dslreports logo
site
    All Forums Hot Topics Gallery
spc
Search Topic:
uniqs
3316
share rss forum feed


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast
reply to speedtennis

Re: [Trojan] Laptop Infected with Audio Advertisements

Sorry for the confusion on the MBAR logs.I saw both and was referring to the last one that was clean.

One of the items that MBAR removed mention a forged physical sector. I want to be sure that is not affecting us.

Please download the TDSS Rootkit Removing Tool (TDSSKiller.zip) and save it to your Desktop
Be sure to print out and follow all instructions for performing a scan or refer to these instructions with screenshots.



  • Extract (unzip) the file to your desktop and make sure TDSSKiller.exe (the contents of the zipped file) is on the Desktop itself, not within a folder on the Desktop.
  • If you don't have an extracting program, you can download TDSSKiller.exe and use that instead.



  • Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
  • Vista/Windows 7 users right-click and select Run As Administrator.
  • When the program opens, click the Start Scan button.
  • Do not use the computer during the scan
  • If the scan completes with nothing found, click Close to exit.
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  • Ensure Cure is selected, then click Continue > Reboot now to finish the cleaning process.
    Note: If 'Suspicious' objects are detected, Skip will be the default selection.
  • A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
  • Copy and paste the contents of that file in your next reply.



-- If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.


--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum


speedtennis

@comcast.net

I downloaded TDSSKiller.exe from your second link, because the first link opened a Kaspersky website where I could find nothing labeled TDSS.

I ran the scan and it found the following:

Hidden file
Service: Akamai
Suspicious Object, medium risk

However there is no "cure" option to select; only three options: 1.skip 2.save to quarantine 3.delete

Which should I choose?

Thanks



LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast
reply to speedtennis

Go ahead and selete the 'Delete' opption.

Be sure to post the log in this thread.

lpp

PS: For reference, here is the correct link to the TDSSKiller page. Links are in item 1 on that page.

»support.kaspersky.com/5350?el=88446



speedtennis

@comcast.net

downloadTDSSKiller.2···_log.txt 270,222 bytes
TDSSKiller log (two scans)
Here is the TDSS log.

FYI, I had to run the scan again, because I accidentally selected "Skip" after the first scan.


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast
reply to speedtennis

20:23:01.0033 3900 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:23:01.0641 3900 ============================================================
20:23:01.0641 3900 Current date / time: 2013/04/30 20:23:01.0641
20:23:01.0641 3900 SystemInfo:
20:23:01.0641 3900
20:23:01.0641 3900 OS Version: 6.1.7601 ServicePack: 1.0
20:23:01.0641 3900 Product type: Workstation
20:23:01.0641 3900 ComputerName: BRAD-LAPTOP
20:23:01.0641 3900 UserName: Brad
20:23:01.0641 3900 Windows directory: C:\Windows
20:23:01.0641 3900 System windows directory: C:\Windows
20:23:01.0641 3900 Running under WOW64
20:23:01.0641 3900 Processor architecture: Intel x64
20:23:01.0641 3900 Number of processors: 2
20:23:01.0641 3900 Page size: 0x1000
20:23:01.0641 3900 Boot type: Normal boot
20:23:01.0641 3900 ============================================================
20:23:02.0749 3900 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:23:02.0749 3900 ============================================================
20:23:02.0749 3900 \Device\Harddisk0\DR0:
20:23:02.0749 3900 MBR partitions:
20:23:02.0749 3900 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800
20:23:02.0749 3900 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x1B621800
20:23:02.0749 3900 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1B685800, BlocksNum 0x1B0C000
20:23:02.0749 3900 \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x1D191800, BlocksNum 0x33970
20:23:02.0749 3900 ============================================================
20:23:02.0764 3900 C: \Device\Harddisk0\DR0\Partition2
20:23:02.0811 3900 D: \Device\Harddisk0\DR0\Partition3
20:23:02.0827 3900 E: \Device\Harddisk0\DR0\Partition4
20:23:02.0827 3900 ============================================================
20:23:02.0827 3900 Initialize success
20:23:02.0827 3900 ============================================================
20:23:48.0475 0364 ============================================================
20:23:48.0475 0364 Scan started
20:23:48.0475 0364 Mode: Manual;
20:23:48.0475 0364 ============================================================
20:23:49.0738 0364 ================ Scan system memory ========================
20:23:49.0738 0364 System memory - ok
20:23:49.0738 0364 ================ Scan services =============================
20:23:49.0941 0364 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:23:49.0941 0364 1394ohci - ok
20:23:50.0003 0364 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:23:50.0003 0364 ACPI - ok
20:23:50.0035 0364 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:23:50.0035 0364 AcpiPmi - ok
20:23:50.0253 0364 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
20:23:50.0269 0364 AdobeFlashPlayerUpdateSvc - ok
20:23:50.0315 0364 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
20:23:50.0331 0364 adp94xx - ok
20:23:50.0378 0364 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
20:23:50.0378 0364 adpahci - ok
20:23:50.0393 0364 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
20:23:50.0409 0364 adpu320 - ok
20:23:50.0440 0364 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:23:50.0440 0364 AeLookupSvc - ok
20:23:50.0534 0364 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe
20:23:50.0534 0364 AESTFilters - ok
20:23:50.0596 0364 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
20:23:50.0612 0364 AFD - ok
20:23:50.0674 0364 [ B65F8DBA54F251906BBE8611B5A0E7AB ] AgereModemAudio C:\Program Files\LSI SoftModem\agr64svc.exe
20:23:50.0674 0364 AgereModemAudio - ok
20:23:50.0737 0364 [ AF4748EF93416159459769A24A0053AF ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys
20:23:50.0752 0364 AgereSoftModem - ok
20:23:50.0815 0364 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:23:50.0815 0364 agp440 - ok
20:23:51.0017 0364 [ C7074BD8D4B8F564859ED373433030AE ] Akamai c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll
20:23:51.0017 0364 Suspicious file (Hidden): c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll. md5: C7074BD8D4B8F564859ED373433030AE
20:23:51.0017 0364 Akamai ( HiddenFile.Multi.Generic ) - warning
20:23:51.0017 0364 Akamai - detected HiddenFile.Multi.Generic (1)
20:23:51.0095 0364 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
20:23:51.0095 0364 ALG - ok
20:23:51.0127 0364 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
20:23:51.0127 0364 aliide - ok
20:23:51.0205 0364 [ BCC32BF5EBB5DFD4380FA053D3651949 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
20:23:51.0220 0364 AMD External Events Utility - ok
20:23:51.0220 0364 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
20:23:51.0220 0364 amdide - ok
20:23:51.0283 0364 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
20:23:51.0283 0364 AmdK8 - ok
20:23:51.0314 0364 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
20:23:51.0314 0364 AmdPPM - ok
20:23:51.0329 0364 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:23:51.0329 0364 amdsata - ok
20:23:51.0361 0364 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
20:23:51.0376 0364 amdsbs - ok
20:23:51.0392 0364 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:23:51.0392 0364 amdxata - ok
20:23:51.0454 0364 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
20:23:51.0470 0364 AppID - ok
20:23:51.0501 0364 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:23:51.0501 0364 AppIDSvc - ok
20:23:51.0548 0364 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
20:23:51.0548 0364 Appinfo - ok
20:23:51.0657 0364 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
20:23:51.0657 0364 Apple Mobile Device - ok
20:23:51.0704 0364 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
20:23:51.0704 0364 arc - ok
20:23:51.0735 0364 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
20:23:51.0735 0364 arcsas - ok
20:23:51.0782 0364 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:23:51.0782 0364 AsyncMac - ok
20:23:51.0829 0364 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
20:23:51.0829 0364 atapi - ok
20:23:51.0922 0364 [ F8633CDD09647A64EE8DB550630427FF ] athr C:\Windows\system32\DRIVERS\athrx.sys
20:23:51.0953 0364 athr - ok
20:23:52.0109 0364 [ A29087680A1C3B049E3C05438E8FF2B8 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
20:23:52.0172 0364 atikmdag - ok
20:23:52.0219 0364 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
20:23:52.0219 0364 AtiPcie - ok
20:23:52.0281 0364 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:23:52.0297 0364 AudioEndpointBuilder - ok
20:23:52.0312 0364 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
20:23:52.0312 0364 AudioSrv - ok
20:23:52.0359 0364 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:23:52.0375 0364 AxInstSV - ok
20:23:52.0421 0364 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
20:23:52.0437 0364 b06bdrv - ok
20:23:52.0484 0364 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
20:23:52.0484 0364 b57nd60a - ok
20:23:52.0546 0364 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
20:23:52.0546 0364 BDESVC - ok
20:23:52.0562 0364 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
20:23:52.0562 0364 Beep - ok
20:23:52.0624 0364 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
20:23:52.0640 0364 BFE - ok
20:23:52.0827 0364 [ A45BE4E091636F6C86D6E4FC945D5A26 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\BASHDefs\20120928.001\BHDrvx64.sys
20:23:52.0843 0364 BHDrvx64 - ok
20:23:52.0889 0364 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
20:23:52.0905 0364 BITS - ok
20:23:52.0952 0364 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
20:23:52.0952 0364 blbdrive - ok
20:23:53.0061 0364 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
20:23:53.0061 0364 Bonjour Service - ok
20:23:53.0123 0364 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:23:53.0123 0364 bowser - ok
20:23:53.0170 0364 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:23:53.0170 0364 BrFiltLo - ok
20:23:53.0217 0364 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:23:53.0217 0364 BrFiltUp - ok
20:23:53.0264 0364 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
20:23:53.0264 0364 Browser - ok
20:23:53.0295 0364 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:23:53.0311 0364 Brserid - ok
20:23:53.0342 0364 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:23:53.0342 0364 BrSerWdm - ok
20:23:53.0373 0364 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:23:53.0373 0364 BrUsbMdm - ok
20:23:53.0404 0364 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:23:53.0404 0364 BrUsbSer - ok
20:23:53.0435 0364 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
20:23:53.0451 0364 BTHMODEM - ok
20:23:53.0482 0364 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
20:23:53.0482 0364 bthserv - ok
20:23:53.0576 0364 [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_N360 C:\Windows\system32\drivers\N360x64\0604000.009\ccSetx64.sys
20:23:53.0576 0364 ccSet_N360 - ok
20:23:53.0591 0364 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:23:53.0591 0364 cdfs - ok
20:23:53.0638 0364 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys
20:23:53.0638 0364 cdrom - ok
20:23:53.0701 0364 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
20:23:53.0701 0364 CertPropSvc - ok
20:23:53.0732 0364 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
20:23:53.0747 0364 circlass - ok
20:23:53.0763 0364 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
20:23:53.0779 0364 CLFS - ok
20:23:53.0841 0364 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:23:53.0841 0364 clr_optimization_v2.0.50727_32 - ok
20:23:53.0903 0364 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:23:53.0903 0364 clr_optimization_v2.0.50727_64 - ok
20:23:53.0997 0364 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:23:54.0013 0364 clr_optimization_v4.0.30319_32 - ok
20:23:54.0059 0364 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:23:54.0059 0364 clr_optimization_v4.0.30319_64 - ok
20:23:54.0091 0364 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
20:23:54.0091 0364 CmBatt - ok
20:23:54.0137 0364 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:23:54.0137 0364 cmdide - ok
20:23:54.0184 0364 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
20:23:54.0200 0364 CNG - ok
20:23:54.0262 0364 [ C7A0E61D5714AC20DE52D4F66EC773B8 ] Com4QLBEx C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
20:23:54.0262 0364 Com4QLBEx - ok
20:23:54.0293 0364 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
20:23:54.0309 0364 Compbatt - ok
20:23:54.0356 0364 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
20:23:54.0356 0364 CompositeBus - ok
20:23:54.0387 0364 COMSysApp - ok
20:23:54.0418 0364 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
20:23:54.0418 0364 crcdisk - ok
20:23:54.0449 0364 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:23:54.0449 0364 CryptSvc - ok
20:23:54.0512 0364 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:23:54.0527 0364 DcomLaunch - ok
20:23:54.0559 0364 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
20:23:54.0559 0364 defragsvc - ok
20:23:54.0605 0364 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:23:54.0621 0364 DfsC - ok
20:23:54.0652 0364 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
20:23:54.0652 0364 Dhcp - ok
20:23:54.0668 0364 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
20:23:54.0668 0364 discache - ok
20:23:54.0715 0364 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
20:23:54.0715 0364 Disk - ok
20:23:54.0761 0364 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:23:54.0777 0364 Dnscache - ok
20:23:54.0824 0364 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:23:54.0824 0364 dot3svc - ok
20:23:54.0871 0364 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
20:23:54.0871 0364 DPS - ok
20:23:54.0917 0364 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:23:54.0917 0364 drmkaud - ok
20:23:54.0980 0364 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:23:54.0995 0364 DXGKrnl - ok
20:23:55.0058 0364 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
20:23:55.0058 0364 EapHost - ok
20:23:55.0151 0364 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
20:23:55.0198 0364 ebdrv - ok
20:23:55.0261 0364 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
20:23:55.0276 0364 eeCtrl - ok
20:23:55.0307 0364 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
20:23:55.0323 0364 EFS - ok
20:23:55.0417 0364 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:23:55.0432 0364 ehRecvr - ok
20:23:55.0463 0364 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
20:23:55.0463 0364 ehSched - ok
20:23:55.0526 0364 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
20:23:55.0541 0364 elxstor - ok
20:23:55.0604 0364 EraserUtilRebootDrv - ok
20:23:55.0635 0364 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:23:55.0635 0364 ErrDev - ok
20:23:55.0713 0364 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
20:23:55.0713 0364 EventSystem - ok
20:23:55.0744 0364 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
20:23:55.0744 0364 exfat - ok
20:23:55.0775 0364 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:23:55.0775 0364 fastfat - ok
20:23:55.0853 0364 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
20:23:55.0869 0364 Fax - ok
20:23:55.0900 0364 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:23:55.0900 0364 fdc - ok
20:23:55.0947 0364 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
20:23:55.0947 0364 fdPHost - ok
20:23:55.0963 0364 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
20:23:55.0963 0364 FDResPub - ok
20:23:55.0978 0364 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:23:55.0978 0364 FileInfo - ok
20:23:55.0994 0364 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:23:55.0994 0364 Filetrace - ok
20:23:56.0009 0364 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:23:56.0009 0364 flpydisk - ok
20:23:56.0041 0364 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:23:56.0056 0364 FltMgr - ok
20:23:56.0103 0364 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
20:23:56.0119 0364 FontCache - ok
20:23:56.0181 0364 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:23:56.0181 0364 FontCache3.0.0.0 - ok
20:23:56.0197 0364 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:23:56.0212 0364 FsDepends - ok
20:23:56.0228 0364 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:23:56.0243 0364 Fs_Rec - ok
20:23:56.0290 0364 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:23:56.0290 0364 fvevol - ok
20:23:56.0337 0364 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
20:23:56.0337 0364 gagp30kx - ok
20:23:56.0446 0364 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
20:23:56.0446 0364 GamesAppService - ok
20:23:56.0493 0364 [ AF4DEE5531395DEE72B35B36C9671FD0 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:23:56.0493 0364 GEARAspiWDM - ok
20:23:56.0555 0364 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
20:23:56.0571 0364 gpsvc - ok
20:23:56.0602 0364 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:23:56.0602 0364 hcw85cir - ok
20:23:56.0649 0364 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:23:56.0665 0364 HdAudAddService - ok
20:23:56.0680 0364 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
20:23:56.0680 0364 HDAudBus - ok
20:23:56.0711 0364 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
20:23:56.0711 0364 HidBatt - ok
20:23:56.0743 0364 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
20:23:56.0743 0364 HidBth - ok
20:23:56.0758 0364 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
20:23:56.0758 0364 HidIr - ok
20:23:56.0789 0364 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
20:23:56.0789 0364 hidserv - ok
20:23:56.0836 0364 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:23:56.0836 0364 HidUsb - ok
20:23:56.0883 0364 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:23:56.0883 0364 hkmsvc - ok
20:23:56.0930 0364 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:23:56.0930 0364 HomeGroupListener - ok
20:23:56.0977 0364 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:23:56.0992 0364 HomeGroupProvider - ok
20:23:57.0086 0364 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
20:23:57.0086 0364 HP Support Assistant Service - ok
20:23:57.0133 0364 [ 9AF482D058BE59CC28BCE52E7C4B747C ] HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
20:23:57.0133 0364 HpqKbFiltr - ok
20:23:57.0242 0364 [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
20:23:57.0257 0364 hpqwmiex - ok
20:23:57.0320 0364 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:23:57.0320 0364 HpSAMD - ok
20:23:57.0398 0364 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:23:57.0413 0364 HTTP - ok
20:23:57.0445 0364 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:23:57.0445 0364 hwpolicy - ok
20:23:57.0507 0364 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
20:23:57.0523 0364 i8042prt - ok
20:23:57.0569 0364 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:23:57.0585 0364 iaStorV - ok
20:23:57.0663 0364 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
20:23:57.0663 0364 IDriverT - ok
20:23:57.0772 0364 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:23:57.0772 0364 idsvc - ok
20:23:57.0866 0364 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\IPSDefs\20121017.001\IDSvia64.sys
20:23:57.0881 0364 IDSVia64 - ok
20:23:58.0053 0364 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
20:23:58.0147 0364 igfx - ok
20:23:58.0178 0364 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
20:23:58.0178 0364 iirsp - ok
20:23:58.0240 0364 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
20:23:58.0256 0364 IKEEXT - ok
20:23:58.0287 0364 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
20:23:58.0287 0364 intelide - ok
20:23:58.0318 0364 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:23:58.0318 0364 intelppm - ok
20:23:58.0349 0364 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:23:58.0349 0364 IPBusEnum - ok
20:23:58.0381 0364 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:23:58.0381 0364 IpFilterDriver - ok
20:23:58.0412 0364 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:23:58.0427 0364 iphlpsvc - ok
20:23:58.0474 0364 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:23:58.0474 0364 IPMIDRV - ok
20:23:58.0505 0364 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:23:58.0505 0364 IPNAT - ok
20:23:58.0583 0364 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
20:23:58.0599 0364 iPod Service - ok
20:23:58.0630 0364 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:23:58.0630 0364 IRENUM - ok
20:23:58.0677 0364 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:23:58.0677 0364 isapnp - ok
20:23:58.0708 0364 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:23:58.0708 0364 iScsiPrt - ok
20:23:58.0739 0364 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
20:23:58.0739 0364 kbdclass - ok
20:23:58.0771 0364 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
20:23:58.0771 0364 kbdhid - ok
20:23:58.0802 0364 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
20:23:58.0802 0364 KeyIso - ok
20:23:58.0833 0364 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:23:58.0833 0364 KSecDD - ok
20:23:58.0880 0364 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:23:58.0880 0364 KSecPkg - ok
20:23:58.0911 0364 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
20:23:58.0911 0364 ksthunk - ok
20:23:58.0942 0364 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
20:23:58.0942 0364 KtmRm - ok
20:23:58.0989 0364 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
20:23:58.0989 0364 LanmanServer - ok
20:23:59.0036 0364 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:23:59.0036 0364 LanmanWorkstation - ok
20:23:59.0098 0364 [ 07B1888209C54B675FFCCBDE9F06D2C6 ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
20:23:59.0098 0364 LightScribeService - ok
20:23:59.0114 0364 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:23:59.0114 0364 lltdio - ok
20:23:59.0145 0364 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:23:59.0145 0364 lltdsvc - ok
20:23:59.0161 0364 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:23:59.0161 0364 lmhosts - ok
20:23:59.0223 0364 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
20:23:59.0223 0364 LSI_FC - ok
20:23:59.0254 0364 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
20:23:59.0254 0364 LSI_SAS - ok
20:23:59.0270 0364 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:23:59.0270 0364 LSI_SAS2 - ok
20:23:59.0285 0364 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:23:59.0285 0364 LSI_SCSI - ok
20:23:59.0332 0364 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
20:23:59.0332 0364 luafv - ok
--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast
reply to speedtennis

20:23:59.0395 0364 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
20:23:59.0395 0364 MBAMProtector - ok
20:23:59.0457 0364 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
20:23:59.0457 0364 MBAMScheduler - ok
20:23:59.0488 0364 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
20:23:59.0488 0364 MBAMService - ok
20:23:59.0519 0364 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:23:59.0535 0364 Mcx2Svc - ok
20:23:59.0551 0364 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
20:23:59.0551 0364 megasas - ok
20:23:59.0582 0364 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
20:23:59.0597 0364 MegaSR - ok
20:23:59.0660 0364 [ D70476AD02D6FD75282B196D3B58831D ] MEMSWEEP2 C:\Windows\system32\3CF1.tmp
20:23:59.0660 0364 MEMSWEEP2 - ok
20:23:59.0691 0364 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
20:23:59.0691 0364 MMCSS - ok
20:23:59.0722 0364 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
20:23:59.0722 0364 Modem - ok
20:23:59.0769 0364 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:23:59.0769 0364 monitor - ok
20:23:59.0800 0364 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
20:23:59.0800 0364 mouclass - ok
20:23:59.0863 0364 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:23:59.0878 0364 mouhid - ok
20:23:59.0925 0364 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:23:59.0925 0364 mountmgr - ok
20:24:00.0003 0364 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
20:24:00.0003 0364 MozillaMaintenance - ok
20:24:00.0050 0364 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
20:24:00.0050 0364 mpio - ok
20:24:00.0081 0364 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:24:00.0097 0364 mpsdrv - ok
20:24:00.0159 0364 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:24:00.0175 0364 MpsSvc - ok
20:24:00.0206 0364 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:24:00.0206 0364 MRxDAV - ok
20:24:00.0253 0364 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:24:00.0253 0364 mrxsmb - ok
20:24:00.0299 0364 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:24:00.0299 0364 mrxsmb10 - ok
20:24:00.0331 0364 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:24:00.0331 0364 mrxsmb20 - ok
20:24:00.0377 0364 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
20:24:00.0377 0364 msahci - ok
20:24:00.0393 0364 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:24:00.0393 0364 msdsm - ok
20:24:00.0409 0364 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
20:24:00.0409 0364 MSDTC - ok
20:24:00.0455 0364 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:24:00.0455 0364 Msfs - ok
20:24:00.0471 0364 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:24:00.0471 0364 mshidkmdf - ok
20:24:00.0471 0364 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:24:00.0471 0364 msisadrv - ok
20:24:00.0533 0364 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:24:00.0533 0364 MSiSCSI - ok
20:24:00.0549 0364 msiserver - ok
20:24:00.0580 0364 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:24:00.0580 0364 MSKSSRV - ok
20:24:00.0580 0364 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:24:00.0580 0364 MSPCLOCK - ok
20:24:00.0596 0364 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:24:00.0596 0364 MSPQM - ok
20:24:00.0643 0364 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:24:00.0658 0364 MsRPC - ok
20:24:00.0705 0364 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
20:24:00.0705 0364 mssmbios - ok
20:24:00.0721 0364 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:24:00.0721 0364 MSTEE - ok
20:24:00.0752 0364 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
20:24:00.0752 0364 MTConfig - ok
20:24:00.0799 0364 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
20:24:00.0814 0364 Mup - ok
20:24:00.0923 0364 [ F2840DBFE9322F35557219AE82CC4597 ] N360 C:\Program Files (x86)\Norton 360\Engine\6.4.0.9\ccSvcHst.exe
20:24:00.0923 0364 N360 - ok
20:24:00.0986 0364 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
20:24:00.0986 0364 napagent - ok
20:24:01.0048 0364 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:24:01.0064 0364 NativeWifiP - ok
20:24:01.0142 0364 [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\VirusDefs\20121017.019\ENG64.SYS
20:24:01.0142 0364 NAVENG - ok
20:24:01.0251 0364 [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\VirusDefs\20121017.019\EX64.SYS
20:24:01.0251 0364 NAVEX15 - ok
20:24:01.0313 0364 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:24:01.0329 0364 NDIS - ok
20:24:01.0376 0364 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:24:01.0376 0364 NdisCap - ok
20:24:01.0407 0364 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:24:01.0407 0364 NdisTapi - ok
20:24:01.0469 0364 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:24:01.0469 0364 Ndisuio - ok
20:24:01.0516 0364 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:24:01.0532 0364 NdisWan - ok
20:24:01.0579 0364 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:24:01.0579 0364 NDProxy - ok
20:24:01.0594 0364 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:24:01.0594 0364 NetBIOS - ok
20:24:01.0641 0364 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:24:01.0641 0364 NetBT - ok
20:24:01.0657 0364 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
20:24:01.0657 0364 Netlogon - ok
20:24:01.0719 0364 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
20:24:01.0719 0364 Netman - ok
20:24:01.0750 0364 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
20:24:01.0750 0364 netprofm - ok
20:24:01.0781 0364 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:24:01.0781 0364 NetTcpPortSharing - ok
20:24:01.0922 0364 [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys
20:24:01.0969 0364 netw5v64 - ok
20:24:02.0000 0364 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
20:24:02.0000 0364 nfrd960 - ok
20:24:02.0031 0364 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:24:02.0047 0364 NlaSvc - ok
20:24:02.0078 0364 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:24:02.0078 0364 Npfs - ok
20:24:02.0078 0364 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
20:24:02.0078 0364 nsi - ok
20:24:02.0093 0364 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:24:02.0109 0364 nsiproxy - ok
20:24:02.0187 0364 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:24:02.0203 0364 Ntfs - ok
20:24:02.0234 0364 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
20:24:02.0234 0364 Null - ok
20:24:02.0249 0364 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:24:02.0249 0364 nvraid - ok
20:24:02.0296 0364 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:24:02.0296 0364 nvstor - ok
20:24:02.0312 0364 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:24:02.0312 0364 nv_agp - ok
20:24:02.0405 0364 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
20:24:02.0421 0364 odserv - ok
20:24:02.0468 0364 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:24:02.0468 0364 ohci1394 - ok
20:24:02.0499 0364 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:24:02.0499 0364 ose - ok
20:24:02.0530 0364 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:24:02.0530 0364 p2pimsvc - ok
20:24:02.0546 0364 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
20:24:02.0561 0364 p2psvc - ok
20:24:02.0577 0364 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
20:24:02.0577 0364 Parport - ok
20:24:02.0608 0364 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:24:02.0608 0364 partmgr - ok
20:24:02.0624 0364 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:24:02.0624 0364 PcaSvc - ok
20:24:02.0671 0364 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
20:24:02.0671 0364 pci - ok
20:24:02.0686 0364 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
20:24:02.0686 0364 pciide - ok
20:24:02.0717 0364 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
20:24:02.0717 0364 pcmcia - ok
20:24:02.0749 0364 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
20:24:02.0749 0364 pcw - ok
20:24:02.0780 0364 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:24:02.0780 0364 PEAUTH - ok
20:24:02.0873 0364 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
20:24:02.0873 0364 PerfHost - ok
20:24:02.0951 0364 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
20:24:02.0967 0364 pla - ok
20:24:03.0014 0364 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:24:03.0029 0364 PlugPlay - ok
20:24:03.0045 0364 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:24:03.0061 0364 PNRPAutoReg - ok
20:24:03.0076 0364 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:24:03.0076 0364 PNRPsvc - ok
20:24:03.0107 0364 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:24:03.0123 0364 PolicyAgent - ok
20:24:03.0154 0364 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
20:24:03.0170 0364 Power - ok
20:24:03.0217 0364 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:24:03.0217 0364 PptpMiniport - ok
20:24:03.0248 0364 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
20:24:03.0248 0364 Processor - ok
20:24:03.0310 0364 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
20:24:03.0310 0364 ProfSvc - ok
20:24:03.0326 0364 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:24:03.0341 0364 ProtectedStorage - ok
20:24:03.0388 0364 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:24:03.0388 0364 Psched - ok
20:24:03.0466 0364 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
20:24:03.0497 0364 ql2300 - ok
20:24:03.0497 0364 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
20:24:03.0497 0364 ql40xx - ok
20:24:03.0529 0364 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
20:24:03.0529 0364 QWAVE - ok
20:24:03.0544 0364 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:24:03.0544 0364 QWAVEdrv - ok
20:24:03.0560 0364 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:24:03.0560 0364 RasAcd - ok
20:24:03.0607 0364 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:24:03.0607 0364 RasAgileVpn - ok
20:24:03.0622 0364 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
20:24:03.0622 0364 RasAuto - ok
20:24:03.0669 0364 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:24:03.0669 0364 Rasl2tp - ok
20:24:03.0685 0364 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
20:24:03.0685 0364 RasMan - ok
20:24:03.0700 0364 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:24:03.0700 0364 RasPppoe - ok
20:24:03.0716 0364 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:24:03.0731 0364 RasSstp - ok
20:24:03.0778 0364 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:24:03.0778 0364 rdbss - ok
20:24:03.0809 0364 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
20:24:03.0809 0364 rdpbus - ok
20:24:03.0841 0364 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:24:03.0841 0364 RDPCDD - ok
20:24:03.0872 0364 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:24:03.0872 0364 RDPENCDD - ok
20:24:03.0887 0364 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:24:03.0887 0364 RDPREFMP - ok
20:24:03.0934 0364 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:24:03.0934 0364 RDPWD - ok
20:24:03.0981 0364 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:24:03.0997 0364 rdyboost - ok
20:24:04.0028 0364 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:24:04.0028 0364 RemoteAccess - ok
20:24:04.0075 0364 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:24:04.0075 0364 RemoteRegistry - ok
20:24:04.0153 0364 [ 498EB62A160674E793FA40FD65390625 ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
20:24:04.0153 0364 RichVideo - ok
20:24:04.0199 0364 [ 7B04C9843921AB1F695FB395422C5360 ] RimUsb C:\Windows\system32\Drivers\RimUsb_AMD64.sys
20:24:04.0199 0364 RimUsb - ok
20:24:04.0231 0364 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:24:04.0231 0364 RpcEptMapper - ok
20:24:04.0246 0364 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
20:24:04.0246 0364 RpcLocator - ok
20:24:04.0293 0364 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
20:24:04.0293 0364 RpcSs - ok
20:24:04.0340 0364 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:24:04.0340 0364 rspndr - ok
20:24:04.0371 0364 RSUSBSTOR - ok
20:24:04.0418 0364 [ B49DC435AE3695BAC5623DD94B05732D ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
20:24:04.0418 0364 RTL8167 - ok
20:24:04.0449 0364 RtsUIR - ok
20:24:04.0465 0364 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
20:24:04.0465 0364 SamSs - ok
20:24:04.0511 0364 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:24:04.0511 0364 sbp2port - ok
20:24:04.0527 0364 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:24:04.0527 0364 SCardSvr - ok
20:24:04.0574 0364 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:24:04.0574 0364 scfilter - ok
20:24:04.0636 0364 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
20:24:04.0652 0364 Schedule - ok
20:24:04.0699 0364 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:24:04.0699 0364 SCPolicySvc - ok
20:24:04.0745 0364 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys
20:24:04.0745 0364 sdbus - ok
20:24:04.0792 0364 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:24:04.0792 0364 SDRSVC - ok
20:24:04.0839 0364 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:24:04.0839 0364 secdrv - ok
20:24:04.0886 0364 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
20:24:04.0886 0364 seclogon - ok
20:24:04.0917 0364 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
20:24:04.0933 0364 SENS - ok
20:24:04.0933 0364 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:24:04.0933 0364 SensrSvc - ok
20:24:04.0964 0364 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:24:04.0964 0364 Serenum - ok
20:24:04.0979 0364 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:24:04.0979 0364 Serial - ok
20:24:05.0011 0364 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
20:24:05.0026 0364 sermouse - ok
20:24:05.0089 0364 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
20:24:05.0089 0364 SessionEnv - ok
20:24:05.0135 0364 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:24:05.0135 0364 sffdisk - ok
20:24:05.0151 0364 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:24:05.0151 0364 sffp_mmc - ok
20:24:05.0182 0364 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:24:05.0182 0364 sffp_sd - ok
20:24:05.0198 0364 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
20:24:05.0198 0364 sfloppy - ok
20:24:05.0245 0364 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:24:05.0245 0364 SharedAccess - ok
20:24:05.0291 0364 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:24:05.0291 0364 ShellHWDetection - ok
20:24:05.0338 0364 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:24:05.0338 0364 SiSRaid2 - ok
20:24:05.0354 0364 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
20:24:05.0354 0364 SiSRaid4 - ok
20:24:05.0385 0364 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:24:05.0385 0364 Smb - ok
20:24:05.0447 0364 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:24:05.0447 0364 SNMPTRAP - ok
20:24:05.0463 0364 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
20:24:05.0463 0364 spldr - ok
20:24:05.0510 0364 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
20:24:05.0525 0364 Spooler - ok
20:24:05.0635 0364 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
20:24:05.0666 0364 sppsvc - ok
20:24:05.0697 0364 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:24:05.0697 0364 sppuinotify - ok
20:24:05.0837 0364 [ 891793E00432FA055CF040605C260E49 ] SRTSP C:\Windows\System32\Drivers\N360x64\0604000.009\SRTSP64.SYS
20:24:05.0853 0364 SRTSP - ok
20:24:05.0915 0364 [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX C:\Windows\system32\drivers\N360x64\0604000.009\SRTSPX64.SYS
20:24:05.0915 0364 SRTSPX - ok
20:24:05.0978 0364 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
20:24:05.0978 0364 srv - ok
20:24:05.0993 0364 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:24:06.0009 0364 srv2 - ok
20:24:06.0040 0364 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS
20:24:06.0040 0364 SrvHsfHDA - ok
20:24:06.0087 0364 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS
20:24:06.0103 0364 SrvHsfV92 - ok
20:24:06.0134 0364 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
20:24:06.0134 0364 SrvHsfWinac - ok
20:24:06.0165 0364 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:24:06.0165 0364 srvnet - ok
20:24:06.0212 0364 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:24:06.0212 0364 SSDPSRV - ok
20:24:06.0227 0364 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:24:06.0227 0364 SstpSvc - ok
20:24:06.0321 0364 [ 810199DCC3BDC38304D7D649992EA7BC ] STacSV C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe
20:24:06.0337 0364 STacSV - ok
20:24:06.0352 0364 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
20:24:06.0352 0364 stexstor - ok
20:24:06.0415 0364 [ ED1722F43CE61409EF68340402D6267D ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys
20:24:06.0430 0364 STHDA - ok
20:24:06.0477 0364 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
20:24:06.0493 0364 stisvc - ok
20:24:06.0539 0364 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
20:24:06.0539 0364 swenum - ok
20:24:06.0571 0364 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
20:24:06.0571 0364 swprv - ok
20:24:06.0649 0364 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\Windows\system32\drivers\N360x64\0604000.009\SYMDS64.SYS
20:24:06.0664 0364 SymDS - ok
20:24:06.0727 0364 [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA C:\Windows\system32\drivers\N360x64\0604000.009\SYMEFA64.SYS
20:24:06.0742 0364 SymEFA - ok
20:24:06.0805 0364 [ 898BB48C797483420DF523B2BBC1ECDB ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
20:24:06.0805 0364 SymEvent - ok
20:24:06.0836 0364 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\Windows\system32\drivers\N360x64\0604000.009\Ironx64.SYS
20:24:06.0851 0364 SymIRON - ok
20:24:06.0867 0364 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\Windows\System32\Drivers\N360x64\0604000.009\SYMNETS.SYS
20:24:06.0867 0364 SymNetS - ok
20:24:06.0929 0364 [ 924D711941956F7420A4925592BE8253 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
20:24:06.0929 0364 SynTP - ok
20:24:07.0007 0364 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
20:24:07.0039 0364 SysMain - ok
20:24:07.0070 0364 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:24:07.0070 0364 TabletInputService - ok
20:24:07.0101 0364 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
20:24:07.0101 0364 TapiSrv - ok
20:24:07.0117 0364 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
20:24:07.0132 0364 TBS - ok
20:24:07.0210 0364 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:24:07.0241 0364 Tcpip - ok
20:24:07.0273 0364 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:24:07.0288 0364 TCPIP6 - ok
20:24:07.0319 0364 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:24:07.0319 0364 tcpipreg - ok
20:24:07.0366 0364 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:24:07.0366 0364 TDPIPE - ok
20:24:07.0413 0364 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:24:07.0413 0364 TDTCP - ok
20:24:07.0444 0364 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:24:07.0444 0364 tdx - ok
20:24:07.0475 0364 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
20:24:07.0475 0364 TermDD - ok
20:24:07.0538 0364 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
20:24:07.0553 0364 TermService - ok
20:24:07.0600 0364 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
20:24:07.0600 0364 Themes - ok
20:24:07.0631 0364 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
20:24:07.0647 0364 THREADORDER - ok
20:24:07.0663 0364 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
20:24:07.0663 0364 TrkWks - ok
20:24:07.0709 0364 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:24:07.0709 0364 TrustedInstaller - ok
20:24:07.0756 0364 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:24:07.0756 0364 tssecsrv - ok
20:24:07.0803 0364 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:24:07.0803 0364 TsUsbFlt - ok
20:24:07.0865 0364 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:24:07.0865 0364 tunnel - ok
20:24:07.0897 0364 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
20:24:07.0897 0364 uagp35 - ok
20:24:07.0943 0364 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:24:07.0959 0364 udfs - ok
20:24:08.0006 0364 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:24:08.0006 0364 UI0Detect - ok
20:24:08.0021 0364 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:24:08.0021 0364 uliagpkx - ok
20:24:08.0068 0364 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
20:24:08.0068 0364 umbus - ok
20:24:08.0084 0364 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
20:24:08.0084 0364 UmPass - ok
20:24:08.0099 0364 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
20:24:08.0115 0364 upnphost - ok
20:24:08.0162 0364 [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
20:24:08.0162 0364 USBAAPL64 - ok
20:24:08.0177 0364 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:24:08.0177 0364 usbccgp - ok
20:24:08.0209 0364 USBCCID - ok
20:24:08.0255 0364 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:24:08.0255 0364 usbcir - ok
20:24:08.0271 0364 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:24:08.0271 0364 usbehci - ok
20:24:08.0318 0364 [ 44D9C773FEBFF10593B50DDFC2D6BC27 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys
20:24:08.0333 0364 usbfilter - ok
20:24:08.0365 0364 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:24:08.0380 0364 usbhub - ok
20:24:08.0443 0364 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
20:24:08.0443 0364 usbohci - ok
20:24:08.0489 0364 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
20:24:08.0489 0364 usbprint - ok
20:24:08.0536 0364 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
20:24:08.0536 0364 usbscan - ok
20:24:08.0567 0364 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:24:08.0567 0364 USBSTOR - ok
20:24:08.0599 0364 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
20:24:08.0599 0364 usbuhci - ok
20:24:08.0661 0364 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
20:24:08.0661 0364 usbvideo - ok
20:24:08.0708 0364 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
20:24:08.0708 0364 UxSms - ok
20:24:08.0708 0364 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
20:24:08.0723 0364 VaultSvc - ok
20:24:08.0755 0364 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:24:08.0755 0364 vdrvroot - ok
20:24:08.0801 0364 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
20:24:08.0817 0364 vds - ok
20:24:08.0833 0364 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:24:08.0833 0364 vga - ok
20:24:08.0864 0364 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
20:24:08.0864 0364 VgaSave - ok
20:24:08.0879 0364 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:24:08.0895 0364 vhdmp - ok
20:24:08.0926 0364 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
20:24:08.0926 0364 viaide - ok
20:24:08.0942 0364 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:24:08.0942 0364 volmgr - ok
20:24:08.0989 0364 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:24:09.0004 0364 volmgrx - ok
20:24:09.0020 0364 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:24:09.0020 0364 volsnap - ok
20:24:09.0067 0364 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
20:24:09.0067 0364 vsmraid - ok
20:24:09.0145 0364 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
20:24:09.0176 0364 VSS - ok
20:24:09.0191 0364 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
20:24:09.0191 0364 vwifibus - ok
20:24:09.0223 0364 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
20:24:09.0223 0364 vwififlt - ok
20:24:09.0269 0364 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
20:24:09.0269 0364 vwifimp - ok
20:24:09.0301 0364 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
20:24:09.0316 0364 W32Time - ok
20:24:09.0347 0364 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
20:24:09.0347 0364 WacomPen - ok
20:24:09.0410 0364 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:24:09.0410 0364 WANARP - ok
20:24:09.0410 0364 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:24:09.0410 0364 Wanarpv6 - ok
20:24:09.0488 0364 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
20:24:09.0503 0364 WatAdminSvc - ok
20:24:09.0581 0364 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
20:24:09.0597 0364 wbengine - ok
20:24:09.0628 0364 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:24:09.0628 0364 WbioSrvc - ok
20:24:09.0675 0364 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:24:09.0691 0364 wcncsvc - ok
20:24:09.0706 0364 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:24:09.0706 0364 WcsPlugInService - ok
20:24:09.0737 0364 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
20:24:09.0737 0364 Wd - ok
20:24:09.0769 0364 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:24:09.0784 0364 Wdf01000 - ok
20:24:09.0800 0364 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:24:09.0800 0364 WdiServiceHost - ok
20:24:09.0800 0364 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:24:09.0800 0364 WdiSystemHost - ok
20:24:09.0847 0364 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
20:24:09.0847 0364 WebClient - ok
20:24:09.0862 0364 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:24:09.0862 0364 Wecsvc - ok
20:24:09.0893 0364 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:24:09.0893 0364 wercplsupport - ok
20:24:09.0925 0364 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
20:24:09.0925 0364 WerSvc - ok
20:24:09.0987 0364 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:24:09.0987 0364 WfpLwf - ok
20:24:10.0018 0364 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:24:10.0018 0364 WIMMount - ok
20:24:10.0034 0364 WinDefend - ok
20:24:10.0049 0364 WinHttpAutoProxySvc - ok
20:24:10.0096 0364 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:24:10.0112 0364 Winmgmt - ok
20:24:10.0190 0364 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
20:24:10.0221 0364 WinRM - ok
20:24:10.0299 0364 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
20:24:10.0299 0364 WinUsb - ok
20:24:10.0346 0364 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
20:24:10.0361 0364 Wlansvc - ok
20:24:10.0377 0364 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:24:10.0377 0364 WmiAcpi - ok
20:24:10.0408 0364 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:24:10.0408 0364 wmiApSrv - ok
20:24:10.0455 0364 WMPNetworkSvc - ok
20:24:10.0471 0364 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:24:10.0471 0364 WPCSvc - ok
20:24:10.0502 0364 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:24:10.0517 0364 WPDBusEnum - ok
20:24:10.0549 0364 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:24:10.0549 0364 ws2ifsl - ok
20:24:10.0564 0364 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
20:24:10.0580 0364 wscsvc - ok
20:24:10.0580 0364 WSearch - ok
20:24:10.0689 0364 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
20:24:10.0720 0364 wuauserv - ok
20:24:10.0767 0364 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:24:10.0767 0364 WudfPf - ok
20:24:10.0798 0364 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:24:10.0814 0364 WUDFRd - ok
20:24:10.0829 0364 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:24:10.0845 0364 wudfsvc - ok
20:24:10.0876 0364 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
20:24:10.0876 0364 WwanSvc - ok
20:24:10.0939 0364 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys
20:24:10.0954 0364 yukonw7 - ok
--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast
reply to speedtennis

20:24:10.0985 0364 ================ Scan global ===============================
20:24:11.0017 0364 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
20:24:11.0063 0364 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
20:24:11.0079 0364 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
20:24:11.0110 0364 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
20:24:11.0126 0364 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
20:24:11.0126 0364 [Global] - ok
20:24:11.0126 0364 ================ Scan MBR ==================================
20:24:11.0141 0364 [ D9C369DDA37A0CC44A095EF41713790A ] \Device\Harddisk0\DR0
20:24:11.0422 0364 \Device\Harddisk0\DR0 - ok
20:24:11.0422 0364 ================ Scan VBR ==================================
20:24:11.0422 0364 [ FD5CA236198950CE02F626C1E98FEAF1 ] \Device\Harddisk0\DR0\Partition1
20:24:11.0422 0364 \Device\Harddisk0\DR0\Partition1 - ok
20:24:11.0438 0364 [ 4D649CAD17182D4089A68ABA2A801DF4 ] \Device\Harddisk0\DR0\Partition2
20:24:11.0438 0364 \Device\Harddisk0\DR0\Partition2 - ok
20:24:11.0469 0364 [ 5DBA71C2637E1D57C497B8228631FCE4 ] \Device\Harddisk0\DR0\Partition3
20:24:11.0469 0364 \Device\Harddisk0\DR0\Partition3 - ok
20:24:11.0485 0364 [ 5CE24594F658978876A7D22727C3A726 ] \Device\Harddisk0\DR0\Partition4
20:24:11.0485 0364 \Device\Harddisk0\DR0\Partition4 - ok
20:24:11.0485 0364 ============================================================
20:24:11.0485 0364 Scan finished
20:24:11.0485 0364 ============================================================
20:24:11.0500 3972 Detected object count: 1
20:24:11.0500 3972 Actual detected object count: 1
20:39:59.0529 3972 Akamai ( HiddenFile.Multi.Generic ) - skipped by user
20:39:59.0529 3972 Akamai ( HiddenFile.Multi.Generic ) - User select action: Skip
09:02:12.0470 1524 ============================================================
09:02:12.0470 1524 Scan started
09:02:12.0470 1524 Mode: Manual;
09:02:12.0470 1524 ============================================================
09:02:14.0030 1524 ================ Scan system memory ========================
09:02:14.0030 1524 System memory - ok
09:02:14.0030 1524 ================ Scan services =============================
09:02:14.0171 1524 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
09:02:14.0171 1524 1394ohci - ok
09:02:14.0218 1524 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
09:02:14.0218 1524 ACPI - ok
09:02:14.0233 1524 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
09:02:14.0233 1524 AcpiPmi - ok
09:02:14.0389 1524 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
09:02:14.0389 1524 AdobeFlashPlayerUpdateSvc - ok
09:02:14.0436 1524 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
09:02:14.0436 1524 adp94xx - ok
09:02:14.0452 1524 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
09:02:14.0452 1524 adpahci - ok
09:02:14.0467 1524 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
09:02:14.0467 1524 adpu320 - ok
09:02:14.0483 1524 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
09:02:14.0498 1524 AeLookupSvc - ok
09:02:14.0576 1524 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe
09:02:14.0576 1524 AESTFilters - ok
09:02:14.0623 1524 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
09:02:14.0623 1524 AFD - ok
09:02:14.0670 1524 [ B65F8DBA54F251906BBE8611B5A0E7AB ] AgereModemAudio C:\Program Files\LSI SoftModem\agr64svc.exe
09:02:14.0670 1524 AgereModemAudio - ok
09:02:14.0701 1524 [ AF4748EF93416159459769A24A0053AF ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys
09:02:14.0701 1524 AgereSoftModem - ok
09:02:14.0748 1524 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
09:02:14.0748 1524 agp440 - ok
09:02:14.0873 1524 [ C7074BD8D4B8F564859ED373433030AE ] Akamai c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll
09:02:14.0873 1524 Suspicious file (Hidden): c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll. md5: C7074BD8D4B8F564859ED373433030AE
09:02:14.0888 1524 Akamai ( HiddenFile.Multi.Generic ) - warning
09:02:14.0888 1524 Akamai - detected HiddenFile.Multi.Generic (1)
09:02:14.0920 1524 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
09:02:14.0920 1524 ALG - ok
09:02:14.0966 1524 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
09:02:14.0966 1524 aliide - ok
09:02:14.0998 1524 [ BCC32BF5EBB5DFD4380FA053D3651949 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
09:02:14.0998 1524 AMD External Events Utility - ok
09:02:14.0998 1524 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
09:02:14.0998 1524 amdide - ok
09:02:15.0029 1524 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
09:02:15.0029 1524 AmdK8 - ok
09:02:15.0060 1524 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
09:02:15.0060 1524 AmdPPM - ok
09:02:15.0060 1524 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
09:02:15.0060 1524 amdsata - ok
09:02:15.0091 1524 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
09:02:15.0091 1524 amdsbs - ok
09:02:15.0107 1524 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
09:02:15.0107 1524 amdxata - ok
09:02:15.0138 1524 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
09:02:15.0138 1524 AppID - ok
09:02:15.0169 1524 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
09:02:15.0185 1524 AppIDSvc - ok
09:02:15.0216 1524 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
09:02:15.0216 1524 Appinfo - ok
09:02:15.0310 1524 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
09:02:15.0310 1524 Apple Mobile Device - ok
09:02:15.0341 1524 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
09:02:15.0341 1524 arc - ok
09:02:15.0356 1524 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
09:02:15.0356 1524 arcsas - ok
09:02:15.0403 1524 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
09:02:15.0403 1524 AsyncMac - ok
09:02:15.0450 1524 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
09:02:15.0450 1524 atapi - ok
09:02:15.0512 1524 [ F8633CDD09647A64EE8DB550630427FF ] athr C:\Windows\system32\DRIVERS\athrx.sys
09:02:15.0528 1524 athr - ok
09:02:15.0653 1524 [ A29087680A1C3B049E3C05438E8FF2B8 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
09:02:15.0684 1524 atikmdag - ok
09:02:15.0700 1524 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
09:02:15.0700 1524 AtiPcie - ok
09:02:15.0746 1524 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
09:02:15.0746 1524 AudioEndpointBuilder - ok
09:02:15.0762 1524 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
09:02:15.0762 1524 AudioSrv - ok
09:02:15.0793 1524 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
09:02:15.0793 1524 AxInstSV - ok
09:02:15.0824 1524 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
09:02:15.0824 1524 b06bdrv - ok
09:02:15.0856 1524 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
09:02:15.0871 1524 b57nd60a - ok
09:02:15.0887 1524 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
09:02:15.0887 1524 BDESVC - ok
09:02:15.0902 1524 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
09:02:15.0902 1524 Beep - ok
09:02:15.0949 1524 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
09:02:15.0949 1524 BFE - ok
09:02:16.0105 1524 [ A45BE4E091636F6C86D6E4FC945D5A26 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\BASHDefs\20120928.001\BHDrvx64.sys
09:02:16.0105 1524 BHDrvx64 - ok
09:02:16.0168 1524 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
09:02:16.0168 1524 BITS - ok
09:02:16.0199 1524 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
09:02:16.0199 1524 blbdrive - ok
09:02:16.0261 1524 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
09:02:16.0261 1524 Bonjour Service - ok
09:02:16.0308 1524 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
09:02:16.0308 1524 bowser - ok
09:02:16.0324 1524 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
09:02:16.0324 1524 BrFiltLo - ok
09:02:16.0355 1524 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
09:02:16.0355 1524 BrFiltUp - ok
09:02:16.0402 1524 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
09:02:16.0402 1524 Browser - ok
09:02:16.0433 1524 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
09:02:16.0448 1524 Brserid - ok
09:02:16.0495 1524 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
09:02:16.0495 1524 BrSerWdm - ok
09:02:16.0526 1524 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
09:02:16.0526 1524 BrUsbMdm - ok
09:02:16.0558 1524 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
09:02:16.0558 1524 BrUsbSer - ok
09:02:16.0589 1524 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
09:02:16.0589 1524 BTHMODEM - ok
09:02:16.0604 1524 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
09:02:16.0604 1524 bthserv - ok
09:02:16.0682 1524 [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_N360 C:\Windows\system32\drivers\N360x64\0604000.009\ccSetx64.sys
09:02:16.0682 1524 ccSet_N360 - ok
09:02:16.0699 1524 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
09:02:16.0699 1524 cdfs - ok
09:02:16.0730 1524 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys
09:02:16.0730 1524 cdrom - ok
09:02:16.0777 1524 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
09:02:16.0777 1524 CertPropSvc - ok
09:02:16.0793 1524 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
09:02:16.0793 1524 circlass - ok
09:02:16.0808 1524 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
09:02:16.0808 1524 CLFS - ok
09:02:16.0886 1524 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:02:16.0886 1524 clr_optimization_v2.0.50727_32 - ok
09:02:16.0933 1524 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
09:02:16.0933 1524 clr_optimization_v2.0.50727_64 - ok
09:02:17.0011 1524 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
09:02:17.0011 1524 clr_optimization_v4.0.30319_32 - ok
09:02:17.0073 1524 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
09:02:17.0073 1524 clr_optimization_v4.0.30319_64 - ok
09:02:17.0089 1524 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
09:02:17.0089 1524 CmBatt - ok
09:02:17.0136 1524 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
09:02:17.0136 1524 cmdide - ok
09:02:17.0183 1524 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
09:02:17.0183 1524 CNG - ok
09:02:17.0214 1524 [ C7A0E61D5714AC20DE52D4F66EC773B8 ] Com4QLBEx C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
09:02:17.0214 1524 Com4QLBEx - ok
09:02:17.0229 1524 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
09:02:17.0229 1524 Compbatt - ok
09:02:17.0276 1524 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
09:02:17.0276 1524 CompositeBus - ok
09:02:17.0276 1524 COMSysApp - ok
09:02:17.0292 1524 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
09:02:17.0292 1524 crcdisk - ok
09:02:17.0339 1524 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
09:02:17.0339 1524 CryptSvc - ok
09:02:17.0385 1524 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
09:02:17.0385 1524 DcomLaunch - ok
09:02:17.0417 1524 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
09:02:17.0417 1524 defragsvc - ok
09:02:17.0463 1524 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
09:02:17.0463 1524 DfsC - ok
09:02:17.0510 1524 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
09:02:17.0510 1524 Dhcp - ok
09:02:17.0526 1524 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
09:02:17.0526 1524 discache - ok
09:02:17.0541 1524 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
09:02:17.0541 1524 Disk - ok
09:02:17.0588 1524 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
09:02:17.0588 1524 Dnscache - ok
09:02:17.0635 1524 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
09:02:17.0635 1524 dot3svc - ok
09:02:17.0682 1524 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
09:02:17.0682 1524 DPS - ok
09:02:17.0697 1524 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
09:02:17.0697 1524 drmkaud - ok
09:02:17.0744 1524 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
09:02:17.0744 1524 DXGKrnl - ok
09:02:17.0791 1524 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
09:02:17.0791 1524 EapHost - ok
09:02:17.0869 1524 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
09:02:17.0900 1524 ebdrv - ok
09:02:17.0947 1524 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
09:02:17.0947 1524 eeCtrl - ok
09:02:17.0994 1524 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
09:02:17.0994 1524 EFS - ok
09:02:18.0056 1524 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
09:02:18.0072 1524 ehRecvr - ok
09:02:18.0087 1524 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
09:02:18.0103 1524 ehSched - ok
09:02:18.0119 1524 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
09:02:18.0119 1524 elxstor - ok
09:02:18.0150 1524 EraserUtilRebootDrv - ok
09:02:18.0181 1524 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
09:02:18.0181 1524 ErrDev - ok
09:02:18.0228 1524 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
09:02:18.0228 1524 EventSystem - ok
09:02:18.0259 1524 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
09:02:18.0259 1524 exfat - ok
09:02:18.0290 1524 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
09:02:18.0290 1524 fastfat - ok
09:02:18.0337 1524 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
09:02:18.0337 1524 Fax - ok
09:02:18.0368 1524 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
09:02:18.0368 1524 fdc - ok
09:02:18.0399 1524 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
09:02:18.0399 1524 fdPHost - ok
09:02:18.0415 1524 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
09:02:18.0415 1524 FDResPub - ok
09:02:18.0431 1524 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
09:02:18.0431 1524 FileInfo - ok
09:02:18.0431 1524 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
09:02:18.0431 1524 Filetrace - ok
09:02:18.0446 1524 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
09:02:18.0446 1524 flpydisk - ok
09:02:18.0462 1524 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
09:02:18.0477 1524 FltMgr - ok
09:02:18.0524 1524 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
09:02:18.0540 1524 FontCache - ok
09:02:18.0602 1524 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
09:02:18.0602 1524 FontCache3.0.0.0 - ok
09:02:18.0618 1524 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
09:02:18.0633 1524 FsDepends - ok
09:02:18.0649 1524 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
09:02:18.0649 1524 Fs_Rec - ok
09:02:18.0680 1524 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
09:02:18.0680 1524 fvevol - ok
09:02:18.0696 1524 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
09:02:18.0696 1524 gagp30kx - ok
09:02:18.0774 1524 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
09:02:18.0774 1524 GamesAppService - ok
09:02:18.0805 1524 [ AF4DEE5531395DEE72B35B36C9671FD0 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
09:02:18.0805 1524 GEARAspiWDM - ok
09:02:18.0852 1524 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
09:02:18.0852 1524 gpsvc - ok
09:02:18.0867 1524 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
09:02:18.0867 1524 hcw85cir - ok
09:02:18.0914 1524 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
09:02:18.0914 1524 HdAudAddService - ok
09:02:18.0945 1524 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
09:02:18.0945 1524 HDAudBus - ok
09:02:18.0961 1524 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
09:02:18.0961 1524 HidBatt - ok
09:02:18.0992 1524 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
09:02:18.0992 1524 HidBth - ok
09:02:18.0992 1524 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
09:02:18.0992 1524 HidIr - ok
09:02:19.0023 1524 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
09:02:19.0023 1524 hidserv - ok
09:02:19.0039 1524 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
09:02:19.0039 1524 HidUsb - ok
09:02:19.0070 1524 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
09:02:19.0070 1524 hkmsvc - ok
09:02:19.0117 1524 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
09:02:19.0117 1524 HomeGroupListener - ok
09:02:19.0164 1524 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
09:02:19.0164 1524 HomeGroupProvider - ok
09:02:19.0226 1524 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
09:02:19.0226 1524 HP Support Assistant Service - ok
09:02:19.0226 1524 [ 9AF482D058BE59CC28BCE52E7C4B747C ] HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
09:02:19.0226 1524 HpqKbFiltr - ok
09:02:19.0320 1524 [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
09:02:19.0320 1524 hpqwmiex - ok
09:02:19.0367 1524 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
09:02:19.0367 1524 HpSAMD - ok
09:02:19.0413 1524 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
09:02:19.0429 1524 HTTP - ok
09:02:19.0476 1524 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
09:02:19.0476 1524 hwpolicy - ok
09:02:19.0523 1524 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
09:02:19.0523 1524 i8042prt - ok
09:02:19.0554 1524 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
09:02:19.0554 1524 iaStorV - ok
09:02:19.0663 1524 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
09:02:19.0663 1524 IDriverT - ok
09:02:19.0725 1524 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
09:02:19.0725 1524 idsvc - ok
09:02:19.0803 1524 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\IPSDefs\20121017.001\IDSvia64.sys
09:02:19.0803 1524 IDSVia64 - ok
09:02:19.0928 1524 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
09:02:19.0991 1524 igfx - ok
09:02:20.0022 1524 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
09:02:20.0022 1524 iirsp - ok
09:02:20.0069 1524 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
09:02:20.0084 1524 IKEEXT - ok
09:02:20.0100 1524 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
09:02:20.0100 1524 intelide - ok
09:02:20.0115 1524 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
09:02:20.0115 1524 intelppm - ok
09:02:20.0147 1524 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
09:02:20.0147 1524 IPBusEnum - ok
09:02:20.0178 1524 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
09:02:20.0178 1524 IpFilterDriver - ok
09:02:20.0225 1524 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
09:02:20.0225 1524 iphlpsvc - ok
09:02:20.0256 1524 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
09:02:20.0256 1524 IPMIDRV - ok
09:02:20.0303 1524 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
09:02:20.0303 1524 IPNAT - ok
09:02:20.0365 1524 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
09:02:20.0381 1524 iPod Service - ok
09:02:20.0396 1524 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
09:02:20.0396 1524 IRENUM - ok
09:02:20.0396 1524 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
09:02:20.0396 1524 isapnp - ok
09:02:20.0412 1524 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
09:02:20.0427 1524 iScsiPrt - ok
09:02:20.0443 1524 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
09:02:20.0443 1524 kbdclass - ok
09:02:20.0459 1524 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
09:02:20.0459 1524 kbdhid - ok
09:02:20.0474 1524 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
09:02:20.0474 1524 KeyIso - ok
09:02:20.0521 1524 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
09:02:20.0521 1524 KSecDD - ok
09:02:20.0568 1524 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
09:02:20.0568 1524 KSecPkg - ok
09:02:20.0583 1524 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
09:02:20.0583 1524 ksthunk - ok
09:02:20.0615 1524 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
09:02:20.0630 1524 KtmRm - ok
09:02:20.0661 1524 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
09:02:20.0661 1524 LanmanServer - ok
09:02:20.0724 1524 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
09:02:20.0724 1524 LanmanWorkstation - ok
09:02:20.0755 1524 [ 07B1888209C54B675FFCCBDE9F06D2C6 ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
09:02:20.0755 1524 LightScribeService - ok
09:02:20.0755 1524 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
09:02:20.0771 1524 lltdio - ok
09:02:20.0786 1524 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
09:02:20.0786 1524 lltdsvc - ok
09:02:20.0802 1524 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
09:02:20.0802 1524 lmhosts - ok
09:02:20.0833 1524 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
09:02:20.0833 1524 LSI_FC - ok
09:02:20.0864 1524 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
09:02:20.0864 1524 LSI_SAS - ok
09:02:20.0880 1524 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
09:02:20.0880 1524 LSI_SAS2 - ok
09:02:20.0895 1524 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
09:02:20.0911 1524 LSI_SCSI - ok
09:02:20.0927 1524 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
09:02:20.0927 1524 luafv - ok
09:02:20.0973 1524 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
09:02:20.0973 1524 MBAMProtector - ok
09:02:21.0005 1524 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
09:02:21.0020 1524 MBAMScheduler - ok
09:02:21.0036 1524 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
09:02:21.0036 1524 MBAMService - ok
09:02:21.0067 1524 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
09:02:21.0083 1524 Mcx2Svc - ok
09:02:21.0098 1524 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
09:02:21.0098 1524 megasas - ok
09:02:21.0145 1524 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
09:02:21.0145 1524 MegaSR - ok
09:02:21.0317 1524 [ D70476AD02D6FD75282B196D3B58831D ] MEMSWEEP2 C:\Windows\system32\3CF1.tmp
09:02:21.0332 1524 MEMSWEEP2 - ok
09:02:21.0379 1524 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
09:02:21.0379 1524 MMCSS - ok
09:02:21.0395 1524 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
09:02:21.0395 1524 Modem - ok
09:02:21.0410 1524 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
09:02:21.0410 1524 monitor - ok
09:02:21.0426 1524 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
09:02:21.0426 1524 mouclass - ok
09:02:21.0441 1524 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
09:02:21.0441 1524 mouhid - ok
09:02:21.0488 1524 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
09:02:21.0488 1524 mountmgr - ok
09:02:21.0535 1524 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
09:02:21.0535 1524 MozillaMaintenance - ok
09:02:21.0566 1524 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
09:02:21.0566 1524 mpio - ok
09:02:21.0597 1524 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
09:02:21.0597 1524 mpsdrv - ok
09:02:21.0644 1524 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
09:02:21.0660 1524 MpsSvc - ok
09:02:21.0691 1524 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
09:02:21.0691 1524 MRxDAV - ok
09:02:21.0738 1524 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
09:02:21.0738 1524 mrxsmb - ok
09:02:21.0785 1524 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
09:02:21.0785 1524 mrxsmb10 - ok
09:02:21.0800 1524 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
09:02:21.0800 1524 mrxsmb20 - ok
09:02:21.0847 1524 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
09:02:21.0847 1524 msahci - ok
09:02:21.0863 1524 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
09:02:21.0863 1524 msdsm - ok
09:02:21.0878 1524 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
09:02:21.0878 1524 MSDTC - ok
09:02:21.0909 1524 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
09:02:21.0909 1524 Msfs - ok
09:02:21.0909 1524 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
09:02:21.0909 1524 mshidkmdf - ok
09:02:21.0925 1524 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
09:02:21.0925 1524 msisadrv - ok
09:02:21.0956 1524 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
09:02:21.0956 1524 MSiSCSI - ok
09:02:21.0972 1524 msiserver - ok
09:02:21.0987 1524 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
09:02:21.0987 1524 MSKSSRV - ok
09:02:22.0003 1524 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
09:02:22.0003 1524 MSPCLOCK - ok
09:02:22.0019 1524 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
09:02:22.0019 1524 MSPQM - ok
09:02:22.0050 1524 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
09:02:22.0065 1524 MsRPC - ok
09:02:22.0065 1524 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
09:02:22.0065 1524 mssmbios - ok
09:02:22.0081 1524 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
09:02:22.0081 1524 MSTEE - ok
09:02:22.0112 1524 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
09:02:22.0112 1524 MTConfig - ok
09:02:22.0128 1524 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
09:02:22.0128 1524 Mup - ok
09:02:22.0206 1524 [ F2840DBFE9322F35557219AE82CC4597 ] N360 C:\Program Files (x86)\Norton 360\Engine\6.4.0.9\ccSvcHst.exe
09:02:22.0206 1524 N360 - ok
09:02:22.0253 1524 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
09:02:22.0268 1524 napagent - ok
09:02:22.0299 1524 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
09:02:22.0299 1524 NativeWifiP - ok
09:02:22.0346 1524 [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\VirusDefs\20121017.019\ENG64.SYS
09:02:22.0346 1524 NAVENG - ok
09:02:22.0409 1524 [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\VirusDefs\20121017.019\EX64.SYS
09:02:22.0440 1524 NAVEX15 - ok
09:02:22.0487 1524 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
09:02:22.0502 1524 NDIS - ok
09:02:22.0533 1524 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
09:02:22.0533 1524 NdisCap - ok
09:02:22.0565 1524 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
09:02:22.0565 1524 NdisTapi - ok
09:02:22.0596 1524 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
09:02:22.0596 1524 Ndisuio - ok
09:02:22.0643 1524 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
09:02:22.0643 1524 NdisWan - ok
09:02:22.0674 1524 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
09:02:22.0674 1524 NDProxy - ok
09:02:22.0689 1524 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
09:02:22.0689 1524 NetBIOS - ok
09:02:22.0736 1524 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
09:02:22.0736 1524 NetBT - ok
09:02:22.0752 1524 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
09:02:22.0752 1524 Netlogon - ok
09:02:22.0799 1524 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
09:02:22.0799 1524 Netman - ok
09:02:22.0814 1524 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
09:02:22.0830 1524 netprofm - ok
09:02:22.0845 1524 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:02:22.0845 1524 NetTcpPortSharing - ok
09:02:22.0955 1524 [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys
09:02:23.0017 1524 netw5v64 - ok
09:02:23.0048 1524 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
09:02:23.0048 1524 nfrd960 - ok
09:02:23.0064 1524 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
09:02:23.0064 1524 NlaSvc - ok
09:02:23.0095 1524 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
09:02:23.0095 1524 Npfs - ok
09:02:23.0111 1524 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
09:02:23.0111 1524 nsi - ok
09:02:23.0126 1524 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
09:02:23.0126 1524 nsiproxy - ok
09:02:23.0204 1524 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
09:02:23.0220 1524 Ntfs - ok
09:02:23.0235 1524 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
09:02:23.0235 1524 Null - ok
09:02:23.0251 1524 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
09:02:23.0251 1524 nvraid - ok
09:02:23.0298 1524 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
09:02:23.0298 1524 nvstor - ok
09:02:23.0329 1524 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
09:02:23.0329 1524 nv_agp - ok
--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast
reply to speedtennis

09:02:23.0391 1524 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
09:02:23.0407 1524 odserv - ok
09:02:23.0438 1524 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
09:02:23.0438 1524 ohci1394 - ok
09:02:23.0469 1524 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:02:23.0469 1524 ose - ok
09:02:23.0501 1524 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
09:02:23.0516 1524 p2pimsvc - ok
09:02:23.0547 1524 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
09:02:23.0547 1524 p2psvc - ok
09:02:23.0563 1524 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
09:02:23.0563 1524 Parport - ok
09:02:23.0594 1524 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
09:02:23.0594 1524 partmgr - ok
09:02:23.0625 1524 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
09:02:23.0625 1524 PcaSvc - ok
09:02:23.0672 1524 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
09:02:23.0672 1524 pci - ok
09:02:23.0688 1524 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
09:02:23.0688 1524 pciide - ok
09:02:23.0719 1524 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
09:02:23.0719 1524 pcmcia - ok
09:02:23.0750 1524 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
09:02:23.0750 1524 pcw - ok
09:02:23.0766 1524 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
09:02:23.0766 1524 PEAUTH - ok
09:02:23.0859 1524 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
09:02:23.0859 1524 PerfHost - ok
09:02:23.0922 1524 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
09:02:23.0937 1524 pla - ok
09:02:23.0969 1524 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
09:02:23.0984 1524 PlugPlay - ok
09:02:24.0015 1524 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
09:02:24.0015 1524 PNRPAutoReg - ok
09:02:24.0031 1524 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
09:02:24.0031 1524 PNRPsvc - ok
09:02:24.0047 1524 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
09:02:24.0047 1524 PolicyAgent - ok
09:02:24.0093 1524 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
09:02:24.0093 1524 Power - ok
09:02:24.0125 1524 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
09:02:24.0140 1524 PptpMiniport - ok
09:02:24.0156 1524 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
09:02:24.0156 1524 Processor - ok
09:02:24.0187 1524 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
09:02:24.0187 1524 ProfSvc - ok
09:02:24.0203 1524 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
09:02:24.0203 1524 ProtectedStorage - ok
09:02:24.0249 1524 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
09:02:24.0249 1524 Psched - ok
09:02:24.0296 1524 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
09:02:24.0312 1524 ql2300 - ok
09:02:24.0327 1524 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
09:02:24.0327 1524 ql40xx - ok
09:02:24.0359 1524 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
09:02:24.0359 1524 QWAVE - ok
09:02:24.0374 1524 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
09:02:24.0390 1524 QWAVEdrv - ok
09:02:24.0390 1524 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
09:02:24.0390 1524 RasAcd - ok
09:02:24.0421 1524 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
09:02:24.0421 1524 RasAgileVpn - ok
09:02:24.0437 1524 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
09:02:24.0437 1524 RasAuto - ok
09:02:24.0483 1524 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
09:02:24.0483 1524 Rasl2tp - ok
09:02:24.0499 1524 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
09:02:24.0499 1524 RasMan - ok
09:02:24.0515 1524 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
09:02:24.0515 1524 RasPppoe - ok
09:02:24.0546 1524 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
09:02:24.0561 1524 RasSstp - ok
09:02:24.0608 1524 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
09:02:24.0608 1524 rdbss - ok
09:02:24.0624 1524 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
09:02:24.0624 1524 rdpbus - ok
09:02:24.0639 1524 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
09:02:24.0639 1524 RDPCDD - ok
09:02:24.0655 1524 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
09:02:24.0655 1524 RDPENCDD - ok
09:02:24.0686 1524 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
09:02:24.0686 1524 RDPREFMP - ok
09:02:24.0733 1524 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
09:02:24.0733 1524 RDPWD - ok
09:02:24.0764 1524 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
09:02:24.0764 1524 rdyboost - ok
09:02:24.0795 1524 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
09:02:24.0811 1524 RemoteAccess - ok
09:02:24.0827 1524 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
09:02:24.0827 1524 RemoteRegistry - ok
09:02:24.0889 1524 [ 498EB62A160674E793FA40FD65390625 ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
09:02:24.0889 1524 RichVideo - ok
09:02:24.0920 1524 [ 7B04C9843921AB1F695FB395422C5360 ] RimUsb C:\Windows\system32\Drivers\RimUsb_AMD64.sys
09:02:24.0920 1524 RimUsb - ok
09:02:24.0951 1524 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
09:02:24.0951 1524 RpcEptMapper - ok
09:02:24.0967 1524 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
09:02:24.0967 1524 RpcLocator - ok
09:02:24.0998 1524 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
09:02:25.0014 1524 RpcSs - ok
09:02:25.0029 1524 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
09:02:25.0029 1524 rspndr - ok
09:02:25.0045 1524 RSUSBSTOR - ok
09:02:25.0076 1524 [ B49DC435AE3695BAC5623DD94B05732D ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
09:02:25.0076 1524 RTL8167 - ok
09:02:25.0076 1524 RtsUIR - ok
09:02:25.0092 1524 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
09:02:25.0092 1524 SamSs - ok
09:02:25.0123 1524 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
09:02:25.0123 1524 sbp2port - ok
09:02:25.0154 1524 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
09:02:25.0154 1524 SCardSvr - ok
09:02:25.0185 1524 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
09:02:25.0185 1524 scfilter - ok
09:02:25.0232 1524 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
09:02:25.0248 1524 Schedule - ok
09:02:25.0295 1524 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
09:02:25.0295 1524 SCPolicySvc - ok
09:02:25.0341 1524 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys
09:02:25.0341 1524 sdbus - ok
09:02:25.0373 1524 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
09:02:25.0388 1524 SDRSVC - ok
09:02:25.0419 1524 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
09:02:25.0419 1524 secdrv - ok
09:02:25.0435 1524 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
09:02:25.0435 1524 seclogon - ok
09:02:25.0482 1524 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
09:02:25.0497 1524 SENS - ok
09:02:25.0529 1524 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
09:02:25.0529 1524 SensrSvc - ok
09:02:25.0560 1524 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
09:02:25.0560 1524 Serenum - ok
09:02:25.0591 1524 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
09:02:25.0591 1524 Serial - ok
09:02:25.0638 1524 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
09:02:25.0638 1524 sermouse - ok
09:02:25.0685 1524 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
09:02:25.0685 1524 SessionEnv - ok
09:02:25.0731 1524 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
09:02:25.0731 1524 sffdisk - ok
09:02:25.0747 1524 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
09:02:25.0747 1524 sffp_mmc - ok
09:02:25.0778 1524 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
09:02:25.0778 1524 sffp_sd - ok
09:02:25.0778 1524 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
09:02:25.0778 1524 sfloppy - ok
09:02:25.0841 1524 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
09:02:25.0856 1524 SharedAccess - ok
09:02:25.0887 1524 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
09:02:25.0903 1524 ShellHWDetection - ok
09:02:25.0919 1524 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
09:02:25.0919 1524 SiSRaid2 - ok
09:02:25.0934 1524 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
09:02:25.0934 1524 SiSRaid4 - ok
09:02:25.0950 1524 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
09:02:25.0950 1524 Smb - ok
09:02:25.0997 1524 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
09:02:25.0997 1524 SNMPTRAP - ok
09:02:25.0997 1524 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
09:02:25.0997 1524 spldr - ok
09:02:26.0043 1524 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
09:02:26.0059 1524 Spooler - ok
09:02:26.0153 1524 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
09:02:26.0199 1524 sppsvc - ok
09:02:26.0215 1524 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
09:02:26.0231 1524 sppuinotify - ok
09:02:26.0309 1524 [ 891793E00432FA055CF040605C260E49 ] SRTSP C:\Windows\System32\Drivers\N360x64\0604000.009\SRTSP64.SYS
09:02:26.0324 1524 SRTSP - ok
09:02:26.0340 1524 [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX C:\Windows\system32\drivers\N360x64\0604000.009\SRTSPX64.SYS
09:02:26.0340 1524 SRTSPX - ok
09:02:26.0387 1524 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
09:02:26.0387 1524 srv - ok
09:02:26.0418 1524 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
09:02:26.0418 1524 srv2 - ok
09:02:26.0449 1524 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS
09:02:26.0449 1524 SrvHsfHDA - ok
09:02:26.0496 1524 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS
09:02:26.0511 1524 SrvHsfV92 - ok
09:02:26.0558 1524 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
09:02:26.0574 1524 SrvHsfWinac - ok
09:02:26.0589 1524 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
09:02:26.0589 1524 srvnet - ok
09:02:26.0621 1524 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
09:02:26.0621 1524 SSDPSRV - ok
09:02:26.0636 1524 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
09:02:26.0636 1524 SstpSvc - ok
09:02:26.0714 1524 [ 810199DCC3BDC38304D7D649992EA7BC ] STacSV C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe
09:02:26.0714 1524 STacSV - ok
09:02:26.0745 1524 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
09:02:26.0745 1524 stexstor - ok
09:02:26.0777 1524 [ ED1722F43CE61409EF68340402D6267D ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys
09:02:26.0777 1524 STHDA - ok
09:02:26.0823 1524 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
09:02:26.0839 1524 stisvc - ok
09:02:26.0870 1524 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
09:02:26.0870 1524 swenum - ok
09:02:26.0901 1524 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
09:02:26.0917 1524 swprv - ok
09:02:26.0964 1524 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\Windows\system32\drivers\N360x64\0604000.009\SYMDS64.SYS
09:02:26.0964 1524 SymDS - ok
09:02:26.0995 1524 [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA C:\Windows\system32\drivers\N360x64\0604000.009\SYMEFA64.SYS
09:02:27.0011 1524 SymEFA - ok
09:02:27.0026 1524 [ 898BB48C797483420DF523B2BBC1ECDB ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
09:02:27.0026 1524 SymEvent - ok
09:02:27.0042 1524 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\Windows\system32\drivers\N360x64\0604000.009\Ironx64.SYS
09:02:27.0042 1524 SymIRON - ok
09:02:27.0057 1524 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\Windows\System32\Drivers\N360x64\0604000.009\SYMNETS.SYS
09:02:27.0057 1524 SymNetS - ok
09:02:27.0120 1524 [ 924D711941956F7420A4925592BE8253 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
09:02:27.0120 1524 SynTP - ok
09:02:27.0182 1524 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
09:02:27.0198 1524 SysMain - ok
09:02:27.0245 1524 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
09:02:27.0245 1524 TabletInputService - ok
09:02:27.0260 1524 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
09:02:27.0260 1524 TapiSrv - ok
09:02:27.0291 1524 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
09:02:27.0291 1524 TBS - ok
09:02:27.0354 1524 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
09:02:27.0385 1524 Tcpip - ok
09:02:27.0401 1524 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
09:02:27.0416 1524 TCPIP6 - ok
09:02:27.0463 1524 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
09:02:27.0463 1524 tcpipreg - ok
09:02:27.0494 1524 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
09:02:27.0494 1524 TDPIPE - ok
09:02:27.0525 1524 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
09:02:27.0525 1524 TDTCP - ok
09:02:27.0572 1524 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
09:02:27.0572 1524 tdx - ok
09:02:27.0588 1524 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
09:02:27.0588 1524 TermDD - ok
09:02:27.0635 1524 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
09:02:27.0650 1524 TermService - ok
09:02:27.0666 1524 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
09:02:27.0666 1524 Themes - ok
09:02:27.0713 1524 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
09:02:27.0713 1524 THREADORDER - ok
09:02:27.0728 1524 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
09:02:27.0728 1524 TrkWks - ok
09:02:27.0791 1524 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
09:02:27.0791 1524 TrustedInstaller - ok
09:02:27.0837 1524 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
09:02:27.0837 1524 tssecsrv - ok
09:02:27.0869 1524 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
09:02:27.0869 1524 TsUsbFlt - ok
09:02:27.0931 1524 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
09:02:27.0931 1524 tunnel - ok
09:02:27.0947 1524 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
09:02:27.0962 1524 uagp35 - ok
09:02:27.0993 1524 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
09:02:27.0993 1524 udfs - ok
09:02:28.0025 1524 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
09:02:28.0025 1524 UI0Detect - ok
09:02:28.0056 1524 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
09:02:28.0056 1524 uliagpkx - ok
09:02:28.0087 1524 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
09:02:28.0087 1524 umbus - ok
09:02:28.0103 1524 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
09:02:28.0103 1524 UmPass - ok
09:02:28.0134 1524 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
09:02:28.0134 1524 upnphost - ok
09:02:28.0181 1524 [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
09:02:28.0181 1524 USBAAPL64 - ok
09:02:28.0196 1524 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
09:02:28.0196 1524 usbccgp - ok
09:02:28.0196 1524 USBCCID - ok
09:02:28.0243 1524 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
09:02:28.0243 1524 usbcir - ok
09:02:28.0259 1524 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
09:02:28.0259 1524 usbehci - ok
09:02:28.0274 1524 [ 44D9C773FEBFF10593B50DDFC2D6BC27 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys
09:02:28.0274 1524 usbfilter - ok
09:02:28.0305 1524 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
09:02:28.0305 1524 usbhub - ok
09:02:28.0321 1524 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
09:02:28.0321 1524 usbohci - ok
09:02:28.0337 1524 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
09:02:28.0337 1524 usbprint - ok
09:02:28.0368 1524 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
09:02:28.0383 1524 usbscan - ok
09:02:28.0415 1524 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
09:02:28.0415 1524 USBSTOR - ok
09:02:28.0430 1524 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
09:02:28.0430 1524 usbuhci - ok
09:02:28.0446 1524 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
09:02:28.0446 1524 usbvideo - ok
09:02:28.0477 1524 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
09:02:28.0477 1524 UxSms - ok
09:02:28.0493 1524 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
09:02:28.0493 1524 VaultSvc - ok
09:02:28.0508 1524 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
09:02:28.0508 1524 vdrvroot - ok
09:02:28.0555 1524 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
09:02:28.0555 1524 vds - ok
09:02:28.0571 1524 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
09:02:28.0586 1524 vga - ok
09:02:28.0586 1524 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
09:02:28.0586 1524 VgaSave - ok
09:02:28.0633 1524 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
09:02:28.0633 1524 vhdmp - ok
09:02:28.0680 1524 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
09:02:28.0680 1524 viaide - ok
09:02:28.0680 1524 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
09:02:28.0680 1524 volmgr - ok
09:02:28.0727 1524 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
09:02:28.0727 1524 volmgrx - ok
09:02:28.0742 1524 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
09:02:28.0758 1524 volsnap - ok
09:02:28.0773 1524 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
09:02:28.0773 1524 vsmraid - ok
09:02:28.0851 1524 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
09:02:28.0867 1524 VSS - ok
09:02:28.0883 1524 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
09:02:28.0883 1524 vwifibus - ok
09:02:28.0898 1524 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
09:02:28.0898 1524 vwififlt - ok
09:02:28.0945 1524 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
09:02:28.0945 1524 vwifimp - ok
09:02:28.0961 1524 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
09:02:28.0976 1524 W32Time - ok
09:02:28.0992 1524 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
09:02:28.0992 1524 WacomPen - ok
09:02:29.0039 1524 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
09:02:29.0054 1524 WANARP - ok
09:02:29.0054 1524 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
09:02:29.0054 1524 Wanarpv6 - ok
09:02:29.0101 1524 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
09:02:29.0117 1524 WatAdminSvc - ok
09:02:29.0179 1524 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
09:02:29.0195 1524 wbengine - ok
09:02:29.0226 1524 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
09:02:29.0226 1524 WbioSrvc - ok
09:02:29.0273 1524 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
09:02:29.0273 1524 wcncsvc - ok
09:02:29.0288 1524 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
09:02:29.0288 1524 WcsPlugInService - ok
09:02:29.0319 1524 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
09:02:29.0319 1524 Wd - ok
09:02:29.0351 1524 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
09:02:29.0366 1524 Wdf01000 - ok
09:02:29.0382 1524 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
09:02:29.0382 1524 WdiServiceHost - ok
09:02:29.0382 1524 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
09:02:29.0382 1524 WdiSystemHost - ok
09:02:29.0429 1524 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
09:02:29.0429 1524 WebClient - ok
09:02:29.0475 1524 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
09:02:29.0475 1524 Wecsvc - ok
09:02:29.0491 1524 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
09:02:29.0507 1524 wercplsupport - ok
09:02:29.0538 1524 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
09:02:29.0553 1524 WerSvc - ok
09:02:29.0600 1524 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
09:02:29.0600 1524 WfpLwf - ok
09:02:29.0631 1524 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
09:02:29.0631 1524 WIMMount - ok
09:02:29.0647 1524 WinDefend - ok
09:02:29.0647 1524 WinHttpAutoProxySvc - ok
09:02:29.0694 1524 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
09:02:29.0694 1524 Winmgmt - ok
09:02:29.0756 1524 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
09:02:29.0787 1524 WinRM - ok
09:02:29.0819 1524 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
09:02:29.0819 1524 WinUsb - ok
09:02:29.0850 1524 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
09:02:29.0865 1524 Wlansvc - ok
09:02:29.0881 1524 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
09:02:29.0881 1524 WmiAcpi - ok
09:02:29.0912 1524 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
09:02:29.0912 1524 wmiApSrv - ok
09:02:29.0928 1524 WMPNetworkSvc - ok
09:02:29.0943 1524 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
09:02:29.0943 1524 WPCSvc - ok
09:02:29.0975 1524 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
09:02:29.0990 1524 WPDBusEnum - ok
09:02:30.0006 1524 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
09:02:30.0006 1524 ws2ifsl - ok
09:02:30.0021 1524 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
09:02:30.0021 1524 wscsvc - ok
09:02:30.0037 1524 WSearch - ok
09:02:30.0115 1524 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
09:02:30.0131 1524 wuauserv - ok
09:02:30.0177 1524 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
09:02:30.0177 1524 WudfPf - ok
09:02:30.0193 1524 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
09:02:30.0193 1524 WUDFRd - ok
09:02:30.0209 1524 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
09:02:30.0224 1524 wudfsvc - ok
09:02:30.0240 1524 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
09:02:30.0255 1524 WwanSvc - ok
09:02:30.0287 1524 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys
09:02:30.0287 1524 yukonw7 - ok
09:02:30.0302 1524 ================ Scan global ===============================
09:02:30.0333 1524 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
09:02:30.0380 1524 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
09:02:30.0380 1524 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
09:02:30.0411 1524 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
09:02:30.0427 1524 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
09:02:30.0443 1524 [Global] - ok
09:02:30.0443 1524 ================ Scan MBR ==================================
09:02:30.0443 1524 [ D9C369DDA37A0CC44A095EF41713790A ] \Device\Harddisk0\DR0
09:02:30.0692 1524 \Device\Harddisk0\DR0 - ok
09:02:30.0692 1524 ================ Scan VBR ==================================
09:02:30.0692 1524 [ FD5CA236198950CE02F626C1E98FEAF1 ] \Device\Harddisk0\DR0\Partition1
09:02:30.0692 1524 \Device\Harddisk0\DR0\Partition1 - ok
09:02:30.0708 1524 [ 4D649CAD17182D4089A68ABA2A801DF4 ] \Device\Harddisk0\DR0\Partition2
09:02:30.0708 1524 \Device\Harddisk0\DR0\Partition2 - ok
09:02:30.0739 1524 [ 5DBA71C2637E1D57C497B8228631FCE4 ] \Device\Harddisk0\DR0\Partition3
09:02:30.0739 1524 \Device\Harddisk0\DR0\Partition3 - ok
09:02:30.0755 1524 [ 5CE24594F658978876A7D22727C3A726 ] \Device\Harddisk0\DR0\Partition4
09:02:30.0755 1524 \Device\Harddisk0\DR0\Partition4 - ok
09:02:30.0755 1524 ============================================================
09:02:30.0755 1524 Scan finished
09:02:30.0755 1524 ============================================================
09:02:30.0770 2576 Detected object count: 1
09:02:30.0770 2576 Actual detected object count: 1
09:02:45.0481 2576 c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll - copied to quarantine
09:02:45.0481 2576 HKLM\SYSTEM\ControlSet001\services\Akamai - will be deleted on reboot
09:02:45.0543 2576 HKLM\SYSTEM\ControlSet002\services\Akamai - will be deleted on reboot
09:02:45.0715 2576 c:\program files (x86)\common files\akamai/netsession_win_ca0e279.dll - will be deleted on reboot
09:02:45.0715 2576 Akamai ( HiddenFile.Multi.Generic ) - User select action: Delete
09:03:28.0568 3828 Deinitialize success
--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast
reply to speedtennis

Thanks. The TDSS log contained both the prior and today's scan.

One item set for deletion on boot. If you have not already rebooted, please do so.

Then post back here and give me a status update on the issues outstanding.
--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum

Expand your moderator at work


speedtennis

@comcast.net

1 edit
reply to LoPhatPhuud

Re: [Trojan] Laptop Infected with Audio Advertisements

The issues seem to be resolved and the lap top is functioning normal.

Thank you! You are the man!



LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast

1 recommendation

reply to speedtennis

Glad to be able to help. Time to cleanup.

Use Add/Remove Programs to uninstall:
1. Sophos AntiRootkit
2, TDSS Killer

Then...

Cleaning Up:

Delete TFC:

  • Delete the TFC icon on your Desktop

Delete OTL:
  • Double click the OTL icon on your Desktop
  • Press the 'Cleanup' button

Delete Security Check:
  • Delete the SecurityCheck icon on your Desktop

Delete Malware Bytes:
  • We recommend that you keep MalwareBytes (MBAM) and run it every week. There is no charge to keep the program however the real time protection will stop after the trial period. Be sure to update the definitions before each use. If you decide not to keep MBAM, use Add/Remove Programs to uninstall it.

Delete AdwCleaner:
  • Double click the AdwCleaner icon on your Desktop
  • Press the 'Uninstall' button

Other Programs:
  • If we asked you to install any other programs that are not removed by the OTL Cleanup procedure, we will provide separate removal instructions.

--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum


speedtennis

@comcast.net

One more question before I do the cleanup. In Internet Explorer, in the Manage Add-ons window, I have the following in the list:

Adobe Systems Incorporated (no comma)
>Shockwave ActiveX Control
>Shockwave Flash Object

Adobe Systems, Incorporated
>Adobe PDF Link Helper

I have read about a fake Adobe virus and am worried the first entry is this malware.

Any suggestions?



LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
reply to speedtennis

If you are concerned, use Add/Remove Programs to uninstall the programs (Flash, Shockwave, etc). Then reboot, go to Adobe, download the installer and re-install. You always want the initial install and all updates to come from Adobe only.



speedtennis

@comcast.net

OK, I followed the clean up instructions, but could not find "TDSS Killer' in the Add/Remove Programs.

Also still on my desktop are the following items:

1. Sophos Virus Removal Tool.exe

2. sar_15_sfx.exe

3. All of the text logs from all the scans we ran

Please advise.



LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
reply to speedtennis

OK. TDSS Killer was removed by the OTLCleanup procedure. I had added the additional instruction as a safety measure to ensure it was removed.

You can just delete the other programs and files/folders



speedtennis

@comcast.net

Thanks again for all your help!

FYI... TDSS Killer was in my Downloads folder, because there was no option to save it to desktop. So I just deleted it from there.

I also restored the settings in "Show Hidden Files and Folders"