Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Removed Trojan Alureon with Windows Defender Offline and now PC won't boot


  • This topic is locked This topic is locked
14 replies to this topic

#1 ZanaH

ZanaH

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 17 November 2013 - 09:21 PM

Hello, this morning I learned a laptop we'd just recently bought used (but we haven't used it at all yet) has had the Trojan Alureon on it. I did what MS Security Essentials asked me to do and made a bootable Windows Defender Offline disc and removed it. Since then, every attempt to boot the PC has it blue screen for a split second then restart. The computer will not boot. Windows Startup Repair says it cannot repair my computer automatically, so I'm at a loss here.

 

I've read up on the web about some cases like this, but I'm still a little lost on what to do.

 

I've read a little bit on this topic here, on this very forum, and I'm wondering if it's even possible to fix my laptop now. Do I need to get FRST logs, as far as I can tell I can't get to the desktop to run FRST, what next? Any help would be appreciated, thanks!

 

Of course, the thread name is the same as that guy's title because he put the problem into words perfectly, so I figured it'd be best to use a similar one.


Edited by ZanaH, 17 November 2013 - 11:02 PM.


BC AdBot (Login to Remove)

 


#2 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 18 November 2013 - 03:46 AM

Hi there,
my name is Marius and I will assist you with your malware related problems.

Before we move on, please read the following points carefully.

  • First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
  • My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

 

 

Which windows version is running? Also tell us, if it is 32- or 64bit.


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#3 ZanaH

ZanaH
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 18 November 2013 - 11:11 AM

Hi, thank you for the response!

My laptop is running Windows 7 and is 64 bit!

#4 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 19 November 2013 - 04:09 AM

Scan with FRST (Recovery Environment)


To run FRST on Vista and Windows7:



Plug the flashdrive into the infected PC.

Enter System Recovery Options.


To enter System Recovery Options from the Advanced Boot Options:

  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Choose your language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.



To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Choose your language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.


On the System Recovery Options menu you will get the following options:

  • Startup Repair
  • System Restore
  • Windows Complete PC Restore
  • Windows Memory Diagnostic Tool
  • Command Prompt
  • Select Command Prompt


  • In the command window:
  • type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
  • Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.

It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#5 ZanaH

ZanaH
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 19 November 2013 - 07:28 PM

Thanks Marius! Here are the results of the scan:

 

"Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-11-2013 02

Ran by SYSTEM on MININT-EKFC35E on 19-11-2013 18:23:03
Running from G:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Recovery
 
The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [HotKeysCmds] - "C:\Windows\system32\hkcmd.exe"
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
 
==================== Services (Whitelisted) =================
 
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-07-17] ()
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3377904 2013-07-17] (Intel® Corporation)
 
==================== Drivers (Whitelisted) ====================
 
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2013-11-19 18:22 - 2013-11-19 18:22 - 00000000 ____D C:\FRST
2013-11-17 19:52 - 2013-11-17 20:02 - 00000000 ____D C:\Windows\Microsoft Antimalware
2013-11-17 17:30 - 2013-11-17 17:30 - 00000000 ____D C:\e0d3f196c8243b118f
2013-11-17 17:10 - 2013-11-17 20:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-11-17 17:10 - 2013-11-17 20:02 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-11-17 16:23 - 2013-11-17 16:23 - 00001945 _____ C:\Windows\epplauncher.mif
2013-11-17 16:21 - 2013-11-17 16:22 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-17 16:21 - 2013-11-17 16:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-17 16:20 - 2013-11-17 16:21 - 13670584 _____ (Microsoft Corporation) C:\Users\Adrian\Downloads\mseinstall.exe
2013-11-17 16:16 - 2013-11-17 16:16 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-17 16:15 - 2013-11-17 16:36 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-17 16:15 - 2013-11-17 16:25 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-17 16:15 - 2013-11-17 16:20 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-17 16:15 - 2013-11-17 16:20 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-17 16:15 - 2013-11-17 16:16 - 00000000 ____D C:\Users\Adrian\AppData\Local\Google
2013-11-17 16:15 - 2013-11-17 16:16 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-17 16:15 - 2013-11-17 16:15 - 00058016 _____ C:\Users\Adrian\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 16:15 - 2013-11-17 16:15 - 00000000 ____D C:\Users\Adrian\AppData\Local\Deployment
2013-11-17 16:15 - 2013-11-17 16:15 - 00000000 ____D C:\Users\Adrian\AppData\Local\Apps\2.0
2013-11-17 15:45 - 2013-11-17 15:49 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\iolo
2013-11-17 15:45 - 2013-11-17 15:49 - 00000000 ____D C:\ProgramData\iolo
2013-11-17 15:45 - 2013-11-17 15:45 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dll
2013-11-17 15:45 - 2012-08-17 15:25 - 00069000 _____ (Microsoft Corporation) C:\Windows\System32\offreg.dll
2013-11-17 15:45 - 2012-08-17 15:25 - 00021176 _____ (iolo technologies, LLC) C:\Windows\System32\iolorgdf64.exe
2013-11-17 15:44 - 2013-11-17 15:44 - 00000000 ____D C:\Windows\System32\Tasks\Sony Corporation
2013-11-17 15:44 - 2013-11-17 15:44 - 00000000 ____D C:\ProgramData\McAfee
2013-11-17 15:44 - 2013-11-17 15:44 - 00000000 ____D C:\Program Files (x86)\Sony
2013-11-17 15:42 - 2013-11-17 15:42 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-11-17 15:42 - 2013-11-17 15:42 - 00000000 ____D C:\Program Files\Sony
2013-11-17 15:40 - 2013-11-17 15:40 - 00772430 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-17 15:29 - 2013-11-17 15:29 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-11-17 15:29 - 2013-11-17 15:29 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-11-17 15:28 - 2013-11-17 15:28 - 00000000 ____D C:\ProgramData\Intel.sav
2013-11-17 15:26 - 2013-11-17 15:26 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-17 15:22 - 2013-11-17 15:22 - 00015814 _____ C:\Windows\System32\results.xml
2013-11-17 15:20 - 2012-05-15 05:13 - 00144896 _____ (Intel Corporation) C:\Windows\System32\IntelOpenCL64.dll
2013-11-17 15:20 - 2012-05-15 05:13 - 00020992 _____ (Khronos Group) C:\Windows\System32\OpenCL.dll
2013-11-17 15:20 - 2012-05-15 04:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2013-11-17 15:20 - 2012-05-15 04:20 - 00017920 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-17 15:14 - 2013-11-17 15:16 - 92852712 _____ (Intel® Corporation) C:\Users\Adrian\Downloads\Wireless_16.1.1_s64.exe
2013-11-17 15:13 - 2013-11-17 15:15 - 145394600 _____ (Intel Corporation) C:\Users\Adrian\Downloads\Win64_152818.exe
2013-11-17 14:18 - 2013-04-16 23:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-11-17 14:18 - 2013-04-16 22:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-11-17 14:18 - 2012-02-10 22:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\System32\spoolsv.exe
2013-11-17 14:18 - 2012-02-10 22:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-11-17 14:18 - 2011-03-24 19:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-11-17 14:18 - 2011-03-24 19:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2013-11-17 14:18 - 2011-03-24 19:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2013-11-17 14:18 - 2011-03-24 19:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2013-11-17 14:18 - 2011-03-24 19:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2013-11-17 14:18 - 2011-03-24 19:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2013-11-17 14:18 - 2011-03-24 19:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2013-11-17 14:18 - 2011-03-10 22:41 - 00410496 _____ (Intel Corporation) C:\Windows\System32\Drivers\iaStorV.sys
2013-11-17 14:18 - 2011-03-10 22:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\storport.sys
2013-11-17 14:18 - 2011-03-10 22:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvstor.sys
2013-11-17 14:18 - 2011-03-10 22:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvraid.sys
2013-11-17 14:18 - 2011-03-10 22:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\System32\Drivers\amdsata.sys
2013-11-17 14:18 - 2011-03-10 22:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\System32\Drivers\amdxata.sys
2013-11-17 14:18 - 2011-03-10 22:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\System32\esent.dll
2013-11-17 14:18 - 2011-03-10 22:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\System32\fsutil.exe
2013-11-17 14:18 - 2011-03-10 21:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-11-17 14:18 - 2011-03-10 21:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2013-11-17 14:18 - 2011-03-10 20:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBSTOR.SYS
2013-11-17 14:06 - 2013-11-17 14:06 - 00000000 ____D C:\Windows\System32\MpEngineStore
2013-11-17 14:05 - 2013-11-17 14:05 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Adobe
2013-11-17 13:38 - 2013-10-14 16:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\System32\IEUDINIT.EXE
2013-11-17 13:34 - 2013-11-17 13:34 - 23212032 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 12995584 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 05765120 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-17 13:34 - 2013-11-17 13:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-11-17 13:34 - 2013-11-17 13:34 - 02332160 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01993728 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-11-17 13:34 - 2013-11-17 13:34 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-17 13:34 - 2013-11-17 13:34 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01394176 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01228800 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00942592 _____ (Microsoft Corporation) C:\Windows\System32\jsIntl.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00774144 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-17 13:34 - 2013-11-17 13:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-11-17 13:34 - 2013-11-17 13:34 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00413696 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2013-11-17 13:34 - 2013-11-17 13:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-17 13:34 - 2013-11-17 13:34 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00263376 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00247808 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00147968 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00143872 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00131072 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00090112 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-11-17 13:34 - 2013-11-17 13:34 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-17 13:34 - 2013-11-17 13:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2013-11-17 13:31 - 2013-11-17 13:38 - 00012004 _____ C:\Windows\IE11_main.log
2013-11-17 13:26 - 2013-11-17 16:40 - 02063003 _____ C:\Windows\WindowsUpdate.log
2013-11-17 13:26 - 2013-11-17 13:26 - 00001355 _____ C:\Windows\TSSysprep.log
2013-11-17 13:23 - 2013-11-17 11:32 - 00000000 ____D C:\Windows\Panther
2013-11-17 13:04 - 2013-11-17 13:11 - 00010247 _____ C:\Windows\IE10_main.log
2013-11-17 13:01 - 2012-08-23 06:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys
2013-11-17 13:01 - 2012-08-23 06:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbGD.sys
2013-11-17 13:01 - 2012-08-23 06:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys
2013-11-17 13:01 - 2012-08-23 05:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-17 13:01 - 2012-08-23 05:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-17 13:01 - 2012-08-23 05:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll
2013-11-17 13:00 - 2012-08-23 06:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\rdpudd.dll
2013-11-17 13:00 - 2012-08-23 05:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-11-17 13:00 - 2012-08-23 05:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-11-17 13:00 - 2012-08-23 05:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll
2013-11-17 13:00 - 2012-08-23 05:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-11-17 13:00 - 2012-08-23 05:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll
2013-11-17 13:00 - 2012-08-23 05:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll
2013-11-17 13:00 - 2012-08-23 04:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-11-17 13:00 - 2012-08-23 03:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2013-11-17 13:00 - 2012-08-23 03:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-11-17 13:00 - 2012-08-23 03:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe
2013-11-17 13:00 - 2012-08-23 03:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-11-17 13:00 - 2012-08-23 02:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-11-17 13:00 - 2012-08-23 02:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\rdpendp_winip.dll
2013-11-17 13:00 - 2012-08-23 02:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-11-17 13:00 - 2012-08-23 02:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2013-11-17 13:00 - 2012-08-23 01:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2013-11-17 13:00 - 2012-08-23 00:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-11-17 13:00 - 2012-08-23 00:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-11-17 12:53 - 2013-11-17 12:55 - 00003249 _____ C:\Windows\IE9_main.log
2013-11-17 12:46 - 2012-07-25 19:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\System32\WUDFx.dll
2013-11-17 12:46 - 2012-07-25 19:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\WUDFHost.exe
2013-11-17 12:46 - 2012-07-25 19:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\System32\WUDFPlatform.dll
2013-11-17 12:46 - 2012-07-25 19:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\WUDFSvc.dll
2013-11-17 12:46 - 2012-07-25 19:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\System32\WUDFCoinstaller.dll
2013-11-17 12:46 - 2012-07-25 18:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFRd.sys
2013-11-17 12:46 - 2012-07-25 18:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFPf.sys
2013-11-17 12:46 - 2012-06-02 06:57 - 00000003 _____ C:\Windows\System32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-11-17 12:43 - 2013-11-17 12:43 - 00000000 ____D C:\Windows\System32\MRT
2013-11-17 12:43 - 2013-11-07 14:00 - 82896128 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-11-17 12:41 - 2013-11-17 15:29 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-17 12:41 - 2013-11-17 15:19 - 00000000 ____D C:\Intel
2013-11-17 12:38 - 2013-01-13 13:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-11-17 12:38 - 2013-01-13 12:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-17 12:38 - 2013-01-13 12:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-11-17 12:38 - 2013-01-13 12:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-11-17 12:38 - 2013-01-13 12:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-11-17 12:38 - 2013-01-13 12:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-11-17 12:38 - 2013-01-13 11:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-11-17 12:38 - 2013-01-13 11:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-11-17 12:38 - 2013-01-13 11:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-11-17 12:38 - 2013-01-13 11:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-11-17 12:38 - 2013-01-13 11:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-11-17 12:38 - 2013-01-13 11:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-11-17 12:38 - 2013-01-13 11:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-11-17 12:38 - 2013-01-13 11:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-11-17 12:38 - 2013-01-13 11:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-11-17 12:38 - 2013-01-13 11:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-11-17 12:38 - 2013-01-13 11:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-11-17 12:38 - 2013-01-13 11:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-11-17 12:38 - 2013-01-13 11:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-11-17 12:38 - 2013-01-13 11:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-11-17 12:38 - 2013-01-13 11:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-11-17 12:38 - 2013-01-13 11:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-11-17 12:38 - 2013-01-13 11:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-11-17 12:38 - 2013-01-13 11:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-11-17 12:38 - 2013-01-13 11:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-17 12:38 - 2013-01-13 10:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-11-17 12:38 - 2013-01-13 10:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-11-17 12:38 - 2013-01-13 10:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-11-17 12:38 - 2013-01-13 09:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-11-17 12:38 - 2013-01-13 09:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-11-17 12:38 - 2013-01-03 22:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-11-17 12:38 - 2013-01-03 22:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-11-17 12:25 - 2012-02-29 22:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\fs_rec.sys
2013-11-17 12:25 - 2012-02-29 22:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2013-11-17 12:25 - 2012-02-29 22:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\wmi.dll
2013-11-17 12:25 - 2012-02-29 21:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-11-17 12:25 - 2012-02-29 21:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-11-17 12:20 - 2013-10-05 12:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-11-17 12:20 - 2013-10-05 11:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-17 12:20 - 2013-10-03 18:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\System32\SmartcardCredentialProvider.dll
2013-11-17 12:20 - 2013-10-03 18:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\credui.dll
2013-11-17 12:20 - 2013-10-03 18:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-11-17 12:20 - 2013-10-03 17:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-17 12:20 - 2013-10-03 17:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-17 12:20 - 2013-10-03 17:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-17 12:20 - 2013-08-28 18:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-11-17 12:20 - 2013-08-28 18:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-11-17 12:20 - 2013-08-28 18:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll
2013-11-17 12:20 - 2013-08-28 18:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-11-17 12:20 - 2013-08-28 18:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2013-11-17 12:20 - 2013-08-28 17:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-11-17 12:20 - 2013-08-28 17:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-11-17 12:20 - 2013-08-28 17:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-11-17 12:20 - 2013-08-28 17:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-11-17 12:20 - 2013-08-28 17:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-11-17 12:20 - 2013-08-28 17:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-11-17 12:20 - 2013-08-28 16:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-11-17 12:20 - 2013-08-28 16:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-11-17 12:20 - 2013-08-28 16:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-11-17 12:20 - 2013-08-28 16:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-11-17 12:20 - 2013-08-01 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-11-17 12:20 - 2013-08-01 18:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-11-17 12:20 - 2013-08-01 18:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-11-17 12:20 - 2013-08-01 17:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 17:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-11-17 12:20 - 2013-08-01 16:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-11-17 12:20 - 2013-08-01 16:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 16:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 16:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-11-17 12:20 - 2013-08-01 16:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-11-17 12:20 - 2013-07-08 21:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-11-17 12:20 - 2013-07-08 21:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-11-17 12:20 - 2013-07-08 20:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-11-17 12:20 - 2013-07-08 20:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-11-17 12:20 - 2012-01-04 02:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\System32\ntshrui.dll
2013-11-17 12:20 - 2012-01-04 00:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-11-17 12:19 - 2013-02-26 22:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-11-17 12:19 - 2013-02-26 21:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-11-17 12:19 - 2012-12-07 05:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\System32\Wpc.dll
2013-11-17 12:19 - 2012-12-07 05:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\System32\gameux.dll
2013-11-17 12:19 - 2012-12-07 04:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-11-17 12:19 - 2012-12-07 04:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-11-17 12:19 - 2012-12-07 03:20 - 00045568 _____ (Microsoft) C:\Windows\System32\oflc-nz.rs
2013-11-17 12:19 - 2012-12-07 03:20 - 00044544 _____ (Microsoft) C:\Windows\System32\pegibbfc.rs
2013-11-17 12:19 - 2012-12-07 03:20 - 00043520 _____ (Microsoft) C:\Windows\System32\csrr.rs
2013-11-17 12:19 - 2012-12-07 03:20 - 00030720 _____ (Microsoft) C:\Windows\System32\usk.rs
2013-11-17 12:19 - 2012-12-07 03:20 - 00023552 _____ (Microsoft) C:\Windows\System32\oflc.rs
2013-11-17 12:19 - 2012-12-07 03:20 - 00020480 _____ (Microsoft) C:\Windows\System32\pegi-pt.rs
2013-11-17 12:19 - 2012-12-07 03:20 - 00020480 _____ (Microsoft) C:\Windows\System32\pegi-fi.rs
2013-11-17 12:19 - 2012-12-07 03:19 - 00055296 _____ (Microsoft) C:\Windows\System32\cero.rs
2013-11-17 12:19 - 2012-12-07 03:19 - 00051712 _____ (Microsoft) C:\Windows\System32\esrb.rs
2013-11-17 12:19 - 2012-12-07 03:19 - 00046592 _____ (Microsoft) C:\Windows\System32\fpb.rs
2013-11-17 12:19 - 2012-12-07 03:19 - 00040960 _____ (Microsoft) C:\Windows\System32\cob-au.rs
2013-11-17 12:19 - 2012-12-07 03:19 - 00021504 _____ (Microsoft) C:\Windows\System32\grb.rs
2013-11-17 12:19 - 2012-12-07 03:19 - 00020480 _____ (Microsoft) C:\Windows\System32\pegi.rs
2013-11-17 12:19 - 2012-12-07 03:19 - 00015360 _____ (Microsoft) C:\Windows\System32\djctq.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-11-17 12:19 - 2012-12-07 02:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-11-17 12:19 - 2012-11-29 21:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-11-17 12:19 - 2012-11-29 21:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-11-17 12:19 - 2012-11-29 21:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-11-17 12:19 - 2012-11-29 15:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-11-17 12:19 - 2012-11-29 15:15 - 00420064 _____ C:\Windows\System32\locale.nls
2013-11-17 12:19 - 2012-10-03 09:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2013-11-17 12:19 - 2012-10-03 09:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\System32\netcorehc.dll
2013-11-17 12:19 - 2012-10-03 09:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2013-11-17 12:19 - 2012-10-03 09:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\nlaapi.dll
2013-11-17 12:19 - 2012-10-03 09:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\netevent.dll
2013-11-17 12:19 - 2012-10-03 09:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll
2013-11-17 12:19 - 2012-10-03 08:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-11-17 12:19 - 2012-10-03 08:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-11-17 12:19 - 2012-10-03 08:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-11-17 12:19 - 2012-10-03 08:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpipreg.sys
2013-11-17 12:19 - 2012-01-12 23:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-11-17 12:18 - 2013-05-09 21:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-11-17 12:18 - 2013-05-09 19:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-11-17 12:18 - 2013-04-25 15:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-11-17 12:18 - 2013-03-31 14:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-11-17 12:18 - 2012-10-09 10:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll
2013-11-17 12:18 - 2012-10-09 10:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll
2013-11-17 12:18 - 2012-10-09 09:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-11-17 12:18 - 2012-10-09 09:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-11-17 12:16 - 2013-09-24 18:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-11-17 12:16 - 2013-09-24 18:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2013-11-17 12:16 - 2013-09-24 18:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2013-11-17 12:16 - 2013-09-24 18:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2013-11-17 12:16 - 2013-09-24 18:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2013-11-17 12:16 - 2013-09-24 18:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-11-17 12:16 - 2013-09-24 18:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-11-17 12:16 - 2013-09-24 18:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-11-17 12:16 - 2013-09-24 17:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-17 12:16 - 2013-09-24 17:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-17 12:16 - 2013-09-24 17:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-17 12:16 - 2013-09-24 17:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-17 12:16 - 2013-09-24 17:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2013-11-17 12:16 - 2013-09-07 18:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-11-17 12:16 - 2013-09-07 18:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll
2013-11-17 12:16 - 2013-09-07 18:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-11-17 12:16 - 2013-07-25 18:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-11-17 12:16 - 2013-07-25 18:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-11-17 12:16 - 2013-07-25 17:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-11-17 12:16 - 2013-07-25 17:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-11-17 12:16 - 2013-07-04 04:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll
2013-11-17 12:16 - 2013-07-04 04:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2013-11-17 12:16 - 2013-07-04 04:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-11-17 12:16 - 2013-07-04 03:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-11-17 12:16 - 2013-07-04 03:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-11-17 12:16 - 2013-07-04 02:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2013-11-17 12:16 - 2013-06-25 14:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-11-17 12:16 - 2013-04-12 06:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-11-17 12:16 - 2012-11-28 14:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdfLdr.sys
2013-11-17 12:16 - 2012-11-28 14:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\Wdfres.dll
2013-11-17 12:16 - 2012-11-28 14:56 - 00000003 _____ C:\Windows\System32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-11-17 12:16 - 2012-08-21 13:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\System32\OxpsConverter.exe
2013-11-17 12:16 - 2012-04-30 21:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2013-11-17 12:16 - 2011-11-16 22:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\System32\webio.dll
2013-11-17 12:16 - 2011-11-16 21:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-11-17 12:16 - 2011-05-03 21:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\System32\tquery.dll
2013-11-17 12:16 - 2011-05-03 21:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\System32\mssrch.dll
2013-11-17 12:16 - 2011-05-03 21:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\System32\mssvp.dll
2013-11-17 12:16 - 2011-05-03 21:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\System32\mssph.dll
2013-11-17 12:16 - 2011-05-03 21:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\System32\mssphtb.dll
2013-11-17 12:16 - 2011-05-03 21:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\System32\msscntrs.dll
2013-11-17 12:16 - 2011-05-03 21:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe
2013-11-17 12:16 - 2011-05-03 21:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe
2013-11-17 12:16 - 2011-05-03 21:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe
2013-11-17 12:16 - 2011-05-03 20:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-11-17 12:16 - 2011-05-03 20:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-11-17 12:16 - 2011-05-03 20:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-11-17 12:16 - 2011-05-03 20:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-11-17 12:16 - 2011-05-03 20:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-11-17 12:16 - 2011-05-03 20:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-11-17 12:16 - 2011-05-03 20:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-11-17 12:16 - 2011-05-03 20:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-11-17 12:16 - 2011-05-03 20:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-11-17 12:16 - 2011-04-28 19:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2013-11-17 12:16 - 2011-04-28 19:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2013-11-17 12:16 - 2011-04-28 19:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2013-11-17 12:16 - 2011-04-22 14:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Diskdump.sys
2013-11-17 12:16 - 2010-12-23 02:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\System32\sbe.dll
2013-11-17 12:16 - 2010-12-23 02:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\System32\CPFilters.dll
2013-11-17 12:16 - 2010-12-23 02:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\System32\mpg2splt.ax
2013-11-17 12:16 - 2010-12-22 21:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-11-17 12:16 - 2010-12-22 21:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-11-17 12:16 - 2010-12-22 21:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-11-17 12:15 - 2013-08-27 17:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\System32\scavengeui.dll
2013-11-17 12:15 - 2013-08-04 18:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys
2013-11-17 12:15 - 2013-07-25 01:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-11-17 12:15 - 2013-07-25 00:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-11-17 12:15 - 2013-07-18 17:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-11-17 12:15 - 2013-07-18 17:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-11-17 12:15 - 2013-05-12 21:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-11-17 12:15 - 2013-05-12 19:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-11-17 12:15 - 2013-05-12 19:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-11-17 12:15 - 2013-05-12 19:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-11-17 12:15 - 2013-04-25 21:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-11-17 12:15 - 2013-04-25 20:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-11-17 12:15 - 2013-03-18 21:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-11-17 12:15 - 2013-03-18 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-11-17 12:15 - 2012-11-21 21:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\usp10.dll
2013-11-17 12:15 - 2012-11-21 20:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-11-17 12:15 - 2012-10-31 21:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-11-17 12:15 - 2012-10-31 21:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-11-17 12:15 - 2012-10-31 20:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-11-17 12:15 - 2012-10-31 20:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-11-17 12:15 - 2012-08-22 10:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2013-11-17 12:15 - 2012-07-04 12:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\RNDISMP.sys
2013-11-17 12:15 - 2012-05-05 00:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2013-11-17 12:15 - 2012-05-04 23:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-11-17 12:15 - 2012-05-04 03:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2013-11-17 12:15 - 2012-05-04 01:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-11-17 12:15 - 2012-04-07 04:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2013-11-17 12:15 - 2012-04-07 03:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-11-17 12:15 - 2011-08-16 21:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\System32\psisdecd.dll
2013-11-17 12:15 - 2011-08-16 21:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\System32\psisrndr.ax
2013-11-17 12:15 - 2011-08-16 20:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-11-17 12:15 - 2011-08-16 20:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-11-17 12:15 - 2011-06-15 21:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\xmllite.dll
2013-11-17 12:15 - 2011-06-15 20:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-11-17 12:15 - 2011-04-08 22:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2013-11-17 12:15 - 2011-04-08 21:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-11-17 12:15 - 2011-03-10 22:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\System32\mfc42.dll
2013-11-17 12:15 - 2011-03-10 22:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\System32\mfc42u.dll
2013-11-17 12:15 - 2011-03-10 21:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-11-17 12:15 - 2011-03-10 21:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-11-17 12:15 - 2010-06-25 19:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2013-11-17 12:15 - 2010-06-25 19:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-11-17 12:14 - 2013-10-02 18:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-11-17 12:14 - 2013-10-02 18:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-17 12:14 - 2013-09-27 17:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-11-17 12:14 - 2013-08-27 17:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-11-17 12:14 - 2013-07-12 02:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys
2013-11-17 12:14 - 2013-07-12 02:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-11-17 12:14 - 2013-07-08 21:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-11-17 12:14 - 2013-07-08 21:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-11-17 12:14 - 2013-07-08 20:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-11-17 12:14 - 2013-07-08 20:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-11-17 12:14 - 2013-07-04 04:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-11-17 12:14 - 2013-07-04 03:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-11-17 12:14 - 2013-06-14 20:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tssecsrv.sys
2013-11-17 12:14 - 2013-06-05 21:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2013-11-17 12:14 - 2013-06-05 21:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-11-17 12:14 - 2013-06-05 21:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2013-11-17 12:14 - 2013-06-05 21:47 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-11-17 12:14 - 2013-06-05 20:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-11-17 12:14 - 2013-06-05 20:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-11-17 12:14 - 2013-06-05 20:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-11-17 12:14 - 2013-06-05 19:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-11-17 12:14 - 2013-06-05 19:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-11-17 12:14 - 2013-06-05 19:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-11-17 12:14 - 2013-06-03 22:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2013-11-17 12:14 - 2013-06-03 20:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-11-17 12:14 - 2013-02-11 20:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-11-17 12:14 - 2013-01-23 22:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\fvevol.sys
2013-11-17 12:14 - 2012-11-22 19:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-11-17 12:14 - 2012-09-25 14:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-11-17 12:14 - 2012-09-25 14:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\System32\synceng.dll
2013-11-17 12:14 - 2012-08-10 16:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2013-11-17 12:14 - 2012-08-10 15:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-11-17 12:14 - 2012-04-27 19:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2013-11-17 12:14 - 2012-04-25 21:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2013-11-17 12:14 - 2012-04-25 21:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2013-11-17 12:14 - 2012-04-25 21:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2013-11-17 12:14 - 2012-03-16 23:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2013-11-17 12:14 - 2012-02-16 22:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2013-11-17 12:14 - 2012-02-16 21:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-11-17 12:14 - 2012-02-16 20:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2013-11-17 12:14 - 2011-12-29 22:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\System32\timedate.cpl
2013-11-17 12:14 - 2011-12-29 21:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-11-17 12:14 - 2011-10-25 21:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\System32\quartz.dll
2013-11-17 12:14 - 2011-10-25 20:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-11-17 12:14 - 2011-06-15 02:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\System32\odbctrac.dll
2013-11-17 12:14 - 2011-06-15 02:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\System32\odbccp32.dll
2013-11-17 12:14 - 2011-06-15 02:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\System32\odbccu32.dll
2013-11-17 12:14 - 2011-06-15 02:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\System32\odbccr32.dll
2013-11-17 12:14 - 2011-06-15 00:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-11-17 12:14 - 2011-06-15 00:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-11-17 12:14 - 2011-06-15 00:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-11-17 12:14 - 2011-06-15 00:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-11-17 12:14 - 2011-06-15 00:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-11-17 12:14 - 2011-02-18 02:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\prevhost.exe
2013-11-17 12:14 - 2011-02-17 21:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-11-17 12:14 - 2011-02-05 09:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-11-17 12:14 - 2011-02-05 09:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\System32\kdusb.dll
2013-11-17 12:14 - 2011-02-05 09:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\System32\kd1394.dll
2013-11-17 12:14 - 2011-02-05 09:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\System32\kdcom.dll
2013-11-17 12:14 - 2011-02-05 09:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-11-17 12:14 - 2011-02-05 09:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-11-17 12:14 - 2011-02-05 09:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-11-17 12:13 - 2013-10-11 18:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2013-11-17 12:13 - 2013-10-11 18:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2013-11-17 12:13 - 2013-10-11 18:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2013-11-17 12:13 - 2013-10-11 18:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-17 12:13 - 2013-10-11 18:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-17 12:13 - 2013-08-01 04:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-11-17 12:13 - 2013-07-20 02:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-11-17 12:13 - 2013-07-20 02:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-17 12:13 - 2013-07-02 20:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-11-17 12:13 - 2013-07-02 20:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-11-17 12:13 - 2013-04-09 22:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-11-17 12:13 - 2013-01-02 22:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-11-17 12:13 - 2012-11-01 21:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-11-17 12:13 - 2012-11-01 21:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-11-17 12:13 - 2012-08-22 10:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2013-11-17 12:13 - 2012-07-04 14:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\System32\netapi32.dll
2013-11-17 12:13 - 2012-07-04 14:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\browser.dll
2013-11-17 12:13 - 2012-07-04 14:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\System32\browcli.dll
2013-11-17 12:13 - 2012-07-04 13:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-11-17 12:13 - 2012-07-04 13:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-11-17 12:13 - 2012-06-05 22:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2013-11-17 12:13 - 2012-06-05 21:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-11-17 12:13 - 2012-05-13 21:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-11-17 12:13 - 2011-12-16 00:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\System32\msvcrt.dll
2013-11-17 12:13 - 2011-12-15 23:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-11-17 12:13 - 2011-10-14 22:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\System32\EncDec.dll
2013-11-17 12:13 - 2011-10-14 21:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-11-17 12:13 - 2011-08-26 21:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2013-11-17 12:13 - 2011-08-26 21:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\System32\oleacc.dll
2013-11-17 12:13 - 2011-08-26 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-11-17 12:13 - 2011-08-26 20:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-11-17 12:13 - 2011-07-08 18:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2013-11-17 12:13 - 2011-05-24 03:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\System32\umpnpmgr.dll
2013-11-17 12:13 - 2011-05-24 02:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-11-17 12:13 - 2011-05-24 02:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-11-17 12:13 - 2011-05-24 02:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-11-17 12:13 - 2011-05-24 02:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-11-17 12:13 - 2011-05-02 21:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2013-11-17 12:13 - 2011-05-02 20:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-11-17 12:13 - 2011-04-26 18:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2013-11-17 12:13 - 2011-04-26 18:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2013-11-17 12:13 - 2011-03-02 22:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\System32\dnsapi.dll
2013-11-17 12:13 - 2011-03-02 22:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll
2013-11-17 12:13 - 2011-03-02 22:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\dnscacheugc.exe
2013-11-17 12:13 - 2011-03-02 21:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-11-17 12:13 - 2011-03-02 21:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-11-17 12:13 - 2011-02-22 20:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\bowser.sys
2013-11-17 12:13 - 2011-02-12 03:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\System32\FXSCOVER.exe
2013-11-17 12:13 - 2011-02-03 03:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-11-17 11:54 - 2011-11-19 06:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\packager.dll
2013-11-17 11:54 - 2011-11-19 06:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-11-17 11:51 - 2013-11-17 11:51 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab
2013-11-17 11:48 - 2012-06-02 14:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-11-17 11:48 - 2012-06-02 14:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-11-17 11:48 - 2012-06-02 14:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2013-11-17 11:48 - 2012-06-02 14:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-11-17 11:47 - 2012-06-02 13:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-11-17 11:47 - 2012-06-02 13:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-11-17 11:44 - 2013-11-17 11:44 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Intel
2013-11-17 11:43 - 2013-11-17 15:30 - 00000000 ____D C:\ProgramData\Intel
2013-11-17 11:43 - 2013-11-17 15:28 - 00022036 _____ C:\Windows\DPINST.LOG
2013-11-17 11:43 - 2013-11-17 15:28 - 00000000 ____D C:\Program Files\Intel
2013-11-17 11:42 - 2013-11-17 15:36 - 00000021 _____ C:\Windows\Model.txt
2013-11-17 11:42 - 2013-11-17 15:36 - 00000000 _____ C:\Windows\Model.log
2013-11-17 11:32 - 2013-11-17 20:03 - 00000000 ____D C:\users\Adrian
2013-11-17 11:32 - 2013-11-17 11:32 - 00000020 ___SH C:\Users\Adrian\ntuser.ini
2013-11-17 11:32 - 2013-11-17 11:32 - 00000000 __SHD C:\Recovery
2013-11-17 11:32 - 2013-11-17 11:32 - 00000000 ____D C:\Users\Adrian\AppData\Local\VirtualStore
 
==================== One Month Modified Files and Folders =======
 
2013-11-19 18:22 - 2013-11-19 18:22 - 00000000 ____D C:\FRST
2013-11-17 20:03 - 2013-11-17 17:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-11-17 20:03 - 2013-11-17 11:32 - 00000000 ____D C:\users\Adrian
2013-11-17 20:02 - 2013-11-17 19:52 - 00000000 ____D C:\Windows\Microsoft Antimalware
2013-11-17 20:02 - 2013-11-17 17:10 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-11-17 20:02 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2013-11-17 17:30 - 2013-11-17 17:30 - 00000000 ____D C:\e0d3f196c8243b118f
2013-11-17 16:40 - 2013-11-17 13:26 - 02063003 _____ C:\Windows\WindowsUpdate.log
2013-11-17 16:36 - 2013-11-17 16:15 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-17 16:35 - 2010-11-20 19:47 - 00004888 _____ C:\Windows\PFRO.log
2013-11-17 16:35 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-17 16:35 - 2009-07-13 20:51 - 00022292 _____ C:\Windows\setupact.log
2013-11-17 16:34 - 2009-07-13 20:45 - 00020640 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-17 16:34 - 2009-07-13 20:45 - 00020640 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-17 16:25 - 2013-11-17 16:15 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-17 16:23 - 2013-11-17 16:23 - 00001945 _____ C:\Windows\epplauncher.mif
2013-11-17 16:22 - 2013-11-17 16:21 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-17 16:21 - 2013-11-17 16:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-17 16:21 - 2013-11-17 16:20 - 13670584 _____ (Microsoft Corporation) C:\Users\Adrian\Downloads\mseinstall.exe
2013-11-17 16:20 - 2013-11-17 16:15 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-17 16:20 - 2013-11-17 16:15 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-17 16:16 - 2013-11-17 16:16 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-17 16:16 - 2013-11-17 16:15 - 00000000 ____D C:\Users\Adrian\AppData\Local\Google
2013-11-17 16:16 - 2013-11-17 16:15 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-17 16:15 - 2013-11-17 16:15 - 00058016 _____ C:\Users\Adrian\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 16:15 - 2013-11-17 16:15 - 00000000 ____D C:\Users\Adrian\AppData\Local\Deployment
2013-11-17 16:15 - 2013-11-17 16:15 - 00000000 ____D C:\Users\Adrian\AppData\Local\Apps\2.0
2013-11-17 15:51 - 2009-07-13 21:13 - 00778150 _____ C:\Windows\System32\PerfStringBackup.INI
2013-11-17 15:49 - 2013-11-17 15:45 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\iolo
2013-11-17 15:49 - 2013-11-17 15:45 - 00000000 ____D C:\ProgramData\iolo
2013-11-17 15:45 - 2013-11-17 15:45 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dll
2013-11-17 15:44 - 2013-11-17 15:44 - 00000000 ____D C:\Windows\System32\Tasks\Sony Corporation
2013-11-17 15:44 - 2013-11-17 15:44 - 00000000 ____D C:\ProgramData\McAfee
2013-11-17 15:44 - 2013-11-17 15:44 - 00000000 ____D C:\Program Files (x86)\Sony
2013-11-17 15:42 - 2013-11-17 15:42 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-11-17 15:42 - 2013-11-17 15:42 - 00000000 ____D C:\Program Files\Sony
2013-11-17 15:40 - 2013-11-17 15:40 - 00772430 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-17 15:36 - 2013-11-17 11:42 - 00000021 _____ C:\Windows\Model.txt
2013-11-17 15:36 - 2013-11-17 11:42 - 00000000 _____ C:\Windows\Model.log
2013-11-17 15:30 - 2013-11-17 11:43 - 00000000 ____D C:\ProgramData\Intel
2013-11-17 15:29 - 2013-11-17 15:29 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-11-17 15:29 - 2013-11-17 15:29 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-11-17 15:29 - 2013-11-17 12:41 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-17 15:28 - 2013-11-17 15:28 - 00000000 ____D C:\ProgramData\Intel.sav
2013-11-17 15:28 - 2013-11-17 11:43 - 00022036 _____ C:\Windows\DPINST.LOG
2013-11-17 15:28 - 2013-11-17 11:43 - 00000000 ____D C:\Program Files\Intel
2013-11-17 15:26 - 2013-11-17 15:26 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-17 15:22 - 2013-11-17 15:22 - 00015814 _____ C:\Windows\System32\results.xml
2013-11-17 15:20 - 2013-11-17 14:06 - 00000000 ____D C:\Windows\System32\MpEngineStore
2013-11-17 15:19 - 2013-11-17 12:41 - 00000000 ____D C:\Intel
2013-11-17 15:16 - 2013-11-17 15:14 - 92852712 _____ (Intel® Corporation) C:\Users\Adrian\Downloads\Wireless_16.1.1_s64.exe
2013-11-17 15:15 - 2013-11-17 15:13 - 145394600 _____ (Intel Corporation) C:\Users\Adrian\Downloads\Win64_152818.exe
2013-11-17 14:07 - 2011-04-12 00:28 - 00000000 ____D C:\Program Files\Windows Journal
2013-11-17 14:05 - 2013-11-17 14:05 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Adobe
2013-11-17 14:00 - 2009-07-13 20:45 - 00275712 _____ C:\Windows\System32\FNTCACHE.DAT
2013-11-17 13:58 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-17 13:58 - 2009-07-13 19:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-17 13:57 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-11-17 13:57 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-11-17 13:57 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-11-17 13:57 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-11-17 13:57 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-11-17 13:57 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-11-17 13:38 - 2013-11-17 13:31 - 00012004 _____ C:\Windows\IE11_main.log
2013-11-17 13:34 - 2013-11-17 13:34 - 23212032 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 12995584 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 05765120 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-17 13:34 - 2013-11-17 13:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-11-17 13:34 - 2013-11-17 13:34 - 02332160 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01993728 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-11-17 13:34 - 2013-11-17 13:34 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-17 13:34 - 2013-11-17 13:34 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01394176 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01228800 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00942592 _____ (Microsoft Corporation) C:\Windows\System32\jsIntl.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00774144 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-17 13:34 - 2013-11-17 13:34 - 00616104 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-11-17 13:34 - 2013-11-17 13:34 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00413696 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2013-11-17 13:34 - 2013-11-17 13:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-17 13:34 - 2013-11-17 13:34 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00263376 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00247808 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00147968 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00143872 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00131072 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00090112 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-11-17 13:34 - 2013-11-17 13:34 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-17 13:34 - 2013-11-17 13:34 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-17 13:34 - 2013-11-17 13:34 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-17 13:34 - 2013-11-17 13:34 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2013-11-17 13:29 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2013-11-17 13:26 - 2013-11-17 13:26 - 00001355 _____ C:\Windows\TSSysprep.log
2013-11-17 13:26 - 2009-07-13 20:46 - 00002790 _____ C:\Windows\DtcInstall.log
2013-11-17 13:26 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\sysprep
2013-11-17 13:23 - 2009-07-13 21:38 - 00025600 ___SH C:\Windows\System32\config\BCD-Template.LOG
2013-11-17 13:23 - 2009-07-13 21:32 - 00028672 _____ C:\Windows\System32\config\BCD-Template
2013-11-17 13:11 - 2013-11-17 13:04 - 00010247 _____ C:\Windows\IE10_main.log
2013-11-17 12:55 - 2013-11-17 12:53 - 00003249 _____ C:\Windows\IE9_main.log
2013-11-17 12:43 - 2013-11-17 12:43 - 00000000 ____D C:\Windows\System32\MRT
2013-11-17 11:51 - 2013-11-17 11:51 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab
2013-11-17 11:47 - 2009-07-13 21:32 - 00000000 ____D C:\Windows\System32\restore
2013-11-17 11:44 - 2013-11-17 11:44 - 00000000 ____D C:\Users\Adrian\AppData\Roaming\Intel
2013-11-17 11:44 - 2009-07-13 19:20 - 00000000 __RHD C:\users\Default
2013-11-17 11:32 - 2013-11-17 13:23 - 00000000 ____D C:\Windows\Panther
2013-11-17 11:32 - 2013-11-17 11:32 - 00000020 ___SH C:\Users\Adrian\ntuser.ini
2013-11-17 11:32 - 2013-11-17 11:32 - 00000000 __SHD C:\Recovery
2013-11-17 11:32 - 2013-11-17 11:32 - 00000000 ____D C:\Users\Adrian\AppData\Local\VirtualStore
2013-11-07 14:00 - 2013-11-17 12:43 - 82896128 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
 
Some content of TEMP:
====================
C:\Users\Adrian\AppData\Local\Temp\GLF257.EXE
C:\Users\Adrian\AppData\Local\Temp\GLFD8A7.EXE
C:\Users\Adrian\AppData\Local\Temp\GLFE258.EXE
C:\Users\Adrian\AppData\Local\Temp\GLFFA0C.EXE
 
 
==================== Known DLLs (Whitelisted) ================
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
TDL4: custom:26000022 <===== ATTENTION!
 
==================== EXE ASSOCIATION =====================
 
HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK
 
==================== Restore Points  =========================
 
10
Restore point made on: 2013-11-17 11:47:46
Restore point made on: 2013-11-17 12:21:12
Restore point made on: 2013-11-17 12:37:28
Restore point made on: 2013-11-17 14:07:06
Restore point made on: 2013-11-17 14:08:46
Restore point made on: 2013-11-17 14:29:38
Restore point made on: 2013-11-17 15:26:46
Restore point made on: 2013-11-17 15:38:23
Restore point made on: 2013-11-17 15:42:32
Restore point made on: 2013-11-17 16:40:24
 
==================== Memory info =========================== 
 
Percentage of memory in use: 9%
Total physical RAM: 8139.86 MB
Available physical RAM: 7364.32 MB
Total Pagefile: 8138.06 MB
Available Pagefile: 7354.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:585 GB) (Free:547.54 GB) NTFS
Drive e: (Recovery) (Fixed) (Total:11.07 GB) (Free:1.1 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (ADRIANG USB) (Removable) (Total:3.74 GB) (Free:3.73 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
ATTENTION: Malware custom entry on BCD on drive y: detected.
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: B34CE8AF)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=585 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 500A0DFF)
No partition Table on disk 1.
 
 
LastRegBack: 2013-11-17 13:23
 
==================== End Of Log ============================"


#6 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 20 November 2013 - 03:10 AM

Fix with FRST (Recovery Environment)


  • Open notepad (Start =>All Programs => Accessories => Notepad).
  • Please copy the entire contents of the code box below.
    (To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste). Save it on the flashdrive as fixlist.txt

    TDL4: custom:26000022 <===== ATTENTION!
    CMD: bootrec /fixmbr
    CMD: bootrec /fixboot
    

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Now please enter System Recovery Options again.

  • Run frst.exe (on 64bit, run frst64.exe) and press the Fix button just once and wait.
  • The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

 

 

Try to boot into windows.

 

 

 

Scan with TDSS-Killer

Please read and follow these instructions carefully. We do not want it to fix anything yet (if found), we need to see a report first.

Download TDSSKiller.exe and save it to your desktop

  • Execute TDSSKiller.exe by doubleclicking on it.
  • Press Start Scan
  • If Malicious objects are found, do NOT select Copy to quarantine. Change the action to Skip, and save the log.
  • Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt


Please post the contents of that log in your next reply.


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#7 ZanaH

ZanaH
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 20 November 2013 - 06:20 PM

The computer was able to boot successfully after the fix, here are the results of the Fixlog:

 

"Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-11-2013 02

Ran by SYSTEM at 2013-11-20 17:07:11 Run:1
Running from G:\
Boot Mode: Recovery
==============================================
 
Content of fixlist:
*****************
TDL4: custom:26000022 <===== ATTENTION!
CMD: bootrec /fixmbr
CMD: bootrec /fixboot
*****************
 
 
The operation completed successfully.
The operation completed successfully.
 
=========  bootrec /fixmbr =========
 
??T h e   o p e r a t i o n   c o m p l e t e d   s u c c e s s f u l l y . 
 
========= End of CMD: =========
 
 
=========  bootrec /fixboot =========
 
??T h e   o p e r a t i o n   c o m p l e t e d   s u c c e s s f u l l y . 
 
========= End of CMD: =========
 
 
==== End of Fixlog ===="
 
 
TDSSKiller didn't find any malicious objects, here is the log for TDSSKiller: "17:17:08.0018 0x0d9c  TDSS rootkit removing tool 3.0.0.19 Nov 18 2013 09:27:50
17:17:11.0950 0x0d9c  ============================================================
17:17:11.0950 0x0d9c  Current date / time: 2013/11/20 17:17:11.0950
17:17:11.0950 0x0d9c  SystemInfo:
17:17:11.0950 0x0d9c  
17:17:11.0950 0x0d9c  OS Version: 6.1.7601 ServicePack: 1.0
17:17:11.0950 0x0d9c  Product type: Workstation
17:17:11.0950 0x0d9c  ComputerName: ADRIAN-PC
17:17:11.0950 0x0d9c  UserName: Adrian
17:17:11.0950 0x0d9c  Windows directory: C:\Windows
17:17:11.0950 0x0d9c  System windows directory: C:\Windows
17:17:11.0950 0x0d9c  Running under WOW64
17:17:11.0950 0x0d9c  Processor architecture: Intel x64
17:17:11.0950 0x0d9c  Number of processors: 4
17:17:11.0950 0x0d9c  Page size: 0x1000
17:17:11.0950 0x0d9c  Boot type: Normal boot
17:17:11.0950 0x0d9c  ============================================================
17:17:17.0269 0x0d9c  KLMD registered as C:\Windows\system32\drivers\07145051.sys
17:17:17.0410 0x0d9c  System UUID: {97150AB8-D90D-D049-4E80-D67E517A21E9}
17:17:18.0080 0x0d9c  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:17:18.0080 0x0d9c  Drive \Device\Harddisk1\DR3 - Size: 0xEFBFFE00 (3.75 Gb), SectorSize: 0x200, Cylinders: 0x1E9, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
17:17:18.0080 0x0d9c  ============================================================
17:17:18.0080 0x0d9c  \Device\Harddisk0\DR0:
17:17:18.0080 0x0d9c  MBR partitions:
17:17:18.0080 0x0d9c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1626800, BlocksNum 0x32000
17:17:18.0080 0x0d9c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1658800, BlocksNum 0x491FF2B0
17:17:18.0080 0x0d9c  \Device\Harddisk1\DR3:
17:17:18.0080 0x0d9c  MBR partitions:
17:17:18.0080 0x0d9c  ============================================================
17:17:18.0143 0x0d9c  C: <-> \Device\Harddisk0\DR0\Partition2
17:17:18.0143 0x0d9c  ============================================================
17:17:18.0143 0x0d9c  Initialize success
17:17:18.0143 0x0d9c  ============================================================
17:17:38.0314 0x0f6c  ============================================================
17:17:38.0314 0x0f6c  Scan started
17:17:38.0314 0x0f6c  Mode: Manual; 
17:17:38.0314 0x0f6c  ============================================================
17:17:38.0314 0x0f6c  KSN ping started
17:17:41.0449 0x0f6c  KSN ping finished: true
17:17:42.0697 0x0f6c  ================ Scan system memory ========================
17:17:42.0697 0x0f6c  System memory - ok
17:17:42.0713 0x0f6c  ================ Scan services =============================
17:17:42.0916 0x0f6c  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
17:17:42.0931 0x0f6c  1394ohci - ok
17:17:42.0978 0x0f6c  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
17:17:42.0994 0x0f6c  ACPI - ok
17:17:43.0009 0x0f6c  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
17:17:43.0009 0x0f6c  AcpiPmi - ok
17:17:43.0056 0x0f6c  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
17:17:43.0072 0x0f6c  adp94xx - ok
17:17:43.0103 0x0f6c  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
17:17:43.0118 0x0f6c  adpahci - ok
17:17:43.0118 0x0f6c  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
17:17:43.0118 0x0f6c  adpu320 - ok
17:17:43.0150 0x0f6c  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
17:17:43.0150 0x0f6c  AeLookupSvc - ok
17:17:43.0228 0x0f6c  [ 79059559E89D06E8B80CE2944BE20228, 6E041D2FED2D0C3D8E16E56CB61D3245F9144EA92F5BDC9A4AA30598D1C8E6EE ] AFD             C:\Windows\system32\drivers\afd.sys
17:17:43.0243 0x0f6c  AFD - ok
17:17:43.0274 0x0f6c  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
17:17:43.0290 0x0f6c  agp440 - ok
17:17:43.0306 0x0f6c  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
17:17:43.0306 0x0f6c  ALG - ok
17:17:43.0352 0x0f6c  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
17:17:43.0352 0x0f6c  aliide - ok
17:17:43.0352 0x0f6c  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
17:17:43.0352 0x0f6c  amdide - ok
17:17:43.0399 0x0f6c  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
17:17:43.0399 0x0f6c  AmdK8 - ok
17:17:43.0415 0x0f6c  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
17:17:43.0415 0x0f6c  AmdPPM - ok
17:17:43.0477 0x0f6c  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
17:17:43.0477 0x0f6c  amdsata - ok
17:17:43.0508 0x0f6c  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
17:17:43.0524 0x0f6c  amdsbs - ok
17:17:43.0540 0x0f6c  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
17:17:43.0540 0x0f6c  amdxata - ok
17:17:43.0586 0x0f6c  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID           C:\Windows\system32\drivers\appid.sys
17:17:43.0586 0x0f6c  AppID - ok
17:17:43.0602 0x0f6c  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
17:17:43.0602 0x0f6c  AppIDSvc - ok
17:17:43.0633 0x0f6c  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
17:17:43.0633 0x0f6c  Appinfo - ok
17:17:43.0664 0x0f6c  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
17:17:43.0664 0x0f6c  arc - ok
17:17:43.0680 0x0f6c  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
17:17:43.0680 0x0f6c  arcsas - ok
17:17:43.0820 0x0f6c  [ 9217D874131AE6FF8F642F124F00A555, BE2923D5AA7748FDAAED73AF567D015517B36F1C739C6E5637DD15112EFDF495 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
17:17:43.0836 0x0f6c  aspnet_state - ok
17:17:43.0883 0x0f6c  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
17:17:43.0883 0x0f6c  AsyncMac - ok
17:17:43.0898 0x0f6c  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
17:17:43.0914 0x0f6c  atapi - ok
17:17:43.0992 0x0f6c  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:17:44.0008 0x0f6c  AudioEndpointBuilder - ok
17:17:44.0023 0x0f6c  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
17:17:44.0039 0x0f6c  AudioSrv - ok
17:17:44.0070 0x0f6c  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
17:17:44.0070 0x0f6c  AxInstSV - ok
17:17:44.0148 0x0f6c  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
17:17:44.0164 0x0f6c  b06bdrv - ok
17:17:44.0210 0x0f6c  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
17:17:44.0226 0x0f6c  b57nd60a - ok
17:17:44.0288 0x0f6c  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
17:17:44.0304 0x0f6c  BDESVC - ok
17:17:44.0320 0x0f6c  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
17:17:44.0320 0x0f6c  Beep - ok
17:17:44.0398 0x0f6c  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
17:17:44.0413 0x0f6c  BFE - ok
17:17:44.0460 0x0f6c  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
17:17:44.0491 0x0f6c  BITS - ok
17:17:44.0507 0x0f6c  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
17:17:44.0522 0x0f6c  blbdrive - ok
17:17:44.0554 0x0f6c  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
17:17:44.0554 0x0f6c  bowser - ok
17:17:44.0585 0x0f6c  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
17:17:44.0585 0x0f6c  BrFiltLo - ok
17:17:44.0585 0x0f6c  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
17:17:44.0585 0x0f6c  BrFiltUp - ok
17:17:44.0616 0x0f6c  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
17:17:44.0616 0x0f6c  Browser - ok
17:17:44.0647 0x0f6c  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
17:17:44.0647 0x0f6c  Brserid - ok
17:17:44.0647 0x0f6c  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
17:17:44.0647 0x0f6c  BrSerWdm - ok
17:17:44.0663 0x0f6c  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
17:17:44.0663 0x0f6c  BrUsbMdm - ok
17:17:44.0663 0x0f6c  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
17:17:44.0663 0x0f6c  BrUsbSer - ok
17:17:44.0663 0x0f6c  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
17:17:44.0663 0x0f6c  BTHMODEM - ok
17:17:44.0694 0x0f6c  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
17:17:44.0694 0x0f6c  bthserv - ok
17:17:44.0725 0x0f6c  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
17:17:44.0725 0x0f6c  cdfs - ok
17:17:44.0756 0x0f6c  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
17:17:44.0756 0x0f6c  cdrom - ok
17:17:44.0788 0x0f6c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
17:17:44.0788 0x0f6c  CertPropSvc - ok
17:17:44.0803 0x0f6c  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
17:17:44.0803 0x0f6c  circlass - ok
17:17:44.0834 0x0f6c  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys
17:17:44.0850 0x0f6c  CLFS - ok
17:17:44.0928 0x0f6c  [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:17:44.0944 0x0f6c  clr_optimization_v2.0.50727_32 - ok
17:17:45.0006 0x0f6c  [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:17:45.0006 0x0f6c  clr_optimization_v2.0.50727_64 - ok
17:17:45.0115 0x0f6c  [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:17:45.0256 0x0f6c  clr_optimization_v4.0.30319_32 - ok
17:17:45.0287 0x0f6c  [ C6F9AF94DCD58122A4D7E89DB6BED29D, CB0E5AE60EC76323585FB86D89E8DB7ADB5EDF6EA3D0B27E9ECE75B8CAA8BFDE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:17:45.0412 0x0f6c  clr_optimization_v4.0.30319_64 - ok
17:17:45.0443 0x0f6c  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
17:17:45.0443 0x0f6c  CmBatt - ok
17:17:45.0474 0x0f6c  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
17:17:45.0474 0x0f6c  cmdide - ok
17:17:45.0552 0x0f6c  [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG             C:\Windows\system32\Drivers\cng.sys
17:17:45.0583 0x0f6c  CNG - ok
17:17:45.0614 0x0f6c  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
17:17:45.0614 0x0f6c  Compbatt - ok
17:17:45.0646 0x0f6c  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
17:17:45.0646 0x0f6c  CompositeBus - ok
17:17:45.0661 0x0f6c  COMSysApp - ok
17:17:45.0786 0x0f6c  [ 61D0FDF2D2269F13D44C23EF951AD36C, 40ED0D8787335AB929D7DB2624D0B3AC1D8DE3494E95987A4DE2ECFD13870D19 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
17:17:45.0802 0x0f6c  cphs - ok
17:17:45.0833 0x0f6c  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
17:17:45.0833 0x0f6c  crcdisk - ok
17:17:45.0880 0x0f6c  [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc        C:\Windows\system32\cryptsvc.dll
17:17:45.0895 0x0f6c  CryptSvc - ok
17:17:45.0973 0x0f6c  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
17:17:45.0989 0x0f6c  DcomLaunch - ok
17:17:46.0020 0x0f6c  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
17:17:46.0020 0x0f6c  defragsvc - ok
17:17:46.0067 0x0f6c  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
17:17:46.0082 0x0f6c  DfsC - ok
17:17:46.0129 0x0f6c  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
17:17:46.0145 0x0f6c  Dhcp - ok
17:17:46.0145 0x0f6c  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
17:17:46.0160 0x0f6c  discache - ok
17:17:46.0254 0x0f6c  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
17:17:46.0254 0x0f6c  Disk - ok
17:17:46.0316 0x0f6c  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
17:17:46.0316 0x0f6c  Dnscache - ok
17:17:46.0379 0x0f6c  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
17:17:46.0394 0x0f6c  dot3svc - ok
17:17:46.0410 0x0f6c  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
17:17:46.0410 0x0f6c  DPS - ok
17:17:46.0457 0x0f6c  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
17:17:46.0457 0x0f6c  drmkaud - ok
17:17:46.0550 0x0f6c  [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
17:17:46.0582 0x0f6c  DXGKrnl - ok
17:17:46.0613 0x0f6c  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
17:17:46.0628 0x0f6c  EapHost - ok
17:17:46.0753 0x0f6c  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
17:17:46.0816 0x0f6c  ebdrv - ok
17:17:46.0847 0x0f6c  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] EFS             C:\Windows\System32\lsass.exe
17:17:46.0847 0x0f6c  EFS - ok
17:17:46.0972 0x0f6c  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
17:17:47.0018 0x0f6c  ehRecvr - ok
17:17:47.0034 0x0f6c  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
17:17:47.0050 0x0f6c  ehSched - ok
17:17:47.0112 0x0f6c  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
17:17:47.0112 0x0f6c  elxstor - ok
17:17:47.0128 0x0f6c  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
17:17:47.0128 0x0f6c  ErrDev - ok
17:17:47.0174 0x0f6c  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
17:17:47.0190 0x0f6c  EventSystem - ok
17:17:47.0330 0x0f6c  [ 91CD2315EB4F0547E0A6573A9AF5B576, 65DEC986C7489010EC2E14FCEF96F998A4E6E60EDA12AACAB5914A9F7FECAEFA ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe
17:17:47.0346 0x0f6c  EvtEng - ok
17:17:47.0377 0x0f6c  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
17:17:47.0393 0x0f6c  exfat - ok
17:17:47.0393 0x0f6c  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
17:17:47.0408 0x0f6c  fastfat - ok
17:17:47.0471 0x0f6c  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
17:17:47.0502 0x0f6c  Fax - ok
17:17:47.0518 0x0f6c  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
17:17:47.0518 0x0f6c  fdc - ok
17:17:47.0549 0x0f6c  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
17:17:47.0549 0x0f6c  fdPHost - ok
17:17:47.0549 0x0f6c  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
17:17:47.0549 0x0f6c  FDResPub - ok
17:17:47.0580 0x0f6c  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
17:17:47.0580 0x0f6c  FileInfo - ok
17:17:47.0596 0x0f6c  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
17:17:47.0596 0x0f6c  Filetrace - ok
17:17:47.0596 0x0f6c  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
17:17:47.0596 0x0f6c  flpydisk - ok
17:17:47.0611 0x0f6c  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
17:17:47.0611 0x0f6c  FltMgr - ok
17:17:47.0705 0x0f6c  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll
17:17:47.0752 0x0f6c  FontCache - ok
17:17:47.0783 0x0f6c  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:17:47.0783 0x0f6c  FontCache3.0.0.0 - ok
17:17:47.0798 0x0f6c  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
17:17:47.0814 0x0f6c  FsDepends - ok
17:17:47.0845 0x0f6c  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
17:17:47.0845 0x0f6c  Fs_Rec - ok
17:17:47.0908 0x0f6c  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
17:17:47.0923 0x0f6c  fvevol - ok
17:17:47.0954 0x0f6c  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
17:17:47.0970 0x0f6c  gagp30kx - ok
17:17:48.0017 0x0f6c  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
17:17:48.0048 0x0f6c  gpsvc - ok
17:17:48.0110 0x0f6c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:17:48.0126 0x0f6c  gupdate - ok
17:17:48.0126 0x0f6c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:17:48.0126 0x0f6c  gupdatem - ok
17:17:48.0220 0x0f6c  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
17:17:48.0220 0x0f6c  hcw85cir - ok
17:17:48.0298 0x0f6c  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
17:17:48.0313 0x0f6c  HdAudAddService - ok
17:17:48.0329 0x0f6c  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
17:17:48.0344 0x0f6c  HDAudBus - ok
17:17:48.0344 0x0f6c  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
17:17:48.0344 0x0f6c  HidBatt - ok
17:17:48.0344 0x0f6c  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
17:17:48.0360 0x0f6c  HidBth - ok
17:17:48.0391 0x0f6c  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
17:17:48.0391 0x0f6c  HidIr - ok
17:17:48.0407 0x0f6c  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
17:17:48.0407 0x0f6c  hidserv - ok
17:17:48.0454 0x0f6c  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
17:17:48.0454 0x0f6c  HidUsb - ok
17:17:48.0500 0x0f6c  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
17:17:48.0500 0x0f6c  hkmsvc - ok
17:17:48.0532 0x0f6c  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
17:17:48.0547 0x0f6c  HomeGroupListener - ok
17:17:48.0578 0x0f6c  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
17:17:48.0594 0x0f6c  HomeGroupProvider - ok
17:17:48.0641 0x0f6c  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
17:17:48.0641 0x0f6c  HpSAMD - ok
17:17:48.0734 0x0f6c  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
17:17:48.0750 0x0f6c  HTTP - ok
17:17:48.0750 0x0f6c  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
17:17:48.0750 0x0f6c  hwpolicy - ok
17:17:48.0781 0x0f6c  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
17:17:48.0781 0x0f6c  i8042prt - ok
17:17:48.0859 0x0f6c  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
17:17:48.0890 0x0f6c  iaStorV - ok
17:17:48.0984 0x0f6c  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
17:17:49.0000 0x0f6c  ICCS - ok
17:17:49.0093 0x0f6c  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:17:49.0109 0x0f6c  idsvc - ok
17:17:49.0124 0x0f6c  IEEtwCollectorService - ok
17:17:49.0343 0x0f6c  [ 690E1FCE66B5F0DB3A00B30E9CC2D617, 157C78A1DD902C2204C6733F5CE502A9240876E8CB3FB2FF44EF2716B65BC4F4 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
17:17:49.0499 0x0f6c  igfx - ok
17:17:49.0546 0x0f6c  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
17:17:49.0546 0x0f6c  iirsp - ok
17:17:49.0608 0x0f6c  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
17:17:49.0639 0x0f6c  IKEEXT - ok
17:17:49.0670 0x0f6c  [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
17:17:49.0686 0x0f6c  IntcDAud - ok
17:17:49.0686 0x0f6c  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
17:17:49.0686 0x0f6c  intelide - ok
17:17:49.0717 0x0f6c  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
17:17:49.0717 0x0f6c  intelppm - ok
17:17:49.0748 0x0f6c  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
17:17:49.0748 0x0f6c  IPBusEnum - ok
17:17:49.0748 0x0f6c  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:17:49.0764 0x0f6c  IpFilterDriver - ok
17:17:49.0826 0x0f6c  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
17:17:49.0842 0x0f6c  iphlpsvc - ok
17:17:49.0858 0x0f6c  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
17:17:49.0858 0x0f6c  IPMIDRV - ok
17:17:49.0858 0x0f6c  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
17:17:49.0873 0x0f6c  IPNAT - ok
17:17:49.0889 0x0f6c  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
17:17:49.0889 0x0f6c  IRENUM - ok
17:17:49.0889 0x0f6c  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
17:17:49.0889 0x0f6c  isapnp - ok
17:17:49.0920 0x0f6c  [ D931D7309DEB2317035B07C9F9E6B0BD, 13AD84172ED8C6153F8A98499C01733B74E48464CE07D099508E38D409913ED3 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
17:17:49.0920 0x0f6c  iScsiPrt - ok
17:17:49.0920 0x0f6c  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
17:17:49.0920 0x0f6c  kbdclass - ok
17:17:49.0936 0x0f6c  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
17:17:49.0951 0x0f6c  kbdhid - ok
17:17:49.0967 0x0f6c  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] KeyIso          C:\Windows\system32\lsass.exe
17:17:49.0982 0x0f6c  KeyIso - ok
17:17:49.0998 0x0f6c  [ 8F489706472F7E9A06BAAA198703FA64, F020406690FB38EABD82D63B91D33039CC93ED52A5497AE12BAF475F22D0B08A ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
17:17:49.0998 0x0f6c  KSecDD - ok
17:17:50.0029 0x0f6c  [ 868A2CAAB12EFC7A021682BCA0EEC54C, 12C4925B5B3D6EA7B6410C01F33158C6EAB50CBD6AF445F8B04ED9899720C2DD ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
17:17:50.0029 0x0f6c  KSecPkg - ok
17:17:50.0045 0x0f6c  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
17:17:50.0045 0x0f6c  ksthunk - ok
17:17:50.0076 0x0f6c  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
17:17:50.0092 0x0f6c  KtmRm - ok
17:17:50.0138 0x0f6c  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
17:17:50.0154 0x0f6c  LanmanServer - ok
17:17:50.0185 0x0f6c  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:17:50.0185 0x0f6c  LanmanWorkstation - ok
17:17:50.0310 0x0f6c  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
17:17:50.0326 0x0f6c  lltdio - ok
17:17:50.0357 0x0f6c  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
17:17:50.0372 0x0f6c  lltdsvc - ok
17:17:50.0388 0x0f6c  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
17:17:50.0404 0x0f6c  lmhosts - ok
17:17:50.0404 0x0f6c  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
17:17:50.0419 0x0f6c  LSI_FC - ok
17:17:50.0435 0x0f6c  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
17:17:50.0435 0x0f6c  LSI_SAS - ok
17:17:50.0435 0x0f6c  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
17:17:50.0435 0x0f6c  LSI_SAS2 - ok
17:17:50.0450 0x0f6c  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
17:17:50.0450 0x0f6c  LSI_SCSI - ok
17:17:50.0450 0x0f6c  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
17:17:50.0466 0x0f6c  luafv - ok
17:17:50.0528 0x0f6c  [ 98E19D3FCAAE0236816E4942C5771F89, D7E6B2EF7F253C0C68363E8AE6744FAC11930350FF568F6144EA6EA3153E4F17 ] McComponentHostServiceSony C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe
17:17:50.0544 0x0f6c  McComponentHostServiceSony - ok
17:17:50.0575 0x0f6c  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
17:17:50.0591 0x0f6c  Mcx2Svc - ok
17:17:50.0606 0x0f6c  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
17:17:50.0622 0x0f6c  megasas - ok
17:17:50.0669 0x0f6c  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
17:17:50.0669 0x0f6c  MegaSR - ok
17:17:50.0731 0x0f6c  [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
17:17:50.0731 0x0f6c  MEIx64 - ok
17:17:50.0778 0x0f6c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
17:17:50.0778 0x0f6c  MMCSS - ok
17:17:50.0794 0x0f6c  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
17:17:50.0794 0x0f6c  Modem - ok
17:17:50.0825 0x0f6c  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
17:17:50.0840 0x0f6c  monitor - ok
17:17:50.0856 0x0f6c  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
17:17:50.0856 0x0f6c  mouclass - ok
17:17:50.0887 0x0f6c  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\drivers\mouhid.sys
17:17:50.0887 0x0f6c  mouhid - ok
17:17:50.0903 0x0f6c  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
17:17:50.0903 0x0f6c  mountmgr - ok
17:17:50.0981 0x0f6c  [ C6B88D62F20AC646C6BD5C032EC2FAF9, 111A07939F3C5A46F0C51B9D6F5C1D8478099E32EFD88BC260467109ADD975F8 ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys
17:17:50.0981 0x0f6c  MpFilter - ok
17:17:51.0012 0x0f6c  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
17:17:51.0012 0x0f6c  mpio - ok
17:17:51.0043 0x0f6c  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
17:17:51.0043 0x0f6c  mpsdrv - ok
17:17:51.0090 0x0f6c  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
17:17:51.0106 0x0f6c  MpsSvc - ok
17:17:51.0137 0x0f6c  [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
17:17:51.0137 0x0f6c  MRxDAV - ok
17:17:51.0184 0x0f6c  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
17:17:51.0184 0x0f6c  mrxsmb - ok
17:17:51.0215 0x0f6c  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:17:51.0215 0x0f6c  mrxsmb10 - ok
17:17:51.0230 0x0f6c  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:17:51.0230 0x0f6c  mrxsmb20 - ok
17:17:51.0262 0x0f6c  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
17:17:51.0262 0x0f6c  msahci - ok
17:17:51.0277 0x0f6c  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
17:17:51.0277 0x0f6c  msdsm - ok
17:17:51.0308 0x0f6c  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
17:17:51.0308 0x0f6c  MSDTC - ok
17:17:51.0308 0x0f6c  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
17:17:51.0324 0x0f6c  Msfs - ok
17:17:51.0324 0x0f6c  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
17:17:51.0324 0x0f6c  mshidkmdf - ok
17:17:51.0324 0x0f6c  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
17:17:51.0324 0x0f6c  msisadrv - ok
17:17:51.0355 0x0f6c  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
17:17:51.0355 0x0f6c  MSiSCSI - ok
17:17:51.0355 0x0f6c  msiserver - ok
17:17:51.0386 0x0f6c  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
17:17:51.0402 0x0f6c  MSKSSRV - ok
17:17:51.0480 0x0f6c  [ 7675E15D1B2180745E4DA4D26AAD7385, 729AA6C610F67028CFFFF64B772FFA1CAE7581D37F8909BDA423D52AF85C92C8 ] MsMpSvc         C:\Program Files\Microsoft Security Client\MsMpEng.exe
17:17:51.0480 0x0f6c  MsMpSvc - ok
17:17:51.0511 0x0f6c  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
17:17:51.0511 0x0f6c  MSPCLOCK - ok
17:17:51.0527 0x0f6c  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
17:17:51.0527 0x0f6c  MSPQM - ok
17:17:51.0574 0x0f6c  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
17:17:51.0589 0x0f6c  MsRPC - ok
17:17:51.0589 0x0f6c  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
17:17:51.0589 0x0f6c  mssmbios - ok
17:17:51.0589 0x0f6c  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
17:17:51.0589 0x0f6c  MSTEE - ok
17:17:51.0605 0x0f6c  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
17:17:51.0605 0x0f6c  MTConfig - ok
17:17:51.0605 0x0f6c  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
17:17:51.0605 0x0f6c  Mup - ok
17:17:51.0667 0x0f6c  [ 85B42715B134BF8ABE035078F81E0A8C, B522D9BA55102FFD9138A6B6B85C9FACB4DD7D7565F4B276E44536B61962D78D ] MyWiFiDHCPDNS   C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
17:17:51.0761 0x0f6c  MyWiFiDHCPDNS - ok
17:17:51.0792 0x0f6c  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
17:17:51.0808 0x0f6c  napagent - ok
17:17:51.0854 0x0f6c  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
17:17:51.0870 0x0f6c  NativeWifiP - ok
17:17:51.0917 0x0f6c  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
17:17:51.0948 0x0f6c  NDIS - ok
17:17:51.0995 0x0f6c  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
17:17:51.0995 0x0f6c  NdisCap - ok
17:17:52.0026 0x0f6c  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
17:17:52.0026 0x0f6c  NdisTapi - ok
17:17:52.0042 0x0f6c  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
17:17:52.0057 0x0f6c  Ndisuio - ok
17:17:52.0073 0x0f6c  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
17:17:52.0088 0x0f6c  NdisWan - ok
17:17:52.0104 0x0f6c  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
17:17:52.0104 0x0f6c  NDProxy - ok
17:17:52.0120 0x0f6c  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
17:17:52.0120 0x0f6c  NetBIOS - ok
17:17:52.0166 0x0f6c  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
17:17:52.0166 0x0f6c  NetBT - ok
17:17:52.0213 0x0f6c  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] Netlogon        C:\Windows\system32\lsass.exe
17:17:52.0213 0x0f6c  Netlogon - ok
17:17:52.0291 0x0f6c  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
17:17:52.0307 0x0f6c  Netman - ok
17:17:52.0369 0x0f6c  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:17:52.0432 0x0f6c  NetMsmqActivator - ok
17:17:52.0447 0x0f6c  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetPipeActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:17:52.0463 0x0f6c  NetPipeActivator - ok
17:17:52.0510 0x0f6c  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
17:17:52.0525 0x0f6c  netprofm - ok
17:17:52.0603 0x0f6c  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:17:52.0603 0x0f6c  NetTcpActivator - ok
17:17:52.0634 0x0f6c  [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:17:52.0634 0x0f6c  NetTcpPortSharing - ok
17:17:53.0258 0x0f6c  [ 7D3646F4E3F2C27A1415F1685391F024, E5426EC1347DBA302C786B72B510C61BA694D7A1FE0023CA61A587672F8F3548 ] NETwNs64        C:\Windows\system32\DRIVERS\NETwsw00.sys
17:17:53.0586 0x0f6c  NETwNs64 - ok
17:17:53.0617 0x0f6c  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
17:17:53.0633 0x0f6c  nfrd960 - ok
17:17:53.0680 0x0f6c  [ ACE8C64C57E4A711473C8BC10ADF692B, 53D8083CE78DB5527080B4570AC28ABAA262667744A319707AE0C46E46B297F9 ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys
17:17:53.0680 0x0f6c  NisDrv - ok
17:17:53.0758 0x0f6c  [ 6247E8B31ED0A9D6BC5A26276E49BEB3, 230C0C560492C454B9EB14B50EB4A78DC74FAB6B662449A0EA3114B3E671BFF3 ] NisSrv          C:\Program Files\Microsoft Security Client\NisSrv.exe
17:17:53.0773 0x0f6c  NisSrv - ok
17:17:53.0804 0x0f6c  [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc          C:\Windows\System32\nlasvc.dll
17:17:53.0820 0x0f6c  NlaSvc - ok
17:17:53.0836 0x0f6c  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
17:17:53.0836 0x0f6c  Npfs - ok
17:17:53.0867 0x0f6c  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
17:17:53.0867 0x0f6c  nsi - ok
17:17:53.0867 0x0f6c  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
17:17:53.0882 0x0f6c  nsiproxy - ok
17:17:53.0992 0x0f6c  [ B98F8C6E31CD07B2E6F71F7F648E38C0, 2FEA100B80680FBBF644CB6763738804155DF1E94A6542CAE2B2786D770D554E ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
17:17:54.0023 0x0f6c  Ntfs - ok
17:17:54.0023 0x0f6c  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
17:17:54.0023 0x0f6c  Null - ok
17:17:54.0085 0x0f6c  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
17:17:54.0101 0x0f6c  nvraid - ok
17:17:54.0116 0x0f6c  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
17:17:54.0116 0x0f6c  nvstor - ok
17:17:54.0148 0x0f6c  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
17:17:54.0163 0x0f6c  nv_agp - ok
17:17:54.0163 0x0f6c  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
17:17:54.0163 0x0f6c  ohci1394 - ok
17:17:54.0241 0x0f6c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
17:17:54.0257 0x0f6c  p2pimsvc - ok
17:17:54.0304 0x0f6c  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
17:17:54.0319 0x0f6c  p2psvc - ok
17:17:54.0335 0x0f6c  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys
17:17:54.0350 0x0f6c  Parport - ok
17:17:54.0397 0x0f6c  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
17:17:54.0413 0x0f6c  partmgr - ok
17:17:54.0428 0x0f6c  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll
17:17:54.0444 0x0f6c  PcaSvc - ok
17:17:54.0460 0x0f6c  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
17:17:54.0460 0x0f6c  pci - ok
17:17:54.0491 0x0f6c  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
17:17:54.0491 0x0f6c  pciide - ok
17:17:54.0522 0x0f6c  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
17:17:54.0538 0x0f6c  pcmcia - ok
17:17:54.0538 0x0f6c  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
17:17:54.0538 0x0f6c  pcw - ok
17:17:54.0569 0x0f6c  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
17:17:54.0569 0x0f6c  PEAUTH - ok
17:17:54.0600 0x0f6c  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
17:17:54.0600 0x0f6c  PerfHost - ok
17:17:54.0709 0x0f6c  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
17:17:54.0740 0x0f6c  pla - ok
17:17:54.0818 0x0f6c  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
17:17:54.0834 0x0f6c  PlugPlay - ok
17:17:54.0865 0x0f6c  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
17:17:54.0865 0x0f6c  PNRPAutoReg - ok
17:17:54.0881 0x0f6c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
17:17:54.0896 0x0f6c  PNRPsvc - ok
17:17:54.0943 0x0f6c  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
17:17:54.0943 0x0f6c  PolicyAgent - ok
17:17:54.0974 0x0f6c  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
17:17:54.0974 0x0f6c  Power - ok
17:17:55.0021 0x0f6c  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
17:17:55.0021 0x0f6c  PptpMiniport - ok
17:17:55.0037 0x0f6c  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
17:17:55.0052 0x0f6c  Processor - ok
17:17:55.0084 0x0f6c  [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc         C:\Windows\system32\profsvc.dll
17:17:55.0099 0x0f6c  ProfSvc - ok
17:17:55.0115 0x0f6c  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] ProtectedStorage C:\Windows\system32\lsass.exe
17:17:55.0115 0x0f6c  ProtectedStorage - ok
17:17:55.0146 0x0f6c  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
17:17:55.0146 0x0f6c  Psched - ok
17:17:55.0208 0x0f6c  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
17:17:55.0240 0x0f6c  ql2300 - ok
17:17:55.0271 0x0f6c  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
17:17:55.0271 0x0f6c  ql40xx - ok
17:17:55.0286 0x0f6c  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
17:17:55.0302 0x0f6c  QWAVE - ok
17:17:55.0302 0x0f6c  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
17:17:55.0302 0x0f6c  QWAVEdrv - ok
17:17:55.0302 0x0f6c  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
17:17:55.0302 0x0f6c  RasAcd - ok
17:17:55.0333 0x0f6c  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
17:17:55.0333 0x0f6c  RasAgileVpn - ok
17:17:55.0349 0x0f6c  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
17:17:55.0364 0x0f6c  RasAuto - ok
17:17:55.0380 0x0f6c  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
17:17:55.0380 0x0f6c  Rasl2tp - ok
17:17:55.0396 0x0f6c  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
17:17:55.0396 0x0f6c  RasMan - ok
17:17:55.0411 0x0f6c  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
17:17:55.0411 0x0f6c  RasPppoe - ok
17:17:55.0411 0x0f6c  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
17:17:55.0411 0x0f6c  RasSstp - ok
17:17:55.0442 0x0f6c  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
17:17:55.0458 0x0f6c  rdbss - ok
17:17:55.0458 0x0f6c  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
17:17:55.0458 0x0f6c  rdpbus - ok
17:17:55.0474 0x0f6c  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
17:17:55.0474 0x0f6c  RDPCDD - ok
17:17:55.0474 0x0f6c  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
17:17:55.0474 0x0f6c  RDPENCDD - ok
17:17:55.0489 0x0f6c  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
17:17:55.0489 0x0f6c  RDPREFMP - ok
17:17:55.0520 0x0f6c  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
17:17:55.0520 0x0f6c  RdpVideoMiniport - ok
17:17:55.0552 0x0f6c  [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
17:17:55.0567 0x0f6c  RDPWD - ok
17:17:55.0630 0x0f6c  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
17:17:55.0645 0x0f6c  rdyboost - ok
17:17:55.0708 0x0f6c  [ 86177A203F65E08FB91D53A6F2475363, 1316208F182ECCB2DCC848E8CE707456ED6F6CD21001386F160B61AF455EFAAA ] RegSrvc         C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
17:17:55.0708 0x0f6c  RegSrvc - ok
17:17:55.0739 0x0f6c  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
17:17:55.0739 0x0f6c  RemoteAccess - ok
17:17:55.0770 0x0f6c  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
17:17:55.0786 0x0f6c  RemoteRegistry - ok
17:17:55.0801 0x0f6c  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
17:17:55.0801 0x0f6c  RpcEptMapper - ok
17:17:55.0832 0x0f6c  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
17:17:55.0832 0x0f6c  RpcLocator - ok
17:17:55.0864 0x0f6c  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
17:17:55.0879 0x0f6c  RpcSs - ok
17:17:55.0926 0x0f6c  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
17:17:55.0926 0x0f6c  rspndr - ok
17:17:55.0957 0x0f6c  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] SamSs           C:\Windows\system32\lsass.exe
17:17:55.0973 0x0f6c  SamSs - ok
17:17:55.0988 0x0f6c  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
17:17:55.0988 0x0f6c  sbp2port - ok
17:17:56.0035 0x0f6c  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
17:17:56.0051 0x0f6c  SCardSvr - ok
17:17:56.0051 0x0f6c  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
17:17:56.0051 0x0f6c  scfilter - ok
17:17:56.0098 0x0f6c  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
17:17:56.0129 0x0f6c  Schedule - ok
17:17:56.0144 0x0f6c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
17:17:56.0144 0x0f6c  SCPolicySvc - ok
17:17:56.0176 0x0f6c  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
17:17:56.0176 0x0f6c  SDRSVC - ok
17:17:56.0191 0x0f6c  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
17:17:56.0191 0x0f6c  secdrv - ok
17:17:56.0207 0x0f6c  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
17:17:56.0207 0x0f6c  seclogon - ok
17:17:56.0222 0x0f6c  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
17:17:56.0222 0x0f6c  SENS - ok
17:17:56.0254 0x0f6c  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
17:17:56.0254 0x0f6c  SensrSvc - ok
17:17:56.0269 0x0f6c  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\drivers\serenum.sys
17:17:56.0269 0x0f6c  Serenum - ok
17:17:56.0332 0x0f6c  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys
17:17:56.0332 0x0f6c  Serial - ok
17:17:56.0378 0x0f6c  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
17:17:56.0378 0x0f6c  sermouse - ok
17:17:56.0441 0x0f6c  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
17:17:56.0456 0x0f6c  SessionEnv - ok
17:17:56.0472 0x0f6c  [ 70F9C476B62DE4F2823E918A6C181ADE, E1A641418A6CB4FA38BB29B86934838B28D8909B8066E5089D85BF72FD61F4C4 ] SFEP            C:\Windows\system32\DRIVERS\SFEP.sys
17:17:56.0472 0x0f6c  SFEP - ok
17:17:56.0488 0x0f6c  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
17:17:56.0488 0x0f6c  sffdisk - ok
17:17:56.0488 0x0f6c  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
17:17:56.0488 0x0f6c  sffp_mmc - ok
17:17:56.0488 0x0f6c  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
17:17:56.0503 0x0f6c  sffp_sd - ok
17:17:56.0503 0x0f6c  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
17:17:56.0503 0x0f6c  sfloppy - ok
17:17:56.0550 0x0f6c  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
17:17:56.0566 0x0f6c  SharedAccess - ok
17:17:56.0581 0x0f6c  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:17:56.0597 0x0f6c  ShellHWDetection - ok
17:17:56.0612 0x0f6c  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
17:17:56.0612 0x0f6c  SiSRaid2 - ok
17:17:56.0628 0x0f6c  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
17:17:56.0628 0x0f6c  SiSRaid4 - ok
17:17:56.0644 0x0f6c  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
17:17:56.0644 0x0f6c  Smb - ok
17:17:56.0690 0x0f6c  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
17:17:56.0690 0x0f6c  SNMPTRAP - ok
17:17:56.0690 0x0f6c  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
17:17:56.0690 0x0f6c  spldr - ok
17:17:56.0737 0x0f6c  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
17:17:56.0753 0x0f6c  Spooler - ok
17:17:56.0893 0x0f6c  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
17:17:56.0956 0x0f6c  sppsvc - ok
17:17:56.0971 0x0f6c  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
17:17:56.0971 0x0f6c  sppuinotify - ok
17:17:57.0018 0x0f6c  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
17:17:57.0018 0x0f6c  srv - ok
17:17:57.0049 0x0f6c  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
17:17:57.0065 0x0f6c  srv2 - ok
17:17:57.0080 0x0f6c  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
17:17:57.0080 0x0f6c  srvnet - ok
17:17:57.0112 0x0f6c  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
17:17:57.0112 0x0f6c  SSDPSRV - ok
17:17:57.0127 0x0f6c  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
17:17:57.0143 0x0f6c  SstpSvc - ok
17:17:57.0158 0x0f6c  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
17:17:57.0158 0x0f6c  stexstor - ok
17:17:57.0205 0x0f6c  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
17:17:57.0205 0x0f6c  stisvc - ok
17:17:57.0221 0x0f6c  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
17:17:57.0221 0x0f6c  swenum - ok
17:17:57.0252 0x0f6c  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
17:17:57.0252 0x0f6c  swprv - ok
17:17:57.0314 0x0f6c  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
17:17:57.0346 0x0f6c  SysMain - ok
17:17:57.0392 0x0f6c  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:17:57.0392 0x0f6c  TabletInputService - ok
17:17:57.0408 0x0f6c  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
17:17:57.0424 0x0f6c  TapiSrv - ok
17:17:57.0424 0x0f6c  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
17:17:57.0439 0x0f6c  TBS - ok
17:17:57.0548 0x0f6c  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
17:17:57.0595 0x0f6c  Tcpip - ok
17:17:57.0642 0x0f6c  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
17:17:57.0673 0x0f6c  TCPIP6 - ok
17:17:57.0704 0x0f6c  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
17:17:57.0704 0x0f6c  tcpipreg - ok
17:17:57.0751 0x0f6c  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
17:17:57.0751 0x0f6c  TDPIPE - ok
17:17:57.0767 0x0f6c  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
17:17:57.0767 0x0f6c  TDTCP - ok
17:17:57.0782 0x0f6c  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
17:17:57.0798 0x0f6c  tdx - ok
17:17:57.0798 0x0f6c  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
17:17:57.0798 0x0f6c  TermDD - ok
17:17:57.0845 0x0f6c  [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService     C:\Windows\System32\termsrv.dll
17:17:57.0860 0x0f6c  TermService - ok
17:17:57.0876 0x0f6c  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
17:17:57.0876 0x0f6c  Themes - ok
17:17:57.0892 0x0f6c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
17:17:57.0892 0x0f6c  THREADORDER - ok
17:17:57.0923 0x0f6c  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
17:17:57.0923 0x0f6c  TrkWks - ok
17:17:57.0970 0x0f6c  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:17:58.0001 0x0f6c  TrustedInstaller - ok
17:17:58.0016 0x0f6c  [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
17:17:58.0016 0x0f6c  tssecsrv - ok
17:17:58.0063 0x0f6c  [ 17C6B51CBCCDED95B3CC14E22791F85E, EE417C19E9B2C258D62A74F1F2421AFFBAC67ACD62481CAA08F5B6A3439C1D7C ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
17:17:58.0063 0x0f6c  TsUsbFlt - ok
17:17:58.0094 0x0f6c  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
17:17:58.0094 0x0f6c  TsUsbGD - ok
17:17:58.0141 0x0f6c  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
17:17:58.0157 0x0f6c  tunnel - ok
17:17:58.0157 0x0f6c  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
17:17:58.0157 0x0f6c  uagp35 - ok
17:17:58.0204 0x0f6c  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
17:17:58.0204 0x0f6c  udfs - ok
17:17:58.0266 0x0f6c  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
17:17:58.0266 0x0f6c  UI0Detect - ok
17:17:58.0297 0x0f6c  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
17:17:58.0313 0x0f6c  uliagpkx - ok
17:17:58.0344 0x0f6c  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
17:17:58.0360 0x0f6c  umbus - ok
17:17:58.0375 0x0f6c  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
17:17:58.0375 0x0f6c  UmPass - ok
17:17:58.0422 0x0f6c  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
17:17:58.0453 0x0f6c  upnphost - ok
17:17:58.0453 0x0f6c  [ 6F1A3157A1C89435352CEB543CDB359C, 325B46220779C5FE3B6F19FF794474837FAB9675D9C98ACB68CCE47B1CFE5F12 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
17:17:58.0469 0x0f6c  usbccgp - ok
17:17:58.0484 0x0f6c  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
17:17:58.0500 0x0f6c  usbcir - ok
17:17:58.0500 0x0f6c  [ C025055FE7B87701EB042095DF1A2D7B, D7B34B6C2C5BD3C8141895AC21BB637EA5E3C4F7A85EEF4C4C36E6BB2045A3D9 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
17:17:58.0500 0x0f6c  usbehci - ok
17:17:58.0516 0x0f6c  [ 287C6C9410B111B68B52CA298F7B8C24, 98900C08FE662A00DF8B37837B2BEBF9ACB7989C387AF36B2109B05A4F462D4E ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
17:17:58.0531 0x0f6c  usbhub - ok
17:17:58.0547 0x0f6c  [ 9840FC418B4CBD632D3D0A667A725C31, 776D86A032DCA2842EF7AADB35473193CA80547223EFAA7F110F296C377077B0 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
17:17:58.0547 0x0f6c  usbohci - ok
17:17:58.0578 0x0f6c  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys
17:17:58.0578 0x0f6c  usbprint - ok
17:17:58.0609 0x0f6c  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:17:58.0609 0x0f6c  USBSTOR - ok
17:17:58.0640 0x0f6c  [ 62069A34518BCF9C1FD9E74B3F6DB7CD, C58E21424718729324B285BEE1C96551540FCC3FD650B2D10895EBA48D981E25 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
17:17:58.0640 0x0f6c  usbuhci - ok
17:17:58.0703 0x0f6c  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
17:17:58.0718 0x0f6c  usbvideo - ok
17:17:58.0750 0x0f6c  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
17:17:58.0750 0x0f6c  UxSms - ok
17:17:58.0781 0x0f6c  [ 4D71227301DD8D09097B9E4CC6527E5A, 193D47ADCB722B581CC0F29B794AB3E455B6E9BEA367CE9A5216A09E055B7F1E ] VaultSvc        C:\Windows\system32\lsass.exe
17:17:58.0781 0x0f6c  VaultSvc - ok
17:17:58.0828 0x0f6c  [ 8F0840FF3A11D6B3F767AD6C79AC2A40, 23A9AFB841CAD5E3FA8360BB2C9531DACCF8D113145CFFE2C9D7BDE507C77509 ] VCService       C:\Program Files\Sony\VAIO Care\VCService.exe
17:17:58.0843 0x0f6c  VCService - ok
17:17:58.0874 0x0f6c  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
17:17:58.0874 0x0f6c  vdrvroot - ok
17:17:58.0937 0x0f6c  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
17:17:58.0952 0x0f6c  vds - ok
17:17:58.0952 0x0f6c  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
17:17:58.0968 0x0f6c  vga - ok
17:17:58.0968 0x0f6c  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
17:17:58.0968 0x0f6c  VgaSave - ok
17:17:58.0984 0x0f6c  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
17:17:58.0984 0x0f6c  vhdmp - ok
17:17:59.0015 0x0f6c  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
17:17:59.0015 0x0f6c  viaide - ok
17:17:59.0030 0x0f6c  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
17:17:59.0030 0x0f6c  volmgr - ok
17:17:59.0062 0x0f6c  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
17:17:59.0062 0x0f6c  volmgrx - ok
17:17:59.0093 0x0f6c  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
17:17:59.0093 0x0f6c  volsnap - ok
17:17:59.0124 0x0f6c  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
17:17:59.0124 0x0f6c  vsmraid - ok
17:17:59.0233 0x0f6c  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
17:17:59.0264 0x0f6c  VSS - ok
17:17:59.0264 0x0f6c  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
17:17:59.0264 0x0f6c  vwifibus - ok
17:17:59.0280 0x0f6c  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
17:17:59.0280 0x0f6c  vwififlt - ok
17:17:59.0311 0x0f6c  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
17:17:59.0311 0x0f6c  vwifimp - ok
17:17:59.0342 0x0f6c  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
17:17:59.0358 0x0f6c  W32Time - ok
17:17:59.0358 0x0f6c  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
17:17:59.0358 0x0f6c  WacomPen - ok
17:17:59.0374 0x0f6c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
17:17:59.0389 0x0f6c  WANARP - ok
17:17:59.0389 0x0f6c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
17:17:59.0405 0x0f6c  Wanarpv6 - ok
17:17:59.0498 0x0f6c  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
17:17:59.0514 0x0f6c  WatAdminSvc - ok
17:17:59.0608 0x0f6c  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
17:17:59.0639 0x0f6c  wbengine - ok
17:17:59.0639 0x0f6c  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
17:17:59.0654 0x0f6c  WbioSrvc - ok
17:17:59.0670 0x0f6c  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
17:17:59.0686 0x0f6c  wcncsvc - ok
17:17:59.0686 0x0f6c  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
17:17:59.0686 0x0f6c  WcsPlugInService - ok
17:17:59.0717 0x0f6c  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
17:17:59.0717 0x0f6c  Wd - ok
17:17:59.0795 0x0f6c  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
17:17:59.0810 0x0f6c  Wdf01000 - ok
17:17:59.0857 0x0f6c  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
17:17:59.0857 0x0f6c  WdiServiceHost - ok
17:17:59.0857 0x0f6c  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
17:17:59.0857 0x0f6c  WdiSystemHost - ok
17:17:59.0904 0x0f6c  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
17:17:59.0904 0x0f6c  WebClient - ok
17:17:59.0935 0x0f6c  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
17:17:59.0951 0x0f6c  Wecsvc - ok
17:17:59.0951 0x0f6c  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
17:17:59.0966 0x0f6c  wercplsupport - ok
17:17:59.0982 0x0f6c  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
17:17:59.0982 0x0f6c  WerSvc - ok
17:18:00.0013 0x0f6c  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
17:18:00.0013 0x0f6c  WfpLwf - ok
17:18:00.0013 0x0f6c  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
17:18:00.0029 0x0f6c  WIMMount - ok
17:18:00.0044 0x0f6c  WinDefend - ok
17:18:00.0044 0x0f6c  WinHttpAutoProxySvc - ok
17:18:00.0122 0x0f6c  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
17:18:00.0169 0x0f6c  Winmgmt - ok
17:18:00.0310 0x0f6c  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll
17:18:00.0356 0x0f6c  WinRM - ok
17:18:00.0434 0x0f6c  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
17:18:00.0466 0x0f6c  Wlansvc - ok
17:18:00.0481 0x0f6c  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
17:18:00.0481 0x0f6c  WmiAcpi - ok
17:18:00.0512 0x0f6c  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
17:18:00.0528 0x0f6c  wmiApSrv - ok
17:18:00.0544 0x0f6c  WMPNetworkSvc - ok
17:18:00.0559 0x0f6c  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
17:18:00.0575 0x0f6c  WPCSvc - ok
17:18:00.0575 0x0f6c  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
17:18:00.0575 0x0f6c  WPDBusEnum - ok
17:18:00.0606 0x0f6c  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
17:18:00.0606 0x0f6c  ws2ifsl - ok
17:18:00.0622 0x0f6c  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
17:18:00.0622 0x0f6c  wscsvc - ok
17:18:00.0622 0x0f6c  WSearch - ok
17:18:00.0746 0x0f6c  [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv        C:\Windows\system32\wuaueng.dll
17:18:00.0793 0x0f6c  wuauserv - ok
17:18:00.0824 0x0f6c  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
17:18:00.0824 0x0f6c  WudfPf - ok
17:18:00.0871 0x0f6c  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
17:18:00.0887 0x0f6c  WUDFRd - ok
17:18:00.0918 0x0f6c  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
17:18:00.0934 0x0f6c  wudfsvc - ok
17:18:00.0980 0x0f6c  [ FE90B750AB808FB9DD8FBB428B5FF83B, 3F8F592EC813BE292D305A87C5BA852F8BC3D7CE610612D9871F209A17326AA8 ] WwanSvc         C:\Windows\System32\wwansvc.dll
17:18:00.0996 0x0f6c  WwanSvc - ok
17:18:01.0230 0x0f6c  [ 3C61B6CCD838534E98552530A491EE04, 16F24EDF109404BB19BC2DAAF747CD7FCA0644378E66869C1085E1E083DC4D78 ] ZeroConfigService C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
17:18:01.0292 0x0f6c  ZeroConfigService - ok
17:18:01.0339 0x0f6c  ================ Scan global ===============================
17:18:01.0355 0x0f6c  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
17:18:01.0402 0x0f6c  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
17:18:01.0433 0x0f6c  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
17:18:01.0464 0x0f6c  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
17:18:01.0480 0x0f6c  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
17:18:01.0495 0x0f6c  [ Global ] - ok
17:18:01.0495 0x0f6c  ================ Scan MBR ==================================
17:18:01.0511 0x0f6c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
17:18:01.0698 0x0f6c  \Device\Harddisk0\DR0 - ok
17:18:01.0698 0x0f6c  [ 6CE17E99519783565EDFEA00707DC4AB ] \Device\Harddisk1\DR3
17:18:01.0714 0x0f6c  \Device\Harddisk1\DR3 - ok
17:18:01.0714 0x0f6c  ================ Scan VBR ==================================
17:18:01.0714 0x0f6c  [ 15B3149E3C0705385A115759095F5EE9 ] \Device\Harddisk0\DR0\Partition1
17:18:01.0714 0x0f6c  \Device\Harddisk0\DR0\Partition1 - ok
17:18:01.0729 0x0f6c  [ B1CB89994F70E409B0FC8B05A1E89C97 ] \Device\Harddisk0\DR0\Partition2
17:18:01.0729 0x0f6c  \Device\Harddisk0\DR0\Partition2 - ok
17:18:01.0729 0x0f6c  Waiting for KSN requests completion. In queue: 302
17:18:02.0743 0x0f6c  Waiting for KSN requests completion. In queue: 302
17:18:03.0757 0x0f6c  Waiting for KSN requests completion. In queue: 302
17:18:04.0771 0x0f6c  Waiting for KSN requests completion. In queue: 302
17:18:06.0082 0x0f6c  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.4.304.0 ), 0x61000 ( enabled : updated )
17:18:06.0129 0x0f6c  Win FW state via NFP2: enabled
17:18:09.0046 0x0f6c  ============================================================
17:18:09.0046 0x0f6c  Scan finished
17:18:09.0046 0x0f6c  ============================================================
17:18:09.0061 0x0f3c  Detected object count: 0
17:18:09.0061 0x0f3c  Actual detected object count: 0
17:18:27.0547 0x0d84  Deinitialize success
"
 
 
I hope this means I'm in the clear!


#8 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 21 November 2013 - 05:51 AM

Full System Scan with Malwarebytes Antimalware

  • If not existing, please download Malwarebytes' Anti-Malware to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.


If the program is already installed:
  • Run Malwarebytes Antimalware
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform fullscan, place a checkmark on all hard drives, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location.
  • The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
  • Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
  • Post that log back here.

 

 

 

Scan with ESET Online Scan

Please go to here to run the online scannner from ESET.

  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked
  • Click on Advanced Settings and ensure these options are ticked:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Click Scan
  • Wait for the scan to finish
  • If any threats were found, click the 'List of found threats' , then click Export to text file....
  • Save it to your desktop, then please copy and paste that log as a reply to this topic.


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#9 ZanaH

ZanaH
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 21 November 2013 - 06:33 PM

Neither of them found anything! :)

 

Results of Malwarebytes log: "Malwarebytes Anti-Malware (Trial) 1.75.0.1300

www.malwarebytes.org
 
Database version: v2013.11.21.09
 
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
Adrian :: ADRIAN-PC [administrator]
 
Protection: Enabled
 
11/21/2013 4:36:34 PM
mbam-log-2013-11-21 (16-36-34).txt
 
Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 308504
Time elapsed: 24 minute(s), 48 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 0
(No malicious items detected)
 
Registry Values Detected: 0
(No malicious items detected)
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 0
(No malicious items detected)
 
Files Detected: 0
(No malicious items detected)
 
(end)
"
No threats were found by ESET (so it didn't give me a log.


#10 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 22 November 2013 - 03:18 AM

Then we can do the cleanup - if you are facing any issues, report that immediately.

Delete junk with adwCleaner


Please download AdwCleaner to your desktop.


  • Run adwcleaner.exe
  • Hit Scan and wait for the scan to finish.
  • Confirm the message but don´t uncheck anything.
  • Hit Clean
  • When the run is finished, it will open up a text file
  • Please post its contents within your next reply
  • You´ll find the log file at C:\AdwCleaner[S1].txt also


SecurityCheck

Please download SecurityCheck: LINK1 LINK2

  • Save it to your desktop, start it and follow the instructions in the window.
  • After the scan finished the (checkup.txt) will open. Copy its content to your thread.


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#11 ZanaH

ZanaH
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 22 November 2013 - 10:45 PM

Here you go!

 

Results of adwcleaner:" # AdwCleaner v3.012 - Report created 22/11/2013 at 21:27:48

# Updated 11/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Adrian - ADRIAN-PC
# Running from : C:\Users\Adrian\Downloads\adwcleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.16428
 
 
-\\ Google Chrome v32.0.1700.19
 
[ File : C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [766 octets] - [22/11/2013 21:26:53]
AdwCleaner[S0].txt - [688 octets] - [22/11/2013 21:27:48]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [747 octets] ##########
"

 

Results of SecurityCheck: " Results of screen317's Security Check version 0.99.77  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware version 1.75.0.1300  
 Java 7 Update 45  
 Google Chrome 32.0.1700.14  
 Google Chrome 32.0.1700.19  
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 1% 
````````````````````End of Log`````````````````````` 
"


#12 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 25 November 2013 - 03:14 AM

Your system is clean now! :)

 

 

Uninstall our tools using delfix

Please follow these steps in order:

  • In the case we used Defogger to turn off your CD emulation software. You can start it again and use the Enable button.
  • In the case we used Combofix. Deactivate your antivirus software once more, then rename the combofix.exe to uninstall.exe and run it one last time. You shall be noted that Combofix has been removed.
  • In any case please download delfix to your desktop.
    • Close all other programms and start delfix.
    • Please check all the boxes and run the tool.
    • delfix will now delete all found traces of our removal process
  • If there is still something left please delete it manualy.

 

 

 

Recommendations: How to protect yourself

  • System Updates
    Please ensure to have automatic updates activated in your control panel.
    For further information and a tutorial, see this Microsoft Support article.
  • Protection
    What you need is one (not more) virus scanner with background protection. Additionally I recommend a special malware scanner to run on demand weekly.
    Personally I am using avast! Antivirus Free Edition and Malwarebytes Anti-Malware. They offer good protection for free.
    • To keep your browser free of advertising, you may install the Adblock Plus browser extension.
      It will filter unwanted advertising out of the website´s content.
    • To protect yourself from accidentally visiting malicious web sites, install the Web of Trust (WOT) browser extension.
      It will display a green (safe), yellow (unknown) or red (potentially dangerous) icon for a visited website within your browser.
      In addition, before accessing a dangerous classified web site, a warning screen is displayed.

  • Up to date Software
    Keep your Windows and your third party software up to date. The easiest way to get infected is an outdated windows, followed by: browser(s) (including add-ons and plug-ins), Adobe Flash Player and Adobe Reader, Java Runtime Environment, your antivirus program and so on. These links may help you to check:

  • Backup
    Hardware issues, malware, fire, lightning strike: There is a long list of different ways to loose all your data. Back up your files regularly. Use the windows internal backup function or a third party tool and save your data onto an external hard drive, cloud storage, optical media like CDs or DVDs or (if available) a professional network backup system.
  • Behaviour
    The commonest error when using a computer is "error 80" - what means that the error is located about 80cm in front of the monitor. This is a common joke between IT support technicians but it shows that all the safety mechanisms won´t help if you aren´t careful enough.
    • While surfing the internet, don´t click on anything you don´t know. In the worst case, it infects your system with malware.
    • Watch your step in social networks! Many cyber criminals use them to spread malware, mine personal pata (to be sold to advertising companies, for example) or simply do damage to other users. Even if a received hyperlink within a message seems to be coming from one of your friends, have a closer look. In addition, don´t click everything.
    • When installing software, have a look to each of the setup windows and uncheck any additional toolbars or free programs that may be offered additionally. Most of today´s setup procedures contain potentially unwanted programs so keep them off your system.
    • Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs.
      They are a security risk which can make your computer susceptible to a wide variety of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#13 ZanaH

ZanaH
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 25 November 2013 - 06:35 PM

Thank you so much for your help and time, I truly appreciate it!

 

Usually I do a good job keeping the system clean, it's just we bought the laptop with the virus already on it, and it spiraled out of control from there. I've made backups of the computer and everything, so I should be good from here on forward.

 

Thanks again!



#14 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 26 November 2013 - 09:25 AM

You´re welcome! :)


Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#15 TB-Psychotic

TB-Psychotic

  • Malware Response Team
  • 6,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:08 AM

Posted 06 December 2013 - 06:56 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
Proud Member of UNITE & TB
 
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users