Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

bt yahoo mail and chrome


  • Please log in to reply
12 replies to this topic

#1 ardee37

ardee37

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 20 May 2015 - 02:18 PM

Bt yahoo mail

Bt changed the format to bt mail but stayed as bt yahoo

A few days later when signed in via chrome, windows 7, a strange window appeared, seemed to be something to do with yahoo settings, I didn’t recognise it so signed out. Signing back in I received a 403 access denied error. After spending  a couple of hours with bt online help, unable to understand what they were saying in India, I rang off. A language problem, not racial.

I ran mbytes rootkit and full scan but all was ok. I ran avast full scan and that was ok. I ran a spybot scan, it found 41 items but nothing “was done”

The odd thing is, I can get the mail on my ipad, on my wife’s laptop using chrome but not on this laptop.

BT care said it was something to do with chrome, not them.

I have uninstalled chrome twice, cleared everything in the registry and mad a clean install without any success. I have changed router wireless key.

I can’t sign in to Yahoo, though I have registered several times, it won’t accept the password and their way of resetting the password is for outlook and whatever.

I could use another server, but at 78 reluctant to change and want to find out if the problem is my laptop.

Would appreciate any and all help

Thanks

 



BC AdBot (Login to Remove)

 


#2 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 21 May 2015 - 07:41 AM

The evidence is it's only a problem with this laptop. Any ideas?



#3 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 22 May 2015 - 03:01 AM

I'm overwhelmed with response so I'll try another way. Solved the prob, dumped bt yahoo mail.

What concerns me is that, if I can get the mail on ipad, galaxy phone and kindle, the problem must be in this laptop. If there is a gremlin in it, which may affect other things or more, after having tried everything, how do I find it and get rid of it? a factory reset is not an option

Any one willing to help an old chap



#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:05:25 PM

Posted 22 May 2015 - 01:54 PM

Lets scan the laptop again.

3Al62Pm.pngMiniToolBox
  • Please download MiniToolBox, save it to your desktop and run it.
  • Checkmark the following checkboxes:
    • Flush DNS
    • Report IE Proxy Settings
    • Reset IE Proxy Settings
    • Report FF Proxy Settings
    • Reset FF Proxy Settings
    • List content of Hosts
    • List IP configuration
    • List Winsock Entries
    • List last 10 Event Viewer log
    • List Installed Programs
    • List Users, Partitions and Memory size.
  • Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
SXvL3ZF.pngTDSSKiller
  • Download TDSSKiller and save it to your desktop.
  • Extract (unzip) its contents to your desktop.
  • Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.
zcMPezJ.pngAdwCleaner
  • Please download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool. Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
lv0mVRW.pngJunkware Removal Tool
  • Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
cvMlKv6.pngESET Online Scanner
  • Hold down Control and click on this link to open ESET Online Scanner in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE: Sometimes if ESET finds no infections it will not create a log.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 23 May 2015 - 03:31 AM

Thanks for that lot lol it may take me some time as I have some cognitive problems and have to take it slowly but I will do what you suggest

 



#6 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 25 May 2015 - 01:51 PM

Hi boopme

I have to post results in separate pages as I'm told it's too long. Probably I've done it all wrong but here goes

Box by Farbar  MiniToolVersion: 11-05-2015 01
Ran by Ron (administrator) on 23-05-2015 at 14:25:47
Running from "C:\Users\Ron\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Model: Satellite C650 Manufacturer: TOSHIBA
Boot Mode: Normal
========================= Flush DNS: ===================================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========================= IE Proxy Settings: ============================== 
Proxy is not enabled.
No Proxy Server is set.
"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
There are 15474 more lines starting with "127.0.0.1"
========================= IP Configuration: ================================
Atheros AR9285 Wireless Network Adapter = Wireless Network Connection (Connected)
Atheros AR8152/8158 PCI-E Fast Ethernet Controller (NDIS 6.20) = Local Area Connection (Hardware not present)
# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
reset
set global icmpredirects=enabled
popd
# End of IPv4 configuration
Windows IP Configuration
   Host Name . . . . . . . . . . . . : Ronslaptop
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : home
Wireless LAN adapter Wireless Network Connection:
   Connection-specific DNS Suffix  . : home
   Description . . . . . . . . . . . : Atheros AR9285 Wireless Network Adapter
   Physical Address. . . . . . . . . : 00-26-B6-F1-0C-CF
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::fd8c:51b4:12d2:550c%12(Preferred) 
   IPv4 Address. . . . . . . . . . . : 192.168.1.64(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : 23 May 2015 13:13:00
   Lease Expires . . . . . . . . . . : 24 May 2015 13:40:24
   Default Gateway . . . . . . . . . : 192.168.1.254
   DHCP Server . . . . . . . . . . . : 192.168.1.254
   DHCPv6 IAID . . . . . . . . . . . : 419440310
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-F8-B9-A8-00-26-6C-77-46-3E
   DNS Servers . . . . . . . . . . . : 192.168.1.254
                                       192.168.1.254
   NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{2A38A47E-2F2E-4E82-88BE-FB24A3467DD1}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{B97ABAFA-2246-4614-9CEB-BB593C6DE53B}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{A22D127C-938C-4DC7-8264-DF55CA381631}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server:  BTHomeHub.home
Address:  192.168.1.254
Name:    google.com
Address:  216.58.208.78
Pinging google.com [216.58.208.78] with 32 bytes of data:
Reply from 216.58.208.78: bytes=32 time=99ms TTL=52
Reply from 216.58.208.78: bytes=32 time=1040ms TTL=52
Ping statistics for 216.58.208.78:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 99ms, Maximum = 1040ms, Average = 569ms
Server:  BTHomeHub.home
Address:  192.168.1.254
Name:    yahoo.com
Addresses:  206.190.36.45
 98.138.253.109
 98.139.183.24
Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
Reply from 206.190.36.45: bytes=32 time=201ms TTL=45
Reply from 206.190.36.45: bytes=32 time=224ms TTL=45
Ping statistics for 206.190.36.45:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 201ms, Maximum = 224ms, Average = 212ms
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
 12...00 26 b6 f1 0c cf ......Atheros AR9285 Wireless Network Adapter
  1...........................Software Loopback Interface 1
 16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
 17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0    192.168.1.254     192.168.1.64     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.1.0    255.255.255.0         On-link      192.168.1.64    281
     192.168.1.64  255.255.255.255         On-link      192.168.1.64    281
    192.168.1.255  255.255.255.255         On-link      192.168.1.64    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.1.64    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.1.64    281
===========================================================================
Persistent Routes:
  None
IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
 12    281 fe80::/64                On-link
 12    281 fe80::fd8c:51b4:12d2:550c/128
                                    On-link
  1    306 ff00::/8                 On-link
 12    281 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================
 
Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
========================= Event log errors: ===============================
Application errors:
==================
Error: (05/23/2015 02:24:56 PM) (Source: Application Hang) (User: )
Description: The program MiniToolBox.exe version 11.5.2015.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: abc
Start Time: 01d0955b4f992d58
Termination Time: 10
Application Path: C:\Users\Ron\Desktop\MiniToolBox.exe
Report Id:
Error: (05/22/2015 03:50:08 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2215
Error: (05/22/2015 03:50:08 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2215
Error: (05/22/2015 03:50:08 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2015 03:50:07 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1061
Error: (05/22/2015 03:50:07 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1061
Error: (05/22/2015 03:50:07 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2015 09:05:49 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9812
Error: (05/22/2015 09:05:49 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9812
Error: (05/22/2015 09:05:49 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
System errors:
=============
Error: (05/23/2015 01:13:03 PM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/23/2015 01:13:03 PM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/23/2015 09:15:52 AM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/23/2015 09:15:52 AM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/22/2015 09:07:14 PM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/22/2015 09:07:14 PM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/22/2015 11:14:33 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (05/22/2015 08:42:36 AM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/22/2015 08:42:36 AM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Error: (05/21/2015 11:04:47 AM) (Source: Microsoft-Windows-TaskScheduler) (User: NT AUTHORITY)
Description: Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147942402.
Microsoft Office Sessions:
=========================
Error: (05/23/2015 02:24:56 PM) (Source: Application Hang)(User: )
Description: MiniToolBox.exe11.5.2015.1abc01d0955b4f992d5810C:\Users\Ron\Desktop\MiniToolBox.exe
Error: (05/22/2015 03:50:08 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2215
Error: (05/22/2015 03:50:08 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2215
Error: (05/22/2015 03:50:08 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2015 03:50:07 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1061
Error: (05/22/2015 03:50:07 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1061
Error: (05/22/2015 03:50:07 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2015 09:05:49 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9812
Error: (05/22/2015 09:05:49 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9812
Error: (05/22/2015 09:05:49 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
CodeIntegrity Errors:
===================================
  Date: 2014-02-23 12:10:37.560
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2014-02-23 12:10:37.400
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2013-09-07 21:13:33.205
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\OxFWLF.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2013-09-07 21:13:32.800
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\OxFWLF.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2012-04-25 10:49:43.373
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ron\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2012-04-25 10:49:43.301
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ron\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2012-04-25 10:49:43.210
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2012-04-25 10:49:43.136
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2012-04-21 19:55:55.513
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ron\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  Date: 2012-04-21 19:55:55.435
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ron\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
=========================== Installed Programs ============================
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.176 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (32-bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.27 - Atheros Communications Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre 64bit (HKLM\...\{7A073C16-B3B5-4913-8457-262B6E17947A}) (Version: 2.5.0 - Kovid Goyal)
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.8.0.17 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.128.0.66 - Conexant)
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Everything 1.2.1.371 (HKLM-x32\...\Everything) (Version:  - )
FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )
Free Duplicate Photo Finder (HKLM-x32\...\{00EBC706-8946-4967-9B64-16648DB3BA3A}) (Version: 1.0.0 - Free Picture Solutions)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.65 - Google Inc.)
Google Earth (HKLM-x32\...\{1A295C25-6E02-49FB-826B-F0D2C56FFA4E}) (Version: 7.1.4.1529 - Google)
Google Earth Plug-in (HKLM-x32\...\{ADA8583A-C20B-414B-8CB7-3AA7A89F7952}) (Version: 7.1.4.1529 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.27.5 - Google Inc.) Hidden
GPBaseService2 (HKLM-x32\...\{63FF21C9-A810-464F-B60A-3111747B1A6D}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Deskjet 1000 J110 series Basic Device Software (HKLM\...\{A3E89C5B-BB3A-433A-A878-D1310BB13EAD}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 1000 J110 series Help (HKLM-x32\...\{DDDFCC77-7F9C-45E9-B38E-721BA599BA0C}) (Version: 140.0.65.65 - Hewlett Packard)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HPProductAssistant (HKLM-x32\...\{C43326F5-F135-4551-8270-7F7ABA0462E1}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden
Intel® Driver Update Utility 2.0 (HKLM-x32\...\{59DB38EB-F864-4E10-841D-38CFBCF864B0}) (Version: 2.0.0.29 - Intel) Hidden
Intel® Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version:  - Audacity Team)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lyrics Plugin for Windows Media Player (HKLM-x32\...\{43002AE2-4093-49E0-A03D-990EE184C568}) (Version: 0.4 - Lyrics Plugin)
Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MouseDriver (HKLM\...\{8765B14B-A636-496B-B13E-A63587C19BF1}) (Version: 1.00.0000 - MouseDriver) Hidden
MouseDriver (HKLM-x32\...\InstallShield_{8765B14B-A636-496B-B13E-A63587C19BF1}) (Version:  - )
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - ) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - ) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - ) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - ) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
OE Classic 2.31 (HKLM-x32\...\OEClassic) (Version: 2.31 - OE Classic)
Paint XP version 1.1 (HKLM-x32\...\{2367FAB6-055A-4923-835F-F57F7BBBA363}_is1) (Version: 1.1 - MSPAINTXP.COM)
Perfect Uninstaller v6.3.3.9 (HKLM\...\Perfect Uninstaller_is1) (Version:  - www.PerfectUninstaller.com)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Qualcomm Atheros)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30111 - Realtek Semiconductor Corp.)
Registrar Registry Manager 7.60 (HKLM\...\RegistrarHome_is1) (Version:  - Resplendence Software Projects Sp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Sigil 0.7.3 (HKLM-x32\...\Sigil_is1) (Version:  - John Schember)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.0 - IObit)
SolutionCenter (HKLM-x32\...\{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform)
Spotify (HKCU\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 11.2.4.0 - Synaptics)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Watchtower Library 2013 - English (HKLM-x32\...\{004E8ED2-315C-4473-A934-032D5D7B3A02}) (Version: 15.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
Watchtower Library 2014 - English (HKLM-x32\...\{DB6F2EEA-CEEA-4096-8BD7-ABF100A90820}) (Version: 16.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
WMI Tools (HKLM-x32\...\{25A13826-8E4A-4FBF-AD2B-776447FE9646}) (Version: 1.50.1131.0001 - Microsoft Corporation)
========================= Memory info: ===================================
Percentage of memory in use: 31%
Total physical RAM: 2939.97 MB
Available physical RAM: 1999.51 MB
Total Pagefile: 5878.13 MB
Available Pagefile: 4641.32 MB
Total Virtual: 4095.88 MB
Available Virtual: 3985.73 MB
========================= Partitions: =====================================
1 Drive c: (WINDOWS) (Fixed) (Total:116.21 GB) (Free:65.58 GB) NTFS
2 Drive d: (Data) (Fixed) (Total:116.28 GB) (Free:109.36 GB) NTFS
========================= Users: ========================================
User accounts for \\RONSLAPTOP
Administrator            Guest                    Ron                      
**** End of log ****


#7 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 25 May 2015 - 01:58 PM

12:01:04.0061 0x0e30  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
12:01:12.0818 0x0e30  ============================================================
12:01:12.0818 0x0e30  Current date / time: 2015/05/24 12:01:12.0818
12:01:12.0818 0x0e30  SystemInfo:
12:01:12.0818 0x0e30  
12:01:12.0818 0x0e30  OS Version: 6.1.7601 ServicePack: 1.0
12:01:12.0818 0x0e30  Product type: Workstation
12:01:12.0818 0x0e30  ComputerName: RONSLAPTOP
12:01:12.0818 0x0e30  UserName: Ron
12:01:12.0818 0x0e30  Windows directory: C:\Windows
12:01:12.0818 0x0e30  System windows directory: C:\Windows
12:01:12.0818 0x0e30  Running under WOW64
12:01:12.0818 0x0e30  Processor architecture: Intel x64
12:01:12.0818 0x0e30  Number of processors: 2
12:01:12.0818 0x0e30  Page size: 0x1000
12:01:12.0818 0x0e30  Boot type: Normal boot
12:01:12.0818 0x0e30  ============================================================
12:01:16.0276 0x0e30  KLMD registered as C:\Windows\system32\drivers\39991342.sys
12:01:16.0796 0x0e30  System UUID: {72CFD2DD-50EC-D388-9330-15D6F8C744ED}
12:01:17.0706 0x0e30  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
12:01:17.0786 0x0e30  ============================================================
12:01:17.0786 0x0e30  \Device\Harddisk0\DR0:
12:01:17.0796 0x0e30  MBR partitions:
12:01:17.0796 0x0e30  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xC8800, BlocksNum 0xE86C800
12:01:17.0796 0x0e30  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xE935000, BlocksNum 0xE890170
12:01:17.0796 0x0e30  ============================================================
12:01:17.0836 0x0e30  C: <-> \Device\Harddisk0\DR0\Partition1
12:01:17.0886 0x0e30  D: <-> \Device\Harddisk0\DR0\Partition2
12:01:17.0886 0x0e30  ============================================================
12:01:17.0886 0x0e30  Initialize success
12:01:17.0886 0x0e30  ============================================================
12:01:21.0147 0x0558  ============================================================
12:01:21.0147 0x0558  Scan started
12:01:21.0147 0x0558  Mode: Manual; 
12:01:21.0147 0x0558  ============================================================
12:01:21.0147 0x0558  KSN ping started
12:01:24.0816 0x0558  KSN ping finished: true
12:01:27.0315 0x0558  ================ Scan system memory ========================
12:01:27.0315 0x0558  System memory - ok
12:01:27.0315 0x0558  ================ Scan services =============================
12:01:27.0465 0x0558  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
12:01:27.0475 0x0558  1394ohci - ok
12:01:27.0536 0x0558  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
12:01:27.0546 0x0558  ACPI - ok
12:01:27.0586 0x0558  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
12:01:27.0586 0x0558  AcpiPmi - ok
12:01:27.0706 0x0558  [ 4C72FDD915D62EAEF149BD9C73AB9CF4, 8EA45A1B88DFD819F0ADA3AF36D464E1BF52574269592370E0CC8D0490680E1F ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
12:01:27.0716 0x0558  AdobeARMservice - ok
12:01:27.0846 0x0558  [ F4BF3ADDDDC1AD372604F13C2B0C1F65, FA37ED5014336A72F778C485226B61BEFECEB861AB754862738795C167F0BAB7 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
12:01:27.0856 0x0558  AdobeFlashPlayerUpdateSvc - ok
12:01:27.0926 0x0558  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
12:01:27.0936 0x0558  adp94xx - ok
12:01:27.0956 0x0558  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
12:01:27.0966 0x0558  adpahci - ok
12:01:28.0006 0x0558  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
12:01:28.0016 0x0558  adpu320 - ok
12:01:28.0046 0x0558  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
12:01:28.0046 0x0558  AeLookupSvc - ok
12:01:28.0116 0x0558  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
12:01:28.0126 0x0558  AFD - ok
12:01:28.0156 0x0558  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
12:01:28.0156 0x0558  agp440 - ok
12:01:28.0186 0x0558  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
12:01:28.0186 0x0558  ALG - ok
12:01:28.0226 0x0558  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
12:01:28.0226 0x0558  aliide - ok
12:01:28.0246 0x0558  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
12:01:28.0246 0x0558  amdide - ok
12:01:28.0386 0x0558  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
12:01:28.0386 0x0558  AmdK8 - ok
12:01:28.0406 0x0558  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
12:01:28.0416 0x0558  AmdPPM - ok
12:01:28.0456 0x0558  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
12:01:28.0466 0x0558  amdsata - ok
12:01:28.0496 0x0558  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
12:01:28.0496 0x0558  amdsbs - ok
12:01:28.0526 0x0558  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
12:01:28.0526 0x0558  amdxata - ok
12:01:28.0606 0x0558  [ 59D01FA91962C9C1E9B4022B2D3B46DB, 3A111588538B77F010B5C900FB8425DDE55A08DBAC308CA7FB7BD9FCCCDEC69F ] AppHostSvc      C:\Windows\system32\inetsrv\apphostsvc.dll
12:01:28.0606 0x0558  AppHostSvc - ok
12:01:28.0646 0x0558  [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID           C:\Windows\system32\drivers\appid.sys
12:01:28.0656 0x0558  AppID - ok
12:01:28.0666 0x0558  [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
12:01:28.0676 0x0558  AppIDSvc - ok
12:01:28.0706 0x0558  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
12:01:28.0706 0x0558  Appinfo - ok
12:01:28.0836 0x0558  [ 612CB66D93ED0F2F21BB109840C7D813, 75484123DA27B8942B13148FCF061C75A08A50386A095143736B593E9C772173 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:01:28.0836 0x0558  Apple Mobile Device Service - ok
12:01:28.0876 0x0558  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys
12:01:28.0876 0x0558  arc - ok
12:01:28.0886 0x0558  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
12:01:28.0896 0x0558  arcsas - ok
12:01:29.0016 0x0558  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
12:01:29.0016 0x0558  aspnet_state - ok
12:01:29.0076 0x0558  [ B5B4C90E9F52DA8586F1E5461AD90A5D, D1EAA34E6AEB014E942D22F8CB5FB19BF1E2EADE5B5357274C001F44FDC25F05 ] aswHwid         C:\Windows\system32\drivers\aswHwid.sys
12:01:29.0076 0x0558  aswHwid - ok
12:01:29.0136 0x0558  [ 300CB8E510855189CAD0B72FFB5590CB, EB50DC553FA8FD9DE3F60AAFED20702EAFBB1498EBD3220A39CC52A12F694246 ] aswMonFlt       C:\Windows\system32\drivers\aswMonFlt.sys
12:01:29.0136 0x0558  aswMonFlt - ok
12:01:29.0176 0x0558  [ 6D37D8DB30D086739507C5F6E542656A, 746D9E32E729138EA19062F4E6B6C98B6833504020A296E3E2A9CD92E0FED0B9 ] aswRdr          C:\Windows\system32\drivers\aswRdr2.sys
12:01:29.0176 0x0558  aswRdr - ok
12:01:29.0196 0x0558  [ 07E32DFCA422A2920482D762D01957EC, A6502D26266D708E55EB2883897673AD3087C41D9EA0B41CD6BF6BD923EBDCB8 ] aswRvrt         C:\Windows\system32\drivers\aswRvrt.sys
12:01:29.0196 0x0558  aswRvrt - ok
12:01:29.0306 0x0558  [ 3B4AC2DBFC86F7247C1FF1FAF2860530, A54A693D01C02AAE2B78BFE9B3900B5A6DD0C2C37C8FA58B14B5F57107032FF5 ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
12:01:29.0326 0x0558  aswSnx - ok
12:01:29.0402 0x0558  [ B1368BE5F6BA529E0886F4DA2361BD2D, B95F430B4E4EFE9D257870722AA8F0507FB96FBE3AAB12068C662CCB6A180FE2 ] aswSP           C:\Windows\system32\drivers\aswSP.sys
12:01:29.0411 0x0558  aswSP - ok
12:01:29.0454 0x0558  [ 6E53278ECCFFBC2ACC2A5006745ED4BB, 392170073A8933DB43CD1D64AD087F972F1971BF83BCAFE5B8FA1273C02026CE ] aswStm          C:\Windows\system32\drivers\aswStm.sys
12:01:29.0464 0x0558  aswStm - ok
12:01:29.0494 0x0558  [ 91782404718C6352C26B3242BAC3F0F1, 84B1CDD1EBC83FAEBDCC8F67B13CA405C6CF0C518FC016603889EBE48FC91AB9 ] aswVmm          C:\Windows\system32\drivers\aswVmm.sys
12:01:29.0494 0x0558  aswVmm - ok
12:01:29.0524 0x0558  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
12:01:29.0524 0x0558  AsyncMac - ok
12:01:29.0554 0x0558  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
12:01:29.0554 0x0558  atapi - ok
12:01:29.0684 0x0558  [ B28998D019340B333A106316D8B7D8DA, DCE0054CEFD22775F69A5890199A9963E27639E04E5CC0D12712871AB762FEE6 ] athr            C:\Windows\system32\DRIVERS\athrx.sys
12:01:29.0754 0x0558  athr - ok
12:01:29.0824 0x0558  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:01:29.0844 0x0558  AudioEndpointBuilder - ok
12:01:29.0864 0x0558  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
12:01:29.0884 0x0558  AudioSrv - ok
12:01:29.0964 0x0558  [ 54236E79A44F909612391C8A2D70D512, B0DF5BCC4F90AF087D0306F8D81F90B2CAE0176813E3AA6A7D5460F7878677CD ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
12:01:29.0974 0x0558  avast! Antivirus - ok
12:01:30.0024 0x0558  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
12:01:30.0024 0x0558  AxInstSV - ok
12:01:30.0074 0x0558  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
12:01:30.0094 0x0558  b06bdrv - ok
12:01:30.0124 0x0558  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
12:01:30.0134 0x0558  b57nd60a - ok
12:01:30.0184 0x0558  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
12:01:30.0194 0x0558  BDESVC - ok
12:01:30.0214 0x0558  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
12:01:30.0214 0x0558  Beep - ok

12:01:30.0384 0x0558  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
12:01:30.0404 0x0558  BFE - ok
12:01:30.0454 0x0558  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
12:01:30.0504 0x0558  BITS - ok
12:01:30.0554 0x0558  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
12:01:30.0554 0x0558  blbdrive - ok
12:01:30.0644 0x0558  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
12:01:30.0664 0x0558  Bonjour Service - ok
12:01:30.0714 0x0558  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
12:01:30.0714 0x0558  bowser - ok
12:01:30.0754 0x0558  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:01:30.0754 0x0558  BrFiltLo - ok
12:01:30.0764 0x0558  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:01:30.0764 0x0558  BrFiltUp - ok
12:01:30.0834 0x0558  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
12:01:30.0844 0x0558  Browser - ok
12:01:30.0894 0x0558  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
12:01:30.0904 0x0558  Brserid - ok
12:01:30.0924 0x0558  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
12:01:30.0924 0x0558  BrSerWdm - ok
12:01:30.0954 0x0558  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
12:01:30.0954 0x0558  BrUsbMdm - ok
12:01:30.0984 0x0558  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
12:01:30.0984 0x0558  BrUsbSer - ok
12:01:31.0054 0x0558  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys
12:01:31.0054 0x0558  BthEnum - ok
12:01:31.0084 0x0558  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
12:01:31.0094 0x0558  BTHMODEM - ok
12:01:31.0124 0x0558  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
12:01:31.0124 0x0558  BthPan - ok
12:01:31.0194 0x0558  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys
12:01:31.0204 0x0558  BTHPORT - ok
12:01:31.0244 0x0558  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
12:01:31.0244 0x0558  bthserv - ok
12:01:31.0294 0x0558  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys
12:01:31.0294 0x0558  BTHUSB - ok
12:01:31.0324 0x0558  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
12:01:31.0324 0x0558  cdfs - ok
12:01:31.0364 0x0558  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
12:01:31.0364 0x0558  cdrom - ok
12:01:31.0411 0x0558  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
12:01:31.0421 0x0558  CertPropSvc - ok
12:01:31.0461 0x0558  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
12:01:31.0461 0x0558  circlass - ok
12:01:31.0521 0x0558  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
12:01:31.0541 0x0558  CLFS - ok
12:01:31.0581 0x0558  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:01:31.0591 0x0558  clr_optimization_v2.0.50727_32 - ok
12:01:31.0621 0x0558  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
12:01:31.0631 0x0558  clr_optimization_v2.0.50727_64 - ok
12:01:31.0711 0x0558  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:01:31.0711 0x0558  clr_optimization_v4.0.30319_32 - ok
12:01:31.0731 0x0558  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
12:01:31.0741 0x0558  clr_optimization_v4.0.30319_64 - ok
12:01:31.0761 0x0558  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
12:01:31.0771 0x0558  CmBatt - ok
12:01:31.0801 0x0558  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
12:01:31.0801 0x0558  cmdide - ok
12:01:31.0851 0x0558  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys
12:01:31.0871 0x0558  CNG - ok
12:01:31.0951 0x0558  [ 66D12B53E117EF951D5E1CED03B4CC1B, 7A83B4AF4F64BC3811573F2211760AC1BA58FEBD67CBC926345D58C028C43573 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT64.sys
12:01:31.0971 0x0558  CnxtHdAudService - ok
12:01:32.0011 0x0558  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
12:01:32.0011 0x0558  Compbatt - ok
12:01:32.0041 0x0558  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
12:01:32.0051 0x0558  CompositeBus - ok
12:01:32.0051 0x0558  COMSysApp - ok
12:01:32.0111 0x0558  cpudrv64 - ok
12:01:32.0201 0x0558  cpuz136 - ok
12:01:32.0231 0x0558  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
12:01:32.0231 0x0558  crcdisk - ok
12:01:32.0391 0x0558  [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc        C:\Windows\system32\cryptsvc.dll
12:01:32.0401 0x0558  CryptSvc - ok
12:01:32.0481 0x0558  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
12:01:32.0501 0x0558  DcomLaunch - ok
12:01:32.0541 0x0558  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
12:01:32.0551 0x0558  defragsvc - ok
12:01:32.0591 0x0558  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
12:01:32.0591 0x0558  DfsC - ok
12:01:32.0651 0x0558  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
12:01:32.0651 0x0558  dg_ssudbus - ok
12:01:32.0701 0x0558  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
12:01:32.0721 0x0558  Dhcp - ok
12:01:32.0751 0x0558  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
12:01:32.0751 0x0558  discache - ok
12:01:32.0791 0x0558  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
12:01:32.0791 0x0558  Disk - ok
12:01:32.0831 0x0558  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
12:01:32.0841 0x0558  Dnscache - ok
12:01:32.0881 0x0558  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
12:01:32.0891 0x0558  dot3svc - ok
12:01:32.0931 0x0558  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
12:01:32.0931 0x0558  DPS - ok
12:01:32.0991 0x0558  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
12:01:32.0991 0x0558  drmkaud - ok
12:01:33.0341 0x0558  [ 1ED08A6264C5C92099D6D1DAE5E8F530, 4045AE77859B1DBF13972451972EAAF6F3C97BEA423E9E78F1C2F14330CD47CA ] DrvAgent64      C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
12:01:33.0351 0x0558  DrvAgent64 - ok
12:01:33.0421 0x0558  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
12:01:33.0441 0x0558  DXGKrnl - ok
12:01:33.0471 0x0558  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
12:01:33.0481 0x0558  EapHost - ok
12:01:33.0622 0x0558  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
12:01:33.0712 0x0558  ebdrv - ok
12:01:33.0742 0x0558  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] EFS             C:\Windows\System32\lsass.exe
12:01:33.0742 0x0558  EFS - ok
12:01:33.0812 0x0558  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
12:01:33.0822 0x0558  elxstor - ok
12:01:33.0852 0x0558  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
12:01:33.0852 0x0558  ErrDev - ok
12:01:33.0932 0x0558  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
12:01:33.0952 0x0558  EventSystem - ok
12:01:33.0992 0x0558  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
12:01:34.0002 0x0558  exfat - ok
12:01:34.0062 0x0558  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
12:01:34.0072 0x0558  fastfat - ok
12:01:34.0092 0x0558  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
12:01:34.0092 0x0558  fdc - ok
12:01:34.0132 0x0558  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
12:01:34.0142 0x0558  fdPHost - ok
12:01:34.0152 0x0558  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
12:01:34.0152 0x0558  FDResPub - ok
12:01:34.0182 0x0558  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
12:01:34.0192 0x0558  FileInfo - ok
12:01:34.0202 0x0558  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
12:01:34.0202 0x0558  Filetrace - ok
12:01:34.0222 0x0558  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
12:01:34.0232 0x0558  flpydisk - ok
12:01:34.0372 0x0558  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
12:01:34.0382 0x0558  FltMgr - ok
12:01:34.0472 0x0558  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll
12:01:34.0502 0x0558  FontCache - ok
12:01:34.0622 0x0558  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
12:01:34.0622 0x0558  FontCache3.0.0.0 - ok
12:01:34.0662 0x0558  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
12:01:34.0672 0x0558  FsDepends - ok
12:01:34.0702 0x0558  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
12:01:34.0702 0x0558  Fs_Rec - ok
12:01:34.0752 0x0558  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
12:01:34.0762 0x0558  fvevol - ok
12:01:34.0802 0x0558  [ 60ACB128E64C35C2B4E4AAB1B0A5C293, 7B476AB5E95529A894F95397C753662F4C58D1FE89F4648271251DA77C5A3FA9 ] FwLnk           C:\Windows\system32\DRIVERS\FwLnk.sys
12:01:34.0802 0x0558  FwLnk - ok
12:01:34.0822 0x0558  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
12:01:34.0832 0x0558  gagp30kx - ok
12:01:34.0892 0x0558  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:01:34.0892 0x0558  GEARAspiWDM - ok
12:01:34.0952 0x0558  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
12:01:34.0972 0x0558  gpsvc - ok
12:01:35.0062 0x0558  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:01:35.0062 0x0558  gupdate - ok
12:01:35.0152 0x0558  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:01:35.0152 0x0558  gupdatem - ok
12:01:35.0182 0x0558  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
12:01:35.0192 0x0558  hcw85cir - ok
12:01:35.0252 0x0558  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:01:35.0262 0x0558  HdAudAddService - ok
12:01:35.0292 0x0558  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
12:01:35.0292 0x0558  HDAudBus - ok
12:01:35.0322 0x0558  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
12:01:35.0322 0x0558  HidBatt - ok
12:01:35.0342 0x0558  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
12:01:35.0342 0x0558  HidBth - ok
12:01:35.0372 0x0558  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
12:01:35.0382 0x0558  HidIr - ok
12:01:35.0412 0x0558  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
12:01:35.0412 0x0558  hidserv - ok
12:01:35.0472 0x0558  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
12:01:35.0472 0x0558  HidUsb - ok
12:01:35.0512 0x0558  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
12:01:35.0512 0x0558  hkmsvc - ok
12:01:35.0552 0x0558  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:01:35.0572 0x0558  HomeGroupListener - ok
12:01:35.0602 0x0558  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:01:35.0612 0x0558  HomeGroupProvider - ok
12:01:35.0742 0x0558  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05, 7B3F117C1D606DDA7623BEC0BFBC362C33A12213E899F049AC56A55826984134 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
12:01:35.0752 0x0558  hpqcxs08 - ok
12:01:35.0812 0x0558  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
12:01:35.0812 0x0558  HpSAMD - ok
12:01:35.0872 0x0558  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
12:01:35.0892 0x0558  HTTP - ok
12:01:35.0932 0x0558  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
12:01:35.0932 0x0558  hwpolicy - ok
12:01:35.0972 0x0558  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
12:01:35.0982 0x0558  i8042prt - ok
12:01:36.0042 0x0558  [ BBB3B6DF1ABB0FE35802EDE85CC1C011, 6E1FA8519A7D417969244E807D2863B39656169A925966045036A989A5EB611D ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
12:01:36.0052 0x0558  iaStor - ok
12:01:36.0102 0x0558  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
12:01:36.0112 0x0558  iaStorV - ok
12:01:36.0172 0x0558  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
12:01:36.0192 0x0558  idsvc - ok
12:01:36.0222 0x0558  IEEtwCollectorService - ok
12:01:36.0842 0x0558  [ 8814F0B9A09C647D3D7BE735450E7B4C, E82AD0DC556AE7663C1A5CE75DA3619E1614BC88F52558496FF0D569DE04E1CA ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
12:01:37.0202 0x0558  igfx - ok
12:01:37.0432 0x0558  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
12:01:37.0522 0x0558  iirsp - ok
12:01:37.0772 0x0558  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
12:01:37.0792 0x0558  IKEEXT - ok
12:01:37.0822 0x0558  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
12:01:37.0822 0x0558  intelide - ok
12:01:37.0862 0x0558  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
12:01:37.0862 0x0558  intelppm - ok
12:01:37.0892 0x0558  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
12:01:37.0892 0x0558  IPBusEnum - ok
12:01:37.0922 0x0558  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:01:37.0922 0x0558  IpFilterDriver - ok
12:01:37.0972 0x0558  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
12:01:37.0982 0x0558  iphlpsvc - ok
12:01:38.0012 0x0558  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
12:01:38.0012 0x0558  IPMIDRV - ok
12:01:38.0032 0x0558  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
12:01:38.0042 0x0558  IPNAT - ok
12:01:38.0152 0x0558  [ A4857E8B1DEB9740FB5ADEDF05ED69E0, 24FC7A188D32B08CE4F10EEEF17F37C45DB5433158A7A97A07D43F6BEE58DFFC ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
12:01:38.0172 0x0558  iPod Service - ok
12:01:38.0202 0x0558  [ 3ABF5E7213EB28966D55D58B515D5CE9, 


#8 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 25 May 2015 - 02:04 PM

A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
12:01:38.0202 0x0558  IRENUM - ok
12:01:38.0232 0x0558  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
12:01:38.0232 0x0558  isapnp - ok
12:01:38.0372 0x0558  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
12:01:38.0392 0x0558  iScsiPrt - ok
12:01:38.0432 0x0558  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
12:01:38.0442 0x0558  kbdclass - ok
12:01:38.0462 0x0558  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
12:01:38.0472 0x0558  kbdhid - ok
12:01:38.0492 0x0558  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] KeyIso          C:\Windows\system32\lsass.exe
12:01:38.0492 0x0558  KeyIso - ok
12:01:38.0522 0x0558  [ 063C09DB965E3DFD6F4F08416F6DB8F5, 0BE015C59288397536B3941BA55EFE0CF06714BC43FF3A33A1D844B4E0F16097 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
12:01:38.0522 0x0558  KSecDD - ok
12:01:38.0562 0x0558  [ 1FA627E63195BF3BF636BFEF0D7190D4, 794456605303F4916E81BE899E0B05CB070094E719ADA8BE8072A761E35CA8E9 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
12:01:38.0562 0x0558  KSecPkg - ok
12:01:38.0602 0x0558  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
12:01:38.0602 0x0558  ksthunk - ok
12:01:38.0652 0x0558  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
12:01:38.0672 0x0558  KtmRm - ok
12:01:38.0732 0x0558  [ 655A5D8E80869781CCE23760ADA7E695, 86DA2FC5DBA28762A89BC70D9DA0F370FC4A9F4F28E6802AD5972C387F4EEFD3 ] L1C             C:\Windows\system32\DRIVERS\L1C62x64.sys
12:01:38.0742 0x0558  L1C - ok
12:01:38.0792 0x0558  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
12:01:38.0802 0x0558  LanmanServer - ok
12:01:38.0832 0x0558  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:01:38.0842 0x0558  LanmanWorkstation - ok
12:01:38.0882 0x0558  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
12:01:38.0882 0x0558  lltdio - ok
12:01:38.0932 0x0558  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
12:01:38.0942 0x0558  lltdsvc - ok
12:01:38.0972 0x0558  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
12:01:38.0972 0x0558  lmhosts - ok
12:01:39.0002 0x0558  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
12:01:39.0012 0x0558  LSI_FC - ok
12:01:39.0012 0x0558  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
12:01:39.0022 0x0558  LSI_SAS - ok
12:01:39.0042 0x0558  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:01:39.0042 0x0558  LSI_SAS2 - ok
12:01:39.0052 0x0558  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:01:39.0052 0x0558  LSI_SCSI - ok
12:01:39.0092 0x0558  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
12:01:39.0102 0x0558  luafv - ok
12:01:39.0172 0x0558  [ 54D70409DE6932E9EFA117779611E7A9, 4FF4328CEB222160664633D361D06EAEF4B27E2A5AE515CF7D425650A6A23136 ] mbamchameleon   C:\Windows\system32\drivers\mbamchameleon.sys
12:01:39.0182 0x0558  mbamchameleon - ok
12:01:39.0252 0x0558  [ 1E9E32AEC3E1EB1B31B8169F33168B56, 39114585E1FDBBA31E1F781C6A627281907183F94626EB347B08D1F78992ED2A ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
12:01:39.0252 0x0558  MBAMProtector - ok
12:01:39.0382 0x0558  [ 2B983F067AEE3F9EB4DF5E97F45D21D1, 0B9ED0E91FF01A5445927650113E320C3C0EA16F1401AA55A509DDBF704DF22F ] MBAMService     C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
12:01:39.0412 0x0558  MBAMService - ok
12:01:39.0462 0x0558  [ F49FB3C88E263AE9A246593B0BB29294, FB53D6FA4A98B98334DCFF81E40712265256D31A9E9FF36022887BABD50F39EB ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
12:01:39.0472 0x0558  MBAMWebAccessControl - ok
12:01:39.0492 0x0558  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
12:01:39.0492 0x0558  megasas - ok
12:01:39.0512 0x0558  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
12:01:39.0522 0x0558  MegaSR - ok
12:01:39.0562 0x0558  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
12:01:39.0572 0x0558  MMCSS - ok
12:01:39.0592 0x0558  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
12:01:39.0592 0x0558  Modem - ok
12:01:39.0612 0x0558  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
12:01:39.0612 0x0558  monitor - ok
12:01:39.0642 0x0558  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
12:01:39.0642 0x0558  mouclass - ok
12:01:39.0672 0x0558  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
12:01:39.0682 0x0558  mouhid - ok
12:01:39.0712 0x0558  [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
12:01:39.0722 0x0558  mountmgr - ok

12:01:39.0742 0x0558  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
12:01:39.0752 0x0558  mpio - ok
12:01:39.0802 0x0558  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
12:01:39.0802 0x0558  mpsdrv - ok
12:01:39.0872 0x0558  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
12:01:39.0892 0x0558  MpsSvc - ok
12:01:39.0932 0x0558  MREMP50 - ok
12:01:39.0972 0x0558  MREMP50a64 - ok
12:01:39.0982 0x0558  MREMPR5 - ok
12:01:40.0002 0x0558  MRENDIS5 - ok
12:01:40.0032 0x0558  MRESP50 - ok
12:01:40.0052 0x0558  MRESP50a64 - ok
12:01:40.0092 0x0558  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
12:01:40.0102 0x0558  MRxDAV - ok
12:01:40.0142 0x0558  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
12:01:40.0152 0x0558  mrxsmb - ok
12:01:40.0182 0x0558  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:01:40.0192 0x0558  mrxsmb10 - ok
12:01:40.0212 0x0558  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:01:40.0212 0x0558  mrxsmb20 - ok
12:01:40.0242 0x0558  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
12:01:40.0242 0x0558  msahci - ok
12:01:40.0362 0x0558  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
12:01:40.0372 0x0558  msdsm - ok
12:01:40.0402 0x0558  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
12:01:40.0402 0x0558  MSDTC - ok
12:01:40.0442 0x0558  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
12:01:40.0442 0x0558  Msfs - ok
12:01:40.0472 0x0558  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
12:01:40.0472 0x0558  mshidkmdf - ok
12:01:40.0512 0x0558  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
12:01:40.0512 0x0558  msisadrv - ok
12:01:40.0562 0x0558  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
12:01:40.0572 0x0558  MSiSCSI - ok
12:01:40.0572 0x0558  msiserver - ok
12:01:40.0622 0x0558  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
12:01:40.0622 0x0558  MSKSSRV - ok
12:01:40.0632 0x0558  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
12:01:40.0632 0x0558  MSPCLOCK - ok
12:01:40.0662 0x0558  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
12:01:40.0662 0x0558  MSPQM - ok
12:01:40.0702 0x0558  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
12:01:40.0712 0x0558  MsRPC - ok
12:01:40.0732 0x0558  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
12:01:40.0732 0x0558  mssmbios - ok
12:01:40.0762 0x0558  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
12:01:40.0762 0x0558  MSTEE - ok
12:01:40.0772 0x0558  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
12:01:40.0772 0x0558  MTConfig - ok
12:01:40.0802 0x0558  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
12:01:40.0802 0x0558  Mup - ok
12:01:40.0832 0x0558  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
12:01:40.0852 0x0558  napagent - ok
12:01:40.0902 0x0558  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
12:01:40.0902 0x0558  NativeWifiP - ok
12:01:40.0962 0x0558  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
12:01:40.0982 0x0558  NDIS - ok
12:01:41.0012 0x0558  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
12:01:41.0012 0x0558  NdisCap - ok
12:01:41.0032 0x0558  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
12:01:41.0032 0x0558  NdisTapi - ok
12:01:41.0072 0x0558  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
12:01:41.0072 0x0558  Ndisuio - ok
12:01:41.0102 0x0558  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
12:01:41.0102 0x0558  NdisWan - ok
12:01:41.0132 0x0558  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
12:01:41.0132 0x0558  NDProxy - ok
12:01:41.0162 0x0558  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
12:01:41.0162 0x0558  NetBIOS - ok
12:01:41.0192 0x0558  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
12:01:41.0202 0x0558  NetBT - ok
12:01:41.0222 0x0558  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] Netlogon        C:\Windows\system32\lsass.exe
12:01:41.0222 0x0558  Netlogon - ok
12:01:41.0272 0x0558  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
12:01:41.0282 0x0558  Netman - ok
12:01:41.0342 0x0558  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:01:41.0352 0x0558  NetMsmqActivator - ok
12:01:41.0362 0x0558  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:01:41.0372 0x0558  NetPipeActivator - ok
12:01:41.0412 0x0558  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
12:01:41.0432 0x0558  netprofm - ok
12:01:41.0442 0x0558  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:01:41.0442 0x0558  NetTcpActivator - ok
12:01:41.0452 0x0558  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:01:41.0452 0x0558  NetTcpPortSharing - ok
12:01:41.0502 0x0558  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
12:01:41.0502 0x0558  nfrd960 - ok
12:01:41.0542 0x0558  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
12:01:41.0552 0x0558  NlaSvc - ok
12:01:41.0573 0x0558  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
12:01:41.0573 0x0558  Npfs - ok
12:01:41.0613 0x0558  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
12:01:41.0613 0x0558  nsi - ok
12:01:41.0633 0x0558  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
12:01:41.0643 0x0558  nsiproxy - ok
12:01:41.0733 0x0558  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
12:01:41.0773 0x0558  Ntfs - ok
12:01:41.0803 0x0558  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
12:01:41.0803 0x0558  Null - ok
12:01:41.0833 0x0558  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
12:01:41.0843 0x0558  nvraid - ok
12:01:41.0883 0x0558  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
12:01:41.0893 0x0558  nvstor - ok
12:01:41.0923 0x0558  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
12:01:41.0933 0x0558  nv_agp - ok
12:01:41.0973 0x0558  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
12:01:41.0973 0x0558  ohci1394 - ok
12:01:42.0073 0x0558  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:01:42.0083 0x0558  ose - ok
12:01:42.0333 0x0558  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
12:01:42.0523 0x0558  osppsvc - ok
12:01:42.0563 0x0558  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

12:01:42.0574 0x0558  p2pimsvc - ok
12:01:42.0614 0x0558  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
12:01:42.0624 0x0558  p2psvc - ok
12:01:42.0664 0x0558  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
12:01:42.0664 0x0558  Parport - ok
12:01:42.0704 0x0558  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
12:01:42.0704 0x0558  partmgr - ok
12:01:42.0734 0x0558  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
12:01:42.0744 0x0558  PcaSvc - ok
12:01:42.0764 0x0558  pccsmcfd - ok
12:01:42.0794 0x0558  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
12:01:42.0804 0x0558  pci - ok
12:01:42.0834 0x0558  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
12:01:42.0834 0x0558  pciide - ok
12:01:42.0864 0x0558  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
12:01:42.0874 0x0558  pcmcia - ok
12:01:42.0884 0x0558  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
12:01:42.0884 0x0558  pcw - ok
12:01:42.0934 0x0558  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
12:01:42.0944 0x0558  PEAUTH - ok
12:01:43.0004 0x0558  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
12:01:43.0014 0x0558  PerfHost - ok
12:01:43.0084 0x0558  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
12:01:43.0114 0x0558  pla - ok
12:01:43.0164 0x0558  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
12:01:43.0184 0x0558  PlugPlay - ok
12:01:43.0214 0x0558  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
12:01:43.0224 0x0558  PNRPAutoReg - ok
12:01:43.0254 0x0558  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
12:01:43.0264 0x0558  PNRPsvc - ok
12:01:43.0294 0x0558  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
12:01:43.0314 0x0558  PolicyAgent - ok
12:01:43.0344 0x0558  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
12:01:43.0354 0x0558  Power - ok
12:01:43.0394 0x0558  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
12:01:43.0404 0x0558  PptpMiniport - ok
12:01:43.0434 0x0558  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
12:01:43.0434 0x0558  Processor - ok
12:01:43.0474 0x0558  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
12:01:43.0484 0x0558  ProfSvc - ok
12:01:43.0494 0x0558  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:01:43.0494 0x0558  ProtectedStorage - ok
12:01:43.0624 0x0558  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
12:01:43.0624 0x0558  Psched - ok
12:01:43.0684 0x0558  [ CD33CB6FECF65520466F95AB89CC4AF5, 928F192AC554A2CF0BFC80FA08ACF207BB8286661695DB424808EAAA3EE29358 ] PSSDK42         C:\Windows\system32\Drivers\pssdk42.sys
12:01:43.0684 0x0558  PSSDK42 - ok
12:01:43.0714 0x0558  [ 07A3500CF1C3325568D1B85683CE4517, 7824B81BE1B5DB79D4C4A9AB53ACF4749E54F0AE3C7D2DD3B535BFA87A85E76B ] PSSDKLBF        C:\Windows\system32\Drivers\pssdklbf.sys
12:01:43.0714 0x0558  PSSDKLBF - ok
12:01:43.0814 0x0558  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
12:01:43.0854 0x0558  ql2300 - ok
12:01:43.0914 0x0558  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
12:01:43.0914 0x0558  ql40xx - ok
12:01:43.0964 0x0558  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
12:01:43.0984 0x0558  QWAVE - ok
12:01:43.0984 0x0558  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
12:01:43.0994 0x0558  QWAVEdrv - ok
12:01:43.0994 0x0558  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
12:01:43.0994 0x0558  RasAcd - ok
12:01:44.0044 0x0558  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
12:01:44.0044 0x0558  RasAgileVpn - ok
12:01:44.0084 0x0558  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
12:01:44.0084 0x0558  RasAuto - ok
12:01:44.0134 0x0558  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
12:01:44.0144 0x0558  Rasl2tp - ok

12:01:44.0184 0x0558  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
12:01:44.0194 0x0558  RasMan - ok
12:01:44.0244 0x0558  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
12:01:44.0244 0x0558  RasPppoe - ok
12:01:44.0334 0x0558  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
12:01:44.0334 0x0558  RasSstp - ok
12:01:44.0374 0x0558  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
12:01:44.0394 0x0558  rdbss - ok
12:01:44.0424 0x0558  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
12:01:44.0444 0x0558  rdpbus - ok
12:01:44.0464 0x0558  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
12:01:44.0464 0x0558  RDPCDD - ok
12:01:44.0484 0x0558  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
12:01:44.0494 0x0558  RDPENCDD - ok
12:01:44.0504 0x0558  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
12:01:44.0504 0x0558  RDPREFMP - ok
12:01:44.0534 0x0558  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
12:01:44.0534 0x0558  RDPWD - ok
12:01:44.0574 0x0558  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
12:01:44.0584 0x0558  rdyboost - ok
12:01:44.0624 0x0558  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
12:01:44.0634 0x0558  RemoteAccess - ok
12:01:44.0684 0x0558  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
12:01:44.0694 0x0558  RemoteRegistry - ok
12:01:44.0754 0x0558  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
12:01:44.0764 0x0558  RFCOMM - ok
12:01:44.0804 0x0558  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
12:01:44.0814 0x0558  RpcEptMapper - ok
12:01:44.0844 0x0558  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
12:01:44.0844 0x0558  RpcLocator - ok
12:01:44.0884 0x0558  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
12:01:44.0894 0x0558  RpcSs - ok
12:01:44.0944 0x0558  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
12:01:44.0944 0x0558  rspndr - ok
12:01:45.0024 0x0558  [ 907C4464381B5EBDFDC60F6C7D0DEDFC, A39EB4C0858A3CA2D8AFE6D52809EC41795FD7A2F3F157D9CBCCB84BE7958A89 ] RSUSBSTOR       C:\Windows\system32\Drivers\RtsUStor.sys
12:01:45.0034 0x0558  RSUSBSTOR - ok
12:01:45.0044 0x0558  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] SamSs           C:\Windows\system32\lsass.exe
12:01:45.0044 0x0558  SamSs - ok
12:01:45.0084 0x0558  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
12:01:45.0084 0x0558  sbp2port - ok
12:01:45.0129 0x0558  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
12:01:45.0139 0x0558  SCardSvr - ok
12:01:45.0179 0x0558  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
12:01:45.0179 0x0558  scfilter - ok
12:01:45.0249 0x0558  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
12:01:45.0279 0x0558  Schedule - ok
12:01:45.0309 0x0558  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
12:01:45.0309 0x0558  SCPolicySvc - ok
12:01:45.0329 0x0558  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
12:01:45.0339 0x0558  SDRSVC - ok
12:01:45.0529 0x0558  [ D777F1417D9BB9F66CD9D9C3B61F730F, 0CBD830EB9D2B0F1946131F20907793B2D68A3BCEEC3EA5416972149F73DC815 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
12:01:45.0569 0x0558  SDScannerService - ok
12:01:45.0679 0x0558  [ 68D6C7F99BC73B88954D844FCCBEB2A0, F746861B103C8BE8EA234B9FCFBBDD2412C79FB65F2F1E0F5E6EBC0B34905FF1 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
12:01:45.0726 0x0558  SDUpdateService - ok
12:01:45.0771 0x0558  [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
12:01:45.0771 0x0558  SDWSCService - ok
12:01:45.0801 0x0558  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
12:01:45.0801 0x0558  secdrv - ok
12:01:45.0831 0x0558  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
12:01:45.0841 0x0558  seclogon - ok
12:01:45.0871 0x0558  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
12:01:45.0881 0x0558  SENS - ok
12:01:45.0911 0x0558  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
12:01:45.0911 0x0558  SensrSvc - ok
12:01:45.0961 0x0558  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
12:01:45.0961 0x0558  Serenum - ok
12:01:45.0981 0x0558  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
12:01:45.0981 0x0558  Serial - ok
12:01:46.0011 0x0558  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
12:01:46.0011 0x0558  sermouse - ok
12:01:46.0061 0x0558  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
12:01:46.0061 0x0558  SessionEnv - ok
12:01:46.0091 0x0558  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
12:01:46.0101 0x0558  sffdisk - ok
12:01:46.0111 0x0558  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
12:01:46.0121 0x0558  sffp_mmc - ok
12:01:46.0131 0x0558  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
12:01:46.0131 0x0558  sffp_sd - ok
12:01:46.0161 0x0558  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
12:01:46.0171 0x0558  sfloppy - ok
12:01:46.0215 0x0558  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
12:01:46.0235 0x0558  SharedAccess - ok
12:01:46.0355 0x0558  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:01:46.0375 0x0558  ShellHWDetection - ok
12:01:46.0395 0x0558  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:01:46.0405 0x0558  SiSRaid2 - ok
12:01:46.0435 0x0558  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
12:01:46.0435 0x0558  SiSRaid4 - ok
12:01:46.0505 0x0558  [ E77CB3736A702D46A6FB15FB4A9894E3, A341AD51825D4DB8A68ADDABE0FD17693DE387B0DA11800D427B8EA31577626C ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys
12:01:46.0505 0x0558  SmartDefragDriver - ok
12:01:46.0545 0x0558  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
12:01:46.0555 0x0558  Smb - ok
12:01:46.0605 0x0558  [ 5476D773EE180AEB9CADA786EA131777, BEBC1788A63FFC54047BE6633F8C3AF10F5E26C1F5B8255DAD88CEF81544B07C ] SmbDrvI         C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys
12:01:46.0605 0x0558  SmbDrvI - ok
12:01:46.0655 0x0558  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
12:01:46.0665 0x0558  SNMPTRAP - ok
12:01:46.0695 0x0558  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
12:01:46.0695 0x0558  spldr - ok
12:01:46.0755 0x0558  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
12:01:46.0775 0x0558  Spooler - ok
12:01:46.0915 0x0558  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
12:01:47.0015 0x0558  sppsvc - ok
12:01:47.0065 0x0558  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
12:01:47.0065 0x0558  sppuinotify - ok
12:01:47.0115 0x0558  [ 62392CEB7DD65838364990E0F5494B73, 1DF78114F42545FF991A0EB0233E26E8A18B38B4F16B2E24BFB0A9FBCDF62F29 ] SRS_AE_Service  C:\Windows\system32\drivers\SRS_AE_amd64.sys
12:01:47.0125 0x0558  SRS_AE_Service - ok
12:01:47.0175 0x0558  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
12:01:47.0195 0x0558  srv - ok
12:01:47.0235 0x0558  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
12:01:47.0245 0x0558  srv2 - ok
12:01:47.0275 0x0558  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
12:01:47.0285 0x0558  srvnet - ok

12:01:47.0315 0x0558  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
12:01:47.0325 0x0558  SSDPSRV - ok
12:01:47.0335 0x0558  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
12:01:47.0345 0x0558  SstpSvc - ok
12:01:47.0375 0x0558  [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys
12:01:47.0375 0x0558  ssudmdm - ok
12:01:47.0405 0x0558  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
12:01:47.0405 0x0558  stexstor - ok
12:01:47.0455 0x0558  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
12:01:47.0475 0x0558  stisvc - ok
12:01:47.0545 0x0558  [ F86D3216B54CCBB45022011B3C276C43, 14BEA478978BD407A9658D1999799DA23C9E23F701C0B175C2F9D44830CD5F20 ] SWDUMon         C:\Windows\system32\DRIVERS\SWDUMon.sys
12:01:47.0555 0x0558  SWDUMon - ok
12:01:47.0585 0x0558  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
12:01:47.0585 0x0558  swenum - ok
12:01:47.0635 0x0558  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
12:01:47.0665 0x0558  swprv - ok
12:01:47.0715 0x0558  [ D8EDB37F6E235A47E12F1EAFD85C2B6F, 794F0D57ED175355C7A52F9047FDB8BF43655B450BC2120335AF98F0D8AC5830 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
12:01:47.0725 0x0558  SynTP - ok
12:01:47.0805 0x0558  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
12:01:47.0855 0x0558  SysMain - ok
12:01:47.0885 0x0558  [ DB030338BEC75C18E99388385C5BE06E, 7126887F20B1E3E9069B0F4B82FA6F89F98667C207AB45583D781DA457E08495 ] SysMouseFilterF3 C:\Windows\system32\DRIVERS\SysMouseFilterF3.sys
12:01:47.0885 0x0558  SysMouseFilterF3 - ok
12:01:47.0915 0x0558  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:01:47.0925 0x0558  TabletInputService - ok
12:01:47.0955 0x0558  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
12:01:47.0965 0x0558  TapiSrv - ok
12:01:47.0995 0x0558  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
12:01:48.0005 0x0558  TBS - ok
12:01:48.0105 0x0558  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
12:01:48.0155 0x0558  Tcpip - ok
12:01:48.0215 0x0558  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
12:01:48.0255 0x0558  TCPIP6 - ok
12:01:48.0315 0x0558  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
12:01:48.0315 0x0558  tcpipreg - ok
12:01:48.0355 0x0558  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
12:01:48.0355 0x0558  TDPIPE - ok
12:01:48.0405 0x0558  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
12:01:48.0415 0x0558  TDTCP - ok
12:01:48.0465 0x0558  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
12:01:48.0475 0x0558  tdx - ok
12:01:48.0505 0x0558  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
12:01:48.0505 0x0558  TermDD - ok
12:01:48.0555 0x0558  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
12:01:48.0585 0x0558  TermService - ok
12:01:48.0615 0x0558  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
12:01:48.0615 0x0558  Themes - ok
12:01:48.0645 0x0558  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
12:01:48.0645 0x0558  THREADORDER - ok
12:01:48.0695 0x0558  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
12:01:48.0695 0x0558  TrkWks - ok
12:01:48.0835 0x0558  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:01:48.0845 0x0558  TrustedInstaller - ok
12:01:48.0875 0x0558  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
12:01:48.0885 0x0558  tssecsrv - ok
12:01:48.0905 0x0558  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
12:01:48.0915 0x0558  TsUsbFlt - ok
12:01:48.0935 0x0558  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
12:01:48.0945 0x0558  tunnel - ok
12:01:48.0975 0x0558  [ 550B567F9364D8F7684C3FB3EA665A72, A214BBBBAB9F0DD525FA5A818CEB8E9294B4A96676317255D7ACF6049049C933 ] TVALZ           C:\Windows\system32\DRIVERS\TVALZ_O.SYS
12:01:48.0975 0x0558  TVALZ - ok
12:01:49.0015 0x0558  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
12:01:49.0025 0x0558  uagp35 - ok
12:01:49.0075 0x0558  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
12:01:49.0095 0x0558  udfs - ok
12:01:49.0145 0x0558  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
12:01:49.0155 0x0558  UI0Detect - ok
12:01:49.0185 0x0558  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
12:01:49.0185 0x0558  uliagpkx - ok
12:01:49.0235 0x0558  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
12:01:49.0235 0x0558  umbus - ok
12:01:49.0265 0x0558  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
12:01:49.0265 0x0558  UmPass - ok
12:01:49.0345 0x0558  [ 9DC07E73A4ABB9ACF692113B36A5009F, CA7176FC219515D58DCFA66EC61880ECE5617275C9B83701BB74D8B60E733D34 ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
12:01:49.0345 0x0558  UnlockerDriver5 - ok
12:01:49.0395 0x0558  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
12:01:49.0415 0x0558  upnphost - ok
12:01:49.0475 0x0558  [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
12:01:49.0475 0x0558  USBAAPL64 - ok
12:01:49.0515 0x0558  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
12:01:49.0525 0x0558  usbaudio - ok
12:01:49.0555 0x0558  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
12:01:49.0565 0x0558  usbccgp - ok
12:01:49.0585 0x0558  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
12:01:49.0595 0x0558  usbcir - ok
12:01:49.0616 0x0558  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
12:01:49.0616 0x0558  usbehci - ok
12:01:49.0646 0x0558  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
12:01:49.0656 0x0558  usbhub - ok
12:01:49.0686 0x0558  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
12:01:49.0696 0x0558  usbohci - ok
12:01:49.0716 0x0558  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
12:01:49.0716 0x0558  usbprint - ok
12:01:49.0746 0x0558  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
12:01:49.0746 0x0558  usbscan - ok


#9 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 25 May 2015 - 02:06 PM

12:01:49.0766 0x0558  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:01:49.0766 0x0558  USBSTOR - ok
12:01:49.0796 0x0558  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
12:01:49.0796 0x0558  usbuhci - ok
12:01:49.0836 0x0558  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
12:01:49.0846 0x0558  usbvideo - ok
12:01:49.0876 0x0558  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
12:01:49.0876 0x0558  UxSms - ok
12:01:49.0886 0x0558  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] VaultSvc        C:\Windows\system32\lsass.exe
12:01:49.0896 0x0558  VaultSvc - ok
12:01:49.0936 0x0558  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
12:01:49.0936 0x0558  vdrvroot - ok
12:01:49.0986 0x0558  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
12:01:50.0006 0x0558  vds - ok
12:01:50.0036 0x0558  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
12:01:50.0046 0x0558  vga - ok
12:01:50.0066 0x0558  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
12:01:50.0066 0x0558  VgaSave - ok
12:01:50.0096 0x0558  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
12:01:50.0106 0x0558  vhdmp - ok
12:01:50.0126 0x0558  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
12:01:50.0136 0x0558  viaide - ok
12:01:50.0156 0x0558  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
12:01:50.0156 0x0558  volmgr - ok
12:01:50.0206 0x0558  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
12:01:50.0216 0x0558  volmgrx - ok
12:01:50.0356 0x0558  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
12:01:50.0366 0x0558  volsnap - ok
12:01:50.0422 0x0558  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
12:01:50.0428 0x0558  vsmraid - ok
12:01:50.0530 0x0558  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
12:01:50.0570 0x0558  VSS - ok
12:01:50.0610 0x0558  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
12:01:50.0610 0x0558  vwifibus - ok
12:01:50.0660 0x0558  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
12:01:50.0670 0x0558  vwififlt - ok
12:01:50.0700 0x0558  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
12:01:50.0700 0x0558  vwifimp - ok
12:01:50.0750 0x0558  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
12:01:50.0770 0x0558  W32Time - ok
12:01:50.0800 0x0558  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
12:01:50.0800 0x0558  WacomPen - ok
12:01:50.0850 0x0558  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
12:01:50.0860 0x0558  WANARP - ok
12:01:50.0860 0x0558  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
12:01:50.0870 0x0558  Wanarpv6 - ok
12:01:50.0950 0x0558  [ B32009DB1972E7F2C227499289C4384A, D491CD90ACE895EC60A5A2F995EAE39F8ED662B71BC548C3FF5BBDBC60054788 ] WAS             C:\Windows\system32\inetsrv\iisw3adm.dll
12:01:50.0960 0x0558  WAS - ok
12:01:51.0030 0x0558  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
12:01:51.0060 0x0558  WatAdminSvc - ok
12:01:51.0130 0x0558  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
12:01:51.0170 0x0558  wbengine - ok
12:01:51.0210 0x0558  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
12:01:51.0210 0x0558  WbioSrvc - ok
12:01:51.0250 0x0558  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
12:01:51.0260 0x0558  wcncsvc - ok
12:01:51.0290 0x0558  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:01:51.0300 0x0558  WcsPlugInService - ok
12:01:51.0340 0x0558  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
12:01:51.0350 0x0558  Wd - ok
12:01:51.0410 0x0558  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
12:01:51.0440 0x0558  Wdf01000 - ok
12:01:51.0480 0x0558  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
12:01:51.0490 0x0558  WdiServiceHost - ok
12:01:51.0490 0x0558  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
12:01:51.0500 0x0558  WdiSystemHost - ok
12:01:51.0540 0x0558  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
12:01:51.0550 0x0558  WebClient - ok
12:01:51.0620 0x0558  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
12:01:51.0630 0x0558  Wecsvc - ok
12:01:51.0650 0x0558  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
12:01:51.0650 0x0558  wercplsupport - ok
12:01:51.0680 0x0558  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
12:01:51.0690 0x0558  WerSvc - ok
12:01:51.0730 0x0558  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
12:01:51.0740 0x0558  WfpLwf - ok
12:01:51.0770 0x0558  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
12:01:51.0770 0x0558  WIMMount - ok
12:01:51.0800 0x0558  WinDefend - ok
12:01:51.0830 0x0558  WinHttpAutoProxySvc - ok
12:01:51.0890 0x0558  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
12:01:51.0900 0x0558  Winmgmt - ok
12:01:51.0940 0x0558  WinRing0_1_2_0 - ok
12:01:52.0050 0x0558  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
12:01:52.0100 0x0558  WinRM - ok
12:01:52.0160 0x0558  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
12:01:52.0160 0x0558  WinUsb - ok
12:01:52.0230 0x0558  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
12:01:52.0260 0x0558  Wlansvc - ok
12:01:52.0330 0x0558  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
12:01:52.0340 0x0558  WmiAcpi - ok
12:01:52.0380 0x0558  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
12:01:52.0390 0x0558  wmiApSrv - ok
12:01:52.0430 0x0558  WMPNetworkSvc - ok
12:01:52.0470 0x0558  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
12:01:52.0470 0x0558  WPCSvc - ok
12:01:52.0510 0x0558  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
12:01:52.0520 0x0558  WPDBusEnum - ok
12:01:52.0560 0x0558  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
12:01:52.0560 0x0558  ws2ifsl - ok
12:01:52.0636 0x0558  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
12:01:52.0642 0x0558  wscsvc - ok
12:01:52.0772 0x0558  [ 0814A74C853F50B354F08F83DDA9F7FB, 0A63BAA8DE451B8C2C71FEF961718E769B9BAC305C76D24048C664CB27D0DF28 ] wuauserv        C:\Windows\system32\wuaueng.dll
12:01:52.0852 0x0558  wuauserv - ok
12:01:52.0892 0x0558  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
12:01:52.0892 0x0558  WudfPf - ok
12:01:52.0912 0x0558  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
12:01:52.0922 0x0558  WUDFRd - ok
12:01:52.0952 0x0558  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
12:01:52.0962 0x0558  wudfsvc - ok
12:01:52.0999 0x0558  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
12:01:53.0009 0x0558  WwanSvc - ok
12:01:53.0059 0x0558  ================ Scan global ===============================
12:01:53.0079 0x0558  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
12:01:53.0119 0x0558  [ EA32F4EA3AE06EDD122FBCD5A489E457, C6E464170121D1714A367CFC80C5EA15D42AD34909039FDB114EAD3B878A47F6 ] C:\Windows\system32\winsrv.dll
12:01:53.0139 0x0558  [ EA32F4EA3AE06EDD122FBCD5A489E457, C6E464170121D1714A367CFC80C5EA15D42AD34909039FDB114EAD3B878A47F6 ] C:\Windows\system32\winsrv.dll
12:01:53.0169 0x0558  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
12:01:53.0209 0x0558  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
12:01:53.0219 0x0558  [ Global ] - ok
12:01:53.0219 0x0558  ================ Scan MBR ==================================
12:01:53.0239 0x0558  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
12:01:53.0509 0x0558  \Device\Harddisk0\DR0 - ok
12:01:53.0519 0x0558  ================ Scan VBR ==================================
12:01:53.0519 0x0558  [ 1D2ED217D3AF4DD36BF99C6C21AC9810 ] \Device\Harddisk0\DR0\Partition1
12:01:53.0519 0x0558  \Device\Harddisk0\DR0\Partition1 - ok
12:01:53.0529 0x0558  [ 68940DA91F4F91D95BE816D03B3032C6 ] \Device\Harddisk0\DR0\Partition2
12:01:53.0529 0x0558  \Device\Harddisk0\DR0\Partition2 - ok
12:01:53.0529 0x0558  ================ Scan generic autorun ======================
12:01:53.0649 0x0558  [ 39780BFA848D30002194FDB4C7512562, A6278A3B109D18856D89386CDD8C28BA15C4C9D2ECBB73DDC00E73AE40ADF8EF ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
12:01:53.0749 0x0558  SynTPEnh - ok
12:01:53.0999 0x0558  [ 65C6AA484AD2287D20541C7735989437, 1842787640391F4A4CD9ED0A531298A61F4B2FB09BEC98FEE256313AFB458EDB ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
12:01:54.0179 0x0558  AvastUI.exe - ok
12:01:54.0189 0x0558  Waiting for KSN requests completion. In queue: 59
12:01:55.0189 0x0558  Waiting for KSN requests completion. In queue: 59
12:01:56.0189 0x0558  Waiting for KSN requests completion. In queue: 59
12:01:57.0270 0x0558  AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 10.2.2218.942 ), 0x41000 ( enabled : updated )
12:01:57.0300 0x0558  Win FW state via NFP2: enabled
12:01:59.0840 0x0558  ============================================================
12:01:59.0840 0x0558  Scan finished
12:01:59.0840 0x0558  ============================================================
12:01:59.0850 0x0344  Detected object count: 0
12:01:59.0850 0x0344  Actual detected object count: 0
12:02:06.0440 0x0e60  Deinitialize success
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
# AdwCleaner v4.205 - Logfile created 24/05/2015 at 12:03:44
# Updated 21/05/2015 by Xplode
# Database : 2015-05-21.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Ron - RONSLAPTOP
# Running from : C:\Users\Ron\Desktop\AdwCleaner.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
File Found : C:\prefs.js
Folder Found : C:\Program Files\TotalSystemCare
Folder Found : C:\ProgramData\7ccef3d2d2def611
Folder Found : C:\ProgramData\SecTaskMan
Folder Found : C:\Users\Administrator\AppData\Local\torch
Folder Found : C:\Users\Ron\AppData\Local\FileTypeAssistant
Folder Found : C:\Users\Ron\AppData\Local\Google\Chrome\User Data\Default\Extensions\dndlcbaomdoggooaficldplkcmkfpgff
Folder Found : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\FileTypeAssistant
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKCU\Software\AppDataLow\Software\IObit Apps
Key Found : HKCU\Software\Bitberry Software
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\FileTypeAssistant
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\IObit Apps
Key Found : HKCU\Software\RegisteredApplicationsEx
Key Found : [x64] HKCU\Software\Bitberry Software
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\FileTypeAssistant
Key Found : [x64] HKCU\Software\InstallCore
Key Found : [x64] HKCU\Software\IObit Apps
Key Found : [x64] HKCU\Software\RegisteredApplicationsEx
Key Found : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C8E5E280-1BFD-4C1E-AFCA-D41A7DB23733}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{43002AE2-4093-49E0-A03D-990EE184C568}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Key Found : HKLM\SOFTWARE\SK.Enhancer
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F092B960893592640A90584BCB4B1B9B
 
***** [ Web browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17728
 
 
-\\ Google Chrome v43.0.2357.65
 
 
*************************
 
AdwCleaner[R3].txt - [3151 bytes] - [24/05/2015 12:03:44]
 
########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [3210 bytes] ##########
 
# AdwCleaner v4.205 - Logfile created 24/05/2015 at 14:45:49
# Updated 21/05/2015 by Xplode
# Database : 2015-05-21.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Ron - RONSLAPTOP
# Running from : C:\Users\Ron\Desktop\AdwCleaner.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17728
 
 
-\\ Google Chrome v43.0.2357.65
 
[C:\Users\Ron\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
 
*************************
 
AdwCleaner[R3].txt - [3341 bytes] - [24/05/2015 12:03:44]
AdwCleaner[R4].txt - [803 bytes] - [24/05/2015 14:45:49]
AdwCleaner[S1].txt - [3173 bytes] - [24/05/2015 12:06:40]
 
########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [920 bytes] ##########
 
# AdwCleaner v4.205 - Logfile created 24/05/2015 at 12:06:40
# Updated 21/05/2015 by Xplode
# Database : 2015-05-21.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Ron - RONSLAPTOP
# Running from : C:\Users\Ron\Desktop\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\ProgramData\SecTaskMan
Folder Deleted : C:\ProgramData\7ccef3d2d2def611
Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\FileTypeAssistant
Folder Deleted : C:\Program Files\TotalSystemCare
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Ron\AppData\Local\FileTypeAssistant
Folder Deleted : C:\Users\Ron\AppData\Local\Google\Chrome\User Data\Default\Extensions\dndlcbaomdoggooaficldplkcmkfpgff
File Deleted : C:\prefs.js
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C8E5E280-1BFD-4C1E-AFCA-D41A7DB23733}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967}
Key Deleted : HKCU\Software\Bitberry Software
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\FileTypeAssistant
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\IObit Apps
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKCU\Software\AppDataLow\Software\IObit Apps
Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\SOFTWARE\SK.Enhancer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{43002AE2-4093-49E0-A03D-990EE184C568}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F092B960893592640A90584BCB4B1B9B
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
 
***** [ Web browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17728
 
 
-\\ Google Chrome v43.0.2357.65
 
 
*************************
 
AdwCleaner[R3].txt - [3341 bytes] - [24/05/2015 12:03:44]
AdwCleaner[S1].txt - [3006 bytes] - [24/05/2015 12:06:40]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3065  bytes] ##########
 
# AdwCleaner v4.205 - Logfile created 24/05/2015 at 14:53:08
# Updated 21/05/2015 by Xplode
# Database : 2015-05-21.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Ron - RONSLAPTOP
# Running from : C:\Users\Ron\Desktop\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17728
 
 
-\\ Google Chrome v43.0.2357.65
 
[C:\Users\Ron\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
 
*************************
 
AdwCleaner[R3].txt - [3341 bytes] - [24/05/2015 12:03:44]
AdwCleaner[R4].txt - [998 bytes] - [24/05/2015 14:45:49]
AdwCleaner[S1].txt - [3173 bytes] - [24/05/2015 12:06:40]
AdwCleaner[S2].txt - [926 bytes] - [24/05/2015 14:53:08]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [984  bytes] ##########
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.8 (05.23.2015:2)
OS: Windows 7 Home Premium x64
Ran by Ron on Sun 24/05/15 at 12:12:40.85
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
Successfully stopped: [Service] swdumon
Successfully deleted: [Service] swdumon
 
 
 
~~~ Tasks
 
 
 
~~~ Registry Values
 
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{aba8d0e6-0d4d-4cb8-836a-04d69824b108}
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
 
 
 
~~~ Registry Keys
 
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{aba8d0e6-0d4d-4cb8-836a-04d69824b108}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{09B9530F-3F22-4934-B4C3-FB107A759973}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{aba8d0e6-0d4d-4cb8-836a-04d69824b108}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{aba8d0e6-0d4d-4cb8-836a-04d69824b108}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update lucky leap
 
 
 
~~~ Files
 
Successfully deleted: [File] C:\Windows\system32\drivers\swdumon.sys
Successfully deleted: [File] C:\Windows\wininit.ini


#10 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 25 May 2015 - 02:07 PM

~~~ Folders
 
Successfully deleted: [Folder] C:\Windows\syswow64\ai_recyclebin
 
 
 
~~~ Chrome
 
Successfully deleted: [Folder] C:\Users\Ron\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 24/05/15 at 12:18:13.61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=ce58b3b2c75431499d2c4d93d7f408a7
# engine=23999
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-05-24 02:30:31
# local_time=2015-05-24 03:30:31 (+0000, GMT Daylight Time)
# country="United Kingdom"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 92 797775 38453667 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 12621459 184942881 0 0
# scanned=45248
# found=26
# cleaned=0
# scan_time=1420
sh=46235B381F04B82662CB7D5559EE5B43D4C9E6F1 ft=1 fh=d2cc7420f041424b vn="a variant of Win32/Toolbar.Visicom.A potentially unwanted application" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-817719181-973438420-1349890756-1000\$RCD81WZ.exe"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\fedabkdgnpolapgnpnbeiajcmpognfki\1.0\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\fedabkdgnpolapgnpnbeiajcmpognfki\1.0\lsdb.js.vir"
sh=0157636F796577C15C22A82C75B93096F5C5537D ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\fedabkdgnpolapgnpnbeiajcmpognfki\1.0\MVK6Ydrs.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\116\content.js.vir"
sh=C1A0B24CA8B0BCC984D31FC6E70A11EEC08C3B96 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\116\K37LvH.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\116\lsdb.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\kelknobgbajkfljhoflmlfhdgeppeoaj\3.7\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\kelknobgbajkfljhoflmlfhdgeppeoaj\3.7\lsdb.js.vir"
sh=8973C47F8C78FAB40229A57BA52FFBD8CABE7F9B ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\kelknobgbajkfljhoflmlfhdgeppeoaj\3.7\uDssb.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\nkkphbkkcakjoobgnlfkdniokklakkej\1.1\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\nkkphbkkcakjoobgnlfkdniokklakkej\1.1\lsdb.js.vir"
sh=46D574A6D3918BC14E8115A41F463C115D781E7F ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\nkkphbkkcakjoobgnlfkdniokklakkej\1.1\sZD9J9hYy5.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\pfkdahkpjghhodfeglfdaliindggjfhi\2.1\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\pfkdahkpjghhodfeglfdaliindggjfhi\2.1\lsdb.js.vir"
sh=5A0D3F218A6E28908A5D9524ACC5000B20518B9C ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\pfkdahkpjghhodfeglfdaliindggjfhi\2.1\woh2R7GfWv.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\plmgpjlkkeoflhjpeacbjeonpplnggml\2.1\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\plmgpjlkkeoflhjpeacbjeonpplnggml\2.1\lsdb.js.vir"
sh=4721472DC982FF6272D40987901D973C548AAB8A ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\plmgpjlkkeoflhjpeacbjeonpplnggml\2.1\PdSBuoKPV.js.vir"
sh=551C0C891E8D666FDB58B4B8CB15DCBCFE1E15DC ft=1 fh=895163448802b46c vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application" ac=I fn="C:\Documents and Settings\Ron\Documents\COMP\Setups to keep\smartdefragsetup.exe"
sh=46235B381F04B82662CB7D5559EE5B43D4C9E6F1 ft=1 fh=d2cc7420f041424b vn="a variant of Win32/Toolbar.Visicom.A potentially unwanted application" ac=I fn="C:\Documents and Settings\Ron\Downloads\bttb.exe"
sh=983DCA55BF2EDC73A5E570ABF492B6D114DEAAD0 ft=1 fh=84628e79866d8176 vn="a variant of Win32/OpenCandy.C potentially unsafe application" ac=I fn="C:\Documents and Settings\Ron\Downloads\smart-defrag-setup.exe"
sh=3DD60D9BC3FC99507008FB014ECC0C06DBC97191 ft=1 fh=1d3a448f6f3eece5 vn="a variant of Win32/Toolbar.Visicom.A potentially unwanted application" ac=I fn="C:\Program Files (x86)\bttb\bttb.dll"
sh=8543E5558DE35BDB51AD11CC9C3DC43270A4683F ft=1 fh=9cb604887857eda6 vn="a variant of Win32/Toolbar.Visicom.B potentially unwanted application" ac=I fn="C:\Program Files (x86)\bttb\bttbX.dll"
sh=35AD6BD8A35001177BD9A74DCA8996102F5984E2 ft=1 fh=1b6755cccfaca3a7 vn="a variant of Win32/Toolbar.Visicom.C potentially unwanted application" ac=I fn="C:\Program Files (x86)\bttb\dtuser.exe"
sh=551C0C891E8D666FDB58B4B8CB15DCBCFE1E15DC ft=1 fh=895163448802b46c vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application" ac=I fn="C:\Users\Ron\Documents\COMP\Setups to keep\smartdefragsetup.exe"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=ce58b3b2c75431499d2c4d93d7f408a7
# engine=23999
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-05-24 03:41:06
# local_time=2015-05-24 04:41:06 (+0000, GMT Daylight Time)
# country="United Kingdom"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 92 802010 38457902 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 12625694 184947116 0 0
# scanned=163600
# found=29
# cleaned=26
# scan_time=4014
sh=551C0C891E8D666FDB58B4B8CB15DCBCFE1E15DC ft=1 fh=895163448802b46c vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application" ac=I fn="C:\Users\Ron\Documents\COMP\Setups to keep\smartdefragsetup.exe"
sh=46235B381F04B82662CB7D5559EE5B43D4C9E6F1 ft=1 fh=d2cc7420f041424b vn="a variant of Win32/Toolbar.Visicom.A potentially unwanted application" ac=I fn="C:\Users\Ron\Downloads\bttb.exe"
sh=983DCA55BF2EDC73A5E570ABF492B6D114DEAAD0 ft=1 fh=84628e79866d8176 vn="a variant of Win32/OpenCandy.C potentially unsafe application" ac=I fn="C:\Users\Ron\Downloads\smart-defrag-setup.exe"
sh=46235B381F04B82662CB7D5559EE5B43D4C9E6F1 ft=1 fh=d2cc7420f041424b vn="a variant of Win32/Toolbar.Visicom.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\$RECYCLE.BIN\S-1-5-21-817719181-973438420-1349890756-1000\$RCD81WZ.exe"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\fedabkdgnpolapgnpnbeiajcmpognfki\1.0\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\fedabkdgnpolapgnpnbeiajcmpognfki\1.0\lsdb.js.vir"
sh=0157636F796577C15C22A82C75B93096F5C5537D ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\fedabkdgnpolapgnpnbeiajcmpognfki\1.0\MVK6Ydrs.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\116\content.js.vir"
sh=C1A0B24CA8B0BCC984D31FC6E70A11EEC08C3B96 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\116\K37LvH.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\116\lsdb.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\kelknobgbajkfljhoflmlfhdgeppeoaj\3.7\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\kelknobgbajkfljhoflmlfhdgeppeoaj\3.7\lsdb.js.vir"
sh=8973C47F8C78FAB40229A57BA52FFBD8CABE7F9B ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\kelknobgbajkfljhoflmlfhdgeppeoaj\3.7\uDssb.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\nkkphbkkcakjoobgnlfkdniokklakkej\1.1\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\nkkphbkkcakjoobgnlfkdniokklakkej\1.1\lsdb.js.vir"
sh=46D574A6D3918BC14E8115A41F463C115D781E7F ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\nkkphbkkcakjoobgnlfkdniokklakkej\1.1\sZD9J9hYy5.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\pfkdahkpjghhodfeglfdaliindggjfhi\2.1\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\pfkdahkpjghhodfeglfdaliindggjfhi\2.1\lsdb.js.vir"
sh=5A0D3F218A6E28908A5D9524ACC5000B20518B9C ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\pfkdahkpjghhodfeglfdaliindggjfhi\2.1\woh2R7GfWv.js.vir"
sh=A25FBAA09A19248CBA681AD27A4A643FF59D0145 ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\plmgpjlkkeoflhjpeacbjeonpplnggml\2.1\content.js.vir"
sh=68D3C2ACC0CDA246335CC1C955C861DA6A80322F ft=0 fh=0000000000000000 vn="JS/ExtenBro.Agent.AE trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\plmgpjlkkeoflhjpeacbjeonpplnggml\2.1\lsdb.js.vir"
sh=4721472DC982FF6272D40987901D973C548AAB8A ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK trojan (cleaned by deleting - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\torch\User Data\Default\Extensions\plmgpjlkkeoflhjpeacbjeonpplnggml\2.1\PdSBuoKPV.js.vir"
sh=551C0C891E8D666FDB58B4B8CB15DCBCFE1E15DC ft=1 fh=895163448802b46c vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\Ron\Documents\COMP\Setups to keep\smartdefragsetup.exe"
sh=46235B381F04B82662CB7D5559EE5B43D4C9E6F1 ft=1 fh=d2cc7420f041424b vn="a variant of Win32/Toolbar.Visicom.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\Ron\Downloads\bttb.exe"
sh=983DCA55BF2EDC73A5E570ABF492B6D114DEAAD0 ft=1 fh=84628e79866d8176 vn="a variant of Win32/OpenCandy.C potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\Ron\Downloads\smart-defrag-setup.exe"
sh=3DD60D9BC3FC99507008FB014ECC0C06DBC97191 ft=1 fh=1d3a448f6f3eece5 vn="a variant of Win32/Toolbar.Visicom.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\bttb\bttb.dll"
sh=8543E5558DE35BDB51AD11CC9C3DC43270A4683F ft=1 fh=9cb604887857eda6 vn="a variant of Win32/Toolbar.Visicom.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\bttb\bttbX.dll"
sh=35AD6BD8A35001177BD9A74DCA8996102F5984E2 ft=1 fh=1b6755cccfaca3a7 vn="a variant of Win32/Toolbar.Visicom.C potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\bttb\dtuser.exe"
sh=ACD4422C9826F9CE5CBEF69C25067A0082D8E119 ft=1 fh=8d4c1411ed952384 vn="a variant of Win32/PCCleaners potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows\uninst.exe"
 
SORRY IF IT'S TOO MUCH ardee


#11 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 26 May 2015 - 09:05 AM

i have to ask. Does that info I have given make me vulnerable?



#12 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:05:25 PM

Posted 28 May 2015 - 11:41 AM

Sorry ,went away... No you are not exposed.

Looks good , how is it running?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#13 ardee37

ardee37
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:25 PM

Posted 28 May 2015 - 03:58 PM

Hi boopme, yes thank you, everything is running sweet and faster now.  Not bt yahoo mail which have changed their log in system and it just a pita. I'm surprised that though I ran mbytes and avast it didn't find the things that those programs you advised did, or I'm reading it all wrong....which wouldn't surprise me lol

Thanks again for your help and time

Ron






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users