Author Topic: Computer playing commercials several times a day (Read 28094 times)

SuperDave · « **Reply #15 on:** August 31, 2013, 04:23:32 PM »

Does this only happen when your browser is open? What browser are you using?

Download TDSSKiller and save it to your Desktop.
Extract its contents to your desktop.
Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
If an infected file is detected, the default action will be Cure, click on Continue.
If a suspicious file is detected, the default action will be Skip, click on Continue.
It may ask you to reboot the computer to complete the process. Click on Reboot Now.
Click the Report button and copy/paste the contents of it into your next reply

Note:It will also create a log in the C:\ directory..

zulubanshee · « **Reply #16 on:** August 31, 2013, 04:38:56 PM »

18:38:14.0891 0x1b18 TDSS rootkit removing tool 2.9.2.0 Aug 15 2013 16:44:29
18:38:15.0309 0x1b18 ============================================================
18:38:15.0309 0x1b18 Current date / time: 2013/08/31 18:38:15.0309
18:38:15.0309 0x1b18 SystemInfo:
18:38:15.0309 0x1b18
18:38:15.0309 0x1b18 OS Version: 6.0.6002 ServicePack: 2.0
18:38:15.0309 0x1b18 Product type: Workstation
18:38:15.0309 0x1b18 ComputerName: DOUG-PC
18:38:15.0309 0x1b18 UserName: doug
18:38:15.0309 0x1b18 Windows directory: C:\Windows
18:38:15.0309 0x1b18 System windows directory: C:\Windows
18:38:15.0310 0x1b18 Running under WOW64
18:38:15.0310 0x1b18 Processor architecture: Intel x64
18:38:15.0310 0x1b18 Number of processors: 4
18:38:15.0310 0x1b18 Page size: 0x1000
18:38:15.0310 0x1b18 Boot type: Normal boot
18:38:15.0310 0x1b18 ============================================================
18:38:16.0833 0x1b18 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:38:16.0835 0x1b18 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:38:16.0836 0x1b18 Drive \Device\Harddisk2\DR2 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:38:16.0888 0x1b18 Drive \Device\Harddisk7\DR7 - Size: 0x774488000 (29.82 Gb), SectorSize: 0x200, Cylinders: 0xF34, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
18:38:16.0893 0x1b18 ============================================================
18:38:16.0893 0x1b18 \Device\Harddisk0\DR0:
18:38:16.0894 0x1b18 MBR partitions:
18:38:16.0894 0x1b18 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1389000, BlocksNum 0x561BC800
18:38:16.0894 0x1b18 \Device\Harddisk1\DR1:
18:38:16.0902 0x1b18 MBR partitions:
18:38:16.0902 0x1b18 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
18:38:16.0902 0x1b18 \Device\Harddisk2\DR2:
18:38:16.0902 0x1b18 MBR partitions:
18:38:16.0902 0x1b18 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF8F8C1
18:38:16.0902 0x1b18 \Device\Harddisk7\DR7:
18:38:16.0904 0x1b18 MBR partitions:
18:38:16.0904 0x1b18 \Device\Harddisk7\DR7\Partition1: MBR, Type 0xC, StartLBA 0x20, BlocksNum 0x3BA2420
18:38:16.0904 0x1b18 ============================================================
18:38:16.0927 0x1b18 C: <-> \Device\Harddisk0\DR0\Partition1
18:38:16.0929 0x1b18 D: <-> \Device\Harddisk2\DR2\Partition1
18:38:16.0944 0x1b18 L: <-> \Device\Harddisk1\DR1\Partition1
18:38:16.0944 0x1b18 ============================================================
18:38:16.0944 0x1b18 Initialize success
18:38:16.0944 0x1b18 ============================================================
18:38:19.0716 0x1aa0 ============================================================
18:38:19.0716 0x1aa0 Scan started
18:38:19.0716 0x1aa0 Mode: Manual;
18:38:19.0716 0x1aa0 ============================================================
18:38:20.0211 0x1aa0 ================ Scan system memory ========================
18:38:20.0211 0x1aa0 System memory - ok
18:38:20.0212 0x1aa0 ================ Scan services =============================
18:38:20.0336 0x1aa0 [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI C:\Windows\system32\drivers\acpi.sys
18:38:20.0340 0x1aa0 ACPI - ok
18:38:20.0399 0x1aa0 [ 2F0683FD2DF1D92E891CACA14B45A8C1 ] adfs C:\Windows\system32\drivers\adfs.sys
18:38:20.0400 0x1aa0 adfs - ok
18:38:20.0537 0x1aa0 [ 3FD8DC2C9735C2AA70155102CFB93EDA ] AdobeActiveFileMonitor7.0 C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
18:38:20.0539 0x1aa0 AdobeActiveFileMonitor7.0 - ok
18:38:20.0669 0x1aa0 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
18:38:20.0670 0x1aa0 AdobeARMservice - ok
18:38:20.0810 0x1aa0 [ 476BB014F3F68C0C15EDDD5B444DA8FF ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
18:38:20.0812 0x1aa0 AdobeFlashPlayerUpdateSvc - ok
18:38:20.0873 0x1aa0 [ F14215E37CF124104575073F782111D2 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
18:38:20.0878 0x1aa0 adp94xx - ok
18:38:20.0903 0x1aa0 [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci C:\Windows\system32\drivers\adpahci.sys
18:38:20.0906 0x1aa0 adpahci - ok
18:38:20.0916 0x1aa0 [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
18:38:20.0918 0x1aa0 adpu160m - ok
18:38:20.0937 0x1aa0 [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
18:38:20.0939 0x1aa0 adpu320 - ok
18:38:20.0982 0x1aa0 [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:38:20.0982 0x1aa0 AeLookupSvc - ok
18:38:21.0057 0x1aa0 [ C4F6CE6087760AD70960C9EB130E7943 ] AFD C:\Windows\system32\drivers\afd.sys
18:38:21.0060 0x1aa0 AFD - ok
18:38:21.0101 0x1aa0 [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440 C:\Windows\system32\drivers\agp440.sys
18:38:21.0102 0x1aa0 agp440 - ok
18:38:21.0162 0x1aa0 [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx C:\Windows\system32\drivers\djsvs.sys
18:38:21.0164 0x1aa0 aic78xx - ok
18:38:21.0195 0x1aa0 [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG C:\Windows\System32\alg.exe
18:38:21.0196 0x1aa0 ALG - ok
18:38:21.0222 0x1aa0 [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide C:\Windows\system32\drivers\aliide.sys
18:38:21.0222 0x1aa0 aliide - ok
18:38:21.0290 0x1aa0 [ A359974EAAC83A435497C52F62A2E590 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
18:38:21.0292 0x1aa0 AMD External Events Utility - ok
18:38:21.0387 0x1aa0 AMD FUEL Service - ok
18:38:21.0415 0x1aa0 [ 970FA5059E61E30D25307B99903E991E ] amdide C:\Windows\system32\drivers\amdide.sys
18:38:21.0415 0x1aa0 amdide - ok
18:38:21.0450 0x1aa0 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
18:38:21.0451 0x1aa0 amdiox64 - ok
18:38:21.0461 0x1aa0 [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
18:38:21.0462 0x1aa0 AmdK8 - ok
18:38:21.0705 0x1aa0 [ 60216B0E704584DE6D5A9F59E9C34C47 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
18:38:21.0782 0x1aa0 amdkmdag - ok
18:38:21.0819 0x1aa0 [ 6B4E9261B613B047A9A145F328889968 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
18:38:21.0821 0x1aa0 amdkmdap - ok
18:38:21.0883 0x1aa0 [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
18:38:21.0884 0x1aa0 AODDriver4.1 - ok
18:38:21.0940 0x1aa0 [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo C:\Windows\System32\appinfo.dll
18:38:21.0941 0x1aa0 Appinfo - ok
18:38:22.0027 0x1aa0 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
18:38:22.0028 0x1aa0 Apple Mobile Device - ok
18:38:22.0098 0x1aa0 [ BA8417D4765F3988FF921F30F630E303 ] arc C:\Windows\system32\drivers\arc.sys
18:38:22.0100 0x1aa0 arc - ok
18:38:22.0127 0x1aa0 [ 9D41C435619733B34CC16A511E644B11 ] arcsas C:\Windows\system32\drivers\arcsas.sys
18:38:22.0129 0x1aa0 arcsas - ok
18:38:22.0157 0x1aa0 [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:38:22.0157 0x1aa0 AsyncMac - ok
18:38:22.0202 0x1aa0 [ E68D9B3A3905619732F7FE039466A623 ] atapi C:\Windows\system32\drivers\atapi.sys
18:38:22.0203 0x1aa0 atapi - ok
18:38:22.0404 0x1aa0 [ 60216B0E704584DE6D5A9F59E9C34C47 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
18:38:22.0477 0x1aa0 atikmdag - ok
18:38:22.0518 0x1aa0 [ DB0D3DE15EDC96E7529FC0D3F7760894 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
18:38:22.0518 0x1aa0 AtiPcie - ok
18:38:22.0570 0x1aa0 [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:38:22.0575 0x1aa0 AudioEndpointBuilder - ok
18:38:22.0586 0x1aa0 [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv C:\Windows\System32\Audiosrv.dll
18:38:22.0590 0x1aa0 AudioSrv - ok
18:38:22.0650 0x1aa0 [ 5E76DEBBA4311AC1C44DE83D59A9584E ] AVer88xHD C:\Windows\system32\drivers\AVer88xHD64.sys
18:38:22.0653 0x1aa0 AVer88xHD - ok
18:38:22.0679 0x1aa0 Beep - ok
18:38:22.0738 0x1aa0 [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE C:\Windows\System32\bfe.dll
18:38:22.0742 0x1aa0 BFE - ok
18:38:22.0823 0x1aa0 [ 6D316F4859634071CC25C4FD4589AD2C ] BITS C:\Windows\system32\qmgr.dll
18:38:22.0833 0x1aa0 BITS - ok
18:38:22.0872 0x1aa0 [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
18:38:22.0873 0x1aa0 blbdrive - ok
18:38:22.0942 0x1aa0 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
18:38:22.0947 0x1aa0 Bonjour Service - ok
18:38:22.0987 0x1aa0 [ 2348447A80920B2493A9B582A23E81E1 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:38:22.0988 0x1aa0 bowser - ok
18:38:23.0032 0x1aa0 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
18:38:23.0033 0x1aa0 BrFiltLo - ok
18:38:23.0048 0x1aa0 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
18:38:23.0048 0x1aa0 BrFiltUp - ok
18:38:23.0212 0x1aa0 [ A61D617F37456D9D32F98BF70EB5D414 ] BrlAPI C:\cygwin\bin\cygrunsrv.exe
18:38:23.0215 0x1aa0 BrlAPI - ok
18:38:23.0249 0x1aa0 [ A1B39DE453433B115B4EA69EE0343816 ] Browser C:\Windows\System32\browser.dll
18:38:23.0250 0x1aa0 Browser - ok
18:38:23.0279 0x1aa0 [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid C:\Windows\system32\drivers\brserid.sys
18:38:23.0280 0x1aa0 Brserid - ok
18:38:23.0289 0x1aa0 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
18:38:23.0290 0x1aa0 BrSerWdm - ok
18:38:23.0312 0x1aa0 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
18:38:23.0313 0x1aa0 BrUsbMdm - ok
18:38:23.0324 0x1aa0 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
18:38:23.0325 0x1aa0 BrUsbSer - ok
18:38:23.0333 0x1aa0 [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
18:38:23.0335 0x1aa0 BTHMODEM - ok
18:38:23.0363 0x1aa0 catchme - ok
18:38:23.0408 0x1aa0 [ 551BE1536B27DC056EA4D48275EFB089 ] CAXHWBS2 C:\Windows\system32\DRIVERS\CAXHWBS2.sys
18:38:23.0412 0x1aa0 CAXHWBS2 - ok
18:38:23.0426 0x1aa0 [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:38:23.0427 0x1aa0 cdfs - ok
18:38:23.0456 0x1aa0 [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:38:23.0457 0x1aa0 cdrom - ok
18:38:23.0507 0x1aa0 [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc C:\Windows\System32\certprop.dll
18:38:23.0508 0x1aa0 CertPropSvc - ok
18:38:23.0541 0x1aa0 [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
18:38:23.0541 0x1aa0 circlass - ok
18:38:23.0589 0x1aa0 [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS C:\Windows\system32\CLFS.sys
18:38:23.0592 0x1aa0 CLFS - ok
18:38:23.0673 0x1aa0 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:38:23.0674 0x1aa0 clr_optimization_v2.0.50727_32 - ok
18:38:23.0767 0x1aa0 [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:38:23.0769 0x1aa0 clr_optimization_v2.0.50727_64 - ok
18:38:23.0872 0x1aa0 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:38:23.0874 0x1aa0 clr_optimization_v4.0.30319_32 - ok
18:38:23.0935 0x1aa0 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
18:38:23.0936 0x1aa0 clr_optimization_v4.0.30319_64 - ok
18:38:23.0954 0x1aa0 [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:38:23.0954 0x1aa0 cmdide - ok
18:38:23.0973 0x1aa0 [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
18:38:23.0974 0x1aa0 Compbatt - ok
18:38:23.0983 0x1aa0 COMSysApp - ok
18:38:24.0038 0x1aa0 [ C08063F052308B6F5882482615387F30 ] cpuz135 C:\Windows\system32\drivers\cpuz135_x64.sys
18:38:24.0039 0x1aa0 cpuz135 - ok
18:38:24.0053 0x1aa0 [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
18:38:24.0054 0x1aa0 crcdisk - ok
18:38:24.0099 0x1aa0 [ 5AAC48EAF8EACF247DB44FB61B900D89 ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:38:24.0102 0x1aa0 CryptSvc - ok
18:38:24.0262 0x1aa0 [ A61D617F37456D9D32F98BF70EB5D414 ] cygserver C:\cygwin\bin\cygrunsrv.exe
18:38:24.0264 0x1aa0 cygserver - ok
18:38:24.0323 0x1aa0 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch C:\Windows\system32\rpcss.dll
18:38:24.0330 0x1aa0 DcomLaunch - ok
18:38:24.0361 0x1aa0 [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:38:24.0362 0x1aa0 DfsC - ok
18:38:24.0491 0x1aa0 [ C647F468F7DE343DF8C143655C5557D4 ] DFSR C:\Windows\system32\DFSR.exe
18:38:24.0518 0x1aa0 DFSR - ok
18:38:24.0563 0x1aa0 [ 0B3F6C8F93C5C25977EA5A8B2E656357 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
18:38:24.0564 0x1aa0 dg_ssudbus - ok
18:38:24.0629 0x1aa0 [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp C:\Windows\System32\dhcpcsvc.dll
18:38:24.0631 0x1aa0 Dhcp - ok
18:38:24.0699 0x1aa0 [ B0107E40ECDB5FA692EBF832F295D905 ] disk C:\Windows\system32\drivers\disk.sys
18:38:24.0700 0x1aa0 disk - ok
18:38:24.0821 0x1aa0 [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:38:24.0823 0x1aa0 Dnscache - ok
18:38:24.0914 0x1aa0 [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc C:\Windows\System32\dot3svc.dll
18:38:24.0917 0x1aa0 dot3svc - ok
18:38:24.0971 0x1aa0 [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS C:\Windows\system32\dps.dll
18:38:24.0974 0x1aa0 DPS - ok
18:38:25.0127 0x1aa0 [ 308195495181C8F3D51E6ED5B58D54AC ] DragonUpdater C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
18:38:25.0145 0x1aa0 DragonUpdater - ok
18:38:25.0224 0x1aa0 [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:38:25.0225 0x1aa0 drmkaud - ok
18:38:25.0296 0x1aa0 [ F3932288EEECD776FF1F9F653AD878F3 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:38:25.0303 0x1aa0 DXGKrnl - ok
18:38:25.0320 0x1aa0 [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60 C:\Windows\system32\DRIVERS\E1G6032E.sys
18:38:25.0321 0x1aa0 E1G60 - ok
18:38:25.0351 0x1aa0 [ C2303883FD9BE49DC36A6400643002EA ] EapHost C:\Windows\System32\eapsvc.dll
18:38:25.0352 0x1aa0 EapHost - ok
18:38:25.0412 0x1aa0 [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache C:\Windows\system32\drivers\ecache.sys
18:38:25.0413 0x1aa0 Ecache - ok
18:38:25.0519 0x1aa0 [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:38:25.0522 0x1aa0 ehRecvr - ok
18:38:25.0573 0x1aa0 [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched C:\Windows\ehome\ehsched.exe
18:38:25.0574 0x1aa0 ehSched - ok
18:38:25.0632 0x1aa0 [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart C:\Windows\ehome\ehstart.dll
18:38:25.0633 0x1aa0 ehstart - ok
18:38:25.0669 0x1aa0 [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor C:\Windows\system32\drivers\elxstor.sys
18:38:25.0672 0x1aa0 elxstor - ok
18:38:25.0730 0x1aa0 [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt C:\Windows\system32\emdmgmt.dll
18:38:25.0734 0x1aa0 EMDMgmt - ok
18:38:25.0781 0x1aa0 [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:38:25.0782 0x1aa0 ErrDev - ok
18:38:25.0876 0x1aa0 [ 4D06D9A26227AC485305133916888DF1 ] ETService C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe
18:38:25.0877 0x1aa0 ETService - ok
18:38:25.0936 0x1aa0 [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem C:\Windows\system32\es.dll
18:38:25.0940 0x1aa0 EventSystem - ok
18:38:25.0981 0x1aa0 [ 486844F47B6636044A42454614ED4523 ] exfat C:\Windows\system32\drivers\exfat.sys
18:38:25.0983 0x1aa0 exfat - ok
18:38:26.0041 0x1aa0 [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:38:26.0043 0x1aa0 fastfat - ok
18:38:26.0058 0x1aa0 [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:38:26.0059 0x1aa0 fdc - ok
18:38:26.0090 0x1aa0 [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost C:\Windows\system32\fdPHost.dll
18:38:26.0092 0x1aa0 fdPHost - ok
18:38:26.0106 0x1aa0 [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub C:\Windows\system32\fdrespub.dll
18:38:26.0108 0x1aa0 FDResPub - ok
18:38:26.0124 0x1aa0 [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:38:26.0125 0x1aa0 FileInfo - ok
18:38:26.0135 0x1aa0 [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:38:26.0135 0x1aa0 Filetrace - ok
18:38:26.0207 0x1aa0 [ 1F63900E2EB00101B9ACA2B7A870704E ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
18:38:26.0212 0x1aa0 FLEXnet Licensing Service - ok
18:38:26.0247 0x1aa0 [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:38:26.0248 0x1aa0 flpydisk - ok
18:38:26.0299 0x1aa0 [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:38:26.0301 0x1aa0 FltMgr - ok
18:38:26.0393 0x1aa0 [ F20A97F51C104DD0A163251325460747 ] FontCache C:\Windows\system32\FntCache.dll
18:38:26.0403 0x1aa0 FontCache - ok
18:38:26.0503 0x1aa0 [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:38:26.0504 0x1aa0 FontCache3.0.0.0 - ok
18:38:26.0542 0x1aa0 [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:38:26.0543 0x1aa0 Fs_Rec - ok
18:38:26.0579 0x1aa0 [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
18:38:26.0580 0x1aa0 gagp30kx - ok
18:38:26.0620 0x1aa0 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:38:26.0621 0x1aa0 GEARAspiWDM - ok
18:38:26.0679 0x1aa0 [ 14908F4F9005C29DE8F5587E271390EE ] gfibto C:\Windows\system32\drivers\gfibto.sys
18:38:26.0680 0x1aa0 gfibto - ok
18:38:26.0736 0x1aa0 [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc C:\Windows\System32\gpsvc.dll
18:38:26.0743 0x1aa0 gpsvc - ok
18:38:26.0822 0x1aa0 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:38:26.0823 0x1aa0 gupdate - ok
18:38:26.0830 0x1aa0 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:38:26.0832 0x1aa0 gupdatem - ok
18:38:26.0888 0x1aa0 [ 49FF998B490B4AEF6C71A669FD10F09B ] hcmon C:\Windows\system32\drivers\hcmon.sys
18:38:26.0889 0x1aa0 hcmon - ok
18:38:26.0940 0x1aa0 [ 68E732382B32417FF61FD663259B4B09 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:38:26.0943 0x1aa0 HdAudAddService - ok
18:38:27.0024 0x1aa0 [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
18:38:27.0033 0x1aa0 HDAudBus - ok
18:38:27.0050 0x1aa0 [ B4881C84A180E75B8C25DC1D726C375F ] HidBth C:\Windows\system32\drivers\hidbth.sys
18:38:27.0051 0x1aa0 HidBth - ok
18:38:27.0088 0x1aa0 [ 5F47839455D01FF6403B008D481A6F5B ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
18:38:27.0089 0x1aa0 HidIr - ok
18:38:27.0126 0x1aa0 [ 59361D38A297755D46A540E450202B2A ] hidserv C:\Windows\System32\hidserv.dll
18:38:27.0128 0x1aa0 hidserv - ok
18:38:27.0169 0x1aa0 [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:38:27.0169 0x1aa0 HidUsb - ok
18:38:27.0196 0x1aa0 [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc C:\Windows\system32\kmsvc.dll
18:38:27.0198 0x1aa0 hkmsvc - ok
18:38:27.0217 0x1aa0 [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
18:38:27.0218 0x1aa0 HpCISSs - ok
18:38:27.0273 0x1aa0 [ 9C369CBC5F19DA9968223197B5205F68 ] HSF_DPV C:\Windows\system32\DRIVERS\CAX_DPV.sys
18:38:27.0284 0x1aa0 HSF_DPV - ok
18:38:27.0336 0x1aa0 [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:38:27.0341 0x1aa0 HTTP - ok
18:38:27.0356 0x1aa0 [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp C:\Windows\system32\drivers\i2omp.sys
18:38:27.0357 0x1aa0 i2omp - ok
18:38:27.0397 0x1aa0 [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
18:38:27.0398 0x1aa0 i8042prt - ok
18:38:27.0431 0x1aa0 [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
18:38:27.0434 0x1aa0 iaStorV - ok
18:38:27.0513 0x1aa0 [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:38:27.0520 0x1aa0 idsvc - ok
18:38:27.0527 0x1aa0 [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp C:\Windows\system32\drivers\iirsp.sys
18:38:27.0528 0x1aa0 iirsp - ok
18:38:27.0578 0x1aa0 [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT C:\Windows\System32\ikeext.dll
18:38:27.0583 0x1aa0 IKEEXT - ok
18:38:27.0660 0x1aa0 [ 8C7FA71CB1EBCD3EDE8958D27B1BF0B4 ] int15 C:\Windows\SysWOW64\drivers\int15_64.sys
18:38:27.0660 0x1aa0 int15 - ok
18:38:27.0668 0x1aa0 IntcAzAudAddService - ok
18:38:27.0680 0x1aa0 [ DF797A12176F11B2D301C5B234BB200E ] intelide C:\Windows\system32\drivers\intelide.sys
18:38:27.0680 0x1aa0 intelide - ok
18:38:27.0691 0x1aa0 [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:38:27.0693 0x1aa0 intelppm - ok
18:38:27.0717 0x1aa0 [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:38:27.0718 0x1aa0 IPBusEnum - ok
18:38:27.0760 0x1aa0 [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:38:27.0761 0x1aa0 IpFilterDriver - ok
18:38:27.0803 0x1aa0 [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:38:27.0805 0x1aa0 iphlpsvc - ok
18:38:27.0814 0x1aa0 IpInIp - ok
18:38:27.0830 0x1aa0 [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
18:38:27.0831 0x1aa0 IPMIDRV - ok
18:38:27.0840 0x1aa0 [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
18:38:27.0842 0x1aa0 IPNAT - ok
18:38:27.0917 0x1aa0 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
18:38:27.0922 0x1aa0 iPod Service - ok
18:38:27.0930 0x1aa0 [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:38:27.0931 0x1aa0 IRENUM - ok
18:38:27.0951 0x1aa0 [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:38:27.0952 0x1aa0 isapnp - ok
18:38:28.0006 0x1aa0 [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
18:38:28.0008 0x1aa0 iScsiPrt - ok
18:38:28.0016 0x1aa0 [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
18:38:28.0017 0x1aa0 iteatapi - ok
18:38:28.0025 0x1aa0 [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid C:\Windows\system32\drivers\iteraid.sys
18:38:28.0026 0x1aa0 iteraid - ok
18:38:28.0054 0x1aa0 [ 423696F3BA6472DD17699209B933BC26 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
18:38:28.0055 0x1aa0 kbdclass - ok
18:38:28.0088 0x1aa0 [ DBDF75D51464FBC47D0104EC3D572C05 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
18:38:28.0090 0x1aa0 kbdhid - ok
18:38:28.0121 0x1aa0 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso C:\Windows\system32\lsass.exe
18:38:28.0123 0x1aa0 KeyIso - ok
18:38:28.0166 0x1aa0 [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:38:28.0170 0x1aa0 KSecDD - ok
18:38:28.0194 0x1aa0 [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
18:38:28.0195 0x1aa0 ksthunk - ok
18:38:28.0229 0x1aa0 [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm C:\Windows\system32\msdtckrm.dll
18:38:28.0234 0x1aa0 KtmRm - ok
18:38:28.0273 0x1aa0 [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer C:\Windows\System32\srvsvc.dll
18:38:28.0276 0x1aa0 LanmanServer - ok
18:38:28.0308 0x1aa0 [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:38:28.0311 0x1aa0 LanmanWorkstation - ok
18:38:28.0355 0x1aa0 [ 3C46290F7A5D45BA6EF32C248E22AA69 ] Lbd C:\Windows\system32\DRIVERS\Lbd.sys
18:38:28.0356 0x1aa0 Lbd - ok
18:38:28.0509 0x1aa0 [ 70FB6254E29150A7A4A39FDFFD306C33 ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
18:38:28.0512 0x1aa0 LBTServ - ok
18:38:28.0547 0x1aa0 [ A03B765FF67E58BA75333C7C8C0D7706 ] LEqdUsb C:\Windows\system32\DRIVERS\LEqdUsb.Sys
18:38:28.0549 0x1aa0 LEqdUsb - ok
18:38:28.0576 0x1aa0 [ 389588725D419476F365370BED4FFE5A ] LHidEqd C:\Windows\system32\DRIVERS\LHidEqd.Sys
18:38:28.0577 0x1aa0 LHidEqd - ok
18:38:28.0611 0x1aa0 [ 1470EF17E02E82E4F43346DF9E9F11E1 ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
18:38:28.0612 0x1aa0 LHidFilt - ok
18:38:28.0629 0x1aa0 [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:38:28.0630 0x1aa0 lltdio - ok
18:38:28.0654 0x1aa0 [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:38:28.0657 0x1aa0 lltdsvc - ok
18:38:28.0674 0x1aa0 [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts C:\Windows\System32\lmhsvc.dll
18:38:28.0676 0x1aa0 lmhosts - ok
18:38:28.0784 0x1aa0 [ 1DA54699C47501B92941A73A558D9E2A ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
18:38:28.0787 0x1aa0 LMIGuardianSvc - ok
18:38:28.0820 0x1aa0 [ 0317335B15FF3BDA8E10197E3434CFC0 ] LMIInfo C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys
18:38:28.0820 0x1aa0 LMIInfo - ok
18:38:28.0838 0x1aa0 [ 95DC370DBCE48AA1CD61DD999C143CEC ] LMIMaint C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
18:38:28.0839 0x1aa0 LMIMaint - ok
18:38:28.0892 0x1aa0 [ 413ECDCFAD9A82804D3674C8D7EEC24E ] lmimirr C:\Windows\system32\DRIVERS\lmimirr.sys
18:38:28.0893 0x1aa0 lmimirr - ok
18:38:28.0900 0x1aa0 LMIRfsClientNP - ok
18:38:28.0917 0x1aa0 [ C57D3FAA50E6F395759FFB7C709BD944 ] LMIRfsDriver C:\Windows\system32\drivers\LMIRfsDriver.sys
18:38:28.0918 0x1aa0 LMIRfsDriver - ok
18:38:28.0956 0x1aa0 [ 12814AE119E959437BEA3110F81BD188 ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
18:38:28.0957 0x1aa0 LMouFilt - ok
18:38:28.0999 0x1aa0 [ D3760BC17E1755091B7120CF32DBF56B ] LogMeIn C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
18:38:29.0003 0x1aa0 LogMeIn - ok
18:38:29.0035 0x1aa0 [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
18:38:29.0036 0x1aa0 LSI_FC - ok
18:38:29.0044 0x1aa0 [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
18:38:29.0046 0x1aa0 LSI_SAS - ok
18:38:29.0055 0x1aa0 [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
18:38:29.0056 0x1aa0 LSI_SCSI - ok
18:38:29.0083 0x1aa0 [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv C:\Windows\system32\drivers\luafv.sys
18:38:29.0085 0x1aa0 luafv - ok
18:38:29.0257 0x1aa0 [ 5747BC465ABEA2858C5D037252AED84E ] LVUVC64 C:\Windows\system32\DRIVERS\lvuvc64.sys
18:38:29.0303 0x1aa0 LVUVC64 - ok
18:38:29.0360 0x1aa0 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
18:38:29.0361 0x1aa0 MBAMProtector - ok
18:38:29.0397 0x1aa0 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:38:29.0401 0x1aa0 MBAMScheduler - ok
18:38:29.0431 0x1aa0 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
18:38:29.0437 0x1aa0 MBAMService - ok
18:38:29.0501 0x1aa0 [ 79D51E7F5926E8CE1B3EBECEBAE28CFF ] mcdbus C:\Windows\system32\DRIVERS\mcdbus.sys
18:38:29.0503 0x1aa0 mcdbus - ok
18:38:29.0540 0x1aa0 [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:38:29.0542 0x1aa0 Mcx2Svc - ok
18:38:29.0560 0x1aa0 [ E4F44EC214B3E381E1FC844A02926666 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
18:38:29.0561 0x1aa0 mdmxsdk - ok
18:38:29.0598 0x1aa0 [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas C:\Windows\system32\drivers\megasas.sys
18:38:29.0598 0x1aa0 megasas - ok
18:38:29.0633 0x1aa0 [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR C:\Windows\system32\drivers\megasr.sys
18:38:29.0637 0x1aa0 MegaSR - ok
18:38:29.0714 0x1aa0 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
18:38:29.0715 0x1aa0 Microsoft Office Groove Audit Service - ok
18:38:29.0734 0x1aa0 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS C:\Windows\system32\mmcss.dll
18:38:29.0736 0x1aa0 MMCSS - ok
18:38:29.0751 0x1aa0 [ 59848D5CC74606F0EE7557983BB73C2E ] Modem C:\Windows\system32\drivers\modem.sys
18:38:29.0752 0x1aa0 Modem - ok
18:38:29.0766 0x1aa0 [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:38:29.0767 0x1aa0 monitor - ok
18:38:29.0783 0x1aa0 [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:38:29.0784 0x1aa0 mouclass - ok
18:38:29.0817 0x1aa0 [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:38:29.0818 0x1aa0 mouhid - ok
18:38:29.0834 0x1aa0 [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
18:38:29.0835 0x1aa0 MountMgr - ok
18:38:29.0889 0x1aa0 [ A35576A433F4AEB0D48976A004657CB6 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
18:38:29.0890 0x1aa0 MozillaMaintenance - ok
18:38:29.0946 0x1aa0 [ FC1D590039EF06A381768710E6C07E75 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
18:38:29.0949 0x1aa0 MpFilter - ok
18:38:30.0041 0x1aa0 [ F8276EB8698142884498A528DFEA8478 ] mpio C:\Windows\system32\drivers\mpio.sys
18:38:30.0042 0x1aa0 mpio - ok
18:38:30.0096 0x1aa0 [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:38:30.0098 0x1aa0 mpsdrv - ok
18:38:30.0237 0x1aa0 [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc C:\Windows\system32\mpssvc.dll
18:38:30.0243 0x1aa0 MpsSvc - ok
18:38:30.0268 0x1aa0 [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
18:38:30.0269 0x1aa0 Mraid35x - ok
18:38:30.0318 0x1aa0 [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:38:30.0319 0x1aa0 MRxDAV - ok
18:38:30.0367 0x1aa0 [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:38:30.0370 0x1aa0 mrxsmb - ok
18:38:30.0423 0x1aa0 [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:38:30.0426 0x1aa0 mrxsmb10 - ok
18:38:30.0442 0x1aa0 [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:38:30.0444 0x1aa0 mrxsmb20 - ok
18:38:30.0451 0x1aa0 [ 1AC860612B85D8E85EE257D372E39F4D ] msahci C:\Windows\system32\drivers\msahci.sys
18:38:30.0452 0x1aa0 msahci - ok
18:38:30.0472 0x1aa0 [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:38:30.0473 0x1aa0 msdsm - ok
18:38:30.0500 0x1aa0 [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC C:\Windows\System32\msdtc.exe
18:38:30.0502 0x1aa0 MSDTC - ok
18:38:30.0523 0x1aa0 [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:38:30.0523 0x1aa0 Msfs - ok
18:38:30.0536 0x1aa0 [ 00EBC952961664780D43DCA157E79B27 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:38:30.0537 0x1aa0 msisadrv - ok
18:38:30.0559 0x1aa0 [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:38:30.0561 0x1aa0 MSiSCSI - ok
18:38:30.0568 0x1aa0 msiserver - ok
18:38:30.0602 0x1aa0 [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:38:30.0603 0x1aa0 MSKSSRV - ok
18:38:30.0671 0x1aa0 [ 66238063B53E51ADDA16764BAB9A3F7C ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
18:38:30.0671 0x1aa0 MsMpSvc - ok
18:38:30.0700 0x1aa0 [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:38:30.0700 0x1aa0 MSPCLOCK - ok
18:38:30.0721 0x1aa0 [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:38:30.0722 0x1aa0 MSPQM - ok
18:38:30.0755 0x1aa0 [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:38:30.0758 0x1aa0 MsRPC - ok
18:38:30.0806 0x1aa0 [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
18:38:30.0807 0x1aa0 mssmbios - ok
18:38:30.0897 0x1aa0 MSSQL$SQLEXPRESS - ok
18:38:31.0016 0x1aa0 [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 c:\Program Files (x86)\Microsoft SQL Server\100\Shared\SQLADHLP.EXE
18:38:31.0017 0x1aa0 MSSQLServerADHelper100 - ok
18:38:31.0042 0x1aa0 [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:38:31.0043 0x1aa0 MSTEE - ok
18:38:31.0235 0x1aa0 [ CB4A082AF58D1A0969F931816D5CFB05 ] msvsmon90 C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe
18:38:31.0270 0x1aa0 msvsmon90 - ok
18:38:31.0315 0x1aa0 [ 0CC49F78D8ACA0877D885F149084E543 ] Mup C:\Windows\system32\Drivers\mup.sys
18:38:31.0316 0x1aa0 Mup - ok
18:38:31.0366 0x1aa0 [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent C:\Windows\system32\qagentRT.dll
18:38:31.0371 0x1aa0 napagent - ok
18:38:31.0425 0x1aa0 [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:38:31.0427 0x1aa0 NativeWifiP - ok
18:38:31.0483 0x1aa0 [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:38:31.0489 0x1aa0 NDIS - ok
18:38:31.0525 0x1aa0 [ 64DF698A425478E321981431AC171334 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:38:31.0526 0x1aa0 NdisTapi - ok
18:38:31.0538 0x1aa0 [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:38:31.0539 0x1aa0 Ndisuio - ok
18:38:31.0582 0x1aa0 [ F8158771905260982CE724076419EF19 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:38:31.0583 0x1aa0 NdisWan - ok
18:38:31.0612 0x1aa0 [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:38:31.0613 0x1aa0 NDProxy - ok
18:38:31.0624 0x1aa0 [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:38:31.0625 0x1aa0 NetBIOS - ok
18:38:31.0663 0x1aa0 [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
18:38:31.0665 0x1aa0 netbt - ok
18:38:31.0687 0x1aa0 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon C:\Windows\system32\lsass.exe
18:38:31.0689 0x1aa0 Netlogon - ok
18:38:31.0727 0x1aa0 [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman C:\Windows\System32\netman.dll
18:38:31.0732 0x1aa0 Netman - ok
18:38:31.0751 0x1aa0 [ 7846D0136CC2B264926A73047BA7688A ] netprofm C:\Windows\System32\netprofm.dll
18:38:31.0754 0x1aa0 netprofm - ok
18:38:31.0796 0x1aa0 [ 74751DDA198165947FD7454D83F49825 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:38:31.0798 0x1aa0 NetTcpPortSharing - ok
18:38:31.0817 0x1aa0 [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
18:38:31.0818 0x1aa0 nfrd960 - ok
18:38:31.0859 0x1aa0 [ 8FB3C853E886E1E4D57271672486111C ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
18:38:31.0861 0x1aa0 NisDrv - ok
18:38:31.0907 0x1aa0 [ 869A808253726EA11939EC4FE76346A4 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe
18:38:31.0911 0x1aa0 NisSrv - ok
18:38:31.0929 0x1aa0 [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc C:\Windows\System32\nlasvc.dll
18:38:31.0932 0x1aa0 NlaSvc - ok
18:38:31.0966 0x1aa0 [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:38:31.0967 0x1aa0 Npfs - ok
18:38:31.0999 0x1aa0 [ ACB62BAA1C319B17752553DF3026EEEB ] nsi C:\Windows\system32\nsisvc.dll
18:38:32.0001 0x1aa0 nsi - ok
18:38:32.0021 0x1aa0 [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:38:32.0022 0x1aa0 nsiproxy - ok
18:38:32.0100 0x1aa0 [ 2ACCAA3C3C55370A32F17B3595E1A217 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:38:32.0113 0x1aa0 Ntfs - ok
18:38:32.0140 0x1aa0 [ DD5D684975352B85B52E3FD5347C20CB ] Null C:\Windows\system32\drivers\Null.sys
18:38:32.0141 0x1aa0 Null - ok
18:38:32.0168 0x1aa0 [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:38:32.0170 0x1aa0 nvraid - ok
18:38:32.0178 0x1aa0 [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:38:32.0179 0x1aa0 nvstor - ok
18:38:32.0188 0x1aa0 [ 19067CA93075EF4823E3938A686F532F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:38:32.0189 0x1aa0 nv_agp - ok
18:38:32.0196 0x1aa0 NwlnkFlt - ok
18:38:32.0205 0x1aa0 NwlnkFwd - ok
18:38:32.0298 0x1aa0 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:38:32.0301 0x1aa0 odserv - ok
18:38:32.0353 0x1aa0 [ B5B1CE65AC15BBD11C0619E3EF7CFC28 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
18:38:32.0354 0x1aa0 ohci1394 - ok
18:38:32.0406 0x1aa0 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:38:32.0408 0x1aa0 ose - ok
18:38:32.0485 0x1aa0 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc C:\Windows\system32\p2psvc.dll
18:38:32.0493 0x1aa0 p2pimsvc - ok
18:38:32.0509 0x1aa0 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc C:\Windows\system32\p2psvc.dll
18:38:32.0516 0x1aa0 p2psvc - ok
18:38:32.0561 0x1aa0 [ 4C6A7FD04DDF4DB88791048382E3EDB1 ] Parport C:\Windows\system32\DRIVERS\parport.sys
18:38:32.0562 0x1aa0 Parport - ok
18:38:32.0595 0x1aa0 [ B43751085E2ABE389DA466BC62A4B987 ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:38:32.0596 0x1aa0 partmgr - ok
18:38:32.0664 0x1aa0 [ 55223EEFABFDB84A926515FEBAB50D9A ] pbfilter C:\Program Files\PeerBlock\pbfilter.sys
18:38:32.0664 0x1aa0 pbfilter - ok
18:38:32.0691 0x1aa0 [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc C:\Windows\System32\pcasvc.dll
18:38:32.0693 0x1aa0 PcaSvc - ok
18:38:32.0728 0x1aa0 [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci C:\Windows\system32\drivers\pci.sys
18:38:32.0730 0x1aa0 pci - ok
18:38:32.0768 0x1aa0 [ 2657F6C0B78C36D95034BE109336E382 ] pciide C:\Windows\system32\drivers\pciide.sys
18:38:32.0769 0x1aa0 pciide - ok
18:38:32.0796 0x1aa0 [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
18:38:32.0798 0x1aa0 pcmcia - ok
18:38:32.0840 0x1aa0 [ 58865916F53592A61549B04941BFD80D ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:38:32.0845 0x1aa0 PEAUTH - ok
18:38:32.0918 0x1aa0 [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost C:\Windows\SysWow64\perfhost.exe
18:38:32.0920 0x1aa0 PerfHost - ok
18:38:32.0989 0x1aa0 [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla C:\Windows\system32\pla.dll
18:38:33.0001 0x1aa0 pla - ok
18:38:33.0045 0x1aa0 [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:38:33.0049 0x1aa0 PlugPlay - ok
18:38:33.0068 0x1aa0 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
18:38:33.0077 0x1aa0 PNRPAutoReg - ok
18:38:33.0094 0x1aa0 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc C:\Windows\system32\p2psvc.dll
18:38:33.0103 0x1aa0 PNRPsvc - ok
18:38:33.0152 0x1aa0 [ A6D06378F37BDBA0C0019294C2AABBD0 ] Point64 C:\Windows\system32\DRIVERS\point64k.sys
18:38:33.0153 0x1aa0 Point64 - ok
18:38:33.0217 0x1aa0 [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:38:33.0222 0x1aa0 PolicyAgent - ok
18:38:33.0272 0x1aa0 [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:38:33.0273 0x1aa0 PptpMiniport - ok
18:38:33.0280 0x1aa0 [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor C:\Windows\system32\DRIVERS\processr.sys
18:38:33.0281 0x1aa0 Processor - ok
18:38:33.0324 0x1aa0 [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc C:\Windows\system32\profsvc.dll
18:38:33.0327 0x1aa0 ProfSvc - ok
18:38:33.0345 0x1aa0 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe
18:38:33.0347 0x1aa0 ProtectedStorage - ok
18:38:33.0383 0x1aa0 [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched C:\Windows\system32\DRIVERS\pacer.sys
18:38:33.0384 0x1aa0 PSched - ok
18:38:33.0413 0x1aa0 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
18:38:33.0414 0x1aa0 PxHlpa64 - ok
18:38:33.0474 0x1aa0 [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300 C:\Windows\system32\drivers\ql2300.sys
18:38:33.0484 0x1aa0 ql2300 - ok
18:38:33.0495 0x1aa0 [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
18:38:33.0496 0x1aa0 ql40xx - ok
18:38:33.0533 0x1aa0 [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE C:\Windows\system32\qwave.dll
18:38:33.0537 0x1aa0 QWAVE - ok
18:38:33.0555 0x1aa0 [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:38:33.0556 0x1aa0 QWAVEdrv - ok
18:38:33.0566 0x1aa0 [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:38:33.0566 0x1aa0 RasAcd - ok
18:38:33.0602 0x1aa0 [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto C:\Windows\System32\rasauto.dll
18:38:33.0605 0x1aa0 RasAuto - ok
18:38:33.0639 0x1aa0 [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:38:33.0640 0x1aa0 Rasl2tp - ok
18:38:33.0668 0x1aa0 [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan C:\Windows\System32\rasmans.dll
18:38:33.0672 0x1aa0 RasMan - ok
18:38:33.0724 0x1aa0 [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:38:33.0725 0x1aa0 RasPppoe - ok
18:38:33.0770 0x1aa0 [ C6A593B51F34C33E5474539544072527 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:38:33.0771 0x1aa0 RasSstp - ok
18:38:33.0804 0x1aa0 [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:38:33.0807 0x1aa0 rdbss - ok
18:38:33.0832 0x1aa0 [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:38:33.0833 0x1aa0 RDPCDD - ok
18:38:33.0870 0x1aa0 [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
18:38:33.0873 0x1aa0 rdpdr - ok
18:38:33.0880 0x1aa0 [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:38:33.0881 0x1aa0 RDPENCDD - ok
18:38:33.0937 0x1aa0 [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:38:33.0939 0x1aa0 RDPWD - ok
18:38:33.0960 0x1aa0 [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess C:\Windows\System32\mprdim.dll
18:38:33.0963 0x1aa0 RemoteAccess - ok
18:38:33.0992 0x1aa0 [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:38:33.0995 0x1aa0 RemoteRegistry - ok
18:38:34.0021 0x1aa0 [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator C:\Windows\system32\locator.exe
18:38:34.0022 0x1aa0 RpcLocator - ok
18:38:34.0063 0x1aa0 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs C:\Windows\system32\rpcss.dll
18:38:34.0070 0x1aa0 RpcSs - ok
18:38:34.0094 0x1aa0 [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:38:34.0096 0x1aa0 rspndr - ok
18:38:34.0131 0x1aa0 RSUSBSTOR - ok
18:38:34.0209 0x1aa0 [ F8DA8FC39CE5859C0D8C0FE6524CE465 ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys
18:38:34.0210 0x1aa0 RTHDMIAzAudService - ok
18:38:34.0218 0x1aa0 Rts516xIR - ok
18:38:34.0253 0x1aa0 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs C:\Windows\system32\lsass.exe
18:38:34.0255 0x1aa0 SamSs - ok
18:38:34.0279 0x1aa0 [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:38:34.0280 0x1aa0 sbp2port - ok
18:38:34.0326 0x1aa0 [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:38:34.0329 0x1aa0 SCardSvr - ok
18:38:34.0392 0x1aa0 [ 0F838C811AD295D2A4489B9993096C63 ] Schedule C:\Windows\system32\schedsvc.dll
18:38:34.0400 0x1aa0 Schedule - ok
18:38:34.0438 0x1aa0 [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc C:\Windows\System32\certprop.dll
18:38:34.0439 0x1aa0 SCPolicySvc - ok
18:38:34.0467 0x1aa0 [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:38:34.0469 0x1aa0 SDRSVC - ok
18:38:34.0485 0x1aa0 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:38:34.0486 0x1aa0 secdrv - ok
18:38:34.0507 0x1aa0 [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon C:\Windows\system32\seclogon.dll
18:38:34.0509 0x1aa0 seclogon - ok
18:38:34.0522 0x1aa0 [ 90973A64B96CD647FF81C79443618EED ] SENS C:\Windows\system32\sens.dll
18:38:34.0525 0x1aa0 SENS - ok
18:38:34.0539 0x1aa0 [ 2449316316411D65BD2C761A6FFB2CE2 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
18:38:34.0541 0x1aa0 Serenum - ok
18:38:34.0563 0x1aa0 [ 4B438170BE2FC8E0BD35EE87A960F84F ] Serial C:\Windows\system32\DRIVERS\serial.sys
18:38:34.0565 0x1aa0 Serial - ok
18:38:34.0598 0x1aa0 [ A842F04833684BCEEA7336211BE478DF ] sermouse C:\Windows\system32\drivers\sermouse.sys
18:38:34.0599 0x1aa0 sermouse - ok
18:38:34.0642 0x1aa0 [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv C:\Windows\system32\sessenv.dll
18:38:34.0644 0x1aa0 SessionEnv - ok
18:38:34.0652 0x1aa0 [ 14D4B4465193A87C127933978E8C4106 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
18:38:34.0653 0x1aa0 sffdisk - ok
18:38:34.0661 0x1aa0 [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:38:34.0661 0x1aa0 sffp_mmc - ok
18:38:34.0671 0x1aa0 [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
18:38:34.0672 0x1aa0 sffp_sd - ok
18:38:34.0680 0x1aa0 [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
18:38:34.0681 0x1aa0 sfloppy - ok
18:38:34.0715 0x1aa0 [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:38:34.0718 0x1aa0 SharedAccess - ok
18:38:34.0772 0x1aa0 [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:38:34.0776 0x1aa0 ShellHWDetection - ok
18:38:34.0783 0x1aa0 [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
18:38:34.0784 0x1aa0 SiSRaid2 - ok
18:38:34.0815 0x1aa0 [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
18:38:34.0816 0x1aa0 SiSRaid4 - ok
18:38:34.0877 0x1aa0 [ 3E587DBBDFF938DDE5D4CE4047BE9041 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
18:38:34.0878 0x1aa0 SkypeUpdate - ok
18:38:34.0972 0x1aa0 [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc C:\Windows\system32\SLsvc.exe
18:38:34.0995 0x1aa0 slsvc - ok
18:38:35.0043 0x1aa0 [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify C:\Windows\system32\SLUINotify.dll
18:38:35.0045 0x1aa0 SLUINotify - ok
18:38:35.0096 0x1aa0 [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:38:35.0098 0x1aa0 Smb - ok
18:38:35.0133 0x1aa0 [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:38:35.0135 0x1aa0 SNMPTRAP - ok
18:38:35.0183 0x1aa0 [ 386C3C63F00A7040C7EC5E384217E89D ] spldr C:\Windows\system32\drivers\spldr.sys
18:38:35.0184 0x1aa0 spldr - ok
18:38:35.0245 0x1aa0 [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler C:\Windows\System32\spoolsv.exe
18:38:35.0249 0x1aa0 Spooler - ok
18:38:35.0369 0x1aa0 [ EB2FD937449B7ACEB39372F875EB8E78 ] SQLAgent$SQLEXPRESS c:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE
18:38:35.0372 0x1aa0 SQLAgent$SQLEXPRESS - ok
18:38:35.0456 0x1aa0 [ 99DE6ACFA5CA83FAD6A765C81C6F129F ] SQLBrowser c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
18:38:35.0458 0x1aa0 SQLBrowser - ok
18:38:35.0532 0x1aa0 [ 6D65985945B03CA59B67D0B73702FC7B ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
18:38:35.0533 0x1aa0 SQLWriter - ok
18:38:35.0618 0x1aa0 [ 880A57FCCB571EBD063D4DD50E93E46D ] srv C:\Windows\system32\DRIVERS\srv.sys
18:38:35.0622 0x1aa0 srv - ok
18:38:35.0672 0x1aa0 [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:38:35.0674 0x1aa0 srv2 - ok
18:38:35.0733 0x1aa0 [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:38:35.0735 0x1aa0 srvnet - ok
18:38:35.0779 0x1aa0 [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:38:35.0783 0x1aa0 SSDPSRV - ok
18:38:35.0833 0x1aa0 [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:38:35.0836 0x1aa0 SstpSvc - ok
18:38:35.0900 0x1aa0 [ EA8F41484CCC5BA6A1455C2AD3D1BE3C ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
18:38:35.0902 0x1aa0 ssudmdm - ok
18:38:35.0961 0x1aa0 [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc C:\Windows\System32\wiaservc.dll
18:38:35.0968 0x1aa0 stisvc - ok
18:38:36.0001 0x1aa0 [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum C:\Windows\system32\DRIVERS\swenum.sys
18:38:36.0002 0x1aa0 swenum - ok
18:38:36.0115 0x1aa0 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
18:38:36.0119 0x1aa0 SwitchBoard - ok
18:38:36.0191 0x1aa0 [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv

SuperDave · « **Reply #17 on:** August 31, 2013, 05:18:45 PM »

That doesn't look like the complete log. Please run again. I only need to see the bottom dozen lines from the log.

zulubanshee · « **Reply #18 on:** August 31, 2013, 08:00:41 PM »

21:58:59.0675 7900 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
21:59:00.0261 7900 ============================================================
21:59:00.0261 7900 Current date / time: 2013/08/31 21:59:00.0261
21:59:00.0261 7900 SystemInfo:
21:59:00.0261 7900
21:59:00.0261 7900 OS Version: 6.0.6002 ServicePack: 2.0
21:59:00.0261 7900 Product type: Workstation
21:59:00.0262 7900 ComputerName: DOUG-PC
21:59:00.0262 7900 UserName: doug
21:59:00.0262 7900 Windows directory: C:\Windows
21:59:00.0262 7900 System windows directory: C:\Windows
21:59:00.0262 7900 Running under WOW64
21:59:00.0262 7900 Processor architecture: Intel x64
21:59:00.0262 7900 Number of processors: 4
21:59:00.0262 7900 Page size: 0x1000
21:59:00.0262 7900 Boot type: Normal boot
21:59:00.0262 7900 ============================================================
21:59:02.0335 7900 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:59:02.0348 7900 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:59:04.0000 7900 Drive \Device\Harddisk2\DR2 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:59:04.0055 7900 Drive \Device\Harddisk7\DR7 - Size: 0x774488000 (29.82 Gb), SectorSize: 0x200, Cylinders: 0xF34, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
21:59:04.0060 7900 ============================================================
21:59:04.0060 7900 \Device\Harddisk0\DR0:
21:59:04.0121 7900 MBR partitions:
21:59:04.0121 7900 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1389000, BlocksNum 0x561BC800
21:59:04.0121 7900 \Device\Harddisk1\DR1:
21:59:04.0130 7900 MBR partitions:
21:59:04.0130 7900 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
21:59:04.0130 7900 \Device\Harddisk2\DR2:
21:59:04.0130 7900 MBR partitions:
21:59:04.0131 7900 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF8F8C1
21:59:04.0131 7900 \Device\Harddisk7\DR7:
21:59:04.0132 7900 MBR partitions:
21:59:04.0132 7900 \Device\Harddisk7\DR7\Partition1: MBR, Type 0xC, StartLBA 0x20, BlocksNum 0x3BA2420
21:59:04.0132 7900 ============================================================
21:59:04.0135 7900 C: <-> \Device\Harddisk0\DR0\Partition1
21:59:06.0516 7900 D: <-> \Device\Harddisk2\DR2\Partition1
21:59:06.0543 7900 L: <-> \Device\Harddisk1\DR1\Partition1
21:59:06.0544 7900 ============================================================
21:59:06.0544 7900 Initialize success
21:59:06.0544 7900 ============================================================
21:59:09.0261 7496 ============================================================
21:59:09.0261 7496 Scan started
21:59:09.0261 7496 Mode: Manual;
21:59:09.0261 7496 ============================================================
21:59:09.0920 7496 ================ Scan system memory ========================
21:59:09.0920 7496 System memory - ok
21:59:09.0921 7496 ================ Scan services =============================
21:59:10.0544 7496 [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI C:\Windows\system32\drivers\acpi.sys
21:59:10.0548 7496 ACPI - ok
21:59:10.0616 7496 [ 2F0683FD2DF1D92E891CACA14B45A8C1 ] adfs C:\Windows\system32\drivers\adfs.sys
21:59:10.0633 7496 adfs - ok
21:59:10.0921 7496 [ 3FD8DC2C9735C2AA70155102CFB93EDA ] AdobeActiveFileMonitor7.0 C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
21:59:10.0946 7496 AdobeActiveFileMonitor7.0 - ok
21:59:11.0094 7496 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
21:59:11.0111 7496 AdobeARMservice - ok
21:59:11.0319 7496 [ 476BB014F3F68C0C15EDDD5B444DA8FF ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:59:11.0340 7496 AdobeFlashPlayerUpdateSvc - ok
21:59:11.0406 7496 [ F14215E37CF124104575073F782111D2 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
21:59:11.0412 7496 adp94xx - ok
21:59:11.0462 7496 [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci C:\Windows\system32\drivers\adpahci.sys
21:59:11.0465 7496 adpahci - ok
21:59:11.0490 7496 [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
21:59:11.0512 7496 adpu160m - ok
21:59:11.0604 7496 [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
21:59:11.0625 7496 adpu320 - ok
21:59:11.0665 7496 [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:59:11.0667 7496 AeLookupSvc - ok
21:59:11.0816 7496 [ C4F6CE6087760AD70960C9EB130E7943 ] AFD C:\Windows\system32\drivers\afd.sys
21:59:11.0819 7496 AFD - ok
21:59:11.0860 7496 [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:59:11.0862 7496 agp440 - ok
21:59:11.0913 7496 [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx C:\Windows\system32\drivers\djsvs.sys
21:59:11.0932 7496 aic78xx - ok
21:59:11.0945 7496 [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG C:\Windows\System32\alg.exe
21:59:11.0947 7496 ALG - ok
21:59:11.0980 7496 [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide C:\Windows\system32\drivers\aliide.sys
21:59:11.0981 7496 aliide - ok
21:59:12.0048 7496 [ A359974EAAC83A435497C52F62A2E590 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
21:59:12.0052 7496 AMD External Events Utility - ok
21:59:12.0212 7496 AMD FUEL Service - ok
21:59:12.0257 7496 [ 970FA5059E61E30D25307B99903E991E ] amdide C:\Windows\system32\drivers\amdide.sys
21:59:12.0258 7496 amdide - ok
21:59:12.0325 7496 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
21:59:12.0327 7496 amdiox64 - ok
21:59:12.0346 7496 [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
21:59:12.0347 7496 AmdK8 - ok
21:59:13.0041 7496 [ 60216B0E704584DE6D5A9F59E9C34C47 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
21:59:13.0117 7496 amdkmdag - ok
21:59:13.0160 7496 [ 6B4E9261B613B047A9A145F328889968 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
21:59:13.0163 7496 amdkmdap - ok
21:59:13.0225 7496 [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
21:59:13.0226 7496 AODDriver4.1 - ok
21:59:13.0282 7496 [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo C:\Windows\System32\appinfo.dll
21:59:13.0285 7496 Appinfo - ok
21:59:13.0369 7496 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
21:59:13.0371 7496 Apple Mobile Device - ok
21:59:13.0432 7496 [ BA8417D4765F3988FF921F30F630E303 ] arc C:\Windows\system32\drivers\arc.sys
21:59:13.0434 7496 arc - ok
21:59:13.0480 7496 [ 9D41C435619733B34CC16A511E644B11 ] arcsas C:\Windows\system32\drivers\arcsas.sys
21:59:13.0482 7496 arcsas - ok
21:59:13.0518 7496 [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:59:13.0532 7496 AsyncMac - ok
21:59:13.0577 7496 [ E68D9B3A3905619732F7FE039466A623 ] atapi C:\Windows\system32\drivers\atapi.sys
21:59:13.0578 7496 atapi - ok
21:59:13.0826 7496 [ 60216B0E704584DE6D5A9F59E9C34C47 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
21:59:13.0931 7496 atikmdag - ok
21:59:13.0968 7496 [ DB0D3DE15EDC96E7529FC0D3F7760894 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
21:59:13.0969 7496 AtiPcie - ok
21:59:14.0021 7496 [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:59:14.0031 7496 AudioEndpointBuilder - ok
21:59:14.0051 7496 [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv C:\Windows\System32\Audiosrv.dll
21:59:14.0055 7496 AudioSrv - ok
21:59:14.0109 7496 [ 5E76DEBBA4311AC1C44DE83D59A9584E ] AVer88xHD C:\Windows\system32\drivers\AVer88xHD64.sys
21:59:14.0114 7496 AVer88xHD - ok
21:59:14.0154 7496 Beep - ok
21:59:14.0214 7496 [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE C:\Windows\System32\bfe.dll
21:59:14.0222 7496 BFE - ok
21:59:14.0298 7496 [ 6D316F4859634071CC25C4FD4589AD2C ] BITS C:\Windows\system32\qmgr.dll
21:59:14.0315 7496 BITS - ok
21:59:14.0355 7496 [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
21:59:14.0357 7496 blbdrive - ok
21:59:14.0426 7496 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:59:14.0435 7496 Bonjour Service - ok
21:59:14.0479 7496 [ 2348447A80920B2493A9B582A23E81E1 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:59:14.0482 7496 bowser - ok
21:59:14.0524 7496 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
21:59:14.0525 7496 BrFiltLo - ok
21:59:14.0573 7496 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
21:59:14.0573 7496 BrFiltUp - ok
21:59:14.0945 7496 [ A61D617F37456D9D32F98BF70EB5D414 ] BrlAPI C:\cygwin\bin\cygrunsrv.exe
21:59:14.0948 7496 BrlAPI - ok
21:59:14.0982 7496 [ A1B39DE453433B115B4EA69EE0343816 ] Browser C:\Windows\System32\browser.dll
21:59:14.0984 7496 Browser - ok
21:59:15.0022 7496 [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid C:\Windows\system32\drivers\brserid.sys
21:59:15.0046 7496 Brserid - ok
21:59:15.0073 7496 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
21:59:15.0074 7496 BrSerWdm - ok
21:59:15.0095 7496 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
21:59:15.0096 7496 BrUsbMdm - ok
21:59:15.0116 7496 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
21:59:15.0117 7496 BrUsbSer - ok
21:59:15.0130 7496 [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
21:59:15.0131 7496 BTHMODEM - ok
21:59:15.0176 7496 catchme - ok
21:59:15.0217 7496 [ 551BE1536B27DC056EA4D48275EFB089 ] CAXHWBS2 C:\Windows\system32\DRIVERS\CAXHWBS2.sys
21:59:15.0220 7496 CAXHWBS2 - ok
21:59:15.0234 7496 [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:59:15.0236 7496 cdfs - ok
21:59:15.0264 7496 [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:59:15.0266 7496 cdrom - ok
21:59:15.0316 7496 [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc C:\Windows\System32\certprop.dll
21:59:15.0318 7496 CertPropSvc - ok
21:59:15.0349 7496 [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
21:59:15.0350 7496 circlass - ok
21:59:15.0398 7496 [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS C:\Windows\system32\CLFS.sys
21:59:15.0401 7496 CLFS - ok
21:59:15.0515 7496 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:59:15.0517 7496 clr_optimization_v2.0.50727_32 - ok
21:59:15.0609 7496 [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:59:15.0611 7496 clr_optimization_v2.0.50727_64 - ok
21:59:15.0714 7496 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:59:15.0718 7496 clr_optimization_v4.0.30319_32 - ok
21:59:15.0785 7496 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:59:15.0788 7496 clr_optimization_v4.0.30319_64 - ok
21:59:15.0812 7496 [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:59:15.0814 7496 cmdide - ok
21:59:15.0831 7496 [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
21:59:15.0833 7496 Compbatt - ok
21:59:15.0842 7496 COMSysApp - ok
21:59:15.0897 7496 [ C08063F052308B6F5882482615387F30 ] cpuz135 C:\Windows\system32\drivers\cpuz135_x64.sys
21:59:15.0898 7496 cpuz135 - ok
21:59:15.0920 7496 [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
21:59:15.0922 7496 crcdisk - ok
21:59:15.0974 7496 [ 5AAC48EAF8EACF247DB44FB61B900D89 ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:59:15.0978 7496 CryptSvc - ok
21:59:16.0111 7496 [ A61D617F37456D9D32F98BF70EB5D414 ] cygserver C:\cygwin\bin\cygrunsrv.exe
21:59:16.0113 7496 cygserver - ok
21:59:16.0182 7496 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch C:\Windows\system32\rpcss.dll
21:59:16.0195 7496 DcomLaunch - ok
21:59:16.0228 7496 [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:59:16.0231 7496 DfsC - ok
21:59:16.0357 7496 [ C647F468F7DE343DF8C143655C5557D4 ] DFSR C:\Windows\system32\DFSR.exe
21:59:16.0405 7496 DFSR - ok
21:59:16.0463 7496 [ 0B3F6C8F93C5C25977EA5A8B2E656357 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
21:59:16.0466 7496 dg_ssudbus - ok
21:59:16.0529 7496 [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp C:\Windows\System32\dhcpcsvc.dll
21:59:16.0535 7496 Dhcp - ok
21:59:16.0591 7496 [ B0107E40ECDB5FA692EBF832F295D905 ] disk C:\Windows\system32\drivers\disk.sys
21:59:16.0593 7496 disk - ok
21:59:16.0647 7496 [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:59:16.0650 7496 Dnscache - ok
21:59:16.0748 7496 [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc C:\Windows\System32\dot3svc.dll
21:59:16.0770 7496 dot3svc - ok
21:59:16.0805 7496 [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS C:\Windows\system32\dps.dll
21:59:16.0808 7496 DPS - ok
21:59:16.0985 7496 [ 308195495181C8F3D51E6ED5B58D54AC ] DragonUpdater C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
21:59:17.0018 7496 DragonUpdater - ok
21:59:17.0066 7496 [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:59:17.0067 7496 drmkaud - ok
21:59:17.0121 7496 [ F3932288EEECD776FF1F9F653AD878F3 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:59:17.0128 7496 DXGKrnl - ok
21:59:17.0145 7496 [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60 C:\Windows\system32\DRIVERS\E1G6032E.sys
21:59:17.0148 7496 E1G60 - ok
21:59:17.0167 7496 [ C2303883FD9BE49DC36A6400643002EA ] EapHost C:\Windows\System32\eapsvc.dll
21:59:17.0170 7496 EapHost - ok
21:59:17.0228 7496 [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache C:\Windows\system32\drivers\ecache.sys
21:59:17.0231 7496 Ecache - ok
21:59:17.0285 7496 [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:59:17.0292 7496 ehRecvr - ok
21:59:17.0315 7496 [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched C:\Windows\ehome\ehsched.exe
21:59:17.0318 7496 ehSched - ok
21:59:17.0357 7496 [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart C:\Windows\ehome\ehstart.dll
21:59:17.0359 7496 ehstart - ok
21:59:17.0403 7496 [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor C:\Windows\system32\drivers\elxstor.sys
21:59:17.0410 7496 elxstor - ok
21:59:17.0471 7496 [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt C:\Windows\system32\emdmgmt.dll
21:59:17.0478 7496 EMDMgmt - ok
21:59:17.0523 7496 [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:59:17.0524 7496 ErrDev - ok
21:59:17.0602 7496 [ 4D06D9A26227AC485305133916888DF1 ] ETService C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe
21:59:17.0603 7496 ETService - ok
21:59:17.0661 7496 [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem C:\Windows\system32\es.dll
21:59:17.0668 7496 EventSystem - ok
21:59:17.0698 7496 [ 486844F47B6636044A42454614ED4523 ] exfat C:\Windows\system32\drivers\exfat.sys
21:59:17.0702 7496 exfat - ok
21:59:17.0750 7496 [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:59:17.0754 7496 fastfat - ok
21:59:17.0800 7496 [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
21:59:17.0802 7496 fdc - ok
21:59:17.0840 7496 [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost C:\Windows\system32\fdPHost.dll
21:59:17.0842 7496 fdPHost - ok
21:59:17.0856 7496 [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub C:\Windows\system32\fdrespub.dll
21:59:17.0858 7496 FDResPub - ok
21:59:17.0891 7496 [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:59:17.0894 7496 FileInfo - ok
21:59:17.0902 7496 [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:59:17.0904 7496 Filetrace - ok
21:59:17.0973 7496 [ 1F63900E2EB00101B9ACA2B7A870704E ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
21:59:17.0984 7496 FLEXnet Licensing Service - ok
21:59:18.0014 7496 [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
21:59:18.0016 7496 flpydisk - ok
21:59:18.0066 7496 [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:59:18.0071 7496 FltMgr - ok
21:59:18.0167 7496 [ F20A97F51C104DD0A163251325460747 ] FontCache C:\Windows\system32\FntCache.dll
21:59:18.0185 7496 FontCache - ok
21:59:18.0297 7496 [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:59:18.0299 7496 FontCache3.0.0.0 - ok
21:59:18.0334 7496 [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:59:18.0336 7496 Fs_Rec - ok
21:59:18.0371 7496 [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
21:59:18.0373 7496 gagp30kx - ok
21:59:18.0412 7496 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:59:18.0414 7496 GEARAspiWDM - ok
21:59:18.0479 7496 [ 14908F4F9005C29DE8F5587E271390EE ] gfibto C:\Windows\system32\drivers\gfibto.sys
21:59:18.0481 7496 gfibto - ok
21:59:18.0536 7496 [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc C:\Windows\System32\gpsvc.dll
21:59:18.0549 7496 gpsvc - ok
21:59:18.0622 7496 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:59:18.0625 7496 gupdate - ok
21:59:18.0631 7496 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:59:18.0633 7496 gupdatem - ok
21:59:18.0689 7496 [ 49FF998B490B4AEF6C71A669FD10F09B ] hcmon C:\Windows\system32\drivers\hcmon.sys
21:59:18.0691 7496 hcmon - ok
21:59:18.0741 7496 [ 68E732382B32417FF61FD663259B4B09 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:59:18.0746 7496 HdAudAddService - ok
21:59:18.0815 7496 [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
21:59:18.0830 7496 HDAudBus - ok
21:59:18.0884 7496 [ B4881C84A180E75B8C25DC1D726C375F ] HidBth C:\Windows\system32\drivers\hidbth.sys
21:59:18.0885 7496 HidBth - ok
21:59:18.0922 7496 [ 5F47839455D01FF6403B008D481A6F5B ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
21:59:18.0924 7496 HidIr - ok
21:59:18.0960 7496 [ 59361D38A297755D46A540E450202B2A ] hidserv C:\Windows\System32\hidserv.dll
21:59:18.0962 7496 hidserv - ok
21:59:19.0002 7496 [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:59:19.0004 7496 HidUsb - ok
21:59:19.0055 7496 [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc C:\Windows\system32\kmsvc.dll
21:59:19.0058 7496 hkmsvc - ok
21:59:19.0084 7496 [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
21:59:19.0086 7496 HpCISSs - ok
21:59:19.0140 7496 [ 9C369CBC5F19DA9968223197B5205F68 ] HSF_DPV C:\Windows\system32\DRIVERS\CAX_DPV.sys
21:59:19.0162 7496 HSF_DPV - ok
21:59:19.0212 7496 [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:59:19.0222 7496 HTTP - ok
21:59:19.0235 7496 [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp C:\Windows\system32\drivers\i2omp.sys
21:59:19.0236 7496 i2omp - ok
21:59:19.0255 7496 [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
21:59:19.0258 7496 i8042prt - ok
21:59:19.0290 7496 [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
21:59:19.0296 7496 iaStorV - ok
21:59:19.0380 7496 [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:59:19.0394 7496 idsvc - ok
21:59:19.0404 7496 [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp C:\Windows\system32\drivers\iirsp.sys
21:59:19.0406 7496 iirsp - ok
21:59:19.0453 7496 [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT C:\Windows\System32\ikeext.dll
21:59:19.0463 7496 IKEEXT - ok
21:59:19.0552 7496 [ 8C7FA71CB1EBCD3EDE8958D27B1BF0B4 ] int15 C:\Windows\SysWOW64\drivers\int15_64.sys
21:59:19.0553 7496 int15 - ok
21:59:19.0561 7496 IntcAzAudAddService - ok
21:59:19.0571 7496 [ DF797A12176F11B2D301C5B234BB200E ] intelide C:\Windows\system32\drivers\intelide.sys
21:59:19.0573 7496 intelide - ok
21:59:19.0582 7496 [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:59:19.0584 7496 intelppm - ok
21:59:19.0601 7496 [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:59:19.0605 7496 IPBusEnum - ok
21:59:19.0635 7496 [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:59:19.0637 7496 IpFilterDriver - ok
21:59:19.0686 7496 [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:59:19.0692 7496 iphlpsvc - ok
21:59:19.0699 7496 IpInIp - ok
21:59:19.0722 7496 [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
21:59:19.0725 7496 IPMIDRV - ok
21:59:19.0757 7496 [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
21:59:19.0760 7496 IPNAT - ok
21:59:19.0834 7496 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
21:59:19.0844 7496 iPod Service - ok
21:59:19.0852 7496 [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:59:19.0854 7496 IRENUM - ok
21:59:19.0876 7496 [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:59:19.0878 7496 isapnp - ok
21:59:19.0931 7496 [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
21:59:19.0936 7496 iScsiPrt - ok
21:59:19.0944 7496 [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
21:59:19.0946 7496 iteatapi - ok
21:59:19.0956 7496 [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid C:\Windows\system32\drivers\iteraid.sys
21:59:19.0958 7496 iteraid - ok
21:59:19.0996 7496 [ 423696F3BA6472DD17699209B933BC26 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:59:19.0998 7496 kbdclass - ok
21:59:20.0047 7496 [ DBDF75D51464FBC47D0104EC3D572C05 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
21:59:20.0048 7496 kbdhid - ok
21:59:20.0080 7496 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso C:\Windows\system32\lsass.exe
21:59:20.0082 7496 KeyIso - ok
21:59:20.0124 7496 [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:59:20.0133 7496 KSecDD - ok
21:59:20.0153 7496 [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
21:59:20.0155 7496 ksthunk - ok
21:59:20.0188 7496 [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm C:\Windows\system32\msdtckrm.dll
21:59:20.0197 7496 KtmRm - ok
21:59:20.0240 7496 [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer C:\Windows\System32\srvsvc.dll
21:59:20.0245 7496 LanmanServer - ok
21:59:20.0275 7496 [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:59:20.0280 7496 LanmanWorkstation - ok
21:59:20.0330 7496 [ 3C46290F7A5D45BA6EF32C248E22AA69 ] Lbd C:\Windows\system32\DRIVERS\Lbd.sys
21:59:20.0333 7496 Lbd - ok
21:59:20.0493 7496 [ 70FB6254E29150A7A4A39FDFFD306C33 ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
21:59:20.0500 7496 LBTServ - ok
21:59:20.0539 7496 [ A03B765FF67E58BA75333C7C8C0D7706 ] LEqdUsb C:\Windows\system32\DRIVERS\LEqdUsb.Sys
21:59:20.0542 7496 LEqdUsb - ok
21:59:20.0576 7496 [ 389588725D419476F365370BED4FFE5A ] LHidEqd C:\Windows\system32\DRIVERS\LHidEqd.Sys
21:59:20.0578 7496 LHidEqd - ok
21:59:20.0627 7496 [ 1470EF17E02E82E4F43346DF9E9F11E1 ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
21:59:20.0630 7496 LHidFilt - ok
21:59:20.0654 7496 [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:59:20.0657 7496 lltdio - ok
21:59:20.0679 7496 [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:59:20.0686 7496 lltdsvc - ok
21:59:20.0708 7496 [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:59:20.0710 7496 lmhosts - ok
21:59:20.0817 7496 [ 1DA54699C47501B92941A73A558D9E2A ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
21:59:20.0824 7496 LMIGuardianSvc - ok
21:59:20.0847 7496 [ 0317335B15FF3BDA8E10197E3434CFC0 ] LMIInfo C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys
21:59:20.0848 7496 LMIInfo - ok
21:59:20.0863 7496 [ 95DC370DBCE48AA1CD61DD999C143CEC ] LMIMaint C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
21:59:20.0867 7496 LMIMaint - ok
21:59:20.0904 7496 [ 413ECDCFAD9A82804D3674C8D7EEC24E ] lmimirr C:\Windows\system32\DRIVERS\lmimirr.sys
21:59:20.0905 7496 lmimirr - ok
21:59:20.0913 7496 LMIRfsClientNP - ok
21:59:20.0942 7496 [ C57D3FAA50E6F395759FFB7C709BD944 ] LMIRfsDriver C:\Windows\system32\drivers\LMIRfsDriver.sys
21:59:20.0944 7496 LMIRfsDriver - ok
21:59:20.0982 7496 [ 12814AE119E959437BEA3110F81BD188 ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
21:59:20.0984 7496 LMouFilt - ok
21:59:21.0041 7496 [ D3760BC17E1755091B7120CF32DBF56B ] LogMeIn C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
21:59:21.0048 7496 LogMeIn - ok
21:59:21.0102 7496 [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
21:59:21.0104 7496 LSI_FC - ok
21:59:21.0122 7496 [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
21:59:21.0124 7496 LSI_SAS - ok
21:59:21.0142 7496 [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
21:59:21.0145 7496 LSI_SCSI - ok
21:59:21.0184 7496 [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv C:\Windows\system32\drivers\luafv.sys
21:59:21.0186 7496 luafv - ok
21:59:21.0364 7496 [ 5747BC465ABEA2858C5D037252AED84E ] LVUVC64 C:\Windows\system32\DRIVERS\lvuvc64.sys
21:59:21.0461 7496 LVUVC64 - ok
21:59:21.0502 7496 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
21:59:21.0503 7496 MBAMProtector - ok
21:59:21.0540 7496 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
21:59:21.0548 7496 MBAMScheduler - ok
21:59:21.0580 7496 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
21:59:21.0592 7496 MBAMService - ok
21:59:21.0660 7496 [ 79D51E7F5926E8CE1B3EBECEBAE28CFF ] mcdbus C:\Windows\system32\DRIVERS\mcdbus.sys
21:59:21.0664 7496 mcdbus - ok
21:59:21.0707 7496 [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:59:21.0710 7496 Mcx2Svc - ok
21:59:21.0735 7496 [ E4F44EC214B3E381E1FC844A02926666 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
21:59:21.0737 7496 mdmxsdk - ok
21:59:21.0759 7496 [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas C:\Windows\system32\drivers\megasas.sys
21:59:21.0761 7496 megasas - ok
21:59:21.0800 7496 [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR C:\Windows\system32\drivers\megasr.sys
21:59:21.0808 7496 MegaSR - ok
21:59:21.0889 7496 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
21:59:21.0892 7496 Microsoft Office Groove Audit Service - ok
21:59:21.0909 7496 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS C:\Windows\system32\mmcss.dll
21:59:21.0911 7496 MMCSS - ok
21:59:21.0926 7496 [ 59848D5CC74606F0EE7557983BB73C2E ] Modem C:\Windows\system32\drivers\modem.sys
21:59:21.0929 7496 Modem - ok
21:59:21.0958 7496 [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:59:21.0960 7496 monitor - ok
21:59:21.0975 7496 [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:59:21.0977 7496 mouclass - ok
21:59:22.0017 7496 [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:59:22.0019 7496 mouhid - ok
21:59:22.0042 7496 [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
21:59:22.0045 7496 MountMgr - ok
21:59:22.0106 7496 [ A35576A433F4AEB0D48976A004657CB6 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:59:22.0109 7496 MozillaMaintenance - ok
21:59:22.0147 7496 [ FC1D590039EF06A381768710E6C07E75 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
21:59:22.0151 7496 MpFilter - ok
21:59:22.0174 7496 [ F8276EB8698142884498A528DFEA8478 ] mpio C:\Windows\system32\drivers\mpio.sys
21:59:22.0177 7496 mpio - ok
21:59:22.0205 7496 [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:59:22.0207 7496 mpsdrv - ok
21:59:22.0253 7496 [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc C:\Windows\system32\mpssvc.dll
21:59:22.0265 7496 MpsSvc - ok
21:59:22.0274 7496 [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
21:59:22.0276 7496 Mraid35x - ok
21:59:22.0318 7496 [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:59:22.0322 7496 MRxDAV - ok
21:59:22.0376 7496 [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:59:22.0380 7496 mrxsmb - ok
21:59:22.0432 7496 [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:59:22.0437 7496 mrxsmb10 - ok
21:59:22.0484 7496 [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:59:22.0487 7496 mrxsmb20 - ok
21:59:22.0507 7496 [ 1AC860612B85D8E85EE257D372E39F4D ] msahci C:\Windows\system32\drivers\msahci.sys
21:59:22.0509 7496 msahci - ok
21:59:22.0520 7496 [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:59:22.0523 7496 msdsm - ok
21:59:22.0558 7496 [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC C:\Windows\System32\msdtc.exe
21:59:22.0562 7496 MSDTC - ok
21:59:22.0578 7496 [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:59:22.0580 7496 Msfs - ok
21:59:22.0619 7496 [ 00EBC952961664780D43DCA157E79B27 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:59:22.0621 7496 msisadrv - ok
21:59:22.0643 7496 [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:59:22.0648 7496 MSiSCSI - ok
21:59:22.0659 7496 msiserver - ok
21:59:22.0685 7496 [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:59:22.0687 7496 MSKSSRV - ok
21:59:22.0763 7496 [ 66238063B53E51ADDA16764BAB9A3F7C ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
21:59:22.0764 7496 MsMpSvc - ok
21:59:22.0783 7496 [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:59:22.0784 7496 MSPCLOCK - ok
21:59:22.0804 7496 [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:59:22.0806 7496 MSPQM - ok
21:59:22.0838 7496 [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:59:22.0844 7496 MsRPC - ok
21:59:22.0873 7496 [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
21:59:22.0875 7496 mssmbios - ok
21:59:22.0964 7496 MSSQL$SQLEXPRESS - ok
21:59:23.0083 7496 [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 c:\Program Files (x86)\Microsoft SQL Server\100\Shared\SQLADHLP.EXE
21:59:23.0085 7496 MSSQLServerADHelper100 - ok
21:59:23.0117 7496 [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:59:23.0118 7496 MSTEE - ok
21:59:23.0318 7496 [ CB4A082AF58D1A0969F931816D5CFB05 ] msvsmon90 C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe
21:59:23.0400 7496 msvsmon90 - ok
21:59:23.0456 7496 [ 0CC49F78D8ACA0877D885F149084E543 ] Mup C:\Windows\system32\Drivers\mup.sys
21:59:23.0458 7496 Mup - ok
21:59:23.0517 7496 [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent C:\Windows\system32\qagentRT.dll
21:59:23.0526 7496 napagent - ok
21:59:23.0584 7496 [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:59:23.0588 7496 NativeWifiP - ok
21:59:23.0658 7496 [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:59:23.0669 7496 NDIS - ok
21:59:23.0709 7496 [ 64DF698A425478E321981431AC171334 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:59:23.0711 7496 NdisTapi - ok
21:59:23.0730 7496 [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:59:23.0732 7496 Ndisuio - ok
21:59:23.0774 7496 [ F8158771905260982CE724076419EF19 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:59:23.0777 7496 NdisWan - ok
21:59:23.0812 7496 [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:59:23.0814 7496 NDProxy - ok
21:59:23.0832 7496 [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:59:23.0834 7496 NetBIOS - ok
21:59:23.0880 7496 [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
21:59:23.0884 7496 netbt - ok
21:59:23.0912 7496 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon C:\Windows\system32\lsass.exe
21:59:23.0914 7496 Netlogon - ok
21:59:23.0952 7496 [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman C:\Windows\System32\netman.dll
21:59:23.0959 7496 Netman - ok
21:59:23.0984 7496 [ 7846D0136CC2B264926A73047BA7688A ] netprofm C:\Windows\System32\netprofm.dll
21:59:23.0991 7496 netprofm - ok
21:59:24.0038 7496 [ 74751DDA198165947FD7454D83F49825 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:59:24.0041 7496 NetTcpPortSharing - ok
21:59:24.0059 7496 [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
21:59:24.0061 7496 nfrd960 - ok
21:59:24.0109 7496 [ 8FB3C853E886E1E4D57271672486111C ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
21:59:24.0112 7496 NisDrv - ok
21:59:24.0166 7496 [ 869A808253726EA11939EC4FE76346A4 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe
21:59:24.0169 7496 NisSrv - ok
21:59:24.0188 7496 [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc C:\Windows\System32\nlasvc.dll
21:59:24.0194 7496 NlaSvc - ok
21:59:24.0232 7496 [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:59:24.0234 7496 Npfs - ok
21:59:24.0258 7496 [ ACB62BAA1C319B17752553DF3026EEEB ] nsi C:\Windows\system32\nsisvc.dll
21:59:24.0260 7496 nsi - ok
21:59:24.0279 7496 [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:59:24.0281 7496 nsiproxy - ok
21:59:24.0357 7496 [ 2ACCAA3C3C55370A32F17B3595E1A217 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:59:24.0379 7496 Ntfs - ok
21:59:24.0407 7496 [ DD5D684975352B85B52E3FD5347C20CB ] Null C:\Windows\system32\drivers\Null.sys
21:59:24.0409 7496 Null - ok
21:59:24.0443 7496 [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:59:24.0447 7496 nvraid - ok
21:59:24.0457 7496 [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:59:24.0459 7496 nvstor - ok
21:59:24.0492 7496 [ 19067CA93075EF4823E3938A686F532F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:59:24.0495 7496 nv_agp - ok
21:59:24.0503 7496 NwlnkFlt - ok
21:59:24.0516 7496 NwlnkFwd - ok
21:59:24.0606 7496 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
21:59:24.0615 7496 odserv - ok
21:59:24.0661 7496 [ B5B1CE65AC15BBD11C0619E3EF7CFC28 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
21:59:24.0663 7496 ohci1394 - ok
21:59:24.0715 7496 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:59:24.0718 7496 ose - ok
21:59:24.0793 7496 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc C:\Windows\system32\p2psvc.dll
21:59:24.0807 7496 p2pimsvc - ok
21:59:24.0825 7496 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc C:\Windows\system32\p2psvc.dll
21:59:24.0834 7496 p2psvc - ok
21:59:24.0878 7496 [ 4C6A7FD04DDF4DB88791048382E3EDB1 ] Parport C:\Windows\system32\DRIVERS\parport.sys
21:59:24.0881 7496 Parport - ok
21:59:24.0920 7496 [ B43751085E2ABE389DA466BC62A4B987 ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:59:24.0923 7496 partmgr - ok
21:59:24.0989 7496 [ 55223EEFABFDB84A926515FEBAB50D9A ] pbfilter C:\Program Files\PeerBlock\pbfilter.sys
21:59:24.0990 7496 pbfilter - ok
21:59:25.0024 7496 [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc C:\Windows\System32\pcasvc.dll
21:59:25.0027 7496 PcaSvc - ok
21:59:25.0070 7496 [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci C:\Windows\system32\drivers\pci.sys
21:59:25.0074 7496 pci - ok
21:59:25.0127 7496 [ 2657F6C0B78C36D95034BE109336E382 ] pciide C:\Windows\system32\drivers\pciide.sys
21:59:25.0128 7496 pciide - ok
21:59:25.0155 7496 [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
21:59:25.0160 7496 pcmcia - ok
21:59:25.0198 7496 [ 58865916F53592A61549B04941BFD80D ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:59:25.0210 7496 PEAUTH - ok
21:59:25.0293 7496 [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost C:\Windows\SysWow64\perfhost.exe
21:59:25.0296 7496 PerfHost - ok
21:59:25.0373 7496 [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla C:\Windows\system32\pla.dll
21:59:25.0401 7496 pla - ok
21:59:25.0445 7496 [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:59:25.0453 7496 PlugPlay - ok
21:59:25.0475 7496 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
21:59:25.0484 7496 PNRPAutoReg - ok
21:59:25.0504 7496 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc C:\Windows\system32\p2psvc.dll
21:59:25.0513 7496 PNRPsvc - ok
21:59:25.0569 7496 [ A6D06378F37BDBA0C0019294C2AABBD0 ] Point64 C:\Windows\system32\DRIVERS\point64k.sys
21:59:25.0571 7496 Point64 - ok
21:59:25.0625 7496 [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:59:25.0635 7496 PolicyAgent - ok
21:59:25.0680 7496 [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:59:25.0683 7496 PptpMiniport - ok
21:59:25.0715 7496 [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor C:\Windows\system32\DRIVERS\processr.sys
21:59:25.0716 7496 Processor - ok
21:59:25.0750 7496 [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc C:\Windows\system32\profsvc.dll
21:59:25.0754 7496 ProfSvc - ok
21:59:25.0779 7496 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe
21:59:25.0781 7496 ProtectedStorage - ok
21:59:25.0816 7496 [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched C:\Windows\system32\DRIVERS\pacer.sys
21:59:25.0817 7496 PSched - ok
21:59:25.0847 7496 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
21:59:25.0849 7496 PxHlpa64 - ok
21:59:25.0907 7496 [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300 C:\Windows\system32\drivers\ql2300.sys
21:59:25.0926 7496 ql2300 - ok
21:59:25.0936 7496 [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
21:59:25.0939 7496 ql40xx - ok
21:59:25.0983 7496 [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE C:\Windows\system32\qwave.dll
21:59:25.0990 7496 QWAVE - ok
21:59:26.0021 7496 [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:59:26.0023 7496 QWAVEdrv - ok
21:59:26.0040 7496 [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:59:26.0042 7496 RasAcd - ok
21:59:26.0086 7496 [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto C:\Windows\System32\rasauto.dll
21:59:26.0090 7496 RasAuto - ok
21:59:26.0122 7496 [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:59:26.0125 7496 Rasl2tp - ok
21:59:26.0151 7496 [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan C:\Windows\System32\rasmans.dll
21:59:26.0158 7496 RasMan - ok
21:59:26.0207 7496 [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:59:26.0209 7496 RasPppoe - ok
21:59:26.0254 7496 [ C6A593B51F34C33E5474539544072527 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:59:26.0256 7496 RasSstp - ok
21:59:26.0287 7496 [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:59:26.0293 7496 rdbss - ok
21:59:26.0323 7496 [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:59:26.0325 7496 RDPCDD - ok
21:59:26.0361 7496 [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
21:59:26.0367 7496 rdpdr - ok
21:59:26.0375 7496 [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:59:26.0377 7496 RDPENCDD - ok
21:59:26.0428 7496 [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:59:26.0434 7496 RDPWD - ok
21:59:26.0452 7496 [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:59:26.0456 7496 RemoteAccess - ok
21:59:26.0492 7496 [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:59:26.0498 7496 RemoteRegistry - ok
21:59:26.0537 7496 [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator C:\Windows\system32\locator.exe
21:59:26.0539 7496 RpcLocator - ok
21:59:26.0590 7496 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs C:\Windows\system32\rpcss.dll
21:59:26.0598 7496 RpcSs - ok
21:59:26.0627 7496 [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:59:26.0629 7496 rspndr - ok
21:59:26.0659 7496 RSUSBSTOR - ok
21:59:26.0701 7496 [ F8DA8FC39CE5859C0D8C0FE6524CE465 ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys
21:59:26.0704 7496 RTHDMIAzAudService - ok
21:59:26.0712 7496 Rts516xIR - ok
21:59:26.0737 7496 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs C:\Windows\system32\lsass.exe
21:59:26.0738 7496 SamSs - ok
21:59:26.0770 7496 [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:59:26.0773 7496 sbp2port - ok
21:59:26.0818 7496 [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:59:26.0823 7496 SCardSvr - ok
21:59:26.0884 7496 [ 0F838C811AD295D2A4489B9993096C63 ] Schedule C:\Windows\system32\schedsvc.dll
21:59:26.0899 7496 Schedule - ok
21:59:26.0938 7496 [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc C:\Windows\System32\certprop.dll
21:59:26.0940 7496 SCPolicySvc - ok
21:59:26.0958 7496 [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:59:26.0963 7496 SDRSVC - ok
21:59:26.0977 7496 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:59:26.0979 7496 secdrv - ok
21:59:27.0015 7496 [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon C:\Windows\system32\seclogon.dll
21:59:27.0018 7496 seclogon - ok
21:59:27.0031 7496 [ 90973A64B96CD647FF81C79443618EED ] SENS C:\Windows\system32\sens.dll
21:59:27.0034 7496 SENS - ok
21:59:27.0048 7496 [ 2449316316411D65BD2C761A6FFB2CE2 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
21:59:27.0050 7496 Serenum - ok
21:59:27.0063 7496 [ 4B438170BE2FC8E0BD35EE87A960F84F ] Serial C:\Windows\system32\DRIVERS\serial.sys
21:59:27.0066 7496 Serial - ok
21:59:27.0098 7496 [ A842F04833684BCEEA7336211BE478DF ] sermouse C:\Windows\system32\drivers\sermouse.sys
21:59:27.0100 7496 sermouse - ok
21:59:27.0142 7496 [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv C:\Windows\system32\sessenv.dll
21:59:27.0145 7496 SessionEnv - ok
21:59:27.0153 7496 [ 14D4B4465193A87C127933978E8C4106 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:59:27.0155 7496 sffdisk - ok
21:59:27.0164 7496 [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:59:27.0166 7496 sffp_mmc - ok
21:59:27.0179 7496 [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:59:27.0180 7496 sffp_sd - ok
21:59:27.0190 7496 [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
21:59:27.0192 7496 sfloppy - ok
21:59:27.0215 7496 [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:59:27.0223 7496 SharedAccess - ok
21:59:27.0280 7496 [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:59:27.0287 7496 ShellHWDetection - ok
21:59:27.0295 7496 [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
21:59:27.0298 7496 SiSRaid2 - ok
21:59:27.0331 7496 [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
21:59:27.0334 7496 SiSRaid4 - ok
21:59:27.0393 7496 [ 3E587DBBDFF938DDE5D4CE4047BE9041 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:59:27.0397 7496 SkypeUpdate - ok
21:59:27.0496 7496 [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc C:\Windows\system32\SLsvc.exe
21:59:27.0537 7496 slsvc - ok
21:59:27.0584 7496 [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify C:\Windows\system32\SLUINotify.dll
21:59:27.0588 7496 SLUINotify - ok
21:59:27.0637 7496 [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:59:27.0640 7496 Smb - ok
21:59:27.0683 7496 [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:59:27.0685 7496 SNMPTRAP - ok
21:59:27.0724 7496 [ 386C3C63F00A7040C7EC5E384217E89D ] spldr C:\Windows\system32\drivers\spldr.sys
21:59:27.0726 7496 spldr - ok
21:59:27.0778 7496 [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler C:\Windows\System32\spoolsv.exe
21:59:27.0785 7496 Spooler - ok
21:59:27.0828 7496 [ EB2FD937449B7ACEB39372F875EB8E78 ] SQLAgent$SQLEXPRESS c:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE
21:59:27.0835 7496 SQLAgent$SQLEXPRESS - ok
21:59:27.0915 7496 [ 99DE6ACFA5CA83FAD6A765C81C6F129F ] SQLBrowser c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
21:59:27.0920 7496 SQLBrowser - ok
21:59:27.0990 7496 [ 6D65985945B03CA59B67D0B73702FC7B ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
21:59:27.0994 7496 SQLWriter - ok
21:59:28.0051 7496 [ 880A57FCCB571EBD063D4DD50E93E46D ] srv C:\Windows\system32\DRIVERS\srv.sys
21:59:28.0059 7496 srv - ok
21:59:28.0105 7496 [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:59:28.0109 7496 srv2 - ok
21:59:28.0133 7496 [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:59:28.0137 7496 srvnet - ok
21:59:28.0179 7496 [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:59:28.0184 7496 SSDPSRV - ok
21:59:28.0225 7496 [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:59:28.0229 7496 SstpSvc - ok
21:59:28.0300 7496 [ EA8F41484CCC5BA6A1455C2AD3D1BE3C ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
21:59:28.0304 7496 ssudmdm - ok
21:59:28.0361 7496 [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc C:\Windows\System32\wiaservc.dll
21:59:28.0371 7496 stisvc - ok
21:59:28.0401 7496 [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum C:\Windows\system32\DRIVERS\swenum.sys
21:59:28.0403 7496 swenum - ok
21:59:28.0506 7496 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
21:59:28.0517 7496 SwitchBoard - ok
21:59:28.0575 7496 [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv C:\Windows\System32\swprv.dll
21:59:28.0585 7496 swprv - ok
21:59:28.0603 7496 [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
21:59:28.0605 7496 Symc8xx - ok
21:59:28.0615 7496 [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
21:59:28.0617 7496 Sym_hi - ok
21:59:28.0627 7496 [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
21:59:28.0629 7496 Sym_u3 - ok
21:59:28.0678 7496 [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain C:\Windows\system32\sysmain.dll
21:59:28.0695 7496 SysMain - ok
21:59:28.0716 7496 [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:59:28.0720 7496 TabletInputService - ok
21:59:28.0772 7496 [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv C:\Windows\System32\tapisrv.dll
21:59:28.0779 7496 TapiSrv - ok
21:59:28.0807 7496 [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS C:\Windows\System32\tbssvc.dll
21:59:28.0810 7496 TBS - ok
21:59:28.0879 7496&

SuperDave · « **Reply #19 on:** September 01, 2013, 01:25:34 PM »

Please run AdwCleaner and MBAM again and post the logs.

zulubanshee · « **Reply #20 on:** September 02, 2013, 07:35:16 PM »

# AdwCleaner v3.002 - Report created 02/09/2013 at 21:27:44
# Updated 01/09/2013 by Xplode
# Operating System : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Username : doug - DOUG-PC
# Running from : C:\Users\doug\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16502

-\\ Mozilla Firefox v23.0.1 (en-US)

[ File : C:\Users\doug\AppData\Roaming\Mozilla\Firefox\Profiles\drledbvc.default-1363375022659\prefs.js ]

-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\doug\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [12777 octets] - [28/08/2013 20:54:28]
AdwCleaner[R1].txt - [1116 octets] - [02/09/2013 21:24:16]
AdwCleaner[S0].txt - [9783 octets] - [28/08/2013 21:01:25]
AdwCleaner[S1].txt - [1040 octets] - [02/09/2013 21:27:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1100 octets] ##########

zulubanshee · « **Reply #21 on:** September 02, 2013, 07:53:21 PM »

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.09.02.09

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
doug :: DOUG-PC [administrator]

9/2/2013 9:39:25 PM
mbam-log-2013-09-02 (21-39-25).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 254634
Time elapsed: 13 minute(s), 16 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

SuperDave · « **Reply #22 on:** September 02, 2013, 07:57:02 PM »

Does this happen only when your browser is open? What browser are you using?

zulubanshee · « **Reply #23 on:** September 02, 2013, 09:13:22 PM »

I always have a browser open, actually I always have 2 open:

Firefox
plus i use a browser based on Chrome called Comodo Dragon (because I cannot install Chrome on my machine for reasons I cannot fathom).

,

Should I try shutting the browsers down to see if it breaks it off?

zulubanshee · « **Reply #24 on:** September 02, 2013, 09:25:07 PM »

It happened again so I shut down my browsers and the sound persisted.

SuperDave · « **Reply #25 on:** September 03, 2013, 04:50:04 PM »

Please uninstall Firefox and see if that helps.

zulubanshee · « **Reply #26 on:** September 04, 2013, 10:49:13 AM »

No luck.
I have What's Running set up so the next time it happens I'll be able to see where it's connecting.

zulubanshee · « **Reply #27 on:** September 04, 2013, 11:01:24 AM »

Found this weird thing in What's running Startup folder. See attached pic. I do have the Dropbox plugin on my computer. The chinese writing is scary.

[recovering disk space, attachment deleted by admin]

SuperDave · « **Reply #28 on:** September 04, 2013, 05:29:47 PM »

Quote from: zulubanshee on September 04, 2013, 11:01:24 AM

Found this weird thing in What's running Startup folder. See attached pic. I do have the Dropbox plugin on my computer. The chinese writing is scary.

That is weird. Can you disable it?

zulubanshee · « **Reply #29 on:** September 04, 2013, 05:39:15 PM »

I disabled it and I still get it! This is getting creepy.

Computer Hope Forum

News:

Author Topic: Computer playing commercials several times a day (Read 28094 times)

SuperDave

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

SuperDave

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

SuperDave

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

SuperDave

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

SuperDave

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day

SuperDave

Re: Computer playing commercials several times a day

zulubanshee

Re: Computer playing commercials several times a day