0158 6024  mpsdrv - ok
10:20:41.0236 6024  [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc          C:\Windows\system32\mpssvc.dll
10:20:41.0236 6024  MpsSvc - ok
10:20:41.0267 6024  [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys
10:20:41.0283 6024  Mraid35x - ok
10:20:41.0330 6024  [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
10:20:41.0330 6024  MRxDAV - ok
10:20:41.0376 6024  [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
10:20:41.0392 6024  mrxsmb - ok
10:20:41.0408 6024  [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:20:41.0423 6024  mrxsmb10 - ok
10:20:41.0439 6024  [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:20:41.0439 6024  mrxsmb20 - ok
10:20:41.0470 6024  [ 1AC860612B85D8E85EE257D372E39F4D ] msahci          C:\Windows\system32\drivers\msahci.sys
10:20:41.0470 6024  msahci - ok
10:20:41.0517 6024  [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
10:20:41.0517 6024  msdsm - ok
10:20:41.0564 6024  [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC           C:\Windows\System32\msdtc.exe
10:20:41.0579 6024  MSDTC - ok
10:20:41.0595 6024  [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs            C:\Windows\system32\drivers\Msfs.sys
10:20:41.0595 6024  Msfs - ok
10:20:41.0610 6024  [ 00EBC952961664780D43DCA157E79B27 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
10:20:41.0626 6024  msisadrv - ok
10:20:41.0657 6024  [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
10:20:41.0657 6024  MSiSCSI - ok
10:20:41.0657 6024  msiserver - ok
10:20:41.0688 6024  [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
10:20:41.0704 6024  MSKSSRV - ok
10:20:41.0798 6024  [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc         c:\Program Files\Microsoft Security Client\MsMpEng.exe
10:20:41.0798 6024  MsMpSvc - ok
10:20:41.0813 6024  [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
10:20:41.0813 6024  MSPCLOCK - ok
10:20:41.0813 6024  [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
10:20:41.0829 6024  MSPQM - ok
10:20:41.0876 6024  [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
10:20:41.0876 6024  MsRPC - ok
10:20:41.0907 6024  [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
10:20:41.0907 6024  mssmbios - ok
10:20:41.0922 6024  [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
10:20:41.0922 6024  MSTEE - ok
10:20:41.0969 6024  [ 6936198F2CC25B39CF5262436C80DF46 ] MTsensor        C:\Windows\system32\DRIVERS\ASACPI.sys
10:20:41.0969 6024  MTsensor - ok
10:20:41.0985 6024  [ 0CC49F78D8ACA0877D885F149084E543 ] Mup             C:\Windows\system32\Drivers\mup.sys
10:20:41.0985 6024  Mup - ok
10:20:42.0032 6024  [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent        C:\Windows\system32\qagentRT.dll
10:20:42.0047 6024  napagent - ok
10:20:42.0125 6024  [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
10:20:42.0141 6024  NativeWifiP - ok
10:20:42.0250 6024  [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS            C:\Windows\system32\drivers\ndis.sys
10:20:42.0250 6024  NDIS - ok
10:20:42.0266 6024  [ 64DF698A425478E321981431AC171334 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
10:20:42.0281 6024  NdisTapi - ok
10:20:42.0297 6024  [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
10:20:42.0297 6024  Ndisuio - ok
10:20:42.0312 6024  [ F8158771905260982CE724076419EF19 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
10:20:42.0312 6024  NdisWan - ok
10:20:42.0375 6024  [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
10:20:42.0375 6024  NDProxy - ok
10:20:42.0406 6024  Nero BackItUp Scheduler 4.0 - ok
10:20:42.0406 6024  [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
10:20:42.0422 6024  NetBIOS - ok
10:20:42.0468 6024  [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys
10:20:42.0484 6024  netbt - ok
10:20:42.0500 6024  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon        C:\Windows\system32\lsass.exe
10:20:42.0500 6024  Netlogon - ok
10:20:42.0515 6024  [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman          C:\Windows\System32\netman.dll
10:20:42.0531 6024  Netman - ok
10:20:42.0546 6024  [ 7846D0136CC2B264926A73047BA7688A ] netprofm        C:\Windows\System32\netprofm.dll
10:20:42.0546 6024  netprofm - ok
10:20:42.0593 6024  [ 74751DDA198165947FD7454D83F49825 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
10:20:42.0609 6024  NetTcpPortSharing - ok
10:20:42.0624 6024  [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
10:20:42.0624 6024  nfrd960 - ok
10:20:42.0671 6024  [ 162100E0BC8377710F9D170631921C03 ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys
10:20:42.0687 6024  NisDrv - ok
10:20:42.0765 6024  [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv          c:\Program Files\Microsoft Security Client\NisSrv.exe
10:20:42.0765 6024  NisSrv - ok
10:20:42.0812 6024  [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc          C:\Windows\System32\nlasvc.dll
10:20:42.0812 6024  NlaSvc - ok
10:20:42.0968 6024  [ CB992AE1506985D9167E85883B4C3240 ] NMIndexingService C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
10:20:42.0983 6024  NMIndexingService - ok
10:20:43.0030 6024  [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
10:20:43.0046 6024  Npfs - ok
10:20:43.0061 6024  [ ACB62BAA1C319B17752553DF3026EEEB ] nsi             C:\Windows\system32\nsisvc.dll
10:20:43.0061 6024  nsi - ok
10:20:43.0077 6024  [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
10:20:43.0077 6024  nsiproxy - ok
10:20:43.0202 6024  [ BAC869DFB98E499BA4D9BB1FB43270E1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
10:20:43.0233 6024  Ntfs - ok
10:20:43.0373 6024  [ 07953351A3424BAA50FC5C4A1434FB04 ] NTI BackupNowEZSvr C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZSvr.exe
10:20:43.0436 6024  NTI BackupNowEZSvr - ok
10:20:43.0498 6024  [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr         C:\Windows\system32\drivers\NTIDrvr.sys
10:20:43.0514 6024  NTIDrvr - ok
10:20:43.0529 6024  [ DD5D684975352B85B52E3FD5347C20CB ] Null            C:\Windows\system32\drivers\Null.sys
10:20:43.0545 6024  Null - ok
10:20:43.0982 6024  [ 5104BAC2DA2A5BDD86AC6B0708B00F06 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
10:20:44.0278 6024  nvlddmkm - ok
10:20:44.0309 6024  [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
10:20:44.0340 6024  nvraid - ok
10:20:44.0356 6024  [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor          C:\Windows\system32\drivers\nvstor.sys
10:20:44.0356 6024  nvstor - ok
10:20:44.0403 6024  [ DDFAFCE89A5C93D04712B86F94E9FCBA ] nvsvc           C:\Windows\system32\nvvsvc.exe
10:20:44.0418 6024  nvsvc - ok
10:20:44.0652 6024  [ 84E035225474E48CD3A6A3CE52332095 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
10:20:44.0715 6024  nvUpdatusService - ok
10:20:44.0746 6024  [ 19067CA93075EF4823E3938A686F532F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
10:20:44.0777 6024  nv_agp - ok
10:20:44.0777 6024  NwlnkFlt - ok
10:20:44.0777 6024  NwlnkFwd - ok
10:20:44.0808 6024  [ B5B1CE65AC15BBD11C0619E3EF7CFC28 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys
10:20:44.0808 6024  ohci1394 - ok
10:20:44.0840 6024  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:20:44.0855 6024  ose - ok
10:20:45.0167 6024  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
10:20:45.0198 6024  osppsvc - ok
10:20:45.0276 6024  [ 1C8B0BD2D83BF563348B6DFDC1D21C74 ] ossrv           C:\Windows\system32\drivers\ctoss2k.sys
10:20:45.0276 6024  ossrv - ok
10:20:45.0370 6024  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc        C:\Windows\system32\p2psvc.dll
10:20:45.0401 6024  p2pimsvc - ok
10:20:45.0417 6024  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc          C:\Windows\system32\p2psvc.dll
10:20:45.0417 6024  p2psvc - ok
10:20:45.0464 6024  [ AECD57F94C887F58919F307C35498EA0 ] Parport         C:\Windows\system32\drivers\parport.sys
10:20:45.0479 6024  Parport - ok
10:20:45.0526 6024  [ B43751085E2ABE389DA466BC62A4B987 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
10:20:45.0526 6024  partmgr - ok
10:20:45.0557 6024  [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc          C:\Windows\System32\pcasvc.dll
10:20:45.0557 6024  PcaSvc - ok
10:20:45.0588 6024  [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci             C:\Windows\system32\drivers\pci.sys
10:20:45.0604 6024  pci - ok
10:20:45.0635 6024  [ 2657F6C0B78C36D95034BE109336E382 ] pciide          C:\Windows\system32\drivers\pciide.sys
10:20:45.0635 6024  pciide - ok
10:20:45.0651 6024  [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
10:20:45.0682 6024  pcmcia - ok
10:20:45.0698 6024  [ 58865916F53592A61549B04941BFD80D ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
10:20:45.0729 6024  PEAUTH - ok
10:20:45.0791 6024  [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
10:20:45.0807 6024  PerfHost - ok
10:20:45.0838 6024  [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla             C:\Windows\system32\pla.dll
10:20:45.0885 6024  pla - ok
10:20:45.0963 6024  [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
10:20:45.0978 6024  PlugPlay - ok
10:20:46.0010 6024  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll
10:20:46.0010 6024  PNRPAutoReg - ok
10:20:46.0041 6024  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc         C:\Windows\system32\p2psvc.dll
10:20:46.0041 6024  PNRPsvc - ok
10:20:46.0150 6024  [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
10:20:46.0166 6024  PolicyAgent - ok
10:20:46.0212 6024  [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
10:20:46.0212 6024  PptpMiniport - ok
10:20:46.0244 6024  [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor       C:\Windows\system32\drivers\processr.sys
10:20:46.0244 6024  Processor - ok
10:20:46.0322 6024  [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc         C:\Windows\system32\profsvc.dll
10:20:46.0322 6024  ProfSvc - ok
10:20:46.0353 6024  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe
10:20:46.0353 6024  ProtectedStorage - ok
10:20:46.0415 6024  [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched          C:\Windows\system32\DRIVERS\pacer.sys
10:20:46.0431 6024  PSched - ok
10:20:46.0478 6024  [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300          C:\Windows\system32\drivers\ql2300.sys
10:20:46.0509 6024  ql2300 - ok
10:20:46.0524 6024  [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
10:20:46.0540 6024  ql40xx - ok
10:20:46.0571 6024  [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE           C:\Windows\system32\qwave.dll
10:20:46.0571 6024  QWAVE - ok
10:20:46.0587 6024  [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
10:20:46.0587 6024  QWAVEdrv - ok
10:20:46.0587 6024  [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
10:20:46.0587 6024  RasAcd - ok
10:20:46.0618 6024  [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto         C:\Windows\System32\rasauto.dll
10:20:46.0618 6024  RasAuto - ok
10:20:46.0665 6024  [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
10:20:46.0665 6024  Rasl2tp - ok
10:20:46.0696 6024  [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan          C:\Windows\System32\rasmans.dll
10:20:46.0696 6024  RasMan - ok
10:20:46.0743 6024  [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
10:20:46.0774 6024  RasPppoe - ok
10:20:46.0805 6024  [ C6A593B51F34C33E5474539544072527 ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
10:20:46.0821 6024  RasSstp - ok
10:20:46.0899 6024  [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
10:20:46.0899 6024  rdbss - ok
10:20:46.0914 6024  [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
10:20:46.0914 6024  RDPCDD - ok
10:20:46.0946 6024  [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys
10:20:46.0961 6024  rdpdr - ok
10:20:46.0961 6024  [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
10:20:46.0961 6024  RDPENCDD - ok
10:20:47.0055 6024  [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
10:20:47.0070 6024  RDPWD - ok
10:20:47.0102 6024  [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess    C:\Windows\System32\mprdim.dll
10:20:47.0117 6024  RemoteAccess - ok
10:20:47.0180 6024  [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
10:20:47.0180 6024  RemoteRegistry - ok
10:20:47.0242 6024  [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator      C:\Windows\system32\locator.exe
10:20:47.0258 6024  RpcLocator - ok
10:20:47.0304 6024  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs           C:\Windows\system32\rpcss.dll
10:20:47.0320 6024  RpcSs - ok
10:20:47.0382 6024  [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
10:20:47.0398 6024  rspndr - ok
10:20:47.0429 6024  [ 1C546EA56A06B773A52EE48E0205072D ] RTL8187         C:\Windows\system32\DRIVERS\RTL8187.sys
10:20:47.0445 6024  RTL8187 - ok
10:20:47.0445 6024  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs           C:\Windows\system32\lsass.exe
10:20:47.0445 6024  SamSs - ok
10:20:47.0850 6024  [ C7D53053541A448FEBB1373ABBAF79EF ] SBAMSvc         C:\Program Files (x86)\Ad-Aware Antivirus\Engine\SBAMSvc.exe
10:20:47.0866 6024  SBAMSvc - ok
10:20:47.0928 6024  [ DB7F9394B2F2D446DF14D46C61B0E94B ] sbapifs         C:\Windows\system32\DRIVERS\sbapifs.sys
10:20:47.0928 6024  sbapifs - ok
10:20:47.0975 6024  [ CDB954C736D51DC5FA712C039AF4F683 ] SbFw            C:\Windows\system32\drivers\SbFw.sys
10:20:47.0975 6024  SbFw - ok
10:20:48.0006 6024  [ 5DE22E3CB6140213DA2E0599B08D525C ] SBFWIMCL        C:\Windows\system32\DRIVERS\sbfwim.sys
10:20:48.0006 6024  SBFWIMCL - ok
10:20:48.0006 6024  [ 5DE22E3CB6140213DA2E0599B08D525C ] SBFWIMCLMP      C:\Windows\system32\DRIVERS\SBFWIM.sys
10:20:48.0006 6024  SBFWIMCLMP - ok
10:20:48.0116 6024  [ A5BC45F8C2F30350E7566799C86B2F5D ] sbhips          C:\Windows\system32\drivers\sbhips.sys
10:20:48.0131 6024  sbhips - ok
10:20:48.0147 6024  [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
10:20:48.0147 6024  sbp2port - ok
10:20:48.0178 6024  [ FD833BEE2FD9BEFDC0AFD1941A306D9E ] SBRE            C:\Windows\system32\drivers\SBREdrv.sys
10:20:48.0178 6024  SBRE - ok
10:20:48.0209 6024  [ F9955774A6BF0A5CA696F591C7B80A79 ] SbTis           C:\Windows\system32\drivers\sbtis.sys
10:20:48.0209 6024  SbTis - ok
10:20:48.0287 6024  [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr        C:\Windows\System32\SCardSvr.dll
10:20:48.0303 6024  SCardSvr - ok
10:20:48.0334 6024  [ 0F838C811AD295D2A4489B9993096C63 ] Schedule        C:\Windows\system32\schedsvc.dll
10:20:48.0350 6024  Schedule - ok
10:20:48.0396 6024  [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc     C:\Windows\System32\certprop.dll
10:20:48.0396 6024  SCPolicySvc - ok
10:20:48.0428 6024  [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
10:20:48.0443 6024  SDRSVC - ok
10:20:48.0490 6024  [ 16A252022535B680046F6E34E136D378 ] SeaPort         C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
10:20:48.0490 6024  SeaPort - ok
10:20:48.0506 6024  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
10:20:48.0506 6024  secdrv - ok
10:20:48.0521 6024  [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon        C:\Windows\system32\seclogon.dll
10:20:48.0521 6024  seclogon - ok
10:20:48.0537 6024  [ 90973A64B96CD647FF81C79443618EED ] SENS            C:\Windows\System32\sens.dll
10:20:48.0537 6024  SENS - ok
10:20:48.0568 6024  [ 2449316316411D65BD2C761A6FFB2CE2 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
10:20:48.0584 6024  Serenum - ok
10:20:48.0599 6024  [ 4B438170BE2FC8E0BD35EE87A960F84F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
10:20:48.0599 6024  Serial - ok
10:20:48.0630 6024  [ A842F04833684BCEEA7336211BE478DF ] sermouse        C:\Windows\system32\drivers\sermouse.sys
10:20:48.0630 6024  sermouse - ok
10:20:48.0646 6024  [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv      C:\Windows\system32\sessenv.dll
10:20:48.0662 6024  SessionEnv - ok
10:20:48.0677 6024  [ 14D4B4465193A87C127933978E8C4106 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
10:20:48.0677 6024  sffdisk - ok
10:20:48.0693 6024  [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
10:20:48.0693 6024  sffp_mmc - ok
10:20:48.0708 6024  [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
10:20:48.0708 6024  sffp_sd - ok
10:20:48.0724 6024  [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
10:20:48.0724 6024  sfloppy - ok
10:20:48.0740 6024  [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
10:20:48.0755 6024  SharedAccess - ok
10:20:48.0818 6024  [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:20:48.0818 6024  ShellHWDetection - ok
10:20:48.0864 6024  [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys
10:20:48.0880 6024  SiSRaid2 - ok
10:20:48.0911 6024  [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
10:20:48.0911 6024  SiSRaid4 - ok
10:20:49.0161 6024  [ 23E3C83DFF7B09A97B01A85ED8A44478 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
10:20:49.0176 6024  Skype C2C Service - ok
10:20:49.0301 6024  [ C44DA62FBCAE62803EA95600FC263065 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
10:20:49.0301 6024  SkypeUpdate - ok
10:20:49.0379 6024  [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc           C:\Windows\system32\SLsvc.exe
10:20:49.0395 6024  slsvc - ok
10:20:49.0457 6024  [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify      C:\Windows\system32\SLUINotify.dll
10:20:49.0457 6024  SLUINotify - ok
10:20:49.0488 6024  [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
10:20:49.0488 6024  Smb - ok
10:20:49.0520 6024  [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
10:20:49.0535 6024  SNMPTRAP - ok
10:20:49.0566 6024  [ 386C3C63F00A7040C7EC5E384217E89D ] spldr           C:\Windows\system32\drivers\spldr.sys
10:20:49.0566 6024  spldr - ok
10:20:49.0598 6024  [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler         C:\Windows\System32\spoolsv.exe
10:20:49.0598 6024  Spooler - ok
10:20:49.0660 6024  [ 880A57FCCB571EBD063D4DD50E93E46D ] srv             C:\Windows\system32\DRIVERS\srv.sys
10:20:49.0660 6024  srv - ok
10:20:49.0722 6024  [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
10:20:49.0722 6024  srv2 - ok
10:20:49.0769 6024  [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
10:20:49.0769 6024  srvnet - ok
10:20:49.0800 6024  [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
10:20:49.0800 6024  SSDPSRV - ok
10:20:49.0832 6024  [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc         C:\Windows\system32\sstpsvc.dll
10:20:49.0832 6024  SstpSvc - ok
10:20:49.0878 6024  [ F0359F7CE712D69ACEF0886BDB4792ED ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
10:20:49.0878 6024  Stereo Service - ok
10:20:49.0941 6024  [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc          C:\Windows\System32\wiaservc.dll
10:20:49.0941 6024  stisvc - ok
10:20:49.0972 6024  [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
10:20:49.0972 6024  swenum - ok
10:20:50.0066 6024  [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv           C:\Windows\System32\swprv.dll
10:20:50.0066 6024  swprv - ok
10:20:50.0097 6024  [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys
10:20:50.0112 6024  Symc8xx - ok
10:20:50.0128 6024  [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys
10:20:50.0128 6024  Sym_hi - ok
10:20:50.0159 6024  [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys
10:20:50.0159 6024  Sym_u3 - ok
10:20:50.0222 6024  [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain         C:\Windows\system32\sysmain.dll
10:20:50.0222 6024  SysMain - ok
10:20:50.0237 6024  [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll
10:20:50.0237 6024  TabletInputService - ok
10:20:50.0300 6024  [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv         C:\Windows\System32\tapisrv.dll
10:20:50.0300 6024  TapiSrv - ok
10:20:50.0331 6024  [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS             C:\Windows\System32\tbssvc.dll
10:20:50.0331 6024  TBS - ok
10:20:50.0471 6024  [ 2860D16C5021F72130212DDB1C53018F ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
10:20:50.0487 6024  Tcpip - ok
10:20:50.0518 6024  [ 2860D16C5021F72130212DDB1C53018F ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys
10:20:50.0534 6024  Tcpip6 - ok
10:20:50.0580 6024  [ EFC6BE643B476118EC726D35A821B2A9 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
10:20:50.0612 6024  tcpipreg - ok
10:20:50.0627 6024  [ 1D8BF4AAA5FB7A2761475781DC1195BC ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
10:20:50.0627 6024  TDPIPE - ok
10:20:50.0643 6024  [ 7F7E00CDF609DF657F4CDA02DD1C9BB1 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
10:20:50.0643 6024  TDTCP - ok
10:20:50.0690 6024  [ 458919C8C42E398DC4802178D5FFEE27 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
10:20:50.0690 6024  tdx - ok
10:20:50.0721 6024  [ 8C19678D22649EC002EF2282EAE92F98 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
10:20:50.0736 6024  TermDD - ok
10:20:50.0846 6024  [ 5CDD30BC217082DAC71A9878D9BFD566 ] TermService     C:\Windows\System32\termsrv.dll
10:20:50.0861 6024  TermService - ok
10:20:50.0892 6024  [ 56793271ECDEDD350C5ADD305603E963 ] Themes          C:\Windows\system32\shsvcs.dll
10:20:50.0892 6024  Themes - ok
10:20:50.0908 6024  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] THREADORDER     C:\Windows\system32\mmcss.dll
10:20:50.0908 6024  THREADORDER - ok
10:20:50.0924 6024  [ F4689F05AF472A651A7B1B7B02D200E7 ] TrkWks          C:\Windows\System32\trkwks.dll
10:20:50.0924 6024  TrkWks - ok
10:20:51.0002 6024  [ 66328B08EF5A9305D8EDE36B93930369 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:20:51.0017 6024  TrustedInstaller - ok
10:20:51.0033 6024  [ 9E5409CD17C8BEF193AAD498F3BC2CB8 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
10:20:51.0033 6024  tssecsrv - ok
10:20:51.0048 6024  [ 89EC74A9E602D16A75A4170511029B3C ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys
10:20:51.0048 6024  tunmp - ok
10:20:51.0080 6024  [ 30A9B3F45AD081BFFC3BCAA9C812B609 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
10:20:51.0080 6024  tunnel - ok
10:20:51.0095 6024  [ FEC266EF401966311744BD0F359F7F56 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
10:20:51.0095 6024  uagp35 - ok
10:20:51.0111 6024  [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper        C:\Windows\system32\drivers\UBHelper.sys
10:20:51.0126 6024  UBHelper - ok
10:20:51.0158 6024  [ FAF2640A2A76ED03D449E443194C4C34 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
10:20:51.0173 6024  udfs - ok
10:20:51.0173 6024  [ 060507C4113391394478F6953A79EEDC ] UI0Detect       C:\Windows\system32\UI0Detect.exe
10:20:51.0189 6024  UI0Detect - ok
10:20:51.0204 6024  [ 4EC9447AC3AB462647F60E547208CA00 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
10:20:51.0220 6024  uliagpkx - ok
10:20:51.0236 6024  [ 697F0446134CDC8F99E69306184FBBB4 ] uliahci         C:\Windows\system32\drivers\uliahci.sys
10:20:51.0251 6024  uliahci - ok
10:20:51.0267 6024  [ 31707F09846056651EA2C37858F5DDB0 ] UlSata          C:\Windows\system32\drivers\ulsata.sys
10:20:51.0267 6024  UlSata - ok
10:20:51.0282 6024  [ 85E5E43ED5B48C8376281BAB519271B7 ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys
10:20:51.0298 6024  ulsata2 - ok
10:20:51.0314 6024  [ 46E9A994C4FED537DD951F60B86AD3F4 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
10:20:51.0314 6024  umbus - ok
10:20:51.0329 6024  [ 7093799FF80E9DECA0680D2E3535BE60 ] upnphost        C:\Windows\System32\upnphost.dll
10:20:51.0329 6024  upnphost - ok
10:20:51.0423 6024  [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
10:20:51.0423 6024  USBAAPL64 - ok
10:20:51.0470 6024  [ 07E3498FC60834219D2356293DA0FECC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
10:20:51.0470 6024  usbccgp - ok
10:20:51.0516 6024  [ 9247F7E0B65852C1F6631480984D6ED2 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
10:20:51.0532 6024  usbcir - ok
10:20:51.0563 6024  [ 827E44DE934A736EA31E91D353EB126F ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
10:20:51.0563 6024  usbehci - ok
10:20:51.0594 6024  [ BB35CD80A2ECECFADC73569B3D70C7D1 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
10:20:51.0594 6024  usbhub - ok
10:20:51.0626 6024  [ EBA14EF0C07CEC233F1529C698D0D154 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
10:20:51.0626 6024  usbohci - ok
10:20:51.0641 6024  [ ACFEE697AF477021BB3EC78C5431FED2 ] usbprint        C:\Windows\system32\drivers\usbprint.sys
10:20:51.0641 6024  usbprint - ok
10:20:51.0672 6024  [ B854C1558FCA0C269A38663E8B59B581 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:20:51.0672 6024  USBSTOR - ok
10:20:51.0704 6024  [ B2872CBF9F47316ABD0E0C74A1ABA507 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
10:20:51.0704 6024  usbuhci - ok
10:20:51.0750 6024  [ D76E231E4850BB3F88A3D9A78DF191E3 ] UxSms           C:\Windows\System32\uxsms.dll
10:20:51.0750 6024  UxSms - ok
10:20:51.0844 6024  [ 294945381DFA7CE58CECF0A9896AF327 ] vds             C:\Windows\System32\vds.exe
10:20:51.0844 6024  vds - ok
10:20:51.0906 6024  [ 916B94BCF1E09873FFF2D5FB11767BBC ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
10:20:51.0906 6024  vga - ok
10:20:51.0938 6024  [ B83AB16B51FEDA65DD81B8C59D114D63 ] VgaSave         C:\Windows\System32\drivers\vga.sys
10:20:51.0938 6024  VgaSave - ok
10:20:51.0953 6024  [ 8294B6C3FDB6C33F24E150DE647ECDAA ] viaide          C:\Windows\system32\drivers\viaide.sys
10:20:51.0953 6024  viaide - ok
10:20:51.0969 6024  [ 2B7E885ED951519A12C450D24535DFCA ] volmgr          C:\Windows\system32\drivers\volmgr.sys
10:20:51.0969 6024  volmgr - ok
10:20:52.0062 6024  [ CEC5AC15277D75D9E5DEC2E1C6EAF877 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
10:20:52.0078 6024  volmgrx - ok
10:20:52.0140 6024  [ 582F710097B46140F5A89A19A6573D4B ] volsnap         C:\Windows\system32\drivers\volsnap.sys
10:20:52.0140 6024  volsnap - ok
10:20:52.0203 6024  [ A68F455ED2673835209318DD61BFBB0E ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
10:20:52.0234 6024  vsmraid - ok
10:20:52.0296 6024  [ B75232DAD33BFD95BF6F0A3E6BFF51E1 ] VSS             C:\Windows\system32\vssvc.exe
10:20:52.0312 6024  VSS - ok
10:20:52.0374 6024  [ F14A7DE2EA41883E250892E1E5230A9A ] W32Time         C:\Windows\system32\w32time.dll
10:20:52.0374 6024  W32Time - ok
10:20:52.0421 6024  [ FEF8FE5923FEAD2CEE4DFABFCE3393A7 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
10:20:52.0421 6024  WacomPen - ok
10:20:52.0468 6024  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
10:20:52.0468 6024  Wanarp - ok
10:20:52.0468 6024  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
10:20:52.0468 6024  Wanarpv6 - ok
10:20:52.0593 6024  [ B4E4C37D0AA6100090A53213EE2BF1C1 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
10:20:52.0624 6024  wcncsvc - ok
10:20:52.0640 6024  [ EA4B369560E986F19D93F45A881484AC ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:20:52.0640 6024  WcsPlugInService - ok
10:20:52.0671 6024  [ 0C17A0816F65B89E362E682AD5E7266E ] Wd              C:\Windows\system32\drivers\wd.sys
10:20:52.0671 6024  Wd - ok
10:20:52.0718 6024  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
10:20:52.0749 6024  Wdf01000 - ok
10:20:52.0764 6024  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiServiceHost  C:\Windows\system32\wdi.dll
10:20:52.0764 6024  WdiServiceHost - ok
10:20:52.0780 6024  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiSystemHost   C:\Windows\system32\wdi.dll
10:20:52.0780 6024  WdiSystemHost - ok
10:20:52.0827 6024  [ 3E6D05381CF35F75EBB055544A8ED9AC ] WebClient       C:\Windows\System32\webclnt.dll
10:20:52.0827 6024  WebClient - ok
10:20:52.0889 6024  [ 8D40BC587993F876658BF9FB0F7D3462 ] Wecsvc          C:\Windows\system32\wecsvc.dll
10:20:52.0889 6024  Wecsvc - ok
10:20:52.0905 6024  [ 9C980351D7E96288EA0C23AE232BD065 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
10:20:52.0905 6024  wercplsupport - ok
10:20:52.0920 6024  [ 66B9ECEBC46683F47EDC06333C075FEF ] WerSvc          C:\Windows\System32\WerSvc.dll
10:20:52.0936 6024  WerSvc - ok
10:20:52.0967 6024  WinDefend - ok
10:20:52.0967 6024  WinHttpAutoProxySvc - ok
10:20:53.0061 6024  [ D2E7296ED1BD26D8DB2799770C077A02 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
10:20:53.0076 6024  Winmgmt - ok
10:20:53.0264 6024  [ 6CBB0C68F13B9C2EC1B16F5FA5E7C869 ] WinRM           C:\Windows\system32\WsmSvc.dll
10:20:53.0326 6024  WinRM - ok
10:20:53.0404 6024  [ EC339C8115E91BAED835957E9A677F16 ] Wlansvc         C:\Windows\System32\wlansvc.dll
10:20:53.0420 6024  Wlansvc - ok
10:20:53.0498 6024  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
10:20:53.0498 6024  wlcrasvc - ok
10:20:54.0075 6024  [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
10:20:54.0090 6024  wlidsvc - ok
10:20:54.0200 6024  [ E18AEBAAA5A773FE11AA2C70F65320F5 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
10:20:54.0246 6024  WmiAcpi - ok
10:20:54.0278 6024  [ 21FA389E65A852698B6A1341F36EE02D ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
10:20:54.0309 6024  wmiApSrv - ok
10:20:54.0340 6024  WMPNetworkSvc - ok
10:20:54.0418 6024  [ CBC156C913F099E6680D1DF9307DB7A8 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
10:20:54.0449 6024  WPCSvc - ok
10:20:54.0496 6024  [ 490A18B4E4D53DC10879DEAA8E8B70D9 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
10:20:54.0496 6024  WPDBusEnum - ok
10:20:54.0590 6024  [ 5E2401B3FC1089C90E081291357371A9 ] WpdUsb          C:\Windows\system32\DRIVERS\wpdusb.sys
10:20:54.0590 6024  WpdUsb - ok
10:20:55.0089 6024  [ 991E2C2CF3BC204C2BB2EE1476149E4E ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
10:20:55.0120 6024  WPFFontCache_v0400 - ok
10:20:55.0214 6024  [ 8A900348370E359B6BFF6A550E4649E1 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
10:20:55.0245 6024  ws2ifsl - ok
10:20:55.0292 6024  [ 9EA3E6D0EF7A5C2B9181961052A4B01A ] wscsvc          C:\Windows\System32\wscsvc.dll
10:20:55.0292 6024  wscsvc - ok
10:20:55.0292 6024  WSearch - ok
10:20:56.0165 6024  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
10:20:56.0181 6024  wuauserv - ok
10:20:56.0274 6024  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
10:20:56.0274 6024  WudfPf - ok
10:20:56.0493 6024  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
10:20:56.0602 6024  WUDFRd - ok
10:20:56.0649 6024  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
10:20:56.0664 6024  wudfsvc - ok
10:20:56.0727 6024  [ 2AE06B41B36549FABF0886B2AF89A599 ] yukonx64        C:\Windows\system32\DRIVERS\yk60x64.sys
10:20:56.0727 6024  yukonx64 - ok
10:20:56.0742 6024  ================ Scan global ===============================
10:20:56.0774 6024  [ 060DC3A7A9A2626031EB23D90151428D ] C:\Windows\system32\basesrv.dll
10:20:57.0023 6024  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll
10:20:57.0039 6024  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll
10:20:57.0086 6024  [ 934E0B7D77FF78C18D9F8891221B6DE3 ] C:\Windows\system32\services.exe
10:20:57.0086 6024  [Global] - ok
10:20:57.0086 6024  ================ Scan MBR ==================================
10:20:57.0132 6024  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
10:21:00.0112 6024  \Device\Harddisk0\DR0 - ok
10:21:00.0112 6024  ================ Scan VBR ==================================
10:21:00.0143 6024  [ B73129B45E2FA589172688B31DA25CB4 ] \Device\Harddisk0\DR0\Partition1
10:21:00.0252 6024  \Device\Harddisk0\DR0\Partition1 - ok
10:21:00.0252 6024  ============================================================
10:21:00.0252 6024  Scan finished
10:21:00.0252 6024  ============================================================
10:21:00.0268 4312  Detected object count: 0
10:21:00.0268 4312  Actual detected object count: 0
 



#6 leafsfan7524

leafsfan7524
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 23 March 2013 - 09:38 AM

# AdwCleaner v2.115 - Logfile created 03/23/2013 at 10:30:02
# Updated 17/03/2013 by Xplode
# Operating system : Windows ™ Vista Home Premium Service Pack 2 (64 bits)
# User : Erin - ERIN-PC
# Boot Mode : Normal
# Running from : C:\Users\Erin\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Program Files (x86)\1ClickDownload
Deleted on reboot : C:\Program Files (x86)\Conduit
Deleted on reboot : C:\Program Files (x86)\Hotspot_Shield
Deleted on reboot : C:\Program Files (x86)\Perion
Deleted on reboot : C:\Program Files\Web Assistant

***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry is clean.

-\\ Mozilla Firefox v19.0.2 (en-US)

File : C:\Users\Erin\AppData\Roaming\Mozilla\Firefox\Profiles\5drwhcd8.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v25.0.1364.172

File : C:\Users\Erin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.43] : icon_url = "hxxp://www.snap.do/favicon.ico",
Deleted [l.46] : keyword = "search.snap.do",
Deleted [l.49] : search_url = "hxxp://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=CA&userid=13ab8ccd[...]

*************************

AdwCleaner[S2].txt - [1293 octets] - [23/03/2013 10:30:02]

########## EOF - C:\AdwCleaner[S2].txt - [1353 octets] ##########
 



#7 leafsfan7524

leafsfan7524
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:27 AM

Posted 23 March 2013 - 04:34 PM

No threats using ESET.

 

Thanks again for any help!



#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:27 AM

Posted 23 March 2013 - 08:17 PM

How is it running??
 
Update Adobe Flash Player.... http://get.adobe.com/flashplayer/otherversions/
 
Do one more quick scan.
 
 
Please download Malwarebytes Anti-Malware mbamicontw5.gif and save it to your desktop. %5BLIST%5D
  • Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.
  • [/list] Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet and double-click on the renamed file to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • Malwarebytes will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button and continue.
  • If you cannot update Malwarebytes or use the Internet to download any files to the infected computer, manually update the database by following the instructions in FAQ Section A: 4. Issues.
  • Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
  • Click on the Scan button.
  • When the scan is complete, click OK, then click the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked and then click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
  • Exit Malwarebytes when done.
  • Note: If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes from removing all the malware. -- Some types of malware will target Malwarebytes and other security tools to keep them from running properly. If that's the case, use Malwarebytes Chameleon and follow the onscreen instructions. The Chameleon folder can be accessed by opening the program folder for Malwarebytes Anti-Malware (normally C:\Program Files\Malwarebytes' Anti-Malware or C:\Program Files (x86)\Malwarebytes' Anti-Malware).

Edited by boopme, 23 March 2013 - 08:17 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users