Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help Please: Constant blue Screen of death that says "irql not less or equal"


  • Please log in to reply
7 replies to this topic

#1 blueblue90

blueblue90

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:59 PM

Posted 26 July 2013 - 05:27 AM

I have a Windows 7 64 bit system. I constantly get the blue screen of death error message that says "irql not less or equal." When it happens my computer makes a strange noise. This has been happening constantly. I am not sure if i am infected or if I just need to get rid of a bad program? Can someone please help me?



BC AdBot (Login to Remove)

 


#2 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:59 PM

Posted 26 July 2013 - 05:50 AM

:welcome:

 

:step1:  Download BlueScreenViewhttp://www.nirsoft.net/utils/blue_screen_view.html

  • Double-click BlueScreenView.exe file.
  • When autoscan is done (screen comes up), click Edit/Select All...then File/Save Selected Items.
  • Save the report as BSOD.txt.
  • Open BSOD.txt in Notepad, copy all content and paste it into your next reply

 

:step2: Install and run MBAM

:step3: Running TDSSKiller to obtain log

 

Note: Don't cure or delete a threat, but choose skip for all instead.

  • Please download TDSSKiller from here and save it to your Desktop
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters

tds2.jpg

  • In the Additional options: Check Detect TDLFS file system
  • Click Start Scan and allow the scan process to run

tds4-1.jpg

  • Choose for all threats to Skip for all of them.
  • Click Continue
  • Please post the TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)

===================================================


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#3 blueblue90

blueblue90
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:59 PM

Posted 26 July 2013 - 09:51 PM

 
Blue Screen View Text File
 
==================================================
Dump File         : 072613-18626-01.dmp
Crash Time        : 7/26/2013 12:29:30 AM
Bug Check String  : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code    : 0x0000000a
Parameter 1       : 00000000`00000000
Parameter 2       : 00000000`00000002
Parameter 3       : 00000000`00000000
Parameter 4       : fffff800`02c8ce42
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+75c00
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Processor         : x64
Crash Address     : ntoskrnl.exe+75c00
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\Windows\Minidump\072613-18626-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 7601
Dump File Size    : 262,144
Dump File Time    : 7/26/2013 6:00:27 AM
==================================================
 
==================================================
Dump File         : 072513-15724-01.dmp
Crash Time        : 7/25/2013 10:24:33 PM
Bug Check String  : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code    : 0x0000000a
Parameter 1       : 00000000`00000000
Parameter 2       : 00000000`00000002
Parameter 3       : 00000000`00000000
Parameter 4       : fffff800`02c80e42
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+75c00
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Processor         : x64
Crash Address     : ntoskrnl.exe+75c00
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\Windows\Minidump\072513-15724-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 7601
Dump File Size    : 262,144
Dump File Time    : 7/25/2013 10:27:59 PM
==================================================
 

 

 
 
Malwarebytes Text File
 
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
 
Database version: v2013.07.27.01
 
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16635
K:: KT [administrator]
 
7/26/2013 8:22:01 PM
mbam-log-2013-07-26 (20-22-01).txt
 
Scan type: Full scan (C:\|D:\|E:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 435995
Time elapsed: 1 hour(s), 37 minute(s), 6 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 0
(No malicious items detected)
 
Registry Values Detected: 0
(No malicious items detected)
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 0
(No malicious items detected)
 
Files Detected: 0
(No malicious items detected)
 
(end)
 

 

 
 
 
TDSSKiller Text File
 
22:02:31.0421 2616  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
22:02:32.0486 2616  ============================================================
22:02:32.0486 2616  Current date / time: 2013/07/26 22:02:32.0486
22:02:32.0486 2616  SystemInfo:
22:02:32.0486 2616  
22:02:32.0487 2616  OS Version: 6.1.7601 ServicePack: 1.0
22:02:32.0487 2616  Product type: Workstation
22:02:32.0487 2616  ComputerName: KT
22:02:32.0487 2616  UserName: K
22:02:32.0487 2616  Windows directory: C:\Windows
22:02:32.0487 2616  System windows directory: C:\Windows
22:02:32.0487 2616  Running under WOW64
22:02:32.0487 2616  Processor architecture: Intel x64
22:02:32.0487 2616  Number of processors: 4
22:02:32.0487 2616  Page size: 0x1000
22:02:32.0487 2616  Boot type: Normal boot
22:02:32.0487 2616  ============================================================
22:02:33.0084 2616  Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:02:33.0096 2616  ============================================================
22:02:33.0096 2616  \Device\Harddisk0\DR0:
22:02:33.0096 2616  MBR partitions:
22:02:33.0096 2616  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800
22:02:33.0096 2616  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x542C3000
22:02:33.0096 2616  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x54327000, BlocksNum 0x2A2F800
22:02:33.0096 2616  \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x56D56800, BlocksNum 0x7EF000
22:02:33.0096 2616  ============================================================
22:02:33.0105 2616  C: <-> \Device\Harddisk0\DR0\Partition2
22:02:33.0143 2616  D: <-> \Device\Harddisk0\DR0\Partition3
22:02:33.0155 2616  E: <-> \Device\Harddisk0\DR0\Partition4
22:02:33.0156 2616  ============================================================
22:02:33.0156 2616  Initialize success
22:02:33.0156 2616  ============================================================
22:03:32.0336 1200  ============================================================
22:03:32.0337 1200  Scan started
22:03:32.0337 1200  Mode: Manual; TDLFS; 
22:03:32.0337 1200  ============================================================
22:03:33.0827 1200  ================ Scan system memory ========================
22:03:33.0827 1200  System memory - ok
22:03:33.0828 1200  ================ Scan services =============================
22:03:33.0947 1200  [ 581D88B25C4D4121824FED2CA38E562F ] !SASCORE        C:\PROGRAM FILES\SUPERANTISPYWARE\SASCORE64.EXE
22:03:33.0951 1200  !SASCORE - ok
22:03:34.0171 1200  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
22:03:34.0202 1200  1394ohci - ok
22:03:34.0245 1200  [ 5C368F4B04ED2A923E6AFCA2D37BAFF5 ] Accelerometer   C:\Windows\system32\DRIVERS\Accelerometer.sys
22:03:34.0255 1200  Accelerometer - ok
22:03:34.0293 1200  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
22:03:34.0301 1200  ACPI - ok
22:03:34.0329 1200  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
22:03:34.0338 1200  AcpiPmi - ok
22:03:34.0437 1200  [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:03:34.0439 1200  AdobeARMservice - ok
22:03:34.0535 1200  [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
22:03:34.0541 1200  AdobeFlashPlayerUpdateSvc - ok
22:03:34.0589 1200  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
22:03:34.0613 1200  adp94xx - ok
22:03:34.0664 1200  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\drivers\adpahci.sys
22:03:34.0683 1200  adpahci - ok
22:03:34.0702 1200  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
22:03:34.0715 1200  adpu320 - ok
22:03:34.0771 1200  [ 96A0FF09E226B023DC6ACA253AACEE2E ] ADVService      C:\Program Files (x86)\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe
22:03:34.0772 1200  ADVService - ok
22:03:34.0804 1200  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
22:03:34.0806 1200  AeLookupSvc - ok
22:03:34.0861 1200  [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters     C:\PROGRAM FILES\IDT\WDM\AESTSR64.EXE
22:03:34.0864 1200  AESTFilters - ok
22:03:34.0904 1200  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys
22:03:34.0935 1200  AFD - ok
22:03:34.0971 1200  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
22:03:34.0983 1200  agp440 - ok
22:03:35.0022 1200  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
22:03:35.0025 1200  ALG - ok
22:03:35.0052 1200  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
22:03:35.0060 1200  aliide - ok
22:03:35.0079 1200  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
22:03:35.0087 1200  amdide - ok
22:03:35.0118 1200  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
22:03:35.0132 1200  AmdK8 - ok
22:03:35.0175 1200  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
22:03:35.0189 1200  AmdPPM - ok
22:03:35.0209 1200  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
22:03:35.0222 1200  amdsata - ok
22:03:35.0255 1200  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
22:03:35.0271 1200  amdsbs - ok
22:03:35.0296 1200  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
22:03:35.0305 1200  amdxata - ok
22:03:35.0419 1200  [ 2E2B1A491CB78C7D8C8A265C004B1F79 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
22:03:35.0441 1200  AntiVirSchedulerService - ok
22:03:35.0494 1200  [ AAE3238C2A0B2CF17851B3D06C8EA8C0 ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
22:03:35.0497 1200  AntiVirService - ok
22:03:35.0548 1200  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
22:03:35.0559 1200  AppID - ok
22:03:35.0591 1200  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
22:03:35.0594 1200  AppIDSvc - ok
22:03:35.0628 1200  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll
22:03:35.0631 1200  Appinfo - ok
22:03:35.0654 1200  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\drivers\arc.sys
22:03:35.0668 1200  arc - ok
22:03:35.0688 1200  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys
22:03:35.0702 1200  arcsas - ok
22:03:35.0837 1200  [ EF25A6FBBBDA1D0967619B0825EAC2F3 ] ASRservice      C:\Program Files (x86)\IObit\Advanced Spyware Remover\ASRsrv.exe
22:03:35.0861 1200  ASRservice - ok
22:03:35.0887 1200  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
22:03:35.0895 1200  AsyncMac - ok
22:03:35.0930 1200  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
22:03:35.0940 1200  atapi - ok
22:03:35.0991 1200  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
22:03:36.0014 1200  AudioEndpointBuilder - ok
22:03:36.0047 1200  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
22:03:36.0058 1200  AudioSrv - ok
22:03:36.0133 1200  [ 09E6069EF94B345061B4BD3CEBD974C8 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
22:03:36.0136 1200  avgntflt - ok
22:03:36.0179 1200  [ 488486DAD09A5B6C6DBB8B990A8B2307 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
22:03:36.0198 1200  avipbb - ok
22:03:36.0257 1200  [ 490FA25161BF3E51993EB724ECF0ACEB ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
22:03:36.0267 1200  avkmgr - ok
22:03:36.0317 1200  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
22:03:36.0321 1200  AxInstSV - ok
22:03:36.0368 1200  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
22:03:36.0390 1200  b06bdrv - ok
22:03:36.0427 1200  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
22:03:36.0446 1200  b57nd60a - ok
22:03:36.0525 1200  [ 9E84A931DBEE0292E38ED672F6293A99 ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys
22:03:36.0581 1200  BCM43XX - ok
22:03:36.0619 1200  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
22:03:36.0623 1200  BDESVC - ok
22:03:36.0650 1200  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
22:03:36.0656 1200  Beep - ok
22:03:36.0711 1200  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
22:03:36.0734 1200  BFE - ok
22:03:36.0780 1200  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
22:03:36.0826 1200  BITS - ok
22:03:36.0851 1200  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys
22:03:36.0854 1200  blbdrive - ok
22:03:36.0889 1200  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
22:03:36.0893 1200  bowser - ok
22:03:36.0924 1200  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
22:03:36.0928 1200  BrFiltLo - ok
22:03:36.0942 1200  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
22:03:36.0946 1200  BrFiltUp - ok
22:03:36.0998 1200  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
22:03:37.0002 1200  Browser - ok
22:03:37.0031 1200  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
22:03:37.0052 1200  Brserid - ok
22:03:37.0075 1200  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
22:03:37.0085 1200  BrSerWdm - ok
22:03:37.0101 1200  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
22:03:37.0109 1200  BrUsbMdm - ok
22:03:37.0116 1200  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
22:03:37.0123 1200  BrUsbSer - ok
22:03:37.0155 1200  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
22:03:37.0166 1200  BTHMODEM - ok
22:03:37.0201 1200  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
22:03:37.0204 1200  bthserv - ok
22:03:37.0227 1200  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
22:03:37.0238 1200  cdfs - ok
22:03:37.0285 1200  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
22:03:37.0301 1200  cdrom - ok
22:03:37.0385 1200  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
22:03:37.0388 1200  CertPropSvc - ok
22:03:37.0420 1200  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys
22:03:37.0432 1200  circlass - ok
22:03:37.0468 1200  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
22:03:37.0489 1200  CLFS - ok
22:03:37.0559 1200  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:03:37.0562 1200  clr_optimization_v2.0.50727_32 - ok
22:03:37.0595 1200  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:03:37.0599 1200  clr_optimization_v2.0.50727_64 - ok
22:03:37.0661 1200  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:03:37.0680 1200  clr_optimization_v4.0.30319_32 - ok
22:03:37.0714 1200  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:03:37.0719 1200  clr_optimization_v4.0.30319_64 - ok
22:03:37.0766 1200  [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd           C:\Windows\system32\DRIVERS\clwvd.sys
22:03:37.0775 1200  clwvd - ok
22:03:37.0814 1200  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
22:03:37.0821 1200  CmBatt - ok
22:03:37.0834 1200  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
22:03:37.0842 1200  cmdide - ok
22:03:37.0896 1200  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys
22:03:37.0924 1200  CNG - ok
22:03:37.0967 1200  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
22:03:37.0969 1200  Compbatt - ok
22:03:37.0991 1200  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
22:03:37.0994 1200  CompositeBus - ok
22:03:38.0009 1200  COMSysApp - ok
22:03:38.0022 1200  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
22:03:38.0032 1200  crcdisk - ok
22:03:38.0080 1200  [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc        C:\Windows\system32\cryptsvc.dll
22:03:38.0086 1200  CryptSvc - ok
22:03:38.0153 1200  [ DDAC7684F4BC3F655ED31D8AA494E9AB ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
22:03:38.0177 1200  cvhsvc - ok
22:03:38.0220 1200  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
22:03:38.0232 1200  DcomLaunch - ok
22:03:38.0274 1200  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
22:03:38.0281 1200  defragsvc - ok
22:03:38.0309 1200  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
22:03:38.0313 1200  DfsC - ok
22:03:38.0338 1200  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
22:03:38.0346 1200  Dhcp - ok
22:03:38.0360 1200  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
22:03:38.0372 1200  discache - ok
22:03:38.0422 1200  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\drivers\disk.sys
22:03:38.0435 1200  Disk - ok
22:03:38.0469 1200  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
22:03:38.0475 1200  Dnscache - ok
22:03:38.0494 1200  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
22:03:38.0501 1200  dot3svc - ok
22:03:38.0525 1200  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
22:03:38.0531 1200  DPS - ok
22:03:38.0553 1200  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
22:03:38.0558 1200  drmkaud - ok
22:03:38.0621 1200  [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01     C:\Windows\system32\DRIVERS\dtsoftbus01.sys
22:03:38.0628 1200  dtsoftbus01 - ok
22:03:38.0692 1200  [ 1A986E433B8EB2375F55961D993746B3 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
22:03:38.0738 1200  DXGKrnl - ok
22:03:38.0802 1200  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
22:03:38.0806 1200  EapHost - ok
22:03:38.0936 1200  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\drivers\evbda.sys
22:03:39.0072 1200  ebdrv - ok
22:03:39.0110 1200  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe
22:03:39.0114 1200  EFS - ok
22:03:39.0177 1200  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
22:03:39.0211 1200  ehRecvr - ok
22:03:39.0247 1200  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
22:03:39.0251 1200  ehSched - ok
22:03:39.0301 1200  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
22:03:39.0336 1200  elxstor - ok
22:03:39.0350 1200  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
22:03:39.0358 1200  ErrDev - ok
22:03:39.0428 1200  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
22:03:39.0438 1200  EventSystem - ok
22:03:39.0462 1200  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
22:03:39.0479 1200  exfat - ok
22:03:39.0501 1200  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
22:03:39.0516 1200  fastfat - ok
22:03:39.0567 1200  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
22:03:39.0590 1200  Fax - ok
22:03:39.0620 1200  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\drivers\fdc.sys
22:03:39.0628 1200  fdc - ok
22:03:39.0647 1200  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
22:03:39.0650 1200  fdPHost - ok
22:03:39.0663 1200  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
22:03:39.0666 1200  FDResPub - ok
22:03:39.0708 1200  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
22:03:39.0721 1200  FileInfo - ok
22:03:39.0738 1200  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
22:03:39.0747 1200  Filetrace - ok
22:03:39.0766 1200  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
22:03:39.0773 1200  flpydisk - ok
22:03:39.0792 1200  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
22:03:39.0814 1200  FltMgr - ok
22:03:39.0851 1200  [ 68E3799B6BA14CC587CC36B68C21A33B ] FLxHCIc         C:\Windows\system32\DRIVERS\FLxHCIc.sys
22:03:39.0868 1200  FLxHCIc - ok
22:03:39.0900 1200  [ CC99C7E8ED52065AA2DBAE46D37F8A64 ] FLxHCIh         C:\Windows\system32\DRIVERS\FLxHCIh.sys
22:03:39.0914 1200  FLxHCIh - ok
22:03:39.0963 1200  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll
22:03:40.0000 1200  FontCache - ok
22:03:40.0037 1200  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:03:40.0039 1200  FontCache3.0.0.0 - ok
22:03:40.0093 1200  [ F80BDC0D9E7B9595E74B434446AD3781 ] FPLService      C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe
22:03:40.0099 1200  FPLService - ok
22:03:40.0122 1200  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
22:03:40.0131 1200  FsDepends - ok
22:03:40.0170 1200  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
22:03:40.0180 1200  Fs_Rec - ok
22:03:40.0238 1200  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
22:03:40.0244 1200  fvevol - ok
22:03:40.0280 1200  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
22:03:40.0292 1200  gagp30kx - ok
22:03:40.0342 1200  [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
22:03:40.0347 1200  GamesAppService - ok
22:03:40.0418 1200  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
22:03:40.0442 1200  gpsvc - ok
22:03:40.0458 1200  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
22:03:40.0470 1200  hcw85cir - ok
22:03:40.0512 1200  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
22:03:40.0536 1200  HdAudAddService - ok
22:03:40.0559 1200  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
22:03:40.0564 1200  HDAudBus - ok
22:03:40.0583 1200  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
22:03:40.0592 1200  HidBatt - ok
22:03:40.0612 1200  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
22:03:40.0625 1200  HidBth - ok
22:03:40.0671 1200  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\drivers\hidir.sys
22:03:40.0681 1200  HidIr - ok
22:03:40.0710 1200  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll
22:03:40.0714 1200  hidserv - ok
22:03:40.0745 1200  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
22:03:40.0755 1200  HidUsb - ok
22:03:40.0799 1200  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
22:03:40.0805 1200  hkmsvc - ok
22:03:40.0831 1200  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
22:03:40.0839 1200  HomeGroupListener - ok
22:03:40.0875 1200  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
22:03:40.0883 1200  HomeGroupProvider - ok
22:03:40.0963 1200  [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
22:03:40.0966 1200  HP Support Assistant Service - ok
22:03:41.0009 1200  [ 6A181452D4E240B8ECC7614B9A19BDE9 ] HPClientSvc     C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
22:03:41.0017 1200  HPClientSvc - ok
22:03:41.0120 1200  [ B7382BEC806B7B00FC84B3E2061FF48E ] HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
22:03:41.0125 1200  HPDrvMntSvc.exe - ok
22:03:41.0165 1200  [ 4E0BEC0F78096FFD6D3314B497FC49D3 ] hpdskflt        C:\Windows\system32\DRIVERS\hpdskflt.sys
22:03:41.0174 1200  hpdskflt - ok
22:03:41.0259 1200  [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
22:03:41.0305 1200  hpqwmiex - ok
22:03:41.0347 1200  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
22:03:41.0359 1200  HpSAMD - ok
22:03:41.0372 1200  [ FC7C13B5A9E9BE23B7AE72BBC7FDB278 ] hpsrv           C:\Windows\system32\Hpservice.exe
22:03:41.0375 1200  hpsrv - ok
22:03:41.0431 1200  [ 2BEC76BDCD1BC080210325E7B5094834 ] HPWMISVC        C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
22:03:41.0433 1200  HPWMISVC - ok
22:03:41.0507 1200  [ BBC89DA4065BDCE34257BE95B2F636EE ] HssDRV6         C:\Windows\system32\DRIVERS\hssdrv6.sys
22:03:41.0510 1200  HssDRV6 - ok
22:03:41.0552 1200  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
22:03:41.0576 1200  HTTP - ok
22:03:41.0595 1200  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
22:03:41.0598 1200  hwpolicy - ok
22:03:41.0625 1200  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
22:03:41.0629 1200  i8042prt - ok
22:03:41.0685 1200  [ 2FDAEC4B02729C48C0FD1B0B4695995B ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
22:03:41.0694 1200  iaStor - ok
22:03:41.0749 1200  [ D41861E56E7552C13674D7F147A02464 ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
22:03:41.0751 1200  IAStorDataMgrSvc - ok
22:03:41.0801 1200  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
22:03:41.0822 1200  iaStorV - ok
22:03:41.0925 1200  [ D72BF0AE484F88399E8343E821C10D6A ] IconMan_R       C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
22:03:41.0995 1200  IconMan_R - ok
22:03:42.0041 1200  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:03:42.0065 1200  idsvc - ok
22:03:42.0324 1200  [ 33FAA40B288002C89529DBD14F3AB72C ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
22:03:42.0568 1200  igfx - ok
22:03:42.0583 1200  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
22:03:42.0587 1200  iirsp - ok
22:03:42.0622 1200  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
22:03:42.0653 1200  IKEEXT - ok
22:03:42.0693 1200  [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
22:03:42.0711 1200  IntcDAud - ok
22:03:42.0741 1200  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
22:03:42.0750 1200  intelide - ok
22:03:42.0781 1200  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
22:03:42.0783 1200  intelppm - ok
22:03:42.0813 1200  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
22:03:42.0818 1200  IPBusEnum - ok
22:03:42.0848 1200  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:03:42.0860 1200  IpFilterDriver - ok
22:03:42.0922 1200  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
22:03:42.0946 1200  iphlpsvc - ok
22:03:42.0966 1200  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
22:03:42.0978 1200  IPMIDRV - ok
22:03:42.0998 1200  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
22:03:43.0008 1200  IPNAT - ok
22:03:43.0033 1200  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
22:03:43.0040 1200  IRENUM - ok
22:03:43.0049 1200  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
22:03:43.0057 1200  isapnp - ok
22:03:43.0077 1200  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
22:03:43.0095 1200  iScsiPrt - ok
22:03:43.0136 1200  [ 6C85719A21B3F62C2C76280F4BD36C7B ] jhi_service     C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
22:03:43.0140 1200  jhi_service - ok
22:03:43.0183 1200  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
22:03:43.0193 1200  kbdclass - ok
22:03:43.0225 1200  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
22:03:43.0233 1200  kbdhid - ok
22:03:43.0255 1200  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
22:03:43.0258 1200  KeyIso - ok
22:03:43.0294 1200  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
22:03:43.0307 1200  KSecDD - ok
22:03:43.0334 1200  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
22:03:43.0351 1200  KSecPkg - ok
22:03:43.0372 1200  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
22:03:43.0380 1200  ksthunk - ok
22:03:43.0417 1200  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
22:03:43.0428 1200  KtmRm - ok
22:03:43.0500 1200  [ 0ABF1BD3BE9FBA1A5CB5F159ECE0B579 ] LAlarmService   C:\Program Files\LAlarm\LAlarmService.exe
22:03:43.0502 1200  LAlarmService - ok
22:03:43.0560 1200  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
22:03:43.0570 1200  LanmanServer - ok
22:03:43.0603 1200  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
22:03:43.0611 1200  LanmanWorkstation - ok
22:03:43.0711 1200  [ 55AFD4A9D5ED4AD40D5215CCDF4D65F3 ] Lavasoft Ad-Aware Service C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
22:03:43.0769 1200  Lavasoft Ad-Aware Service - ok
22:03:43.0821 1200  [ 9A7FA6371F68335FD3C3D6488BC5A9F8 ] Lavasoft Kernexplorer C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys
22:03:43.0823 1200  Lavasoft Kernexplorer - ok
22:03:43.0862 1200  [ C8B3131857931AE76798A741CC52B021 ] Lbd             C:\Windows\system32\DRIVERS\Lbd.sys
22:03:43.0877 1200  Lbd - ok
22:03:43.0926 1200  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
22:03:43.0937 1200  lltdio - ok
22:03:43.0979 1200  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
22:03:43.0988 1200  lltdsvc - ok
22:03:44.0011 1200  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
22:03:44.0022 1200  lmhosts - ok
22:03:44.0072 1200  [ 519D66259DF1672AABCE9D2E0ACC5552 ] LMS             C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
22:03:44.0079 1200  LMS - ok
22:03:44.0114 1200  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
22:03:44.0127 1200  LSI_FC - ok
22:03:44.0150 1200  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
22:03:44.0162 1200  LSI_SAS - ok
22:03:44.0192 1200  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
22:03:44.0205 1200  LSI_SAS2 - ok
22:03:44.0240 1200  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
22:03:44.0253 1200  LSI_SCSI - ok
22:03:44.0274 1200  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
22:03:44.0288 1200  luafv - ok
22:03:44.0377 1200  [ 0F8FE97E6B8F4566518469A1A9738C6D ] McAfee SiteAdvisor Service c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe
22:03:44.0380 1200  McAfee SiteAdvisor Service - ok
22:03:44.0423 1200  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
22:03:44.0428 1200  Mcx2Svc - ok
22:03:44.0441 1200  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\drivers\megasas.sys
22:03:44.0451 1200  megasas - ok
22:03:44.0490 1200  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
22:03:44.0509 1200  MegaSR - ok
22:03:44.0542 1200  [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
22:03:44.0553 1200  MEIx64 - ok
22:03:44.0608 1200  Microsoft SharePoint Workspace Audit Service - ok
22:03:44.0652 1200  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
22:03:44.0657 1200  MMCSS - ok
22:03:44.0678 1200  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
22:03:44.0687 1200  Modem - ok
22:03:44.0711 1200  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
22:03:44.0714 1200  monitor - ok
22:03:44.0745 1200  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
22:03:44.0747 1200  mouclass - ok
22:03:44.0784 1200  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\drivers\mouhid.sys
22:03:44.0792 1200  mouhid - ok
22:03:44.0826 1200  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
22:03:44.0829 1200  mountmgr - ok
22:03:44.0923 1200  [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
22:03:44.0926 1200  MozillaMaintenance - ok
22:03:44.0947 1200  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
22:03:44.0965 1200  mpio - ok
22:03:44.0980 1200  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
22:03:44.0992 1200  mpsdrv - ok
22:03:45.0041 1200  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
22:03:45.0075 1200  MpsSvc - ok
22:03:45.0112 1200  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
22:03:45.0127 1200  MRxDAV - ok
22:03:45.0146 1200  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
22:03:45.0162 1200  mrxsmb - ok
22:03:45.0205 1200  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:03:45.0225 1200  mrxsmb10 - ok
22:03:45.0248 1200  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:03:45.0256 1200  mrxsmb20 - ok
22:03:45.0266 1200  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
22:03:45.0268 1200  msahci - ok
22:03:45.0290 1200  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
22:03:45.0299 1200  msdsm - ok
22:03:45.0315 1200  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
22:03:45.0321 1200  MSDTC - ok
22:03:45.0345 1200  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
22:03:45.0347 1200  Msfs - ok
22:03:45.0365 1200  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
22:03:45.0370 1200  mshidkmdf - ok
22:03:45.0388 1200  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
22:03:45.0395 1200  msisadrv - ok
22:03:45.0429 1200  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
22:03:45.0435 1200  MSiSCSI - ok
22:03:45.0443 1200  msiserver - ok
22:03:45.0461 1200  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
22:03:45.0467 1200  MSKSSRV - ok
22:03:45.0491 1200  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
22:03:45.0497 1200  MSPCLOCK - ok
22:03:45.0511 1200  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
22:03:45.0518 1200  MSPQM - ok
22:03:45.0538 1200  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
22:03:45.0555 1200  MsRPC - ok
22:03:45.0573 1200  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
22:03:45.0576 1200  mssmbios - ok
22:03:45.0599 1200  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
22:03:45.0604 1200  MSTEE - ok
22:03:45.0615 1200  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
22:03:45.0622 1200  MTConfig - ok
22:03:45.0637 1200  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
22:03:45.0640 1200  Mup - ok
22:03:45.0682 1200  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
22:03:45.0694 1200  napagent - ok
22:03:45.0734 1200  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
22:03:45.0752 1200  NativeWifiP - ok
22:03:45.0826 1200  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
22:03:45.0861 1200  NDIS - ok
22:03:45.0906 1200  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
22:03:45.0914 1200  NdisCap - ok
22:03:45.0938 1200  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
22:03:45.0945 1200  NdisTapi - ok
22:03:45.0967 1200  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
22:03:45.0976 1200  Ndisuio - ok
22:03:45.0994 1200  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
22:03:46.0008 1200  NdisWan - ok
22:03:46.0031 1200  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
22:03:46.0034 1200  NDProxy - ok
22:03:46.0065 1200  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
22:03:46.0067 1200  NetBIOS - ok
22:03:46.0088 1200  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
22:03:46.0094 1200  NetBT - ok
22:03:46.0121 1200  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
22:03:46.0125 1200  Netlogon - ok
22:03:46.0156 1200  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
22:03:46.0165 1200  Netman - ok
22:03:46.0186 1200  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
22:03:46.0197 1200  netprofm - ok
22:03:46.0224 1200  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:03:46.0227 1200  NetTcpPortSharing - ok
22:03:46.0264 1200  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
22:03:46.0273 1200  nfrd960 - ok
22:03:46.0299 1200  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
22:03:46.0321 1200  NlaSvc - ok
22:03:46.0401 1200  [ DE7FCC77F4A503AF4CA6A47D49B3713D ] NPF             C:\Windows\system32\drivers\npf.sys
22:03:46.0404 1200  NPF - ok
22:03:46.0416 1200  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
22:03:46.0424 1200  Npfs - ok
22:03:46.0456 1200  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
22:03:46.0465 1200  nsi - ok
22:03:46.0475 1200  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
22:03:46.0483 1200  nsiproxy - ok
22:03:46.0569 1200  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
22:03:46.0636 1200  Ntfs - ok
22:03:46.0663 1200  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
22:03:46.0669 1200  Null - ok
22:03:46.0704 1200  [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD        C:\Windows\system32\DRIVERS\nvm62x64.sys
22:03:46.0723 1200  NVENETFD - ok
22:03:46.0747 1200  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
22:03:46.0761 1200  nvraid - ok
22:03:46.0771 1200  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
22:03:46.0786 1200  nvstor - ok
22:03:46.0808 1200  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
22:03:46.0823 1200  nv_agp - ok
22:03:46.0843 1200  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
22:03:46.0855 1200  ohci1394 - ok
22:03:46.0894 1200  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:03:46.0898 1200  ose - ok
22:03:47.0065 1200  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
22:03:47.0180 1200  osppsvc - ok
22:03:47.0222 1200  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
22:03:47.0232 1200  p2pimsvc - ok
22:03:47.0262 1200  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
22:03:47.0285 1200  p2psvc - ok
22:03:47.0317 1200  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\drivers\parport.sys
22:03:47.0330 1200  Parport - ok
22:03:47.0361 1200  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
22:03:47.0375 1200  partmgr - ok
22:03:47.0404 1200  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
22:03:47.0412 1200  PcaSvc - ok
22:03:47.0425 1200  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
22:03:47.0444 1200  pci - ok
22:03:47.0457 1200  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
22:03:47.0466 1200  pciide - ok
22:03:47.0503 1200  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
22:03:47.0523 1200  pcmcia - ok
22:03:47.0544 1200  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
22:03:47.0556 1200  pcw - ok
22:03:47.0583 1200  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
22:03:47.0639 1200  PEAUTH - ok
22:03:47.0725 1200  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
22:03:47.0729 1200  PerfHost - ok
22:03:47.0804 1200  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
22:03:47.0850 1200  pla - ok
22:03:47.0912 1200  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
22:03:47.0934 1200  PlugPlay - ok
22:03:47.0953 1200  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
22:03:47.0958 1200  PNRPAutoReg - ok
22:03:47.0979 1200  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
22:03:47.0988 1200  PNRPsvc - ok
22:03:48.0025 1200  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
22:03:48.0049 1200  PolicyAgent - ok
22:03:48.0072 1200  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
22:03:48.0081 1200  Power - ok
22:03:48.0105 1200  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
22:03:48.0120 1200  PptpMiniport - ok
22:03:48.0139 1200  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\drivers\processr.sys
22:03:48.0152 1200  Processor - ok
22:03:48.0186 1200  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
22:03:48.0194 1200  ProfSvc - ok
22:03:48.0211 1200  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
22:03:48.0215 1200  ProtectedStorage - ok
22:03:48.0242 1200  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
22:03:48.0247 1200  Psched - ok
22:03:48.0306 1200  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
22:03:48.0369 1200  ql2300 - ok
22:03:48.0390 1200  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
22:03:48.0400 1200  ql40xx - ok
22:03:48.0429 1200  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
22:03:48.0434 1200  QWAVE - ok
22:03:48.0456 1200  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
22:03:48.0462 1200  QWAVEdrv - ok
22:03:48.0480 1200  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
22:03:48.0485 1200  RasAcd - ok
22:03:48.0526 1200  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
22:03:48.0529 1200  RasAgileVpn - ok
22:03:48.0557 1200  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
22:03:48.0563 1200  RasAuto - ok
22:03:48.0579 1200  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
22:03:48.0594 1200  Rasl2tp - ok
22:03:48.0613 1200  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
22:03:48.0621 1200  RasMan - ok
22:03:48.0634 1200  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
22:03:48.0637 1200  RasPppoe - ok
22:03:48.0650 1200  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
22:03:48.0659 1200  RasSstp - ok
22:03:48.0678 1200  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
22:03:48.0694 1200  rdbss - ok
22:03:48.0707 1200  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
22:03:48.0713 1200  rdpbus - ok
22:03:48.0740 1200  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
22:03:48.0741 1200  RDPCDD - ok
22:03:48.0754 1200  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
22:03:48.0755 1200  RDPENCDD - ok
22:03:48.0763 1200  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
22:03:48.0768 1200  RDPREFMP - ok
22:03:48.0792 1200  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
22:03:48.0803 1200  RDPWD - ok
22:03:48.0839 1200  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
22:03:48.0857 1200  rdyboost - ok
22:03:48.0874 1200  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
22:03:48.0879 1200  RemoteAccess - ok
22:03:48.0916 1200  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
22:03:48.0922 1200  RemoteRegistry - ok
22:03:49.0000 1200  [ 83A6C2CAFE236652D1559640594A0EA8 ] rpcapd          C:\Program Files (x86)\WinPcap\rpcapd.exe
22:03:49.0004 1200  rpcapd - ok
22:03:49.0024 1200  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
22:03:49.0029 1200  RpcEptMapper - ok
22:03:49.0058 1200  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
22:03:49.0061 1200  RpcLocator - ok
22:03:49.0090 1200  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
22:03:49.0102 1200  RpcSs - ok
22:03:49.0130 1200  [ 1F5E7AF59B390261A85F5BEDB1BB88B3 ] RSPCIESTOR      C:\Windows\system32\DRIVERS\RtsPStor.sys
22:03:49.0139 1200  RSPCIESTOR - ok
22:03:49.0188 1200  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
22:03:49.0199 1200  rspndr - ok
22:03:49.0251 1200  [ ED5873F7DFB2F96D37F13322211B6BDC ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
22:03:49.0261 1200  RTL8167 - ok
22:03:49.0316 1200  [ F33E70E48A54A7A1BFBEEB4F3B273E4A ] RTL8192Ce       C:\Windows\system32\DRIVERS\rtl8192Ce.sys
22:03:49.0373 1200  RTL8192Ce - ok
22:03:49.0400 1200  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe
22:03:49.0404 1200  SamSs - ok
22:03:49.0444 1200  [ 3289766038DB2CB14D07DC84392138D5 ] SASDIFSV        C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
22:03:49.0446 1200  SASDIFSV - ok
22:03:49.0464 1200  [ 58A38E75F3316A83C23DF6173D41F2B5 ] SASKUTIL        C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
22:03:49.0466 1200  SASKUTIL - ok
22:03:49.0486 1200  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
22:03:49.0497 1200  sbp2port - ok
22:03:49.0573 1200  [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService  C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
22:03:49.0609 1200  SBSDWSCService - ok
22:03:49.0647 1200  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
22:03:49.0654 1200  SCardSvr - ok
22:03:49.0675 1200  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
22:03:49.0683 1200  scfilter - ok
22:03:49.0725 1200  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
22:03:49.0761 1200  Schedule - ok
22:03:49.0787 1200  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
22:03:49.0789 1200  SCPolicySvc - ok
22:03:49.0826 1200  [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys
22:03:49.0830 1200  sdbus - ok
22:03:49.0868 1200  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
22:03:49.0876 1200  SDRSVC - ok
22:03:49.0993 1200  [ 206387AB881E93A1A6EB89966C8651F1 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
22:03:50.0030 1200  SDScannerService - ok
22:03:50.0091 1200  [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
22:03:50.0139 1200  SDUpdateService - ok
22:03:50.0179 1200  [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
22:03:50.0183 1200  SDWSCService - ok
22:03:50.0214 1200  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
22:03:50.0222 1200  secdrv - ok
22:03:50.0245 1200  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
22:03:50.0250 1200  seclogon - ok
22:03:50.0270 1200  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
22:03:50.0277 1200  SENS - ok
22:03:50.0316 1200  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
22:03:50.0322 1200  SensrSvc - ok
22:03:50.0344 1200  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\drivers\serenum.sys
22:03:50.0353 1200  Serenum - ok
22:03:50.0373 1200  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\drivers\serial.sys
22:03:50.0386 1200  Serial - ok
22:03:50.0422 1200  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys
22:03:50.0431 1200  sermouse - ok
22:03:50.0481 1200  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
22:03:50.0485 1200  SessionEnv - ok
22:03:50.0500 1200  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
22:03:50.0505 1200  sffdisk - ok
22:03:50.0524 1200  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
22:03:50.0533 1200  sffp_mmc - ok
22:03:50.0550 1200  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
22:03:50.0555 1200  sffp_sd - ok
22:03:50.0575 1200  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
22:03:50.0580 1200  sfloppy - ok
22:03:50.0629 1200  [ B2F21560016B3C200FC34F2BD13DE469 ] Sftfs           C:\Windows\system32\DRIVERS\Sftfswin7.sys
22:03:50.0653 1200  Sftfs - ok
22:03:50.0696 1200  [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist         C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
22:03:50.0705 1200  sftlist - ok
22:03:50.0727 1200  [ AD9449F3BF407DBD1742A465F2163847 ] Sftplay         C:\Windows\system32\DRIVERS\Sftplaywin7.sys
22:03:50.0742 1200  Sftplay - ok
22:03:50.0754 1200  [ 78A1496BA75C7D5700CECB77DDD291BB ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirwin7.sys
22:03:50.0762 1200  Sftredir - ok
22:03:50.0776 1200  [ DA674FD0164D64BD4980A619410D57E3 ] Sftvol          C:\Windows\system32\DRIVERS\Sftvolwin7.sys
22:03:50.0784 1200  Sftvol - ok
22:03:50.0809 1200  [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
22:03:50.0814 1200  sftvsa - ok
22:03:50.0847 1200  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
22:03:50.0856 1200  SharedAccess - ok
22:03:50.0895 1200  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
22:03:50.0907 1200  ShellHWDetection - ok
22:03:50.0943 1200  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
22:03:50.0952 1200  SiSRaid2 - ok
22:03:50.0974 1200  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
22:03:50.0985 1200  SiSRaid4 - ok
22:03:51.0004 1200  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
22:03:51.0014 1200  Smb - ok
22:03:51.0064 1200  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
22:03:51.0069 1200  SNMPTRAP - ok
22:03:51.0093 1200  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
22:03:51.0102 1200  spldr - ok
22:03:51.0152 1200  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
22:03:51.0172 1200  Spooler - ok
22:03:51.0296 1200  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
22:03:51.0402 1200  sppsvc - ok
22:03:51.0418 1200  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
22:03:51.0422 1200  sppuinotify - ok
22:03:51.0447 1200  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
22:03:51.0462 1200  srv - ok
22:03:51.0485 1200  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
22:03:51.0492 1200  srv2 - ok
22:03:51.0521 1200  [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA       C:\Windows\system32\DRIVERS\VSTAZL6.SYS
22:03:51.0533 1200  SrvHsfHDA - ok
22:03:51.0589 1200  [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92       C:\Windows\system32\DRIVERS\VSTDPV6.SYS
22:03:51.0659 1200  SrvHsfV92 - ok
22:03:51.0697 1200  [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac     C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
22:03:51.0741 1200  SrvHsfWinac - ok
22:03:51.0763 1200  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
22:03:51.0780 1200  srvnet - ok
22:03:51.0812 1200  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
22:03:51.0820 1200  SSDPSRV - ok
22:03:51.0837 1200  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
22:03:51.0844 1200  SstpSvc - ok
22:03:51.0890 1200  [ 20E27AA5BCC01C2149830C05FE22F675 ] STacSV          C:\PROGRAM FILES\IDT\WDM\STACSV64.EXE
22:03:51.0898 1200  STacSV - ok
22:03:51.0919 1200  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys
22:03:51.0929 1200  stexstor - ok
22:03:51.0984 1200  [ BEB37CE4E7456F5EFA52D783D1E06D8C ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys
22:03:52.0021 1200  STHDA - ok
22:03:52.0079 1200  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
22:03:52.0102 1200  stisvc - ok
22:03:52.0124 1200  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
22:03:52.0132 1200  swenum - ok
22:03:52.0171 1200  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
22:03:52.0195 1200  swprv - ok
22:03:52.0284 1200  [ C447977ED2A4AE9346FE3A0579A34D7C ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
22:03:52.0343 1200  SynTP - ok
22:03:52.0395 1200  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
22:03:52.0440 1200  SysMain - ok
22:03:52.0453 1200  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
22:03:52.0458 1200  TabletInputService - ok
22:03:52.0508 1200  [ F0B9D3ED88E56D3CD713DFF21E42AAF0 ] tap0901         C:\Windows\system32\DRIVERS\tap0901.sys
22:03:52.0509 1200  tap0901 - ok
22:03:52.0552 1200  [ B70DF208E97536CA9F29289E609F5B16 ] taphss          C:\Windows\system32\DRIVERS\taphss.sys
22:03:52.0559 1200  taphss - ok
22:03:52.0583 1200  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
22:03:52.0590 1200  TapiSrv - ok
22:03:52.0609 1200  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
22:03:52.0613 1200  TBS - ok
22:03:52.0692 1200  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
22:03:52.0759 1200  Tcpip - ok
22:03:52.0837 1200  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
22:03:52.0853 1200  TCPIP6 - ok
22:03:52.0914 1200  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
22:03:52.0925 1200  tcpipreg - ok
22:03:52.0977 1200  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
22:03:52.0983 1200  TDPIPE - ok
22:03:53.0012 1200  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
22:03:53.0019 1200  TDTCP - ok
22:03:53.0047 1200  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
22:03:53.0058 1200  tdx - ok
22:03:53.0071 1200  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
22:03:53.0082 1200  TermDD - ok
22:03:53.0131 1200  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
22:03:53.0154 1200  TermService - ok
22:03:53.0184 1200  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
22:03:53.0187 1200  Themes - ok
22:03:53.0208 1200  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
22:03:53.0211 1200  THREADORDER - ok
22:03:53.0244 1200  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
22:03:53.0251 1200  TrkWks - ok
22:03:53.0290 1200  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
22:03:53.0295 1200  TrustedInstaller - ok
22:03:53.0311 1200  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
22:03:53.0320 1200  tssecsrv - ok
22:03:53.0346 1200  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
22:03:53.0359 1200  TsUsbFlt - ok
22:03:53.0384 1200  [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
22:03:53.0396 1200  TsUsbGD - ok
22:03:53.0426 1200  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
22:03:53.0441 1200  tunnel - ok
22:03:53.0456 1200  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
22:03:53.0472 1200  uagp35 - ok
22:03:53.0500 1200  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
22:03:53.0526 1200  udfs - ok
22:03:53.0584 1200  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
22:03:53.0590 1200  UI0Detect - ok
22:03:53.0623 1200  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
22:03:53.0630 1200  uliagpkx - ok
22:03:53.0655 1200  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
22:03:53.0656 1200  umbus - ok
22:03:53.0677 1200  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\drivers\umpass.sys
22:03:53.0681 1200  UmPass - ok
22:03:53.0799 1200  [ 1B71370AEC1115F80D9A4A209317C968 ] UNS             C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
22:03:53.0870 1200  UNS - ok
22:03:53.0909 1200  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
22:03:53.0921 1200  upnphost - ok
22:03:53.0964 1200  [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
22:03:53.0980 1200  USBAAPL64 - ok
22:03:54.0018 1200  [ 5FCC71487888589A9244AF54CFEFAB29 ] usbbus          C:\Windows\system32\DRIVERS\lgx64bus.sys
22:03:54.0023 1200  usbbus - ok
22:03:54.0056 1200  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
22:03:54.0065 1200  usbccgp - ok
22:03:54.0090 1200  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
22:03:54.0107 1200  usbcir - ok
22:03:54.0142 1200  [ 3FB6E423F7567C92C32EA786F5FD0C69 ] UsbDiag         C:\Windows\system32\DRIVERS\lgx64diag.sys
22:03:54.0148 1200  UsbDiag - ok
22:03:54.0172 1200  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
22:03:54.0180 1200  usbehci - ok
22:03:54.0212 1200  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
22:03:54.0219 1200  usbhub - ok
22:03:54.0260 1200  [ 78D551F5B93488B4666F5FC8DD4815F3 ] USBModem        C:\Windows\system32\DRIVERS\lgx64modem.sys
22:03:54.0267 1200  USBModem - ok
22:03:54.0281 1200  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
22:03:54.0287 1200  usbohci - ok
22:03:54.0313 1200  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\drivers\usbprint.sys
22:03:54.0319 1200  usbprint - ok
22:03:54.0341 1200  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:03:54.0353 1200  USBSTOR - ok
22:03:54.0376 1200  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
22:03:54.0384 1200  usbuhci - ok
22:03:54.0418 1200  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
22:03:54.0425 1200  usbvideo - ok
22:03:54.0447 1200  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
22:03:54.0450 1200  UxSms - ok
22:03:54.0478 1200  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
22:03:54.0480 1200  VaultSvc - ok
22:03:54.0496 1200  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
22:03:54.0501 1200  vdrvroot - ok
22:03:54.0528 1200  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
22:03:54.0539 1200  vds - ok
22:03:54.0559 1200  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
22:03:54.0567 1200  vga - ok
22:03:54.0636 1200  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
22:03:54.0637 1200  VgaSave - ok
22:03:54.0667 1200  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
22:03:54.0680 1200  vhdmp - ok
22:03:54.0694 1200  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
22:03:54.0699 1200  viaide - ok
22:03:54.0717 1200  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
22:03:54.0724 1200  volmgr - ok
22:03:54.0743 1200  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
22:03:54.0758 1200  volmgrx - ok
22:03:54.0774 1200  [ DF8126BD41180351A093A3AD2FC8903B ] volsnap         C:\Windows\system32\drivers\volsnap.sys
22:03:54.0780 1200  volsnap - ok
22:03:54.0811 1200  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
22:03:54.0820 1200  vsmraid - ok
22:03:54.0887 1200  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
22:03:54.0946 1200  VSS - ok
22:03:54.0965 1200  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
22:03:54.0968 1200  vwifibus - ok
22:03:54.0997 1200  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
22:03:55.0000 1200  vwififlt - ok
22:03:55.0050 1200  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
22:03:55.0073 1200  W32Time - ok
22:03:55.0099 1200  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
22:03:55.0108 1200  WacomPen - ok
22:03:55.0153 1200  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
22:03:55.0166 1200  WANARP - ok
22:03:55.0183 1200  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
22:03:55.0186 1200  Wanarpv6 - ok
22:03:55.0296 1200  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
22:03:55.0344 1200  WatAdminSvc - ok
22:03:55.0404 1200  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
22:03:55.0451 1200  wbengine - ok
22:03:55.0469 1200  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
22:03:55.0478 1200  WbioSrvc - ok
22:03:55.0508 1200  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
22:03:55.0531 1200  wcncsvc - ok
22:03:55.0551 1200  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
22:03:55.0558 1200  WcsPlugInService - ok
22:03:55.0583 1200  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys
22:03:55.0593 1200  Wd - ok
22:03:55.0635 1200  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
22:03:55.0658 1200  Wdf01000 - ok
22:03:55.0691 1200  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
22:03:55.0695 1200  WdiServiceHost - ok
22:03:55.0699 1200  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
22:03:55.0703 1200  WdiSystemHost - ok
22:03:55.0724 1200  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll
22:03:55.0730 1200  WebClient - ok
22:03:55.0746 1200  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
22:03:55.0753 1200  Wecsvc - ok
22:03:55.0767 1200  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
22:03:55.0771 1200  wercplsupport - ok
22:03:55.0792 1200  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
22:03:55.0797 1200  WerSvc - ok
22:03:55.0826 1200  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
22:03:55.0830 1200  WfpLwf - ok
22:03:55.0846 1200  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
22:03:55.0852 1200  WIMMount - ok
22:03:55.0878 1200  WinDefend - ok
22:03:55.0892 1200  WinHttpAutoProxySvc - ok
22:03:55.0957 1200  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
22:03:55.0964 1200  Winmgmt - ok
22:03:56.0038 1200  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
22:03:56.0107 1200  WinRM - ok
22:03:56.0159 1200  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUSB.sys
22:03:56.0172 1200  WinUsb - ok
22:03:56.0220 1200  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
22:03:56.0254 1200  Wlansvc - ok
22:03:56.0287 1200  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
22:03:56.0290 1200  wlcrasvc - ok
22:03:56.0391 1200  [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:03:56.0449 1200  wlidsvc - ok
22:03:56.0486 1200  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
22:03:56.0489 1200  WmiAcpi - ok
22:03:56.0523 1200  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
22:03:56.0528 1200  wmiApSrv - ok
22:03:56.0572 1200  WMPNetworkSvc - ok
22:03:56.0595 1200  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
22:03:56.0601 1200  WPCSvc - ok
22:03:56.0616 1200  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
22:03:56.0624 1200  WPDBusEnum - ok
22:03:56.0649 1200  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
22:03:56.0662 1200  ws2ifsl - ok
22:03:56.0682 1200  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
22:03:56.0687 1200  wscsvc - ok
22:03:56.0691 1200  WSearch - ok
22:03:56.0778 1200  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
22:03:56.0851 1200  wuauserv - ok
22:03:56.0892 1200  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
22:03:56.0902 1200  WudfPf - ok
22:03:56.0919 1200  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
22:03:56.0932 1200  WUDFRd - ok
22:03:56.0946 1200  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
22:03:56.0960 1200  wudfsvc - ok
22:03:56.0997 1200  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll
22:03:57.0006 1200  WwanSvc - ok
22:03:57.0041 1200  ================ Scan global ===============================
22:03:57.0072 1200  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
22:03:57.0122 1200  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:03:57.0157 1200  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:03:57.0213 1200  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
22:03:57.0244 1200  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
22:03:57.0253 1200  [Global] - ok
22:03:57.0254 1200  ================ Scan MBR ==================================
22:03:57.0271 1200  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
22:03:57.0693 1200  \Device\Harddisk0\DR0 - ok
22:03:57.0698 1200  ================ Scan VBR ==================================
22:03:57.0703 1200  [ C02A8077E90ECA2776EB3EC7D2993680 ] \Device\Harddisk0\DR0\Partition1
22:03:57.0705 1200  \Device\Harddisk0\DR0\Partition1 - ok
22:03:57.0732 1200  [ 1F643AD0EF73FA5174175ADED274BF4E ] \Device\Harddisk0\DR0\Partition2
22:03:57.0734 1200  \Device\Harddisk0\DR0\Partition2 - ok
22:03:57.0760 1200  [ 263FA9B55B6E6777FCAEAD567B3533D0 ] \Device\Harddisk0\DR0\Partition3
22:03:57.0762 1200  \Device\Harddisk0\DR0\Partition3 - ok
22:03:57.0775 1200  [ 049666146378D08EB49062650B4D8CE3 ] \Device\Harddisk0\DR0\Partition4
22:03:57.0777 1200  \Device\Harddisk0\DR0\Partition4 - ok
22:03:57.0778 1200  ============================================================
22:03:57.0778 1200  Scan finished
22:03:57.0778 1200  ============================================================
22:03:57.0798 3692  Detected object count: 0
22:03:57.0798 3692  Actual detected object count: 0


#4 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:59 PM

Posted 27 July 2013 - 05:44 AM

ESET Online Scanner

==================

Note: If your AV is blocking Eset online scanner, please temporarily disable your AV.

 

I'd like us to scan your machine with ESET OnlineScan This process may may take several hours, that is normal.

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and » UNCHECK "Remove found threats" <== Important
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Copy and paste the information in your next reply. (If no malware was found you will not be presented with a log).
  • Click the Back button.
  • Click the Finish button.

===================================================


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#5 blueblue90

blueblue90
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:59 PM

Posted 28 July 2013 - 05:21 AM

ESET TEXT LOG
 
C:\Documents and Settings\KT\Documents\Applications\avira_free_antivirus_en.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Documents and Settings\KT\Documents\Applications\AVStoDVD_242_Install.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Documents and Settings\KT\Documents\Applications\cdbxp_setup_4.4.1.3243.exe Win32/OpenCandy application
C:\Documents and Settings\KT\Documents\Applications\FreeStudio.exe multiple threats
C:\Documents and Settings\KT\Documents\Applications\InstallFreeRARExtractFrog.exe multiple threats
C:\Documents and Settings\KT\Documents\Applications\SetupImgBurn_2.5.7.0.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Documents and Settings\KT\Documents\Applications 3\avira_free_antivirus_en (1).exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Documents and Settings\KT\Documents\Applications 3\avira_free_antivirus_en.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Documents and Settings\KT\Documents\Applications 3\avira_internet_security_en.rar a variant of Win32/Bundled.Toolbar.Ask application
C:\Documents and Settings\KT\Documents\Applications 4\DTLite4461-0328.exe Win32/OpenCandy application
C:\Documents and Settings\KT\Downloads\ca_setup.exe a variant of Win32/CainAbel application
C:\Documents and Settings\KT\Downloads\Hirens.BootCD.15.2.zip Win32/PSWTool.KonBoot.A application
C:\Documents and Settings\KT\Downloads\ninja-setup-2.4.2.exe Win32/OpenCandy application
C:\Documents and Settings\KT\Downloads\PDFXVwer.zip a variant of Win32/Bundled.Toolbar.Ask application
C:\Documents and Settings\KT\Downloads\PhotoScape_V3.6.3.exe Win32/OpenCandy application
C:\Documents and Settings\KT\Downloads\WXPVOL_EN.iso multiple threats
C:\Documents and Settings\KT\Downloads\Hirens.BootCD.15.2\Hiren's.BootCD.15.2.iso Win32/PSWTool.KonBoot.A application
C:\Program Files (x86)\Avira\AntiVir Desktop\apnic.dll a variant of Win32/Bundled.Toolbar.Ask application
C:\Program Files (x86)\Avira\AntiVir Desktop\apntoolbarinstaller.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Program Files (x86)\Avira\AntiVir Desktop\Offercast_AVIRAV7_.exe a variant of Win32/Bundled.Toolbar.Ask.D application
C:\Program Files (x86)\AVStoDVD\ImgBurn\SetupImgBurn_2.5.5.0.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Program Files (x86)\Common Files\DVDVideoSoft\AskTB\ApnIC.dll a variant of Win32/Bundled.Toolbar.Ask application
C:\Program Files (x86)\Common Files\DVDVideoSoft\AskTB\ApnToolbarInstaller.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Documents\Applications\avira_free_antivirus_en.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Documents\Applications\AVStoDVD_242_Install.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Documents\Applications\cdbxp_setup_4.4.1.3243.exe Win32/OpenCandy application
C:\Users\KT\Documents\Applications\FreeStudio.exe multiple threats
C:\Users\KT\Documents\Applications\InstallFreeRARExtractFrog.exe multiple threats
C:\Users\KT\Documents\Applications\SetupImgBurn_2.5.7.0.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Documents\Applications 3\avira_free_antivirus_en (1).exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Documents\Applications 3\avira_free_antivirus_en.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Documents\Applications 3\avira_internet_security_en.rar a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Documents\Applications 4\DTLite4461-0328.exe Win32/OpenCandy application
C:\Users\KT\Downloads\ca_setup.exe a variant of Win32/CainAbel application
C:\Users\KT\Downloads\Hirens.BootCD.15.2.zip Win32/PSWTool.KonBoot.A application
C:\Users\KT\Downloads\ninja-setup-2.4.2.exe Win32/OpenCandy application
C:\Users\KT\Downloads\PDFXVwer.zip a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\KT\Downloads\PhotoScape_V3.6.3.exe Win32/OpenCandy application
C:\Users\KT\Downloads\WXPVOL_EN.iso multiple threats
C:\Users\KT\Downloads\Hirens.BootCD.15.2\Hiren's.BootCD.15.2.iso Win32/PSWTool.KonBoot.A application
C:\Users\KT\Downloads\PDFXVwer\PDFXVwer.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\ApnIC[1].0 a variant of Win32/Bundled.Toolbar.Ask application
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\ApnIC[1].0 a variant of Win32/Bundled.Toolbar.Ask application

Edited by blueblue90, 28 July 2013 - 05:27 AM.


#6 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:59 PM

Posted 28 July 2013 - 06:21 AM

:step1: Remove these infections:

 

C:\Documents and Settings\KT\Documents\Applications\FreeStudio.exe multiple threats
C:\Documents and Settings\KT\Documents\Applications\InstallFreeRARExtractFrog.exe multiple threats
C:\Documents and Settings\KT\Downloads\ca_setup.exe a variant of Win32/CainAbel application
C:\Documents and Settings\KT\Downloads\WXPVOL_EN.iso multiple threats
C:\Users\KT\Documents\Applications\FreeStudio.exe multiple threats
C:\Users\KT\Downloads\WXPVOL_EN.iso multiple threats

 

  Just remove them and empty the recycle bin.

 

:step2: The other 'mentioned' infections are just programs that are wrapped in with toolbar. So it's your choice to keep them er to delete them. Note: Don't remove the Avira's toolbar because it can broken the AV.

 

:step3: ZIP the following files:

  • C:\Windows\Minidump\072613-18626-01.dmp
  • C:\Windows\Minidump\072513-15724-01.dmp

:step4: Upload the ZIP.


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#7 blueblue90

blueblue90
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:59 PM

Posted 28 July 2013 - 07:42 PM

Those files are on all of my other 3 laptops and have been there for a very long time and none of my other laptops are getting the blue screen. So I do not think that these files are infections at all.

 

I also cannot find the file "C:\Windows\Minidump\072613-18626-01.dmp." The Minidump folder is empty. Where do I look?

 

I am pretty sure now that I do not have an infection. I will look for more help.


Edited by blueblue90, 29 July 2013 - 08:57 AM.


#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:59 PM

Posted 30 July 2013 - 07:29 AM

When Windows crashes or you experience a Blue Screen Of Death (BSOD), the system writes a file called memory dump which contains "Debugging" information. Minidump files are created in the C:\Windows\Minidump folder and they normally have a random name with a .dmp extension. Memory.dmp is a full memory dump file which is saved to the C:\Windows\ folder. This information is useful to help troubleshoot and identify why your computer crashed unexpectedly and when you are trying to figure out what caused a particular crash or stop error.

Since memory dumps can be caused by a variety of issues to include buggy drivers, .dll errors, memory allocation errors, COM errors, faulty RAM, hardware problems, HIVE crash, etc. further investigation is needed to determine the source. You can download and install Microsoft Debugging Tools to read and investigate minidump files. This guide (How to View Windows Minidump Files) helps you to install the Debugging Tools and to read and decipher Minidump files. It also includes a link to download and install a program called WhoCrashed which automatically analyzes and deciphers the crash dump files on a computer, then advises the cause of that crash.

Another alternative is to submit the Minidump files to someone who knows how to read them. There is no official way to submit Minidump files to Microsoft but zipping and sending (uploading) them is something a MS Support Engineer may ask during a request for support. The Support Engineer would then download the files, run an analysis and advise you what may be causing the error.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users