5/28/2014 Songodin's Malware Issues

Solved
By Songodin
May 29, 2014
  1. New topic as previously discussed with Broni.

    Logs to follow.
  2. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 5/28/2014
    Scan Time: 8:17:17 PM
    Logfile:
    Administrator: Yes

    Version: 2.00.1.1004
    Malware Database: v2014.05.28.09
    Rootkit Database: v2014.05.21.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Chameleon: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: Edward

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 316707
    Time Elapsed: 31 min, 14 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Shuriken: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 2
    Trojan.Agent.ED, HKU\S-1-5-21-3325668747-2427616362-1545595919-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Afibaxbuibf, C:\Users\Edward\AppData\Roaming\Douxfe\okotduo.exe, Quarantined, [17b24f073c3fa29451cb55ec649c07f9]
    Trojan.Agent.ED, HKU\S-1-5-21-3325668747-2427616362-1545595919-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Afibaxbuibf, C:\Users\Edward\AppData\Roaming\Douxfe\okotduo.exe, Quarantined, [17b24f073c3fa29451cb55ec649c07f9]

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 12
    Trojan.Agent.ED, C:\Users\Edward\AppData\Roaming\Douxfe\okotduo.exe, Quarantined, [17b24f073c3fa29451cb55ec649c07f9],
    Trojan.Zbot, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_28013b5b.exe, Quarantined, [a7223026a8d3e94d76f8354c2bd6629e],
    Trojan.Ransom.ED, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_42177c28.exe, Quarantined, [4584490d05760a2cb230172e36ca30d0],
    Trojan.Zbot, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_7a4be8b0.exe, Quarantined, [f5d49bbb83f8072f77f5631ee31eb050],
    Spyware.Zbot, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_7fc85397.exe, Quarantined, [9831d4827cff4de9e2aacab52bd605fb],
    Spyware.Zbot.ED, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_b1cab3e6.exe, Quarantined, [ffcab99db3c8d95d364aceac8f72bd43],
    Trojan.Agent.ED, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_be86499a.exe, Quarantined, [3495aea89edd3006e933320f6799da26],
    Trojan.Zbot, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_cfc28aa5.exe, Quarantined, [6861df77f586092da6c6bbc661a021df],
    Spyware.Zbot, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_d521ccd0.exe, Quarantined, [cbfebc9a453640f6a0ec91ee27daef11],
    Trojan.Ransom.ED, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_ea3ecc91.exe, Quarantined, [1eab89cd5e1de6508a58073e46ba47b9],
    Trojan.Ransom.ED, C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_f89b8b19.exe, Quarantined, [b71215419ae1a98d4e94e65ff60a02fe],
    Trojan.Zbot, C:\Users\Edward\AppData\Local\wltcfomv.exe, Quarantined, [e6e3b79fd0ab69cdf678a3de956cb848],

    Physical Sectors: 0
    (No malicious items detected)


    (end)
  3. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows 7 Ultimate
    Boot Device: \Device\HarddiskVolume1
    Install Date: 11/5/2010 1:34:52 PM
    System Uptime: 5/28/2014 11:03:32 PM (0 hours ago)
    .
    Motherboard: ASUSTeK Computer INC. | | M4A89GTD-PRO/USB3
    Processor: AMD Athlon(tm) II X2 255 Processor | AM3 | 3100/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 931 GiB total, 513.567 GiB free.
    D: is CDROM ()
    E: is FIXED (NTFS) - 233 GiB total, 211.417 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP268: 5/28/2014 7:55:53 PM - New Fix
    RP269: 5/28/2014 10:58:51 PM - Malwarebytes Anti-Rootkit Restore Point
    .
    ==== Image File Execution Options =============
    .
    .
    ==== Installed Programs ======================
    .
    .
    ==== End Of File ===========================
  4. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    RogueKiller V9.0.0.0 (x64) [May 29 2014] by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : http://www.adlice.com/softwares/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Edward [Admin rights]
    Mode : Remove -- Date : 05/29/2014 07:46:36

    ¤¤¤ Bad processes : 1 ¤¤¤
    [Suspicious.Path] mbar.exe -- C:\Users\Edward\Desktop\Cleanup\mbar\mbar.exe[7] -> ERROR [12]

    ¤¤¤ Registry Entries : 22 ¤¤¤
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{13073585-9D0F-453C-BB4F-631B179C466D} | NameServer : 156.154.70.22,156.154.71.22 -> NOT SELECTED
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{13073585-9D0F-453C-BB4F-631B179C466D} | NameServer : 156.154.70.22,156.154.71.22 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowHelp : 0 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyComputer : 2 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 0 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 0 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 0 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowPrinters : 0 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowSetProgramAccessAndDefaults : 0 -> NOT SELECTED
    [PUM.StartMenu] (X64) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowRecentDocs : 0 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowHelp : 0 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyComputer : 2 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 0 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 0 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 0 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowPrinters : 0 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowSetProgramAccessAndDefaults : 0 -> NOT SELECTED
    [PUM.StartMenu] (X86) HKEY_USERS\RK_Administrator_ON_E_9865\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowRecentDocs : 0 -> NOT SELECTED
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\RK_Software_ON_E_5C4C\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\RK_Software_ON_E_5C4C\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED

    ¤¤¤ Scheduled tasks : 0 ¤¤¤

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ HOSTS File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 ¤¤¤

    ¤¤¤ Web browsers : 0 ¤¤¤

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: ST31000528AS ATA Device +++++
    --- User ---
    [MBR] 0e782c303e740bad53080c4c5d95714a
    [BSP] 3f6e389b25de9df6bbd15581333ce3a4 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
    1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 953767 MB
    User = LL1 ... OK
    User = LL2 ... OK

    +++++ PhysicalDrive1: ST3250820AS ATA Device +++++
    --- User ---
    [MBR] 86d3e2af4e961d20889cb9a35d6d326b
    [BSP] 3cc90a6a3ede0170b44e8a2d5b415624 : Windows XP MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 MB
    User = LL1 ... OK
    User = LL2 ... OK


    ============================================
    RKreport_SCN_05292014_074622.log
  5. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    Malwarebytes Anti-Rootkit BETA 1.07.0.1009
    www.malwarebytes.org

    Database version: v2014.05.29.09

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 11.0.9600.17105
    Edward :: BAHAMUT [administrator]

    5/29/2014 12:19:53 PM
    mbar-log-2014-05-29 (12-19-53).txt

    Scan type: Quick scan
    Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
    Scan options disabled:
    Objects scanned: 312792
    Time elapsed: 16 minute(s), 58 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 1
    C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_c9f730fd.exe (Trojan.PWS.Zbot) -> Delete on reboot.

    Physical Sectors Detected: 0
    (No malicious items detected)

    (end)
  6. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    ---------------------------------------
    Malwarebytes Anti-Rootkit BETA 1.07.0.1009

    (c) Malwarebytes Corporation 2011-2012

    OS version: 6.1.7601 Windows 7 Service Pack 1 x64

    Account is Administrative

    Internet Explorer version: 11.0.9600.17105

    File system is: NTFS
    Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
    CPU speed: 3.110000 GHz
    Memory total: 4293058560, free: 2069471232

    Downloaded database version: v2014.05.28.09
    Downloaded database version: v2014.05.21.01
    =======================================
    Initializing...
    Done!
    Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
    Done!
    Drive 0
    Scanning MBR on drive 0...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: BF4CB8C9

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048 Numsec = 204800
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 206848 Numsec = 1953314816

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Disk Size: 1000204886016 bytes
    Sector size: 512 bytes

    Scanning physical sectors of unpartitioned space on drive 0 (1-2047-1953505168-1953525168)...
    Done!
    Drive 1
    Scanning MBR on drive 1...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: 9D289D28

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 63 Numsec = 488375937
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Disk Size: 250059350016 bytes
    Sector size: 512 bytes

    Done!
    Infected: C:\Users\Edward\AppData\Roaming\Douxfe\okotduo.exe --> [Trojan.Agent.ED]
    Infected: HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run|Afibaxbuibf --> [Trojan.Agent.ED]
    Scan finished
    Creating System Restore point...
    Cleaning up...
    Removal scheduling successful. System shutdown needed.
    Removal scheduling successful. System shutdown needed.
    System shutdown occurred
    =======================================


    ---------------------------------------
    Malwarebytes Anti-Rootkit BETA 1.07.0.1009

    (c) Malwarebytes Corporation 2011-2012

    OS version: 6.1.7601 Windows 7 Service Pack 1 x64

    Account is Administrative

    Internet Explorer version: 11.0.9600.17105

    File system is: NTFS
    Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
    CPU speed: 3.110000 GHz
    Memory total: 4293058560, free: 1945755648

    Downloaded database version: v2014.05.29.01
    Downloaded database version: v2014.05.29.02
    Downloaded database version: v2014.05.29.03
    Downloaded database version: v2014.05.29.04
    Downloaded database version: v2014.05.29.05
    Downloaded database version: v2014.05.29.06
    =======================================
    Initializing...
    ------------ Kernel report ------------
    05/29/2014 07:36:43
    ------------ Loaded modules -----------
    \SystemRoot\system32\ntoskrnl.exe
    \SystemRoot\system32\hal.dll
    \SystemRoot\system32\kdcom.dll
    \SystemRoot\system32\mcupdate_AuthenticAMD.dll
    \SystemRoot\system32\PSHED.dll
    \SystemRoot\system32\CLFS.SYS
    \SystemRoot\system32\CI.dll
    \SystemRoot\System32\drivers\xvnews.sys
    \SystemRoot\System32\drivers\imofugc.sys
    \SystemRoot\system32\drivers\Wdf01000.sys
    \SystemRoot\system32\drivers\WDFLDR.SYS
    \SystemRoot\system32\drivers\ACPI.sys
    \SystemRoot\system32\drivers\WMILIB.SYS
    \SystemRoot\system32\drivers\msisadrv.sys
    \SystemRoot\system32\drivers\pci.sys
    \SystemRoot\system32\drivers\vdrvroot.sys
    \SystemRoot\System32\drivers\partmgr.sys
    \SystemRoot\system32\drivers\volmgr.sys
    \SystemRoot\System32\drivers\volmgrx.sys
    \SystemRoot\system32\drivers\pciide.sys
    \SystemRoot\system32\drivers\PCIIDEX.SYS
    \SystemRoot\System32\drivers\mountmgr.sys
    \SystemRoot\system32\drivers\vmbus.sys
    \SystemRoot\system32\drivers\winhv.sys
    \SystemRoot\system32\drivers\atapi.sys
    \SystemRoot\system32\drivers\ataport.SYS
    \SystemRoot\system32\drivers\amdxata.sys
    \SystemRoot\system32\drivers\fltmgr.sys
    \SystemRoot\system32\drivers\fileinfo.sys
    \SystemRoot\System32\Drivers\Ntfs.sys
    \SystemRoot\System32\Drivers\msrpc.sys
    \SystemRoot\System32\Drivers\ksecdd.sys
    \SystemRoot\System32\Drivers\cng.sys
    \SystemRoot\System32\drivers\pcw.sys
    \SystemRoot\System32\Drivers\Fs_Rec.sys
    \SystemRoot\system32\drivers\ndis.sys
    \SystemRoot\system32\drivers\NETIO.SYS
    \SystemRoot\System32\Drivers\ksecpkg.sys
    \SystemRoot\System32\drivers\tcpip.sys
    \SystemRoot\System32\drivers\fwpkclnt.sys
    \SystemRoot\system32\drivers\vmstorfl.sys
    \SystemRoot\system32\drivers\volsnap.sys
    \SystemRoot\System32\Drivers\spldr.sys
    \SystemRoot\System32\drivers\rdyboost.sys
    \SystemRoot\System32\Drivers\mup.sys
    \SystemRoot\System32\drivers\hwpolicy.sys
    \SystemRoot\System32\DRIVERS\fvevol.sys
    \SystemRoot\system32\DRIVERS\disk.sys
    \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
    \SystemRoot\system32\ntoskrnl.exe
    \SystemRoot\system32\DRIVERS\cdrom.sys
    \SystemRoot\System32\Drivers\Beep.SYS
    \SystemRoot\System32\drivers\vga.sys
    \SystemRoot\System32\drivers\VIDEOPRT.SYS
    \SystemRoot\System32\drivers\watchdog.sys
    \SystemRoot\System32\DRIVERS\RDPCDD.sys
    \SystemRoot\system32\drivers\rdpencdd.sys
    \SystemRoot\system32\drivers\rdprefmp.sys
    \SystemRoot\System32\Drivers\Msfs.SYS
    \SystemRoot\System32\Drivers\Npfs.SYS
    \??\c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys
    \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys
    \SystemRoot\system32\DRIVERS\tdx.sys
    \SystemRoot\system32\DRIVERS\TDI.SYS
    \SystemRoot\system32\drivers\afd.sys
    \SystemRoot\System32\DRIVERS\netbt.sys
    \SystemRoot\system32\DRIVERS\wfplwf.sys
    \SystemRoot\system32\DRIVERS\pacer.sys
    \SystemRoot\system32\DRIVERS\netbios.sys
    \SystemRoot\system32\DRIVERS\serial.sys
    \SystemRoot\system32\DRIVERS\wanarp.sys
    \SystemRoot\system32\drivers\termdd.sys
    \SystemRoot\system32\DRIVERS\rdbss.sys
    \SystemRoot\system32\drivers\nsiproxy.sys
    \SystemRoot\system32\drivers\mssmbios.sys
    \SystemRoot\System32\drivers\discache.sys
    \SystemRoot\system32\drivers\csc.sys
    \SystemRoot\System32\Drivers\dfsc.sys
    \SystemRoot\system32\DRIVERS\blbdrive.sys
    \SystemRoot\system32\DRIVERS\tunnel.sys
    \SystemRoot\system32\DRIVERS\amdppm.sys
    \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    \SystemRoot\System32\Drivers\nvBridge.kmd
    \SystemRoot\System32\drivers\dxgkrnl.sys
    \SystemRoot\System32\drivers\dxgmms1.sys
    \SystemRoot\system32\DRIVERS\nusb3xhc.sys
    \SystemRoot\system32\DRIVERS\USBD.SYS
    \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
    \SystemRoot\system32\DRIVERS\usbohci.sys
    \SystemRoot\system32\DRIVERS\USBPORT.SYS
    \SystemRoot\system32\DRIVERS\usbehci.sys
    \SystemRoot\system32\drivers\HDAudBus.sys
    \SystemRoot\system32\DRIVERS\serenum.sys
    \SystemRoot\system32\DRIVERS\ASACPI.sys
    \SystemRoot\system32\drivers\1394ohci.sys
    \SystemRoot\system32\DRIVERS\Rt64win7.sys
    \SystemRoot\system32\drivers\wmiacpi.sys
    \SystemRoot\system32\drivers\CompositeBus.sys
    \SystemRoot\system32\DRIVERS\AgileVpn.sys
    \SystemRoot\system32\DRIVERS\rasl2tp.sys
    \SystemRoot\system32\DRIVERS\ndistapi.sys
    \SystemRoot\system32\DRIVERS\ndiswan.sys
    \SystemRoot\system32\DRIVERS\raspppoe.sys
    \SystemRoot\system32\DRIVERS\raspptp.sys
    \SystemRoot\system32\DRIVERS\rassstp.sys
    \SystemRoot\system32\DRIVERS\hamachi.sys
    \SystemRoot\system32\DRIVERS\rdpbus.sys
    \SystemRoot\system32\DRIVERS\kbdclass.sys
    \SystemRoot\system32\DRIVERS\mouclass.sys
    \SystemRoot\system32\drivers\swenum.sys
    \SystemRoot\system32\drivers\ks.sys
    \SystemRoot\system32\DRIVERS\umbus.sys
    \SystemRoot\system32\DRIVERS\nusb3hub.sys
    \SystemRoot\system32\DRIVERS\usbhub.sys
    \SystemRoot\System32\Drivers\NDProxy.SYS
    \SystemRoot\system32\drivers\HdAudio.sys
    \SystemRoot\system32\drivers\portcls.sys
    \SystemRoot\system32\drivers\drmk.sys
    \SystemRoot\system32\drivers\ksthunk.sys
    \SystemRoot\System32\win32k.sys
    \SystemRoot\System32\drivers\Dxapi.sys
    \SystemRoot\system32\DRIVERS\monitor.sys
    \SystemRoot\system32\DRIVERS\usbccgp.sys
    \SystemRoot\System32\Drivers\crashdmp.sys
    \SystemRoot\System32\Drivers\dump_dumpata.sys
    \SystemRoot\System32\Drivers\dump_atapi.sys
    \SystemRoot\System32\Drivers\dump_dumpfve.sys
    \SystemRoot\system32\DRIVERS\hidusb.sys
    \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
    \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
    \SystemRoot\system32\drivers\Lycosa.sys
    \SystemRoot\system32\DRIVERS\kbdhid.sys
    \SystemRoot\system32\DRIVERS\mouhid.sys
    \SystemRoot\System32\TSDDD.dll
    \SystemRoot\System32\cdd.dll
    \SystemRoot\system32\drivers\luafv.sys
    \SystemRoot\system32\DRIVERS\lltdio.sys
    \SystemRoot\system32\DRIVERS\rspndr.sys
    \SystemRoot\system32\drivers\HTTP.sys
    \SystemRoot\system32\DRIVERS\bowser.sys
    \SystemRoot\System32\drivers\mpsdrv.sys
    \SystemRoot\system32\DRIVERS\mrxsmb.sys
    \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    \SystemRoot\system32\drivers\peauth.sys
    \SystemRoot\System32\Drivers\secdrv.SYS
    \SystemRoot\System32\DRIVERS\srvnet.sys
    \SystemRoot\System32\drivers\tcpipreg.sys
    \SystemRoot\System32\DRIVERS\srv2.sys
    \SystemRoot\System32\DRIVERS\srv.sys
    \SystemRoot\system32\DRIVERS\Trufos.sys
    \SystemRoot\System32\drivers\rdpdr.sys
    \SystemRoot\system32\drivers\tdtcp.sys
    \SystemRoot\System32\DRIVERS\tssecsrv.sys
    \SystemRoot\System32\Drivers\RDPWD.SYS
    \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys
    \SystemRoot\system32\DRIVERS\cmdguard.sys
    \SystemRoot\system32\DRIVERS\asyncmac.sys
    \??\C:\Windows\system32\drivers\mbamchameleon.sys
    \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
    \Windows\System32\ntdll.dll
    \Windows\System32\smss.exe
    \Windows\System32\apisetschema.dll
    \Windows\System32\autochk.exe
    \Windows\System32\sechost.dll
    \Windows\System32\user32.dll
    \Windows\System32\kernel32.dll
    \Windows\System32\oleaut32.dll
    \Windows\System32\shlwapi.dll
    \Windows\System32\ole32.dll
    \Windows\System32\shell32.dll
    \Windows\System32\nsi.dll
    \Windows\System32\imm32.dll
    \Windows\System32\psapi.dll
    \Windows\System32\wininet.dll
    \Windows\System32\gdi32.dll
    \Windows\System32\msctf.dll
    \Windows\System32\iertutil.dll
    \Windows\System32\imagehlp.dll
    \Windows\System32\urlmon.dll
    \Windows\System32\usp10.dll
    \Windows\System32\clbcatq.dll
    \Windows\System32\rpcrt4.dll
    \Windows\System32\comdlg32.dll
    \Windows\System32\msvcrt.dll
    \Windows\System32\normaliz.dll
    \Windows\System32\setupapi.dll
    \Windows\System32\advapi32.dll
    \Windows\System32\ws2_32.dll
    \Windows\System32\lpk.dll
    \Windows\System32\Wldap32.dll
    \Windows\System32\difxapi.dll
    \Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
    \Windows\System32\cfgmgr32.dll
    \Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
    \Windows\System32\KernelBase.dll
    \Windows\System32\wintrust.dll
    \Windows\System32\crypt32.dll
    \Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
    \Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    \Windows\System32\comctl32.dll
    \Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
    \Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
    \Windows\System32\devobj.dll
    \Windows\System32\msasn1.dll
    \Windows\SysWOW64\normaliz.dll
    ----------- End -----------
    Done!
    <<<1>>>
    Upper Device Name: \Device\Harddisk1\DR1
    Upper Device Object: 0xfffffa8004934570
    Upper Device Driver Name: \Driver\Disk\
    Lower Device Name: \Device\Ide\IdeDeviceP4T1L0-a\
    Lower Device Object: 0xfffffa80047e0060
    Lower Device Driver Name: \Driver\atapi\
    <<<1>>>
    Upper Device Name: \Device\Harddisk0\DR0
    Upper Device Object: 0xfffffa80049336b0
    Upper Device Driver Name: \Driver\Disk\
    Lower Device Name: \Device\Ide\IdeDeviceP2T1L0-5\
    Lower Device Object: 0xfffffa80047e3060
    Lower Device Driver Name: \Driver\atapi\
    <<<2>>>
    Physical Sector Size: 512
    Drive: 0, DevicePointer: 0xfffffa80049336b0, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    --------- Disk Stack ------
    DevicePointer: 0xfffffa8004933100, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xfffffa80049336b0, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    DevicePointer: 0xfffffa80044449b0, DeviceName: Unknown, DriverName: \Driver\ACPI\
    DevicePointer: 0xfffffa80047e3060, DeviceName: \Device\Ide\IdeDeviceP2T1L0-5\, DriverName: \Driver\atapi\
    ------------ End ----------
    Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    Upper DeviceData: 0x0, 0x0, 0x0
    Lower DeviceData: 0x0, 0x0, 0x0
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    <<<2>>>
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
    <<<2>>>
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    Done!
    Drive 0
    Scanning MBR on drive 0...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: BF4CB8C9

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048 Numsec = 204800
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 206848 Numsec = 1953314816

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Disk Size: 1000204886016 bytes
    Sector size: 512 bytes

    Scanning physical sectors of unpartitioned space on drive 0 (1-2047-1953505168-1953525168)...
    Done!
    Physical Sector Size: 512
    Drive: 1, DevicePointer: 0xfffffa8004934570, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    --------- Disk Stack ------
    DevicePointer: 0xfffffa8004935040, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xfffffa8004934570, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    DevicePointer: 0xfffffa80044549b0, DeviceName: Unknown, DriverName: \Driver\ACPI\
    DevicePointer: 0xfffffa80047e0060, DeviceName: \Device\Ide\IdeDeviceP4T1L0-a\, DriverName: \Driver\atapi\
    ------------ End ----------
    Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    Upper DeviceData: 0x0, 0x0, 0x0
    Lower DeviceData: 0x0, 0x0, 0x0
    Drive 1
    Scanning MBR on drive 1...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: 9D289D28

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 63 Numsec = 488375937
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Disk Size: 250059350016 bytes
    Sector size: 512 bytes

    Done!
    Scan Interrupted
    Scan was aborted.
    =======================================


    Removal queue found; removal started
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-63-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
    Removal finished
    ---------------------------------------
    Malwarebytes Anti-Rootkit BETA 1.07.0.1009

    (c) Malwarebytes Corporation 2011-2012

    OS version: 6.1.7601 Windows 7 Service Pack 1 x64

    Account is Administrative

    Internet Explorer version: 11.0.9600.17105

    File system is: NTFS
    Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
    CPU speed: 3.110000 GHz
    Memory total: 4293058560, free: 1181753344

    =======================================


    ---------------------------------------
    Malwarebytes Anti-Rootkit BETA 1.07.0.1009

    (c) Malwarebytes Corporation 2011-2012

    OS version: 6.1.7601 Windows 7 Service Pack 1 x64

    Account is Administrative

    Internet Explorer version: 11.0.9600.17105

    File system is: NTFS
    Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
    CPU speed: 3.110000 GHz
    Memory total: 4293058560, free: 2024685568

    Downloaded database version: v2014.05.29.07
    Downloaded database version: v2014.05.29.08
    Downloaded database version: v2014.05.29.09
    =======================================
    Initializing...
    ------------ Kernel report ------------
    05/29/2014 12:19:46
    ------------ Loaded modules -----------
    \SystemRoot\system32\ntoskrnl.exe
    \SystemRoot\system32\hal.dll
    \SystemRoot\system32\kdcom.dll
    \SystemRoot\system32\mcupdate_AuthenticAMD.dll
    \SystemRoot\system32\PSHED.dll
    \SystemRoot\system32\CLFS.SYS
    \SystemRoot\system32\CI.dll
    \SystemRoot\System32\drivers\xvnews.sys
    \SystemRoot\System32\drivers\imofugc.sys
    \SystemRoot\system32\drivers\Wdf01000.sys
    \SystemRoot\system32\drivers\WDFLDR.SYS
    \SystemRoot\system32\drivers\ACPI.sys
    \SystemRoot\system32\drivers\WMILIB.SYS
    \SystemRoot\system32\drivers\msisadrv.sys
    \SystemRoot\system32\drivers\pci.sys
    \SystemRoot\system32\drivers\vdrvroot.sys
    \SystemRoot\System32\drivers\partmgr.sys
    \SystemRoot\system32\drivers\volmgr.sys
    \SystemRoot\System32\drivers\volmgrx.sys
    \SystemRoot\system32\drivers\pciide.sys
    \SystemRoot\system32\drivers\PCIIDEX.SYS
    \SystemRoot\System32\drivers\mountmgr.sys
    \SystemRoot\system32\drivers\vmbus.sys
    \SystemRoot\system32\drivers\winhv.sys
    \SystemRoot\system32\drivers\atapi.sys
    \SystemRoot\system32\drivers\ataport.SYS
    \SystemRoot\system32\drivers\amdxata.sys
    \SystemRoot\system32\drivers\fltmgr.sys
    \SystemRoot\system32\drivers\fileinfo.sys
    \SystemRoot\System32\Drivers\Ntfs.sys
    \SystemRoot\System32\Drivers\msrpc.sys
    \SystemRoot\System32\Drivers\ksecdd.sys
    \SystemRoot\System32\Drivers\cng.sys
    \SystemRoot\System32\drivers\pcw.sys
    \SystemRoot\System32\Drivers\Fs_Rec.sys
    \SystemRoot\system32\drivers\ndis.sys
    \SystemRoot\system32\drivers\NETIO.SYS
    \SystemRoot\System32\Drivers\ksecpkg.sys
    \SystemRoot\System32\drivers\tcpip.sys
    \SystemRoot\System32\drivers\fwpkclnt.sys
    \SystemRoot\system32\drivers\vmstorfl.sys
    \SystemRoot\system32\drivers\volsnap.sys
    \SystemRoot\System32\Drivers\spldr.sys
    \SystemRoot\System32\drivers\rdyboost.sys
    \SystemRoot\System32\Drivers\mup.sys
    \SystemRoot\System32\drivers\hwpolicy.sys
    \SystemRoot\System32\DRIVERS\fvevol.sys
    \SystemRoot\system32\DRIVERS\disk.sys
    \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
    \SystemRoot\system32\ntoskrnl.exe
    \SystemRoot\system32\DRIVERS\cdrom.sys
    \SystemRoot\System32\Drivers\Beep.SYS
    \SystemRoot\System32\drivers\vga.sys
    \SystemRoot\System32\drivers\VIDEOPRT.SYS
    \SystemRoot\System32\drivers\watchdog.sys
    \SystemRoot\System32\DRIVERS\RDPCDD.sys
    \SystemRoot\system32\drivers\rdpencdd.sys
    \SystemRoot\system32\drivers\rdprefmp.sys
    \SystemRoot\System32\Drivers\Msfs.SYS
    \SystemRoot\System32\Drivers\Npfs.SYS
    \??\c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys
    \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys
    \SystemRoot\system32\DRIVERS\tdx.sys
    \SystemRoot\system32\DRIVERS\TDI.SYS
    \SystemRoot\system32\drivers\afd.sys
    \SystemRoot\System32\DRIVERS\netbt.sys
    \SystemRoot\system32\DRIVERS\wfplwf.sys
    \SystemRoot\system32\DRIVERS\pacer.sys
    \SystemRoot\system32\DRIVERS\netbios.sys
    \SystemRoot\system32\DRIVERS\serial.sys
    \SystemRoot\system32\DRIVERS\wanarp.sys
    \SystemRoot\system32\drivers\termdd.sys
    \SystemRoot\system32\DRIVERS\rdbss.sys
    \SystemRoot\system32\drivers\nsiproxy.sys
    \SystemRoot\system32\drivers\mssmbios.sys
    \SystemRoot\System32\drivers\discache.sys
    \SystemRoot\system32\drivers\csc.sys
    \SystemRoot\System32\Drivers\dfsc.sys
    \SystemRoot\system32\DRIVERS\blbdrive.sys
    \SystemRoot\system32\DRIVERS\tunnel.sys
    \SystemRoot\system32\DRIVERS\amdppm.sys
    \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    \SystemRoot\System32\Drivers\nvBridge.kmd
    \SystemRoot\System32\drivers\dxgkrnl.sys
    \SystemRoot\System32\drivers\dxgmms1.sys
    \SystemRoot\system32\DRIVERS\nusb3xhc.sys
    \SystemRoot\system32\DRIVERS\USBD.SYS
    \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
    \SystemRoot\system32\DRIVERS\usbohci.sys
    \SystemRoot\system32\DRIVERS\USBPORT.SYS
    \SystemRoot\system32\DRIVERS\usbehci.sys
    \SystemRoot\system32\drivers\HDAudBus.sys
    \SystemRoot\system32\DRIVERS\serenum.sys
    \SystemRoot\system32\DRIVERS\ASACPI.sys
    \SystemRoot\system32\drivers\1394ohci.sys
    \SystemRoot\system32\DRIVERS\Rt64win7.sys
    \SystemRoot\system32\drivers\wmiacpi.sys
    \SystemRoot\system32\drivers\CompositeBus.sys
    \SystemRoot\system32\DRIVERS\AgileVpn.sys
    \SystemRoot\system32\DRIVERS\rasl2tp.sys
    \SystemRoot\system32\DRIVERS\ndistapi.sys
    \SystemRoot\system32\DRIVERS\ndiswan.sys
    \SystemRoot\system32\DRIVERS\raspppoe.sys
    \SystemRoot\system32\DRIVERS\raspptp.sys
    \SystemRoot\system32\DRIVERS\rassstp.sys
    \SystemRoot\system32\DRIVERS\hamachi.sys
    \SystemRoot\system32\DRIVERS\rdpbus.sys
    \SystemRoot\system32\DRIVERS\kbdclass.sys
    \SystemRoot\system32\DRIVERS\mouclass.sys
    \SystemRoot\system32\drivers\swenum.sys
    \SystemRoot\system32\drivers\ks.sys
    \SystemRoot\system32\DRIVERS\umbus.sys
    \SystemRoot\system32\DRIVERS\nusb3hub.sys
    \SystemRoot\system32\DRIVERS\usbhub.sys
    \SystemRoot\System32\Drivers\NDProxy.SYS
    \SystemRoot\system32\drivers\HdAudio.sys
    \SystemRoot\system32\drivers\portcls.sys
    \SystemRoot\system32\drivers\drmk.sys
    \SystemRoot\system32\drivers\ksthunk.sys
    \SystemRoot\System32\win32k.sys
    \SystemRoot\System32\drivers\Dxapi.sys
    \SystemRoot\system32\DRIVERS\monitor.sys
    \SystemRoot\system32\DRIVERS\usbccgp.sys
    \SystemRoot\System32\Drivers\crashdmp.sys
    \SystemRoot\System32\Drivers\dump_dumpata.sys
    \SystemRoot\System32\Drivers\dump_atapi.sys
    \SystemRoot\System32\Drivers\dump_dumpfve.sys
    \SystemRoot\system32\DRIVERS\hidusb.sys
    \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
    \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
    \SystemRoot\system32\drivers\Lycosa.sys
    \SystemRoot\system32\DRIVERS\kbdhid.sys
    \SystemRoot\system32\DRIVERS\mouhid.sys
    \SystemRoot\System32\TSDDD.dll
    \SystemRoot\System32\cdd.dll
    \SystemRoot\system32\drivers\luafv.sys
    \SystemRoot\system32\DRIVERS\lltdio.sys
    \SystemRoot\system32\DRIVERS\rspndr.sys
    \SystemRoot\system32\drivers\HTTP.sys
    \SystemRoot\system32\DRIVERS\bowser.sys
    \SystemRoot\System32\drivers\mpsdrv.sys
    \SystemRoot\system32\DRIVERS\mrxsmb.sys
    \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    \SystemRoot\system32\drivers\peauth.sys
    \SystemRoot\System32\Drivers\secdrv.SYS
    \SystemRoot\System32\DRIVERS\srvnet.sys
    \SystemRoot\System32\drivers\tcpipreg.sys
    \SystemRoot\System32\DRIVERS\srv2.sys
    \SystemRoot\System32\DRIVERS\srv.sys
    \SystemRoot\system32\DRIVERS\Trufos.sys
    \SystemRoot\System32\drivers\rdpdr.sys
    \SystemRoot\system32\drivers\tdtcp.sys
    \SystemRoot\System32\DRIVERS\tssecsrv.sys
    \SystemRoot\System32\Drivers\RDPWD.SYS
    \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys
    \SystemRoot\system32\DRIVERS\cmdguard.sys
    \SystemRoot\system32\DRIVERS\asyncmac.sys
    \??\C:\Windows\system32\drivers\mbamchameleon.sys
    \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
    \Windows\System32\ntdll.dll
    \Windows\System32\smss.exe
    \Windows\System32\apisetschema.dll
    \Windows\System32\autochk.exe
    \Windows\System32\sechost.dll
    \Windows\System32\user32.dll
    \Windows\System32\kernel32.dll
    \Windows\System32\oleaut32.dll
    \Windows\System32\shlwapi.dll
    \Windows\System32\ole32.dll
    \Windows\System32\shell32.dll
    \Windows\System32\nsi.dll
    \Windows\System32\imm32.dll
    \Windows\System32\psapi.dll
    \Windows\System32\wininet.dll
    \Windows\System32\gdi32.dll
    \Windows\System32\msctf.dll
    \Windows\System32\iertutil.dll
    \Windows\System32\imagehlp.dll
    \Windows\System32\urlmon.dll
    \Windows\System32\usp10.dll
    \Windows\System32\clbcatq.dll
    \Windows\System32\rpcrt4.dll
    \Windows\System32\comdlg32.dll
    \Windows\System32\msvcrt.dll
    \Windows\System32\normaliz.dll
    \Windows\System32\setupapi.dll
    \Windows\System32\advapi32.dll
    \Windows\System32\ws2_32.dll
    \Windows\System32\lpk.dll
    \Windows\System32\Wldap32.dll
    \Windows\System32\difxapi.dll
    \Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
    \Windows\System32\cfgmgr32.dll
    \Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
    \Windows\System32\KernelBase.dll
    \Windows\System32\wintrust.dll
    \Windows\System32\crypt32.dll
    \Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
    \Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    \Windows\System32\comctl32.dll
    \Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
    \Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
    \Windows\System32\devobj.dll
    \Windows\System32\msasn1.dll
    \Windows\SysWOW64\normaliz.dll
    ----------- End -----------
    Done!
    <<<1>>>
    Upper Device Name: \Device\Harddisk1\DR1
    Upper Device Object: 0xfffffa8004934570
    Upper Device Driver Name: \Driver\Disk\
    Lower Device Name: \Device\Ide\IdeDeviceP4T1L0-a\
    Lower Device Object: 0xfffffa80047e0060
    Lower Device Driver Name: \Driver\atapi\
    <<<1>>>
    Upper Device Name: \Device\Harddisk0\DR0
    Upper Device Object: 0xfffffa80049336b0
    Upper Device Driver Name: \Driver\Disk\
    Lower Device Name: \Device\Ide\IdeDeviceP2T1L0-5\
    Lower Device Object: 0xfffffa80047e3060
    Lower Device Driver Name: \Driver\atapi\
    <<<2>>>
    Physical Sector Size: 512
    Drive: 0, DevicePointer: 0xfffffa80049336b0, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    --------- Disk Stack ------
    DevicePointer: 0xfffffa8004933100, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xfffffa80049336b0, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    DevicePointer: 0xfffffa80044449b0, DeviceName: Unknown, DriverName: \Driver\ACPI\
    DevicePointer: 0xfffffa80047e3060, DeviceName: \Device\Ide\IdeDeviceP2T1L0-5\, DriverName: \Driver\atapi\
    ------------ End ----------
    Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    Upper DeviceData: 0x0, 0x0, 0x0
    Lower DeviceData: 0x0, 0x0, 0x0
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    <<<2>>>
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
    <<<2>>>
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    Done!
    Drive 0
    Scanning MBR on drive 0...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: BF4CB8C9

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048 Numsec = 204800
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 206848 Numsec = 1953314816

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Disk Size: 1000204886016 bytes
    Sector size: 512 bytes

    Scanning physical sectors of unpartitioned space on drive 0 (1-2047-1953505168-1953525168)...
    Done!
    Physical Sector Size: 512
    Drive: 1, DevicePointer: 0xfffffa8004934570, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    --------- Disk Stack ------
    DevicePointer: 0xfffffa8004935040, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xfffffa8004934570, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    DevicePointer: 0xfffffa80044549b0, DeviceName: Unknown, DriverName: \Driver\ACPI\
    DevicePointer: 0xfffffa80047e0060, DeviceName: \Device\Ide\IdeDeviceP4T1L0-a\, DriverName: \Driver\atapi\
    ------------ End ----------
    Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    Upper DeviceData: 0x0, 0x0, 0x0
    Lower DeviceData: 0x0, 0x0, 0x0
    Drive 1
    Scanning MBR on drive 1...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: 9D289D28

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 63 Numsec = 488375937
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Disk Size: 250059350016 bytes
    Sector size: 512 bytes

    Done!
    Infected: C:\Users\Edward\AppData\Local\Temp\UpdateFlashPlayer_c9f730fd.exe --> [Trojan.PWS.Zbot]
    Scan finished
    Creating System Restore point...
    Cleaning up...
    Removal scheduling successful. System shutdown needed.
    System shutdown occurred
    =======================================


    Removal queue found; removal started
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-63-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
    Removal finished
  7. Broni

    Broni Malware Annihilator Posts: 46,319   +252

    [​IMG] DDS produces two logs, DDS.txt and Attach.txt.
    You posted only the latter one.
    I still need to see DDS.txt.

    [​IMG] Re-run MBAR one more time and post fresh logs.
  8. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    DDS only provided one report again. As seen in the image below that is the last window received.

    Attached Files:

    • DDS.jpg
      DDS.jpg
      File size:
      44.5 KB
      Views:
      0
  9. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    I have ran DDS.com and dds.pif from the link above 3 times each. Turning off internet and antivirus in different combinations. There is only one report generated each time.
  10. Broni

    Broni Malware Annihilator Posts: 46,319   +252

    Download TDSSKiller and save it to your desktop.
    • Doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
    • If an infected file is detected, the default action will be Cure, click on Continue.
    • If a suspicious file is detected, the default action will be Skip, click on Continue.
    • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
    • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
    • If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.
  11. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    07:11:45.0771 0x183c TDSS rootkit removing tool 3.0.0.37 May 30 2014 13:12:03
    07:12:01.0096 0x183c ============================================================
    07:12:01.0096 0x183c Current date / time: 2014/06/02 07:12:01.0096
    07:12:01.0096 0x183c SystemInfo:
    07:12:01.0096 0x183c
    07:12:01.0096 0x183c OS Version: 6.1.7601 ServicePack: 1.0
    07:12:01.0096 0x183c Product type: Workstation
    07:12:01.0096 0x183c ComputerName: BAHAMUT
    07:12:01.0097 0x183c UserName: Edward
    07:12:01.0097 0x183c Windows directory: C:\Windows
    07:12:01.0097 0x183c System windows directory: C:\Windows
    07:12:01.0097 0x183c Running under WOW64
    07:12:01.0097 0x183c Processor architecture: Intel x64
    07:12:01.0097 0x183c Number of processors: 2
    07:12:01.0097 0x183c Page size: 0x1000
    07:12:01.0097 0x183c Boot type: Normal boot
    07:12:01.0097 0x183c ============================================================
    07:12:29.0919 0x183c KLMD registered as C:\Windows\system32\drivers\01049122.sys
    07:12:35.0924 0x183c System UUID: {FFC90CE5-93B3-6153-226B-FCC3393F7605}
    07:12:55.0476 0x183c Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    07:12:56.0111 0x183c Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    07:12:56.0130 0x183c ============================================================
    07:12:56.0130 0x183c \Device\Harddisk0\DR0:
    07:12:56.0264 0x183c MBR partitions:
    07:12:56.0265 0x183c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
    07:12:56.0265 0x183c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
    07:12:56.0265 0x183c \Device\Harddisk1\DR1:
    07:12:56.0286 0x183c MBR partitions:
    07:12:56.0286 0x183c \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C0681
    07:12:56.0287 0x183c ============================================================
    07:12:57.0450 0x183c C: <-> \Device\Harddisk0\DR0\Partition2
    07:12:57.0515 0x183c E: <-> \Device\Harddisk1\DR1\Partition1
    07:12:57.0515 0x183c ============================================================
    07:12:57.0515 0x183c Initialize success
    07:12:57.0515 0x183c ============================================================
    07:13:02.0195 0x14c4 ============================================================
    07:13:02.0195 0x14c4 Scan started
    07:13:02.0195 0x14c4 Mode: Manual;
    07:13:02.0195 0x14c4 ============================================================
    07:13:02.0195 0x14c4 KSN ping started
    07:13:16.0219 0x14c4 KSN ping finished: true
    07:13:56.0643 0x14c4 ================ Scan system memory ========================
    07:13:56.0643 0x14c4 System memory - ok
    07:13:56.0645 0x14c4 ================ Scan services =============================
    07:14:21.0305 0x14c4 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
    07:14:21.0592 0x14c4 1394ohci - ok
    07:14:26.0575 0x14c4 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
    07:14:27.0301 0x14c4 ACPI - ok
    07:14:27.0477 0x14c4 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
    07:14:28.0032 0x14c4 AcpiPmi - ok
    07:14:29.0802 0x14c4 [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    07:14:33.0995 0x14c4 AdobeARMservice - ok
    07:15:00.0729 0x14c4 [ 09E7C37DF4A911C8A9AA8BF88ACD10AA, E881E0BBDCED58F28E0BA8DC27372EDFFFF2C57EE31CD13A032FDC9F7C831B5A ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    07:15:04.0295 0x14c4 AdobeFlashPlayerUpdateSvc - ok
    07:15:04.0951 0x14c4 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
    07:15:05.0975 0x14c4 adp94xx - ok
    07:15:06.0569 0x14c4 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
    07:15:10.0128 0x14c4 adpahci - ok
    07:15:10.0583 0x14c4 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
    07:15:11.0150 0x14c4 adpu320 - ok
    07:15:11.0657 0x14c4 [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
    07:15:12.0193 0x14c4 AeLookupSvc - ok
    07:15:13.0080 0x14c4 [ 79059559E89D06E8B80CE2944BE20228, 6E041D2FED2D0C3D8E16E56CB61D3245F9144EA92F5BDC9A4AA30598D1C8E6EE ] AFD C:\Windows\system32\drivers\afd.sys
    07:15:14.0942 0x14c4 AFD - ok
    07:15:15.0425 0x14c4 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
    07:15:16.0094 0x14c4 agp440 - ok
    07:15:16.0974 0x14c4 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
    07:15:17.0338 0x14c4 ALG - ok
    07:15:17.0784 0x14c4 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
    07:15:18.0335 0x14c4 aliide - ok
    07:15:19.0004 0x14c4 [ A359974EAAC83A435497C52F62A2E590, 7A7AFFE1CCE8732C478AE3EA630AA46C94DE0DBFE19EE63E3FB99B0D3338F038 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
    07:15:20.0224 0x14c4 AMD External Events Utility - ok
    07:15:20.0728 0x14c4 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
    07:15:21.0389 0x14c4 amdide - ok
    07:15:22.0031 0x14c4 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
    07:15:23.0231 0x14c4 AmdK8 - ok
    07:15:34.0092 0x14c4 [ 60216B0E704584DE6D5A9F59E9C34C47, CC3E9F09FB28E50FDFCC5E6A996E28CB4E721DDDD50E23710DC74C5B0F7CE3E3 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
    07:15:36.0183 0x14c4 amdkmdag - ok
    07:15:37.0993 0x14c4 [ 6B4E9261B613B047A9A145F328889968, E5C6611E88381A9D40AD1CE80BFDDBDA733F4A8D3602AAE25A155D2C39B3B7FD ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
    07:15:38.0862 0x14c4 amdkmdap - ok
    07:15:39.0675 0x14c4 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
    07:15:40.0050 0x14c4 AmdPPM - ok
    07:15:40.0691 0x14c4 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
    07:15:41.0794 0x14c4 amdsata - ok
    07:15:42.0306 0x14c4 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
    07:15:43.0169 0x14c4 amdsbs - ok
    07:15:43.0361 0x14c4 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
    07:15:43.0729 0x14c4 amdxata - ok
    07:15:44.0407 0x14c4 [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys
    07:15:44.0647 0x14c4 AppID - ok
    07:15:44.0834 0x14c4 [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll
    07:15:44.0976 0x14c4 AppIDSvc - ok
    07:15:45.0447 0x14c4 [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll
    07:15:45.0863 0x14c4 Appinfo - ok
    07:15:48.0254 0x14c4 [ 30E3850F303EAE5C364782EA78579CC9, 8C94E5A9052F6E794685194EEACB31A174A947D60246908B6A0DEFA081A747A3 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    07:15:50.0750 0x14c4 Apple Mobile Device - ok
    07:15:51.0437 0x14c4 [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt C:\Windows\System32\appmgmts.dll
    07:15:51.0755 0x14c4 AppMgmt - ok
    07:15:51.0874 0x14c4 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\DRIVERS\arc.sys
    07:15:52.0218 0x14c4 arc - ok
    07:15:52.0400 0x14c4 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
    07:15:53.0057 0x14c4 arcsas - ok
    07:15:59.0402 0x14c4 [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
    07:16:00.0993 0x14c4 aspnet_state - ok
    07:16:01.0529 0x14c4 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
    07:16:01.0691 0x14c4 AsyncMac - ok
    07:16:01.0871 0x14c4 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
    07:16:01.0964 0x14c4 atapi - ok
    07:16:03.0088 0x14c4 [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
    07:16:04.0056 0x14c4 AudioEndpointBuilder - ok
    07:16:04.0766 0x14c4 [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv C:\Windows\System32\Audiosrv.dll
    07:16:04.0782 0x14c4 AudioSrv - ok
    07:16:06.0065 0x14c4 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
    07:16:06.0378 0x14c4 AxInstSV - ok
    07:16:06.0988 0x14c4 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
    07:16:07.0929 0x14c4 b06bdrv - ok
    07:16:08.0781 0x14c4 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
    07:16:09.0412 0x14c4 b57nd60a - ok
    07:16:09.0942 0x14c4 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
    07:16:10.0312 0x14c4 BDESVC - ok
    07:16:11.0480 0x14c4 [ 9920B815BC3B3F2D69071842DD18D422, 80D91191A49C7BA68C968C4FFED4F7A24E7C8F4169C7B45B4F55BBE6F6F22ED2 ] BdfNdisf c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys
    07:16:12.0487 0x14c4 BdfNdisf - ok
    07:16:12.0699 0x14c4 [ A626DCB25F09E117421E1021CA3D22A0, D2BA10E7EFBE03589DC7AD088E1A1672539C83C427D9C88838DA5C1B92F65AC3 ] bdfwfpf C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys
    07:16:13.0267 0x14c4 bdfwfpf - ok
    07:16:13.0608 0x14c4 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
    07:16:13.0836 0x14c4 Beep - ok
    07:16:15.0125 0x14c4 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
    07:16:16.0376 0x14c4 BFE - ok
    07:16:17.0369 0x14c4 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
    07:16:19.0727 0x14c4 BITS - ok
    07:16:20.0120 0x14c4 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
    07:16:20.0486 0x14c4 blbdrive - ok
    07:16:21.0260 0x14c4 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
    07:16:21.0582 0x14c4 Bonjour Service - ok
    07:16:21.0908 0x14c4 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
    07:16:22.0323 0x14c4 bowser - ok
    07:16:22.0606 0x14c4 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
    07:16:22.0682 0x14c4 BrFiltLo - ok
    07:16:22.0909 0x14c4 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
    07:16:23.0054 0x14c4 BrFiltUp - ok
    07:16:23.0387 0x14c4 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
    07:16:23.0699 0x14c4 Browser - ok
    07:16:24.0245 0x14c4 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
    07:16:24.0886 0x14c4 Brserid - ok
    07:16:25.0167 0x14c4 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
    07:16:25.0372 0x14c4 BrSerWdm - ok
    07:16:25.0985 0x14c4 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
    07:16:26.0365 0x14c4 BrUsbMdm - ok
    07:16:26.0638 0x14c4 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
    07:16:26.0826 0x14c4 BrUsbSer - ok
    07:16:27.0069 0x14c4 BTCFilterService - ok
    07:16:27.0178 0x14c4 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
    07:16:27.0714 0x14c4 BTHMODEM - ok
    07:16:28.0087 0x14c4 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
    07:16:28.0232 0x14c4 bthserv - ok
    07:16:28.0381 0x14c4 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
    07:16:28.0737 0x14c4 cdfs - ok
    07:16:29.0187 0x14c4 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
    07:16:29.0610 0x14c4 cdrom - ok
    07:16:29.0731 0x14c4 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
    07:16:29.0949 0x14c4 CertPropSvc - ok
    07:16:30.0082 0x14c4 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
    07:16:30.0582 0x14c4 circlass - ok
    07:16:31.0104 0x14c4 [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys
    07:16:31.0221 0x14c4 CLFS - ok
    07:16:33.0231 0x14c4 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    07:16:39.0527 0x14c4 clr_optimization_v2.0.50727_32 - ok
    07:16:40.0973 0x14c4 [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    07:16:41.0783 0x14c4 clr_optimization_v2.0.50727_64 - ok
    07:16:45.0371 0x14c4 [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    07:16:51.0829 0x14c4 clr_optimization_v4.0.30319_32 - ok
    07:16:52.0058 0x14c4 [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    07:16:53.0540 0x14c4 clr_optimization_v4.0.30319_64 - ok
    07:16:53.0796 0x14c4 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
    07:16:54.0107 0x14c4 CmBatt - ok
    07:17:00.0048 0x14c4 [ 5B33C08DE574DA58606B61CFCCD3F082, F88D7BD25D32C2A59AD602DBFED8CA061635B8FEF98CFF93715260B1925D1C4E ] CmdAgent C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    07:17:00.0582 0x14c4 CmdAgent - ok
    07:17:01.0134 0x14c4 [ 348A7FDDF0D7354ED6308AF96EEF4F54, CB3631315429E3187E77C5799EF7AABE68320D29370DE2992F644D07975BD7A6 ] cmderd C:\Windows\system32\DRIVERS\cmderd.sys
    07:17:01.0253 0x14c4 cmderd - ok
    07:17:01.0871 0x14c4 [ 923659525ADAC632EA6F94570CCE1561, 375571DAC5A13160295E10EDE571B1A05500FD4136EAF4C48BD664D7D427E069 ] cmdGuard C:\Windows\system32\DRIVERS\cmdguard.sys
    07:17:02.0537 0x14c4 cmdGuard - ok
    07:17:02.0865 0x14c4 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
    07:17:03.0032 0x14c4 cmdide - ok
    07:17:04.0551 0x14c4 [ E621EC50B1A85D875904CC0741F03D16, 644077BC4560DA3E8EEAD93170A0E1B7D67293338280A34315BED4A684D42EEB ] cmdvirth C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
    07:17:05.0369 0x14c4 cmdvirth - ok
    07:17:06.0133 0x14c4 [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG C:\Windows\system32\Drivers\cng.sys
    07:17:07.0354 0x14c4 CNG - ok
    07:17:07.0520 0x14c4 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
    07:17:07.0698 0x14c4 Compbatt - ok
    07:17:08.0071 0x14c4 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
    07:17:08.0261 0x14c4 CompositeBus - ok
    07:17:08.0340 0x14c4 COMSysApp - ok
    07:17:08.0954 0x14c4 [ 71879A4AB90D21BCCF9E3CFCF0BB5F4A, 27DAAE90AF101B2DF16DF028BD69A56F60A1EB4AB2EE17CFC8837DFC4EBA121B ] copperhd C:\Windows\system32\drivers\copperhd.sys
    07:17:09.0107 0x14c4 copperhd - ok
    07:17:09.0290 0x14c4 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
    07:17:09.0488 0x14c4 crcdisk - ok
    07:17:09.0726 0x14c4 [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc C:\Windows\system32\cryptsvc.dll
    07:17:10.0063 0x14c4 CryptSvc - ok
    07:17:10.0597 0x14c4 [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC C:\Windows\system32\drivers\csc.sys
    07:17:10.0874 0x14c4 CSC - ok
    07:17:11.0687 0x14c4 [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService C:\Windows\System32\cscsvc.dll
    07:17:11.0720 0x14c4 CscService - ok
    07:17:13.0098 0x14c4 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
    07:17:13.0186 0x14c4 DcomLaunch - ok
    07:17:13.0693 0x14c4 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
    07:17:14.0101 0x14c4 defragsvc - ok
    07:17:14.0360 0x14c4 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
    07:17:14.0693 0x14c4 DfsC - ok
    07:17:14.0890 0x14c4 [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
    07:17:15.0445 0x14c4 dg_ssudbus - ok
    07:17:15.0961 0x14c4 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
    07:17:16.0514 0x14c4 Dhcp - ok
    07:17:16.0662 0x14c4 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
    07:17:16.0783 0x14c4 discache - ok
    07:17:17.0896 0x14c4 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\DRIVERS\disk.sys
    07:17:18.0341 0x14c4 Disk - ok
    07:17:19.0453 0x14c4 [ DBFA9E9842C434B84052F18074866191, 91CEFF197870FF556978E23888CB7B5FDA14699E88887B4C25AFFF74F130F95F ] DisplayFusionService C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
    07:17:20.0162 0x14c4 DisplayFusionService - ok
    07:17:20.0446 0x14c4 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
    07:17:20.0693 0x14c4 Dnscache - ok
    07:17:20.0990 0x14c4 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
    07:17:21.0331 0x14c4 dot3svc - ok
    07:17:21.0879 0x14c4 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
    07:17:22.0344 0x14c4 DPS - ok
    07:17:41.0187 0x14c4 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
    07:17:41.0359 0x14c4 drmkaud - ok
    07:17:44.0565 0x14c4 [ E5B95C75557120881076C45CD146D72C, C4107822D70057C0A1EC41208D88550DDFAAA741395DF38A7E20E47316C6A1B5 ] DvmMDES C:\ASUS.SYS\config\DVMExportService.exe
    07:17:46.0869 0x14c4 DvmMDES - ok
    07:17:47.0748 0x14c4 [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
    07:17:50.0873 0x14c4 DXGKrnl - ok
    07:17:51.0047 0x14c4 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
    07:17:51.0291 0x14c4 EapHost - ok
    07:17:54.0038 0x14c4 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
    07:17:54.0502 0x14c4 ebdrv - ok
    07:17:54.0592 0x14c4 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS C:\Windows\System32\lsass.exe
    07:17:54.0637 0x14c4 EFS - ok
    07:17:55.0153 0x14c4 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
    07:17:55.0609 0x14c4 ehRecvr - ok
    07:17:55.0709 0x14c4 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
    07:17:55.0985 0x14c4 ehSched - ok
    07:17:56.0238 0x14c4 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
    07:17:56.0453 0x14c4 elxstor - ok
    07:17:56.0544 0x14c4 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
    07:17:56.0604 0x14c4 ErrDev - ok
    07:17:56.0934 0x14c4 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
    07:17:56.0972 0x14c4 EventSystem - ok
    07:17:57.0105 0x14c4 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
    07:17:57.0290 0x14c4 exfat - ok
    07:17:57.0416 0x14c4 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
    07:17:57.0587 0x14c4 fastfat - ok
    07:17:57.0899 0x14c4 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
    07:17:58.0186 0x14c4 Fax - ok
    07:17:58.0553 0x14c4 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\DRIVERS\fdc.sys
    07:17:58.0748 0x14c4 fdc - ok
    07:17:58.0873 0x14c4 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
    07:17:58.0922 0x14c4 fdPHost - ok
    07:17:59.0133 0x14c4 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
    07:17:59.0203 0x14c4 FDResPub - ok
    07:17:59.0458 0x14c4 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
    07:17:59.0718 0x14c4 FileInfo - ok
    07:17:59.0851 0x14c4 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
    07:17:59.0975 0x14c4 Filetrace - ok
    07:18:00.0091 0x14c4 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
    07:18:00.0405 0x14c4 flpydisk - ok
    07:18:00.0662 0x14c4 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
    07:18:01.0066 0x14c4 FltMgr - ok
    07:18:01.0706 0x14c4 [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll
    07:18:02.0114 0x14c4 FontCache - ok
    07:18:02.0453 0x14c4 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    07:18:03.0082 0x14c4 FontCache3.0.0.0 - ok
    07:18:03.0235 0x14c4 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
    07:18:03.0401 0x14c4 FsDepends - ok
    07:18:03.0534 0x14c4 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
    07:18:03.0657 0x14c4 Fs_Rec - ok
    07:18:03.0920 0x14c4 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
    07:18:04.0281 0x14c4 fvevol - ok
    07:18:04.0457 0x14c4 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
    07:18:04.0592 0x14c4 gagp30kx - ok
    07:18:05.0323 0x14c4 [ E0DDA05B195D71102EAE79E8DEC66151, A23B6C74875AD2100320DA26986BA78A35693BF28DEA25EEF9564F8AD1BD3A1E ] Garmin Core Update Service C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
    07:18:07.0464 0x14c4 Garmin Core Update Service - ok
    07:18:07.0672 0x14c4 [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
    07:18:08.0078 0x14c4 GEARAspiWDM - ok
    07:18:09.0152 0x14c4 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
    07:18:09.0989 0x14c4 gpsvc - ok
    07:18:11.0209 0x14c4 [ 07177B5A8C277074C30AC515FEBD4F37, A18B7A4491732D97884D0F95428563DE6EBCBB988C5595DA2C710DFDE733B096 ] gzflt C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys
    07:18:12.0095 0x14c4 gzflt - ok
    07:18:12.0464 0x14c4 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
    07:18:12.0679 0x14c4 hamachi - ok
    07:18:15.0048 0x14c4 [ 5D943A7CDD83F533D41A22E882677C6E, E9CD581EC985B3F765E5E890A02B2D8FE4E5345063969831278CB3876DFF1273 ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
    07:18:15.0730 0x14c4 Hamachi2Svc - ok
    07:18:16.0233 0x14c4 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
    07:18:16.0445 0x14c4 hcw85cir - ok
    07:18:17.0403 0x14c4 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
    07:18:17.0954 0x14c4 HdAudAddService - ok
    07:18:18.0176 0x14c4 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
    07:18:18.0527 0x14c4 HDAudBus - ok
    07:18:18.0704 0x14c4 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
    07:18:18.0828 0x14c4 HidBatt - ok
    07:18:18.0973 0x14c4 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
    07:18:19.0149 0x14c4 HidBth - ok
    07:18:19.0383 0x14c4 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
    07:18:19.0535 0x14c4 HidIr - ok
    07:18:19.0702 0x14c4 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
    07:18:19.0799 0x14c4 hidserv - ok
    07:18:20.0104 0x14c4 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
    07:18:20.0106 0x14c4 HidUsb - ok
    07:18:20.0296 0x14c4 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
    07:18:20.0525 0x14c4 hkmsvc - ok
    07:18:20.0888 0x14c4 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
    07:18:21.0243 0x14c4 HomeGroupListener - ok
    07:18:21.0653 0x14c4 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
    07:18:21.0716 0x14c4 HomeGroupProvider - ok
    07:18:22.0081 0x14c4 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
    07:18:22.0844 0x14c4 HpSAMD - ok
    07:18:23.0628 0x14c4 [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys
    07:18:24.0364 0x14c4 HTTP - ok
    07:18:24.0438 0x14c4 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
    07:18:24.0542 0x14c4 hwpolicy - ok
    07:18:24.0725 0x14c4 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
    07:18:24.0884 0x14c4 i8042prt - ok
    07:18:25.0085 0x14c4 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
    07:18:25.0637 0x14c4 iaStorV - ok
    07:18:26.0103 0x14c4 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    07:18:26.0366 0x14c4 idsvc - ok
    07:18:26.0598 0x14c4 IEEtwCollectorService - ok
    07:18:26.0670 0x14c4 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
    07:18:26.0850 0x14c4 iirsp - ok
    07:18:27.0434 0x14c4 [ 54E0F4CCD6CE99A807459AF928DD64AC, 65EBD9757B811E8F1060F23C4936DBED5FBBEDA290CC4CD7F7781CC3D189BE8B ] IJPLMSVC C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
    07:18:27.0832 0x14c4 IJPLMSVC - ok
    07:18:28.0292 0x14c4 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
    07:18:28.0612 0x14c4 IKEEXT - ok
    07:18:28.0756 0x14c4 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
    07:18:28.0876 0x14c4 intelide - ok
    07:18:29.0070 0x14c4 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
    07:18:29.0327 0x14c4 intelppm - ok
    07:18:29.0537 0x14c4 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
     
  12. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    07:18:29.0657 0x14c4 IPBusEnum - ok
    07:18:30.0027 0x14c4 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
    07:18:30.0164 0x14c4 IpFilterDriver - ok
    07:18:30.0594 0x14c4 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
    07:18:30.0619 0x14c4 iphlpsvc - ok
    07:18:30.0723 0x14c4 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
    07:18:31.0084 0x14c4 IPMIDRV - ok
    07:18:31.0422 0x14c4 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
    07:18:31.0802 0x14c4 IPNAT - ok
    07:18:32.0618 0x14c4 [ 33B286326BD2B1A7748C43391058FB19, C6240C9ED5B7C227595E953E3D1AB5F2D45CCD86FDBDF985836A970B4B6467FE ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
    07:18:33.0097 0x14c4 iPod Service - ok
    07:18:33.0281 0x14c4 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
    07:18:33.0403 0x14c4 IRENUM - ok
    07:18:33.0708 0x14c4 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
    07:18:33.0880 0x14c4 isapnp - ok
    07:18:34.0165 0x14c4 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
    07:18:34.0530 0x14c4 iScsiPrt - ok
    07:18:34.0750 0x14c4 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
    07:18:34.0872 0x14c4 kbdclass - ok
    07:18:35.0273 0x14c4 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
    07:18:35.0478 0x14c4 kbdhid - ok
    07:18:35.0715 0x14c4 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso C:\Windows\system32\lsass.exe
    07:18:35.0744 0x14c4 KeyIso - ok
    07:18:35.0926 0x14c4 [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
    07:18:36.0229 0x14c4 KSecDD - ok
    07:18:36.0501 0x14c4 [ 1C2D8E18AA8FD50CD04C15CC27F7F5AB, 4BA3B0F9F01BD47D66091D3AD86B69A523981D61DFB4D677F2CD39405B2DA989 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
    07:18:36.0803 0x14c4 KSecPkg - ok
    07:18:36.0937 0x14c4 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
    07:18:37.0028 0x14c4 ksthunk - ok
    07:18:37.0279 0x14c4 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
    07:18:37.0629 0x14c4 KtmRm - ok
    07:18:38.0030 0x14c4 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
    07:18:38.0463 0x14c4 LanmanServer - ok
    07:18:39.0849 0x14c4 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
    07:18:40.0597 0x14c4 LanmanWorkstation - ok
    07:18:41.0408 0x14c4 [ 907A28AE111208455C51467EE60D20EF, 7ABD4B5A234EA2B8F7C7CDD163D3109A290631B361E279F3D682C1A8D48A4E01 ] LavasoftAdAwareService11 C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
    07:18:41.0644 0x14c4 LavasoftAdAwareService11 - ok
    07:18:41.0887 0x14c4 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
    07:18:42.0024 0x14c4 lltdio - ok
    07:18:42.0292 0x14c4 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
    07:18:42.0520 0x14c4 lltdsvc - ok
    07:18:42.0747 0x14c4 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
    07:18:42.0845 0x14c4 lmhosts - ok
    07:18:43.0174 0x14c4 [ D5F9C50082FA5F82C35922998B3DAD6E, 4957FB1888EC69E16E6D019F2D984EE810F8532FAB504B30D32518E4D3F01FDB ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
    07:18:43.0432 0x14c4 LMIGuardianSvc - ok
    07:18:43.0668 0x14c4 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
    07:18:43.0869 0x14c4 LSI_FC - ok
    07:18:44.0043 0x14c4 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
    07:18:44.0154 0x14c4 LSI_SAS - ok
    07:18:44.0255 0x14c4 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
    07:18:44.0368 0x14c4 LSI_SAS2 - ok
    07:18:44.0445 0x14c4 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
    07:18:44.0777 0x14c4 LSI_SCSI - ok
    07:18:44.0862 0x14c4 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
    07:18:45.0093 0x14c4 luafv - ok
    07:18:45.0270 0x14c4 [ E5ECF40E5FD459141E5F6685FFD51804, A120A6184AB16864E8A5F1DFD0CD178FCA541DE463B5CEF946E18C34B9B6F716 ] Lycosa C:\Windows\system32\drivers\Lycosa.sys
    07:18:45.0271 0x14c4 Lycosa - ok
    07:18:45.0576 0x14c4 [ 6140163BFE9D8F2DFDBA088ED5521C13, B7B501F0D1527A15B1610D133E97AB431574502F0553734009627488D0007595 ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
    07:18:45.0682 0x14c4 MBAMSwissArmy - ok
    07:18:45.0840 0x14c4 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
    07:18:46.0545 0x14c4 Mcx2Svc - ok
    07:18:46.0602 0x14c4 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
    07:18:46.0796 0x14c4 megasas - ok
    07:18:46.0998 0x14c4 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
    07:18:47.0254 0x14c4 MegaSR - ok
    07:18:47.0368 0x14c4 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
    07:18:47.0502 0x14c4 MMCSS - ok
    07:18:47.0534 0x14c4 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
    07:18:47.0700 0x14c4 Modem - ok
    07:18:47.0919 0x14c4 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
    07:18:48.0124 0x14c4 monitor - ok
    07:18:48.0561 0x14c4 [ C94A2EA3FDFA5D650884926B710B7DB1, B52A17CD62E65747E8547F1D73807BBC2FA1CB449F6A787BCDDB5063DE8A6530 ] motccgp C:\Windows\system32\DRIVERS\motccgp.sys
    07:18:48.0645 0x14c4 motccgp - ok
    07:18:48.0969 0x14c4 [ D51E009BAEDA07EBC107D49D224C2414, F8EF80E91D67697337DD82FE0489448D2566C97C6B189BBBB4733B42BF26AB0C ] motccgpfl C:\Windows\system32\DRIVERS\motccgpfl.sys
    07:18:49.0118 0x14c4 motccgpfl - ok
    07:18:49.0317 0x14c4 [ 3CC500C9B0E4D476802D277353CB2C89, 9E4EE267BF70FE0A43A1B994546186FD5ED6E384A7B8F905DFA81617DBEF9AD8 ] MotDev C:\Windows\system32\DRIVERS\motodrv.sys
    07:18:49.0526 0x14c4 MotDev - ok
    07:18:49.0666 0x14c4 motmodem - ok
    07:18:50.0141 0x14c4 [ 9DFD34E6841C460B5D992A1C5327AE69, 03543E18AAFB9D2DB08A1E2866C0963CED3561D4C33B35183807A895FFD9985D ] MotoHelper C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
    07:18:50.0985 0x14c4 MotoHelper - ok
    07:18:51.0086 0x14c4 [ EBD05F60CAFC5BBA2602B8D7101082D3, 9144E1E7C4DD6150C0E97B4C628DE0216ED372062F5F0FB216C81CAF93DBBF07 ] MotoSwitchService C:\Windows\system32\DRIVERS\motswch.sys
    07:18:51.0126 0x14c4 MotoSwitchService - ok
    07:18:51.0299 0x14c4 Motousbnet - ok
    07:18:51.0549 0x14c4 motusbdevice - ok
    07:18:51.0623 0x14c4 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
    07:18:51.0721 0x14c4 mouclass - ok
    07:18:51.0935 0x14c4 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
    07:18:52.0092 0x14c4 mouhid - ok
    07:18:52.0182 0x14c4 [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
    07:18:52.0303 0x14c4 mountmgr - ok
    07:18:52.0773 0x14c4 [ E1B6FCAE82474FC071155263E2841D54, 341E2CEB1A86586730130311C4FAF86851151D5F08EF915A5F89B6C4094AE1F4 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    07:18:53.0410 0x14c4 MozillaMaintenance - ok
    07:18:53.0549 0x14c4 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
    07:18:53.0740 0x14c4 mpio - ok
    07:18:53.0918 0x14c4 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
    07:18:54.0517 0x14c4 mpsdrv - ok
    07:18:54.0969 0x14c4 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
    07:18:55.0407 0x14c4 MpsSvc - ok
    07:18:55.0598 0x14c4 [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
    07:18:55.0925 0x14c4 MRxDAV - ok
    07:18:56.0147 0x14c4 [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
    07:18:56.0569 0x14c4 mrxsmb - ok
    07:18:56.0839 0x14c4 [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
    07:18:57.0105 0x14c4 mrxsmb10 - ok
    07:18:57.0153 0x14c4 [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
    07:18:57.0330 0x14c4 mrxsmb20 - ok
    07:18:57.0503 0x14c4 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
    07:18:57.0923 0x14c4 msahci - ok
    07:18:58.0053 0x14c4 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
    07:18:58.0182 0x14c4 msdsm - ok
    07:18:58.0348 0x14c4 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
    07:18:58.0528 0x14c4 MSDTC - ok
    07:18:58.0656 0x14c4 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
    07:18:58.0690 0x14c4 Msfs - ok
    07:18:58.0813 0x14c4 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
    07:18:58.0897 0x14c4 mshidkmdf - ok
    07:18:59.0027 0x14c4 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
    07:18:59.0121 0x14c4 msisadrv - ok
    07:18:59.0280 0x14c4 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
    07:18:59.0437 0x14c4 MSiSCSI - ok
    07:18:59.0480 0x14c4 msiserver - ok
    07:18:59.0829 0x14c4 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
    07:18:59.0915 0x14c4 MSKSSRV - ok
    07:19:00.0089 0x14c4 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
    07:19:00.0171 0x14c4 MSPCLOCK - ok
    07:19:00.0261 0x14c4 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
    07:19:00.0345 0x14c4 MSPQM - ok
    07:19:00.0604 0x14c4 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
    07:19:00.0900 0x14c4 MsRPC - ok
    07:19:01.0007 0x14c4 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
    07:19:01.0213 0x14c4 mssmbios - ok
    07:19:01.0431 0x14c4 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
    07:19:01.0523 0x14c4 MSTEE - ok
    07:19:01.0602 0x14c4 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
    07:19:01.0715 0x14c4 MTConfig - ok
    07:19:02.0027 0x14c4 [ 19B006B181E3875FD254F7B67ACF1E7C, 1D68D19522E71F16B8B50F8CCFBC9D884CF2DAC40CC409BD5A40A4D4223ABC61 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
    07:19:02.0095 0x14c4 MTsensor - ok
    07:19:02.0174 0x14c4 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
    07:19:02.0348 0x14c4 Mup - ok
    07:19:02.0589 0x14c4 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
    07:19:03.0104 0x14c4 napagent - ok
    07:19:03.0347 0x14c4 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
    07:19:03.0532 0x14c4 NativeWifiP - ok
    07:19:03.0991 0x14c4 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
    07:19:05.0214 0x14c4 NDIS - ok
    07:19:05.0305 0x14c4 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
    07:19:10.0889 0x14c4 NdisCap - ok
    07:19:10.0961 0x14c4 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
    07:19:11.0030 0x14c4 NdisTapi - ok
    07:19:11.0110 0x14c4 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
    07:19:11.0215 0x14c4 Ndisuio - ok
    07:19:11.0424 0x14c4 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
    07:19:11.0799 0x14c4 NdisWan - ok
    07:19:11.0916 0x14c4 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
    07:19:12.0171 0x14c4 NDProxy - ok
    07:19:12.0362 0x14c4 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
    07:19:12.0535 0x14c4 NetBIOS - ok
    07:19:12.0651 0x14c4 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
    07:19:12.0831 0x14c4 NetBT - ok
    07:19:12.0875 0x14c4 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon C:\Windows\system32\lsass.exe
    07:19:12.0877 0x14c4 Netlogon - ok
    07:19:13.0048 0x14c4 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
    07:19:13.0484 0x14c4 Netman - ok
    07:19:13.0703 0x14c4 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    07:19:14.0434 0x14c4 NetMsmqActivator - ok
    07:19:14.0671 0x14c4 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    07:19:14.0680 0x14c4 NetPipeActivator - ok
    07:19:14.0925 0x14c4 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
    07:19:14.0951 0x14c4 netprofm - ok
    07:19:15.0154 0x14c4 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    07:19:15.0159 0x14c4 NetTcpActivator - ok
    07:19:15.0170 0x14c4 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    07:19:15.0172 0x14c4 NetTcpPortSharing - ok
    07:19:15.0332 0x14c4 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
    07:19:15.0424 0x14c4 nfrd960 - ok
    07:19:15.0592 0x14c4 [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc C:\Windows\System32\nlasvc.dll
    07:19:15.0692 0x14c4 NlaSvc - ok
    07:19:15.0727 0x14c4 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
    07:19:15.0827 0x14c4 Npfs - ok
    07:19:15.0898 0x14c4 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
    07:19:15.0929 0x14c4 nsi - ok
    07:19:15.0954 0x14c4 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
    07:19:15.0981 0x14c4 nsiproxy - ok
    07:19:16.0395 0x14c4 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
    07:19:16.0747 0x14c4 Ntfs - ok
    07:19:16.0857 0x14c4 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
    07:19:16.0920 0x14c4 Null - ok
    07:19:17.0014 0x14c4 [ 8EBCB9165EE7F1571842F4D9D624A74C, 115F46B8391866762AD41B299F0670D8735D124BD518A53EC73DCDBFCA9C28F9 ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys
    07:19:17.0096 0x14c4 nusb3hub - ok
    07:19:17.0289 0x14c4 [ 5D54DBB12BBFE07CC283FD39F2CD6D63, 3DC3F9121F8892EDABD07ACDE45DB025BA2FC4245A8D3EE343F1FDF7189B391F ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys
    07:19:17.0498 0x14c4 nusb3xhc - ok
    07:19:21.0748 0x14c4 [ E71E299FF15390E585BACF2C18F55078, 7A51D989DA55349B1761839DEAFD593B6E6F88C433B132E7B027467E050FBA67 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
    07:19:22.0840 0x14c4 nvlddmkm - ok
    07:19:22.0997 0x14c4 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
    07:19:23.0381 0x14c4 nvraid - ok
    07:19:23.0430 0x14c4 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
    07:19:23.0568 0x14c4 nvstor - ok
    07:19:23.0931 0x14c4 [ 415695F5A54E91E869EEBFEA261361A6, 1829C15E07D902686171C8A66EB03040A037CAC1E00E24BF598030D9DA795CEC ] nvsvc C:\Windows\system32\nvvsvc.exe
    07:19:24.0200 0x14c4 nvsvc - ok
    07:19:24.0713 0x14c4 [ 4789E020D2617046862D1790FC235FF6, FCFD56DF2CADA830E7B2D4B91D5A9D2FE783B1396CBA124000765168FA5B6574 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    07:19:29.0509 0x14c4 nvUpdatusService - ok
    07:19:29.0545 0x14c4 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
    07:19:29.0604 0x14c4 nv_agp - ok
    07:19:29.0640 0x14c4 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
    07:19:29.0777 0x14c4 ohci1394 - ok
    07:19:30.0142 0x14c4 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
    07:19:30.0169 0x14c4 p2pimsvc - ok
    07:19:30.0382 0x14c4 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
    07:19:30.0582 0x14c4 p2psvc - ok
    07:19:30.0670 0x14c4 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys
    07:19:30.0898 0x14c4 Parport - ok
    07:19:31.0091 0x14c4 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
    07:19:31.0284 0x14c4 partmgr - ok
    07:19:31.0404 0x14c4 [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll
    07:19:31.0592 0x14c4 PcaSvc - ok
    07:19:31.0731 0x14c4 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
    07:19:31.0931 0x14c4 pci - ok
    07:19:32.0055 0x14c4 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
    07:19:32.0084 0x14c4 pciide - ok
    07:19:32.0206 0x14c4 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
    07:19:32.0978 0x14c4 pcmcia - ok
    07:19:33.0066 0x14c4 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
    07:19:33.0118 0x14c4 pcw - ok
    07:19:33.0363 0x14c4 [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
    07:19:33.0912 0x14c4 PEAUTH - ok
    07:19:34.0613 0x14c4 [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
    07:19:34.0783 0x14c4 PeerDistSvc - ok
    07:19:37.0477 0x14c4 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
    07:19:37.0928 0x14c4 PerfHost - ok
    07:19:38.0234 0x14c4 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
    07:19:38.0450 0x14c4 pla - ok
    07:19:38.0646 0x14c4 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
    07:19:38.0799 0x14c4 PlugPlay - ok
    07:19:38.0864 0x14c4 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
    07:19:38.0882 0x14c4 PNRPAutoReg - ok
    07:19:39.0017 0x14c4 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
    07:19:39.0033 0x14c4 PNRPsvc - ok
    07:19:39.0160 0x14c4 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
    07:19:39.0275 0x14c4 PolicyAgent - ok
    07:19:39.0353 0x14c4 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
    07:19:39.0362 0x14c4 Power - ok
    07:19:39.0517 0x14c4 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
    07:19:39.0614 0x14c4 PptpMiniport - ok
    07:19:39.0638 0x14c4 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\DRIVERS\processr.sys
    07:19:39.0677 0x14c4 Processor - ok
    07:19:39.0756 0x14c4 [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc C:\Windows\system32\profsvc.dll
    07:19:39.0879 0x14c4 ProfSvc - ok
    07:19:39.0904 0x14c4 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe
    07:19:39.0905 0x14c4 ProtectedStorage - ok
    07:19:40.0244 0x14c4 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
    07:19:40.0487 0x14c4 Psched - ok
    07:19:40.0966 0x14c4 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
    07:19:41.0112 0x14c4 ql2300 - ok
    07:19:41.0141 0x14c4 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
    07:19:41.0186 0x14c4 ql40xx - ok
    07:19:41.0248 0x14c4 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
    07:19:41.0363 0x14c4 QWAVE - ok
    07:19:41.0391 0x14c4 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
  13. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    07:19:41.0429 0x14c4 QWAVEdrv - ok
    07:19:41.0486 0x14c4 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
    07:19:41.0513 0x14c4 RasAcd - ok
    07:19:41.0631 0x14c4 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
    07:19:41.0688 0x14c4 RasAgileVpn - ok
    07:19:41.0711 0x14c4 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
    07:19:41.0810 0x14c4 RasAuto - ok
    07:19:41.0901 0x14c4 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
    07:19:42.0050 0x14c4 Rasl2tp - ok
    07:19:42.0101 0x14c4 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
    07:19:42.0155 0x14c4 RasMan - ok
    07:19:42.0266 0x14c4 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
    07:19:42.0345 0x14c4 RasPppoe - ok
    07:19:42.0471 0x14c4 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
    07:19:42.0571 0x14c4 RasSstp - ok
    07:19:42.0680 0x14c4 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
    07:19:42.0785 0x14c4 rdbss - ok
    07:19:42.0841 0x14c4 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
    07:19:42.0850 0x14c4 rdpbus - ok
    07:19:42.0924 0x14c4 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
    07:19:42.0960 0x14c4 RDPCDD - ok
    07:19:43.0039 0x14c4 [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
    07:19:43.0121 0x14c4 RDPDR - ok
    07:19:43.0167 0x14c4 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
    07:19:43.0185 0x14c4 RDPENCDD - ok
    07:19:43.0206 0x14c4 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
    07:19:43.0254 0x14c4 RDPREFMP - ok
    07:19:43.0497 0x14c4 [ 70CBA1A0C98600A2AA1863479B35CB90, 91A133297921B4955817176251AFC5283DA3C7D2099700C4C92ECC94DBE9A99E ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
    07:19:43.0570 0x14c4 RdpVideoMiniport - ok
    07:19:43.0609 0x14c4 [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
    07:19:43.0700 0x14c4 RDPWD - ok
    07:19:43.0805 0x14c4 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
    07:19:44.0013 0x14c4 rdyboost - ok
    07:19:44.0114 0x14c4 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
    07:19:44.0176 0x14c4 RemoteAccess - ok
    07:19:44.0252 0x14c4 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
    07:19:44.0335 0x14c4 RemoteRegistry - ok
    07:19:44.0414 0x14c4 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
    07:19:44.0532 0x14c4 RpcEptMapper - ok
    07:19:44.0591 0x14c4 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
    07:19:44.0621 0x14c4 RpcLocator - ok
    07:19:44.0817 0x14c4 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
    07:19:44.0836 0x14c4 RpcSs - ok
    07:19:44.0873 0x14c4 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
    07:19:44.0954 0x14c4 rspndr - ok
    07:19:45.0127 0x14c4 [ 7EA8D2EB9BBFD2AB8A3117A1E96D3B3A, 9F6CFBE7E64A63E0AFEF546C4B8D889657B2055CE80279EA1B63EB5650E730F8 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
    07:19:45.0860 0x14c4 RTL8167 - ok
    07:19:46.0054 0x14c4 [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap C:\Windows\system32\drivers\vms3cap.sys
    07:19:46.0358 0x14c4 s3cap - ok
    07:19:46.0482 0x14c4 [ A49CDA75F8E41F769D19E2669BD62B37, 768A7CAD039C0285191E9D20E36ED8B9A2009499D75888AD88418385B0B9E1AB ] S3XXx64 C:\Windows\system32\DRIVERS\S3XXx64.sys
    07:19:46.0608 0x14c4 S3XXx64 - ok
    07:19:46.0672 0x14c4 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs C:\Windows\system32\lsass.exe
    07:19:46.0674 0x14c4 SamSs - ok
    07:19:46.0764 0x14c4 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
    07:19:47.0043 0x14c4 sbp2port - ok
    07:19:47.0169 0x14c4 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
    07:19:47.0264 0x14c4 SCardSvr - ok
    07:19:47.0333 0x14c4 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
    07:19:47.0424 0x14c4 scfilter - ok
    07:19:47.0915 0x14c4 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll
    07:19:48.0225 0x14c4 Schedule - ok
    07:19:48.0327 0x14c4 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
    07:19:48.0365 0x14c4 SCPolicySvc - ok
    07:19:48.0541 0x14c4 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
    07:19:48.0610 0x14c4 SDRSVC - ok
    07:19:48.0728 0x14c4 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
    07:19:48.0763 0x14c4 secdrv - ok
    07:19:48.0839 0x14c4 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
    07:19:48.0852 0x14c4 seclogon - ok
    07:19:48.0944 0x14c4 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
    07:19:48.0974 0x14c4 SENS - ok
    07:19:49.0016 0x14c4 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
    07:19:49.0029 0x14c4 SensrSvc - ok
    07:19:49.0078 0x14c4 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
    07:19:49.0097 0x14c4 Serenum - ok
    07:19:49.0120 0x14c4 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
    07:19:49.0178 0x14c4 Serial - ok
    07:19:49.0240 0x14c4 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
    07:19:49.0272 0x14c4 sermouse - ok
    07:19:49.0335 0x14c4 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
    07:19:49.0405 0x14c4 SessionEnv - ok
    07:19:49.0515 0x14c4 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
    07:19:49.0558 0x14c4 sffdisk - ok
    07:19:49.0601 0x14c4 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
    07:19:49.0629 0x14c4 sffp_mmc - ok
    07:19:49.0645 0x14c4 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
    07:19:49.0679 0x14c4 sffp_sd - ok
    07:19:49.0732 0x14c4 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
    07:19:49.0826 0x14c4 sfloppy - ok
    07:19:50.0039 0x14c4 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
    07:19:50.0171 0x14c4 SharedAccess - ok
    07:19:50.0269 0x14c4 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
    07:19:50.0322 0x14c4 ShellHWDetection - ok
    07:19:50.0381 0x14c4 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
    07:19:50.0627 0x14c4 SiSRaid2 - ok
    07:19:50.0704 0x14c4 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
    07:19:51.0108 0x14c4 SiSRaid4 - ok
    07:19:51.0177 0x14c4 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
    07:19:51.0271 0x14c4 Smb - ok
    07:19:51.0411 0x14c4 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
    07:19:51.0445 0x14c4 SNMPTRAP - ok
    07:19:51.0562 0x14c4 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
    07:19:51.0599 0x14c4 spldr - ok
    07:19:51.0818 0x14c4 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
    07:19:51.0930 0x14c4 Spooler - ok
    07:19:53.0004 0x14c4 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
    07:19:53.0496 0x14c4 sppsvc - ok
    07:19:53.0591 0x14c4 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
    07:19:53.0694 0x14c4 sppuinotify - ok
    07:19:53.0949 0x14c4 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
    07:19:54.0280 0x14c4 srv - ok
    07:19:54.0466 0x14c4 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
    07:19:54.0812 0x14c4 srv2 - ok
    07:19:54.0900 0x14c4 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
    07:19:55.0076 0x14c4 srvnet - ok
    07:19:55.0169 0x14c4 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
    07:19:55.0289 0x14c4 SSDPSRV - ok
    07:19:55.0331 0x14c4 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
    07:19:55.0401 0x14c4 SstpSvc - ok
    07:19:55.0496 0x14c4 [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
    07:19:55.0669 0x14c4 ssudmdm - ok
    07:19:56.0239 0x14c4 [ 6E1A473DD2A4714EAF7D11E2315DF794, 4460546191072C7DF8B2E5A00577BA8E4FF5A1B2EA399DDF65EBE1AE4A5A5C84 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    07:19:56.0989 0x14c4 Steam Client Service - ok
    07:19:57.0354 0x14c4 [ A9D26626BEADF5A0641BF6B5095EF309, EABC711466FECA20058D7E24CA2593059E1F113B38A2E7574822E48BFBBF4146 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    07:19:58.0763 0x14c4 Stereo Service - ok
    07:19:58.0996 0x14c4 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
    07:19:59.0168 0x14c4 stexstor - ok
    07:20:00.0788 0x14c4 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
    07:20:01.0248 0x14c4 stisvc - ok
    07:20:01.0454 0x14c4 [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt C:\Windows\system32\drivers\vmstorfl.sys
    07:20:01.0652 0x14c4 storflt - ok
    07:20:01.0778 0x14c4 [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc C:\Windows\system32\drivers\storvsc.sys
    07:20:01.0967 0x14c4 storvsc - ok
    07:20:02.0129 0x14c4 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys
    07:20:02.0272 0x14c4 swenum - ok
    07:20:02.0635 0x14c4 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
    07:20:02.0864 0x14c4 swprv - ok
    07:20:03.0021 0x14c4 Synth3dVsc - ok
    07:20:04.0185 0x14c4 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll
    07:20:04.0831 0x14c4 SysMain - ok
    07:20:04.0919 0x14c4 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
    07:20:05.0041 0x14c4 TabletInputService - ok
    07:20:05.0313 0x14c4 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
    07:20:05.0647 0x14c4 TapiSrv - ok
    07:20:05.0821 0x14c4 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
    07:20:05.0910 0x14c4 TBS - ok
    07:20:07.0052 0x14c4 [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] Tcpip C:\Windows\system32\drivers\tcpip.sys
    07:20:07.0801 0x14c4 Tcpip - ok
    07:20:08.0689 0x14c4 [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
    07:20:08.0725 0x14c4 TCPIP6 - ok
    07:20:08.0813 0x14c4 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
    07:20:08.0900 0x14c4 tcpipreg - ok
    07:20:08.0954 0x14c4 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
    07:20:09.0001 0x14c4 TDPIPE - ok
    07:20:09.0068 0x14c4 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
    07:20:09.0133 0x14c4 TDTCP - ok
    07:20:09.0243 0x14c4 [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
    07:20:09.0363 0x14c4 tdx - ok
    07:20:09.0468 0x14c4 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys
    07:20:09.0515 0x14c4 TermDD - ok
    07:20:09.0763 0x14c4 [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService C:\Windows\System32\termsrv.dll
    07:20:10.0037 0x14c4 TermService - ok
    07:20:10.0075 0x14c4 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
    07:20:10.0123 0x14c4 Themes - ok
    07:20:10.0199 0x14c4 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
    07:20:10.0201 0x14c4 THREADORDER - ok
    07:20:10.0400 0x14c4 [ E4FAD21646088D79F8889B6531396ACF, D0C8F0E3293D423245FD2233F283A1FE2463E15F8B9F4ED6AC96C2164EC51F75 ] TomTomHOMEService E:\Program Files\TomTom Home\TomTomHOMEService.exe
    07:20:10.0510 0x14c4 TomTomHOMEService - ok
    07:20:10.0560 0x14c4 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
    07:20:10.0675 0x14c4 TrkWks - ok
    07:20:10.0812 0x14c4 [ D5747C16225B4C7B0D04511DB0407544, 413AC0BF02EE3E4B93784DAA6F29BA41E569948D4B3A41AA1AB7E06720EBEBD5 ] Trufos C:\Windows\system32\DRIVERS\Trufos.sys
    07:20:10.0987 0x14c4 Trufos - ok
    07:20:11.0155 0x14c4 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
    07:20:11.0196 0x14c4 TrustedInstaller - ok
    07:20:11.0294 0x14c4 [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
    07:20:11.0340 0x14c4 tssecsrv - ok
    07:20:11.0478 0x14c4 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
    07:20:11.0551 0x14c4 TsUsbFlt - ok
    07:20:11.0576 0x14c4 tsusbhub - ok
    07:20:11.0725 0x14c4 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
    07:20:11.0922 0x14c4 tunnel - ok
    07:20:12.0015 0x14c4 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
    07:20:12.0083 0x14c4 uagp35 - ok
    07:20:12.0212 0x14c4 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
    07:20:12.0391 0x14c4 udfs - ok
    07:20:12.0517 0x14c4 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
    07:20:12.0652 0x14c4 UI0Detect - ok
    07:20:12.0683 0x14c4 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
    07:20:12.0783 0x14c4 uliagpkx - ok
    07:20:12.0900 0x14c4 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
    07:20:13.0022 0x14c4 umbus - ok
    07:20:13.0161 0x14c4 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
    07:20:13.0265 0x14c4 UmPass - ok
    07:20:13.0396 0x14c4 [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService C:\Windows\System32\umrdp.dll
    07:20:13.0871 0x14c4 UmRdpService - ok
    07:20:14.0053 0x14c4 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
    07:20:14.0145 0x14c4 upnphost - ok
    07:20:14.0296 0x14c4 [ FB251567F41BC61988B26731DEC19E4B, 6A535F5A18EB43DD2E18AF0A05301630A1D1484B7D85DA79A7CD122DA4D018E2 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
    07:20:14.0401 0x14c4 USBAAPL64 - ok
    07:20:14.0556 0x14c4 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
    07:20:14.0734 0x14c4 usbaudio - ok
    07:20:14.0820 0x14c4 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
    07:20:14.0968 0x14c4 usbccgp - ok
    07:20:15.0031 0x14c4 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
    07:20:15.0134 0x14c4 usbcir - ok
    07:20:15.0203 0x14c4 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
    07:20:15.0249 0x14c4 usbehci - ok
    07:20:15.0351 0x14c4 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
    07:20:15.0476 0x14c4 usbhub - ok
    07:20:15.0605 0x14c4 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
    07:20:15.0655 0x14c4 usbohci - ok
    07:20:15.0739 0x14c4 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
    07:20:16.0005 0x14c4 usbprint - ok
    07:20:16.0120 0x14c4 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\drivers\usbscan.sys
    07:20:16.0248 0x14c4 usbscan - ok
    07:20:16.0361 0x14c4 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
    07:20:16.0500 0x14c4 USBSTOR - ok
    07:20:16.0574 0x14c4 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
    07:20:16.0627 0x14c4 usbuhci - ok
    07:20:16.0872 0x14c4 [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
    07:20:16.0974 0x14c4 usb_rndisx - ok
    07:20:17.0074 0x14c4 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
    07:20:17.0138 0x14c4 UxSms - ok
    07:20:17.0197 0x14c4 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc C:\Windows\system32\lsass.exe
    07:20:17.0199 0x14c4 VaultSvc - ok
    07:20:17.0287 0x14c4 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
    07:20:17.0347 0x14c4 vdrvroot - ok
    07:20:17.0712 0x14c4 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
    07:20:18.0009 0x14c4 vds - ok
    07:20:18.0167 0x14c4 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
    07:20:18.0246 0x14c4 vga - ok
    07:20:18.0314 0x14c4 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
    07:20:18.0388 0x14c4 VgaSave - ok
    07:20:18.0409 0x14c4 VGPU - ok
    07:20:18.0560 0x14c4 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
    07:20:18.0689 0x14c4 vhdmp - ok
    07:20:18.0784 0x14c4 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
    07:20:18.0858 0x14c4 viaide - ok
    07:20:19.0079 0x14c4 [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus C:\Windows\system32\drivers\vmbus.sys
    07:20:19.0258 0x14c4 vmbus - ok
    07:20:19.0313 0x14c4 [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
    07:20:19.0358 0x14c4 VMBusHID - ok
    07:20:19.0376 0x14c4 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
    07:20:19.0407 0x14c4 volmgr - ok
    07:20:19.0592 0x14c4 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
    07:20:19.0786 0x14c4 volmgrx - ok
    07:20:19.0872 0x14c4 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
    07:20:19.0990 0x14c4 volsnap - ok
    07:20:20.0359 0x14c4 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
    07:20:20.0428 0x14c4 vsmraid - ok
    07:20:20.0761 0x14c4 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
    07:20:20.0910 0x14c4 VSS - ok
    07:20:20.0932 0x14c4 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
    07:20:20.0958 0x14c4 vwifibus - ok
    07:20:21.0055 0x14c4 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
    07:20:21.0152 0x14c4 W32Time - ok
    07:20:21.0201 0x14c4 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
    07:20:21.0240 0x14c4 WacomPen - ok
    07:20:21.0327 0x14c4 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
    07:20:21.0396 0x14c4 WANARP - ok
    07:20:21.0461 0x14c4 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
    07:20:21.0463 0x14c4 Wanarpv6 - ok
    07:20:21.0895 0x14c4 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
    07:20:22.0109 0x14c4 WatAdminSvc - ok
    07:20:22.0484 0x14c4 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
    07:20:22.0617 0x14c4 wbengine - ok
    07:20:22.0740 0x14c4 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
    07:20:22.0818 0x14c4 WbioSrvc - ok
    07:20:23.0124 0x14c4 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
    07:20:23.0178 0x14c4 wcncsvc - ok
    07:20:23.0298 0x14c4 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
    07:20:23.0347 0x14c4 WcsPlugInService - ok
    07:20:23.0446 0x14c4 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\DRIVERS\wd.sys
    07:20:23.0500 0x14c4 Wd - ok
    07:20:23.0597 0x14c4 [ A3D04EBF5227886029B4532F20D026F7, D90F7B9C176008675DA0B5FD7E4973CBC2A04172CEDF8FB7D3B3B4F27B5440D7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys
    07:20:23.0710 0x14c4 WDC_SAM - ok
    07:20:24.0205 0x14c4 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
    07:20:24.0374 0x14c4 Wdf01000 - ok
    07:20:24.0422 0x14c4 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll
    07:20:24.0513 0x14c4 WdiServiceHost - ok
    07:20:24.0537 0x14c4 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll
    07:20:24.0540 0x14c4 WdiSystemHost - ok
    07:20:24.0638 0x14c4 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll
    07:20:24.0665 0x14c4 WebClient - ok
    07:20:24.0744 0x14c4 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
    07:20:25.0246 0x14c4 Wecsvc - ok
    07:20:25.0292 0x14c4 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
    07:20:25.0331 0x14c4 wercplsupport - ok
    07:20:25.0407 0x14c4 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
    07:20:25.0451 0x14c4 WerSvc - ok
    07:20:25.0564 0x14c4 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
    07:20:25.0681 0x14c4 WfpLwf - ok
    07:20:25.0728 0x14c4 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
    07:20:25.0760 0x14c4 WIMMount - ok
    07:20:25.0816 0x14c4 WinDefend - ok
    07:20:25.0824 0x14c4 WinHttpAutoProxySvc - ok
    07:20:26.0424 0x14c4 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
    07:20:26.0684 0x14c4 Winmgmt - ok
    07:20:27.0349 0x14c4 [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM C:\Windows\system32\WsmSvc.dll
    07:20:27.0546 0x14c4 WinRM - ok
    07:20:27.0752 0x14c4 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
    07:20:27.0788 0x14c4 WinUsb - ok
    07:20:28.0214 0x14c4 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
    07:20:28.0347 0x14c4 Wlansvc - ok
    07:20:28.0364 0x14c4 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
    07:20:28.0379 0x14c4 WmiAcpi - ok
    07:20:28.0492 0x14c4 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
    07:20:28.0545 0x14c4 wmiApSrv - ok
    07:20:28.0687 0x14c4 WMPNetworkSvc - ok
    07:20:28.0780 0x14c4 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
    07:20:28.0809 0x14c4 WPCSvc - ok
    07:20:28.0878 0x14c4 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
    07:20:28.0924 0x14c4 WPDBusEnum - ok
    07:20:28.0985 0x14c4 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
    07:20:29.0021 0x14c4 ws2ifsl - ok
    07:20:29.0074 0x14c4 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
    07:20:29.0143 0x14c4 wscsvc - ok
    07:20:29.0160 0x14c4 WSearch - ok
    07:20:29.0899 0x14c4 [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv C:\Windows\system32\wuaueng.dll
    07:20:30.0001 0x14c4 wuauserv - ok
    07:20:30.0091 0x14c4 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
    07:20:30.0188 0x14c4 WudfPf - ok
    07:20:30.0310 0x14c4 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
    07:20:30.0410 0x14c4 WUDFRd - ok
    07:20:30.0457 0x14c4 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
    07:20:30.0533 0x14c4 wudfsvc - ok
    07:20:30.0677 0x14c4 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
    07:20:31.0223 0x14c4 WwanSvc - ok
    07:20:31.0301 0x14c4 [ 2EE48CFCE7CA8E0DB4C44C7476C0943B, 2C324592F3F2D50BABA7123B6F9FC922667CC132777E019FF615F2D6F273A45E ] xusb21 C:\Windows\system32\DRIVERS\xusb21.sys
    07:20:31.0405 0x14c4 xusb21 - ok
    07:20:31.0476 0x14c4 ================ Scan global ===============================
    07:20:31.0958 0x14c4 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
    07:20:32.0201 0x14c4 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    07:20:32.0380 0x14c4 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    07:20:32.0456 0x14c4 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
    07:20:32.0616 0x14c4 [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
    07:20:32.0681 0x14c4 [ Global ] - ok
    07:20:32.0682 0x14c4 ================ Scan MBR ==================================
    07:20:32.0835 0x14c4 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
    07:20:53.0918 0x14c4 \Device\Harddisk0\DR0 - ok
    07:20:53.0933 0x14c4 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
    07:20:54.0051 0x14c4 \Device\Harddisk1\DR1 - ok
    07:20:54.0052 0x14c4 ================ Scan VBR ==================================
    07:20:54.0087 0x14c4 [ 1D361B749658D1468842C5305B1FB241 ] \Device\Harddisk0\DR0\Partition1
    07:20:54.0212 0x14c4 \Device\Harddisk0\DR0\Partition1 - detected Rootkit.Boot.Cidox.b ( 0 )
    07:20:54.0212 0x14c4 \Device\Harddisk0\DR0\Partition1 ( Rootkit.Boot.Cidox.b ) - infected
    07:21:07.0308 0x14c4 [ D6E28907C3856859A7821B33CAFCDC29 ] \Device\Harddisk0\DR0\Partition2
    07:21:07.0422 0x14c4 \Device\Harddisk0\DR0\Partition2 - ok
    07:21:07.0434 0x14c4 [ 327314B7E00134B3FA3008044DDCCF08 ] \Device\Harddisk1\DR1\Partition1
    07:21:07.0466 0x14c4 \Device\Harddisk1\DR1\Partition1 - ok
    07:21:08.0378 0x14c4 AV detected via SS2: Ad-Aware Antivirus, C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareSecurityCenter.exe ( 11.1.5354.0 ), 0x41010 ( enabled : outofdate )
    07:21:08.0474 0x14c4 AV detected via SS2: COMODO Antivirus, C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe ( 7.0.55655.4142 ), 0x61000 ( enabled : updated )
    07:21:08.0529 0x14c4 FW detected via SS2: Ad-Aware Firewall, C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareSecurityCenter.exe ( 11.1.5354.0 ), 0x40010 ( disabled )
    07:21:09.0035 0x14c4 Win FW state via NFP2: enabled
    07:21:17.0823 0x14c4 ============================================================
    07:21:17.0823 0x14c4 Scan finished
    07:21:17.0823 0x14c4 ============================================================
    07:21:17.0846 0x1604 Detected object count: 1
    07:21:17.0846 0x1604 Actual detected object count: 1
    07:21:25.0171 0x1604 \Device\Harddisk0\DR0\Partition1 - copied to quarantine
    07:21:25.0318 0x1604 \Device\Harddisk0\DR0\Partition1 ( Rootkit.Boot.Cidox.b ) - will be cured on reboot
    07:21:25.0432 0x1604 \Device\Harddisk0\DR0\Partition1 - ok
    07:21:25.0432 0x1604 \Device\Harddisk0\DR0\Partition1 ( Rootkit.Boot.Cidox.b ) - User select action: Cure
    07:21:27.0159 0x1604 KLMD registered as C:\Windows\system32\drivers\08150977.sys
    07:21:54.0996 0x22a8 Deinitialize success
  14. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    Last report was before restart. Second set was after.

    15:27:34.0432 0x0a30 TDSS rootkit removing tool 3.0.0.37 May 30 2014 13:12:03
    15:27:35.0212 0x0a30 ============================================================
    15:27:35.0212 0x0a30 Current date / time: 2014/06/02 15:27:35.0212
    15:27:35.0212 0x0a30 SystemInfo:
    15:27:35.0212 0x0a30
    15:27:35.0212 0x0a30 OS Version: 6.1.7601 ServicePack: 1.0
    15:27:35.0212 0x0a30 Product type: Workstation
    15:27:35.0212 0x0a30 ComputerName: BAHAMUT
    15:27:35.0212 0x0a30 UserName: Edward
    15:27:35.0212 0x0a30 Windows directory: C:\Windows
    15:27:35.0212 0x0a30 System windows directory: C:\Windows
    15:27:35.0212 0x0a30 Running under WOW64
    15:27:35.0212 0x0a30 Processor architecture: Intel x64
    15:27:35.0212 0x0a30 Number of processors: 2
    15:27:35.0212 0x0a30 Page size: 0x1000
    15:27:35.0212 0x0a30 Boot type: Normal boot
    15:27:35.0212 0x0a30 ============================================================
    15:27:35.0212 0x0a30 BG loaded
    15:27:35.0946 0x0a30 System UUID: {FFC90CE5-93B3-6153-226B-FCC3393F7605}
    15:27:41.0390 0x0a30 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    15:27:41.0437 0x0a30 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    15:27:41.0437 0x0a30 ============================================================
    15:27:41.0437 0x0a30 \Device\Harddisk0\DR0:
    15:27:41.0484 0x0a30 MBR partitions:
    15:27:41.0484 0x0a30 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
    15:27:41.0484 0x0a30 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
    15:27:41.0484 0x0a30 \Device\Harddisk1\DR1:
    15:27:41.0499 0x0a30 MBR partitions:
    15:27:41.0499 0x0a30 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C0681
    15:27:41.0499 0x0a30 ============================================================
    15:27:41.0842 0x0a30 C: <-> \Device\Harddisk0\DR0\Partition2
    15:27:41.0874 0x0a30 E: <-> \Device\Harddisk1\DR1\Partition1
    15:27:41.0874 0x0a30 ============================================================
    15:27:41.0874 0x0a30 Initialize success
    15:27:41.0874 0x0a30 ============================================================
    15:33:41.0291 0x1778 ============================================================
    15:33:41.0291 0x1778 Scan started
    15:33:41.0291 0x1778 Mode: Manual;
    15:33:41.0291 0x1778 ============================================================
    15:33:41.0291 0x1778 KSN ping started
    15:34:13.0548 0x1778 KSN ping finished: true
    15:34:20.0970 0x1778 ================ Scan system memory ========================
    15:34:20.0970 0x1778 System memory - ok
    15:34:20.0970 0x1778 ================ Scan services =============================
    15:34:22.0142 0x1778 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
    15:34:22.0223 0x1778 1394ohci - ok
    15:34:23.0070 0x1778 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
    15:34:23.0169 0x1778 ACPI - ok
    15:34:23.0231 0x1778 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
    15:34:23.0310 0x1778 AcpiPmi - ok
    15:34:23.0544 0x1778 [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    15:34:23.0561 0x1778 AdobeARMservice - ok
    15:34:24.0855 0x1778 [ 09E7C37DF4A911C8A9AA8BF88ACD10AA, E881E0BBDCED58F28E0BA8DC27372EDFFFF2C57EE31CD13A032FDC9F7C831B5A ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    15:34:24.0975 0x1778 AdobeFlashPlayerUpdateSvc - ok
    15:34:25.0104 0x1778 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
    15:34:25.0202 0x1778 adp94xx - ok
    15:34:25.0277 0x1778 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
    15:34:25.0411 0x1778 adpahci - ok
    15:34:25.0483 0x1778 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
    15:34:25.0549 0x1778 adpu320 - ok
    15:34:25.0618 0x1778 [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
    15:34:25.0629 0x1778 AeLookupSvc - ok
    15:34:25.0766 0x1778 [ 79059559E89D06E8B80CE2944BE20228, 6E041D2FED2D0C3D8E16E56CB61D3245F9144EA92F5BDC9A4AA30598D1C8E6EE ] AFD C:\Windows\system32\drivers\afd.sys
    15:34:25.0830 0x1778 AFD - ok
    15:34:25.0888 0x1778 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
    15:34:25.0940 0x1778 agp440 - ok
    15:34:25.0973 0x1778 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
    15:34:25.0992 0x1778 ALG - ok
    15:34:26.0040 0x1778 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
    15:34:26.0085 0x1778 aliide - ok
    15:34:26.0161 0x1778 [ A359974EAAC83A435497C52F62A2E590, 7A7AFFE1CCE8732C478AE3EA630AA46C94DE0DBFE19EE63E3FB99B0D3338F038 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
  15. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    15:34:26.0169 0x1778 AMD External Events Utility - ok
    15:34:26.0209 0x1778 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
    15:34:26.0256 0x1778 amdide - ok
    15:34:26.0340 0x1778 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
    15:34:26.0393 0x1778 AmdK8 - ok
    15:34:27.0838 0x1778 [ 60216B0E704584DE6D5A9F59E9C34C47, CC3E9F09FB28E50FDFCC5E6A996E28CB4E721DDDD50E23710DC74C5B0F7CE3E3 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
    15:34:28.0231 0x1778 amdkmdag - ok
    15:34:28.0413 0x1778 [ 6B4E9261B613B047A9A145F328889968, E5C6611E88381A9D40AD1CE80BFDDBDA733F4A8D3602AAE25A155D2C39B3B7FD ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
    15:34:28.0465 0x1778 amdkmdap - ok
    15:34:28.0519 0x1778 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
    15:34:28.0536 0x1778 AmdPPM - ok
    15:34:28.0606 0x1778 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
    15:34:28.0679 0x1778 amdsata - ok
    15:34:28.0732 0x1778 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
    15:34:28.0784 0x1778 amdsbs - ok
    15:34:28.0827 0x1778 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
    15:34:28.0845 0x1778 amdxata - ok
    15:34:28.0900 0x1778 [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys
    15:34:28.0948 0x1778 AppID - ok
    15:34:29.0000 0x1778 [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll
    15:34:29.0014 0x1778 AppIDSvc - ok
    15:34:29.0123 0x1778 [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll
    15:34:29.0144 0x1778 Appinfo - ok
    15:34:29.0367 0x1778 [ 30E3850F303EAE5C364782EA78579CC9, 8C94E5A9052F6E794685194EEACB31A174A947D60246908B6A0DEFA081A747A3 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    15:34:29.0410 0x1778 Apple Mobile Device - ok
    15:34:29.0534 0x1778 [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt C:\Windows\System32\appmgmts.dll
    15:34:29.0558 0x1778 AppMgmt - ok
    15:34:29.0639 0x1778 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\DRIVERS\arc.sys
    15:34:29.0682 0x1778 arc - ok
    15:34:29.0721 0x1778 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
    15:34:29.0789 0x1778 arcsas - ok
    15:34:30.0814 0x1778 [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
    15:34:30.0954 0x1778 aspnet_state - ok
    15:34:31.0054 0x1778 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
    15:34:31.0060 0x1778 AsyncMac - ok
    15:34:31.0119 0x1778 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
    15:34:31.0133 0x1778 atapi - ok
    15:34:31.0356 0x1778 [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
    15:34:31.0427 0x1778 AudioEndpointBuilder - ok
    15:34:31.0512 0x1778 [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv C:\Windows\System32\Audiosrv.dll
    15:34:31.0524 0x1778 AudioSrv - ok
    15:34:31.0609 0x1778 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
    15:34:31.0647 0x1778 AxInstSV - ok
    15:34:31.0760 0x1778 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
    15:34:31.0834 0x1778 b06bdrv - ok
    15:34:31.0962 0x1778 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
    15:34:32.0025 0x1778 b57nd60a - ok
    15:34:32.0073 0x1778 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
    15:34:32.0093 0x1778 BDESVC - ok
    15:34:32.0382 0x1778 [ 9920B815BC3B3F2D69071842DD18D422, 80D91191A49C7BA68C968C4FFED4F7A24E7C8F4169C7B45B4F55BBE6F6F22ED2 ] BdfNdisf c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys
    15:34:32.0401 0x1778 BdfNdisf - ok
    15:34:32.0447 0x1778 [ A626DCB25F09E117421E1021CA3D22A0, D2BA10E7EFBE03589DC7AD088E1A1672539C83C427D9C88838DA5C1B92F65AC3 ] bdfwfpf C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys
    15:34:32.0507 0x1778 bdfwfpf - ok
    15:34:32.0593 0x1778 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
    15:34:32.0624 0x1778 Beep - ok
    15:34:32.0833 0x1778 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
    15:34:32.0924 0x1778 BFE - ok
    15:34:33.0159 0x1778 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
    15:34:33.0392 0x1778 BITS - ok
    15:34:33.0459 0x1778 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
    15:34:33.0480 0x1778 blbdrive - ok
    15:34:33.0710 0x1778 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
    15:34:33.0724 0x1778 Bonjour Service - ok
    15:34:33.0815 0x1778 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
    15:34:33.0857 0x1778 bowser - ok
    15:34:33.0906 0x1778 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
    15:34:33.0936 0x1778 BrFiltLo - ok
    15:34:33.0968 0x1778 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
    15:34:33.0999 0x1778 BrFiltUp - ok
    15:34:34.0106 0x1778 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
    15:34:34.0168 0x1778 Browser - ok
    15:34:34.0297 0x1778 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
    15:34:34.0427 0x1778 Brserid - ok
    15:34:34.0461 0x1778 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
    15:34:34.0505 0x1778 BrSerWdm - ok
    15:34:34.0546 0x1778 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
    15:34:34.0562 0x1778 BrUsbMdm - ok
    15:34:34.0617 0x1778 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
    15:34:34.0636 0x1778 BrUsbSer - ok
    15:34:34.0693 0x1778 BTCFilterService - ok
    15:34:34.0720 0x1778 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
    15:34:34.0799 0x1778 BTHMODEM - ok
    15:34:34.0866 0x1778 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
    15:34:34.0904 0x1778 bthserv - ok
    15:34:34.0966 0x1778 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
    15:34:35.0044 0x1778 cdfs - ok
    15:34:35.0161 0x1778 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
    15:34:35.0199 0x1778 cdrom - ok
    15:34:35.0313 0x1778 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
    15:34:35.0351 0x1778 CertPropSvc - ok
    15:34:35.0411 0x1778 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
    15:34:35.0507 0x1778 circlass - ok
    15:34:35.0606 0x1778 [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys
    15:34:35.0615 0x1778 CLFS - ok
    15:34:35.0774 0x1778 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    15:34:35.0831 0x1778 clr_optimization_v2.0.50727_32 - ok
    15:34:36.0008 0x1778 [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    15:34:36.0066 0x1778 clr_optimization_v2.0.50727_64 - ok
    15:34:36.0309 0x1778 [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    15:34:36.0678 0x1778 clr_optimization_v4.0.30319_32 - ok
    15:34:36.0738 0x1778 [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    15:34:36.0790 0x1778 clr_optimization_v4.0.30319_64 - ok
    15:34:36.0869 0x1778 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
    15:34:36.0879 0x1778 CmBatt - ok
    15:34:37.0879 0x1778 [ 5B33C08DE574DA58606B61CFCCD3F082, F88D7BD25D32C2A59AD602DBFED8CA061635B8FEF98CFF93715260B1925D1C4E ] CmdAgent C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    15:34:38.0099 0x1778 CmdAgent - ok
    15:34:38.0172 0x1778 [ 348A7FDDF0D7354ED6308AF96EEF4F54, CB3631315429E3187E77C5799EF7AABE68320D29370DE2992F644D07975BD7A6 ] cmderd C:\Windows\system32\DRIVERS\cmderd.sys
    15:34:38.0200 0x1778 cmderd - ok
    15:34:38.0526 0x1778 [ 923659525ADAC632EA6F94570CCE1561, 375571DAC5A13160295E10EDE571B1A05500FD4136EAF4C48BD664D7D427E069 ] cmdGuard C:\Windows\system32\DRIVERS\cmdguard.sys
    15:34:38.0784 0x1778 cmdGuard - ok
    15:34:38.0846 0x1778 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
    15:34:38.0938 0x1778 cmdide - ok
    15:34:39.0551 0x1778 [ E621EC50B1A85D875904CC0741F03D16, 644077BC4560DA3E8EEAD93170A0E1B7D67293338280A34315BED4A684D42EEB ] cmdvirth C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
    15:34:39.0771 0x1778 cmdvirth - ok
    15:34:39.0982 0x1778 [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG C:\Windows\system32\Drivers\cng.sys
    15:34:40.0098 0x1778 CNG - ok
    15:34:40.0145 0x1778 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
    15:34:40.0174 0x1778 Compbatt - ok
    15:34:40.0239 0x1778 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
    15:34:40.0296 0x1778 CompositeBus - ok
    15:34:40.0309 0x1778 COMSysApp - ok
    15:34:40.0380 0x1778 [ 71879A4AB90D21BCCF9E3CFCF0BB5F4A, 27DAAE90AF101B2DF16DF028BD69A56F60A1EB4AB2EE17CFC8837DFC4EBA121B ] copperhd C:\Windows\system32\drivers\copperhd.sys
    15:34:40.0390 0x1778 copperhd - ok
    15:34:40.0409 0x1778 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
    15:34:40.0428 0x1778 crcdisk - ok
    15:34:40.0499 0x1778 [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc C:\Windows\system32\cryptsvc.dll
    15:34:40.0537 0x1778 CryptSvc - ok
    15:34:40.0640 0x1778 [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC C:\Windows\system32\drivers\csc.sys
    15:34:40.0711 0x1778 CSC - ok
    15:34:40.0828 0x1778 [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService C:\Windows\System32\cscsvc.dll
    15:34:40.0861 0x1778 CscService - ok
    15:34:40.0967 0x1778 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
    15:34:41.0016 0x1778 DcomLaunch - ok
    15:34:41.0069 0x1778 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
    15:34:41.0092 0x1778 defragsvc - ok
    15:34:41.0133 0x1778 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
    15:34:41.0160 0x1778 DfsC - ok
    15:34:41.0235 0x1778 [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
    15:34:41.0265 0x1778 dg_ssudbus - ok
    15:34:41.0393 0x1778 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
    15:34:41.0482 0x1778 Dhcp - ok
    15:34:41.0513 0x1778 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
    15:34:41.0525 0x1778 discache - ok
    15:34:41.0572 0x1778 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\DRIVERS\disk.sys
    15:34:41.0599 0x1778 Disk - ok
    15:34:41.0933 0x1778 [ DBFA9E9842C434B84052F18074866191, 91CEFF197870FF556978E23888CB7B5FDA14699E88887B4C25AFFF74F130F95F ] DisplayFusionService C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
    15:34:41.0972 0x1778 DisplayFusionService - ok
    15:34:42.0150 0x1778 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
    15:34:42.0283 0x1778 Dnscache - ok
    15:34:42.0410 0x1778 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
    15:34:42.0492 0x1778 dot3svc - ok
    15:34:42.0654 0x1778 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
    15:34:42.0673 0x1778 DPS - ok
    15:34:42.0780 0x1778 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
    15:34:42.0827 0x1778 drmkaud - ok
    15:34:43.0408 0x1778 [ E5B95C75557120881076C45CD146D72C, C4107822D70057C0A1EC41208D88550DDFAAA741395DF38A7E20E47316C6A1B5 ] DvmMDES C:\ASUS.SYS\config\DVMExportService.exe
    15:34:43.0413 0x1778 DvmMDES - ok
    15:34:43.0625 0x1778 [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
    15:34:44.0242 0x1778 DXGKrnl - ok
    15:34:44.0330 0x1778 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
    15:34:44.0386 0x1778 EapHost - ok
    15:34:45.0075 0x1778 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
    15:34:45.0244 0x1778 ebdrv - ok
    15:34:45.0295 0x1778 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS C:\Windows\System32\lsass.exe
    15:34:45.0299 0x1778 EFS - ok
    15:34:45.0374 0x1778 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
    15:34:45.0432 0x1778 ehRecvr - ok
    15:34:45.0496 0x1778 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
    15:34:45.0536 0x1778 ehSched - ok
    15:34:45.0592 0x1778 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
    15:34:45.0658 0x1778 elxstor - ok
    15:34:45.0690 0x1778 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
    15:34:45.0726 0x1778 ErrDev - ok
    15:34:45.0853 0x1778 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
    15:34:45.0890 0x1778 EventSystem - ok
    15:34:46.0015 0x1778 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
    15:34:46.0193 0x1778 exfat - ok
    15:34:46.0276 0x1778 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
    15:34:46.0363 0x1778 fastfat - ok
    15:34:46.0553 0x1778 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
    15:34:46.0584 0x1778 Fax - ok
    15:34:46.0634 0x1778 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\DRIVERS\fdc.sys
    15:34:46.0676 0x1778 fdc - ok
    15:34:46.0802 0x1778 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
    15:34:46.0818 0x1778 fdPHost - ok
    15:34:46.0881 0x1778 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
    15:34:46.0901 0x1778 FDResPub - ok
    15:34:46.0947 0x1778 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
    15:34:47.0018 0x1778 FileInfo - ok
    15:34:47.0041 0x1778 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
    15:34:47.0056 0x1778 Filetrace - ok
    15:34:47.0082 0x1778 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
    15:34:47.0113 0x1778 flpydisk - ok
    15:34:47.0195 0x1778 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
    15:34:47.0236 0x1778 FltMgr - ok
    15:34:47.0404 0x1778 [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll
    15:34:47.0564 0x1778 FontCache - ok
    15:34:47.0696 0x1778 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    15:34:47.0697 0x1778 FontCache3.0.0.0 - ok
    15:34:47.0743 0x1778 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
    15:34:47.0760 0x1778 FsDepends - ok
    15:34:47.0802 0x1778 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
    15:34:47.0845 0x1778 Fs_Rec - ok
    15:34:47.0936 0x1778 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
    15:34:48.0061 0x1778 fvevol - ok
    15:34:48.0087 0x1778 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
    15:34:48.0112 0x1778 gagp30kx - ok
    15:34:48.0347 0x1778 [ E0DDA05B195D71102EAE79E8DEC66151, A23B6C74875AD2100320DA26986BA78A35693BF28DEA25EEF9564F8AD1BD3A1E ] Garmin Core Update Service C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
    15:34:48.0360 0x1778 Garmin Core Update Service - ok
    15:34:48.0426 0x1778 [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
    15:34:48.0434 0x1778 GEARAspiWDM - ok
    15:34:48.0613 0x1778 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
    15:34:48.0655 0x1778 gpsvc - ok
    15:34:48.0874 0x1778 [ 07177B5A8C277074C30AC515FEBD4F37, A18B7A4491732D97884D0F95428563DE6EBCBB988C5595DA2C710DFDE733B096 ] gzflt C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys
    15:34:48.0930 0x1778 gzflt - ok
    15:34:49.0024 0x1778 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
    15:34:49.0040 0x1778 hamachi - ok
    15:34:49.0576 0x1778 [ 5D943A7CDD83F533D41A22E882677C6E, E9CD581EC985B3F765E5E890A02B2D8FE4E5345063969831278CB3876DFF1273 ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
    15:34:49.0650 0x1778 Hamachi2Svc - ok
    15:34:49.0711 0x1778 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
    15:34:49.0751 0x1778 hcw85cir - ok
    15:34:49.0886 0x1778 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
    15:34:50.0009 0x1778 HdAudAddService - ok
    15:34:50.0067 0x1778 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
    15:34:50.0169 0x1778 HDAudBus - ok
    15:34:50.0216 0x1778 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
    15:34:50.0254 0x1778 HidBatt - ok
    15:34:50.0280 0x1778 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
    15:34:50.0324 0x1778 HidBth - ok
    15:34:50.0340 0x1778 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
    15:34:50.0355 0x1778 HidIr - ok
    15:34:50.0435 0x1778 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
    15:34:50.0493 0x1778 hidserv - ok
    15:34:50.0588 0x1778 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
    15:34:50.0604 0x1778 HidUsb - ok
    15:34:50.0643 0x1778 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
    15:34:50.0658 0x1778 hkmsvc - ok
    15:34:50.0716 0x1778 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
    15:34:50.0733 0x1778 HomeGroupListener - ok
    15:34:50.0794 0x1778 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
    15:34:50.0809 0x1778 HomeGroupProvider - ok
    15:34:50.0858 0x1778 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
    15:34:50.0922 0x1778 HpSAMD - ok
    15:34:51.0068 0x1778 [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys
    15:34:51.0213 0x1778 HTTP - ok
    15:34:51.0296 0x1778 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
    15:34:51.0335 0x1778 hwpolicy - ok
    15:34:51.0395 0x1778 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
    15:34:51.0440 0x1778 i8042prt - ok
    15:34:51.0565 0x1778 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
    15:34:51.0924 0x1778 iaStorV - ok
    15:34:52.0195 0x1778 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    15:34:52.0326 0x1778 idsvc - ok
    15:34:52.0447 0x1778 IEEtwCollectorService - ok
    15:34:52.0549 0x1778 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
    15:34:52.0593 0x1778 iirsp - ok
    15:34:52.0927 0x1778 [ 54E0F4CCD6CE99A807459AF928DD64AC, 65EBD9757B811E8F1060F23C4936DBED5FBBEDA290CC4CD7F7781CC3D189BE8B ] IJPLMSVC C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
    15:34:52.0930 0x1778 IJPLMSVC - ok
    15:34:53.0096 0x1778 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
    15:34:53.0247 0x1778 IKEEXT - ok
    15:34:53.0302 0x1778 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
    15:34:53.0366 0x1778 intelide - ok
    15:34:53.0452 0x1778 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
    15:34:53.0533 0x1778 intelppm - ok
    15:34:53.0594 0x1778 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
    15:34:53.0630 0x1778 IPBusEnum - ok
    15:34:53.0685 0x1778 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
    15:34:53.0728 0x1778 IpFilterDriver - ok
    15:34:53.0834 0x1778 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
    15:34:53.0995 0x1778 iphlpsvc - ok
    15:34:54.0056 0x1778 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
    15:34:54.0101 0x1778 IPMIDRV - ok
    15:34:54.0188 0x1778 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
    15:34:54.0237 0x1778 IPNAT - ok
    15:34:54.0564 0x1778 [ 33B286326BD2B1A7748C43391058FB19, C6240C9ED5B7C227595E953E3D1AB5F2D45CCD86FDBDF985836A970B4B6467FE ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
    15:34:54.0702 0x1778 iPod Service - ok
    15:34:54.0800 0x1778 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
    15:34:54.0817 0x1778 IRENUM - ok
    15:34:54.0901 0x1778 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
    15:34:54.0953 0x1778 isapnp - ok
    15:34:55.0127 0x1778 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
    15:34:55.0313 0x1778 iScsiPrt - ok
    15:34:55.0383 0x1778 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
    15:34:55.0403 0x1778 kbdclass - ok
    15:34:55.0500 0x1778 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
    15:34:55.0551 0x1778 kbdhid - ok
    15:34:55.0668 0x1778 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso C:\Windows\system32\lsass.exe
    15:34:55.0676 0x1778 KeyIso - ok
    15:34:55.0734 0x1778 [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
    15:34:55.0801 0x1778 KSecDD - ok
    15:34:55.0924 0x1778 [ 1C2D8E18AA8FD50CD04C15CC27F7F5AB, 4BA3B0F9F01BD47D66091D3AD86B69A523981D61DFB4D677F2CD39405B2DA989 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
    15:34:55.0988 0x1778 KSecPkg - ok
    15:34:56.0050 0x1778 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
    15:34:56.0112 0x1778 ksthunk - ok
    15:34:56.0236 0x1778 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
    15:34:56.0343 0x1778 KtmRm - ok
    15:34:56.0452 0x1778 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
    15:34:56.0528 0x1778 LanmanServer - ok
    15:34:56.0595 0x1778 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
    15:34:56.0670 0x1778 LanmanWorkstation - ok
    15:34:57.0092 0x1778 [ 907A28AE111208455C51467EE60D20EF, 7ABD4B5A234EA2B8F7C7CDD163D3109A290631B361E279F3D682C1A8D48A4E01 ] LavasoftAdAwareService11 C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
    15:34:57.0149 0x1778 LavasoftAdAwareService11 - ok
    15:34:57.0334 0x1778 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
    15:34:57.0377 0x1778 lltdio - ok
    15:34:57.0591 0x1778 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
    15:34:57.0703 0x1778 lltdsvc - ok
    15:34:57.0756 0x1778 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
    15:34:57.0790 0x1778 lmhosts - ok
    15:34:58.0002 0x1778 [ D5F9C50082FA5F82C35922998B3DAD6E, 4957FB1888EC69E16E6D019F2D984EE810F8532FAB504B30D32518E4D3F01FDB ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
    15:34:58.0024 0x1778 LMIGuardianSvc - ok
    15:34:58.0117 0x1778 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
    15:34:58.0212 0x1778 LSI_FC - ok
    15:34:58.0261 0x1778 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
    15:34:58.0361 0x1778 LSI_SAS - ok
    15:34:58.0429 0x1778 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
    15:34:58.0486 0x1778 LSI_SAS2 - ok
    15:34:58.0546 0x1778 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
    15:34:58.0612 0x1778 LSI_SCSI - ok
    15:34:58.0652 0x1778 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
    15:34:58.0745 0x1778 luafv - ok
    15:34:58.0863 0x1778 [ E5ECF40E5FD459141E5F6685FFD51804, A120A6184AB16864E8A5F1DFD0CD178FCA541DE463B5CEF946E18C34B9B6F716 ] Lycosa C:\Windows\system32\drivers\Lycosa.sys
    15:34:58.0883 0x1778 Lycosa - ok
    15:34:59.0153 0x1778 [ 6140163BFE9D8F2DFDBA088ED5521C13, B7B501F0D1527A15B1610D133E97AB431574502F0553734009627488D0007595 ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
    15:34:59.0243 0x1778 MBAMSwissArmy - ok
    15:34:59.0317 0x1778 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
    15:34:59.0345 0x1778 Mcx2Svc - ok
    15:34:59.0413 0x1778 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
    15:34:59.0540 0x1778 megasas - ok
    15:34:59.0682 0x1778 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
    15:34:59.0881 0x1778 MegaSR - ok
    15:34:59.0982 0x1778 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
    15:34:59.0985 0x1778 MMCSS - ok
    15:35:00.0028 0x1778 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
    15:35:00.0090 0x1778 Modem - ok
    15:35:00.0180 0x1778 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
    15:35:00.0205 0x1778 monitor - ok
    15:35:00.0389 0x1778 [ C94A2EA3FDFA5D650884926B710B7DB1, B52A17CD62E65747E8547F1D73807BBC2FA1CB449F6A787BCDDB5063DE8A6530 ] motccgp C:\Windows\system32\DRIVERS\motccgp.sys
    15:35:00.0409 0x1778 motccgp - ok
    15:35:00.0498 0x1778 [ D51E009BAEDA07EBC107D49D224C2414, F8EF80E91D67697337DD82FE0489448D2566C97C6B189BBBB4733B42BF26AB0C ] motccgpfl C:\Windows\system32\DRIVERS\motccgpfl.sys
    15:35:00.0517 0x1778 motccgpfl - ok
    15:35:00.0637 0x1778 [ 3CC500C9B0E4D476802D277353CB2C89, 9E4EE267BF70FE0A43A1B994546186FD5ED6E384A7B8F905DFA81617DBEF9AD8 ] MotDev C:\Windows\system32\DRIVERS\motodrv.sys
    15:35:00.0658 0x1778 MotDev - ok
    15:35:00.0717 0x1778 motmodem - ok
    15:35:00.0992 0x1778 [ 9DFD34E6841C460B5D992A1C5327AE69, 03543E18AAFB9D2DB08A1E2866C0963CED3561D4C33B35183807A895FFD9985D ] MotoHelper C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
    15:35:01.0025 0x1778 MotoHelper - ok
    15:35:01.0059 0x1778 [ EBD05F60CAFC5BBA2602B8D7101082D3, 9144E1E7C4DD6150C0E97B4C628DE0216ED372062F5F0FB216C81CAF93DBBF07 ] MotoSwitchService C:\Windows\system32\DRIVERS\motswch.sys
    15:35:01.0086 0x1778 MotoSwitchService - ok
    15:35:01.0142 0x1778 Motousbnet - ok
    15:35:01.0231 0x1778 motusbdevice - ok
    15:35:01.0270 0x1778 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
    15:35:01.0296 0x1778 mouclass - ok
    15:35:01.0356 0x1778 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
    15:35:01.0377 0x1778 mouhid - ok
    15:35:01.0429 0x1778 [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
    15:35:01.0519 0x1778 mountmgr - ok
    15:35:01.0770 0x1778 [ E1B6FCAE82474FC071155263E2841D54, 341E2CEB1A86586730130311C4FAF86851151D5F08EF915A5F89B6C4094AE1F4 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    15:35:01.0852 0x1778 MozillaMaintenance - ok
    15:35:01.0972 0x1778 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09
  16. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    B8 ] mpio C:\Windows\system32\drivers\mpio.sys
    15:35:02.0224 0x1778 mpio - ok
    15:35:02.0300 0x1778 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
    15:35:02.0362 0x1778 mpsdrv - ok
    15:35:02.0708 0x1778 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
    15:35:02.0903 0x1778 MpsSvc - ok
    15:35:03.0011 0x1778 [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
    15:35:03.0070 0x1778 MRxDAV - ok
    15:35:03.0163 0x1778 [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
    15:35:03.0211 0x1778 mrxsmb - ok
    15:35:03.0369 0x1778 [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
    15:35:03.0486 0x1778 mrxsmb10 - ok
    15:35:03.0553 0x1778 [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
    15:35:03.0575 0x1778 mrxsmb20 - ok
    15:35:03.0621 0x1778 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
    15:35:03.0691 0x1778 msahci - ok
    15:35:03.0741 0x1778 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
    15:35:03.0952 0x1778 msdsm - ok
    15:35:04.0081 0x1778 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
    15:35:04.0153 0x1778 MSDTC - ok
    15:35:04.0298 0x1778 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
    15:35:04.0334 0x1778 Msfs - ok
    15:35:04.0364 0x1778 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
    15:35:04.0414 0x1778 mshidkmdf - ok
    15:35:04.0447 0x1778 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
    15:35:04.0469 0x1778 msisadrv - ok
    15:35:04.0585 0x1778 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
    15:35:04.0634 0x1778 MSiSCSI - ok
    15:35:04.0638 0x1778 msiserver - ok
    15:35:04.0717 0x1778 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
    15:35:04.0737 0x1778 MSKSSRV - ok
    15:35:04.0800 0x1778 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
    15:35:04.0817 0x1778 MSPCLOCK - ok
    15:35:04.0848 0x1778 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
    15:35:04.0870 0x1778 MSPQM - ok
    15:35:04.0981 0x1778 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
    15:35:05.0214 0x1778 MsRPC - ok
    15:35:05.0286 0x1778 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
    15:35:05.0374 0x1778 mssmbios - ok
    15:35:05.0460 0x1778 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
    15:35:05.0515 0x1778 MSTEE - ok
    15:35:05.0547 0x1778 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
    15:35:05.0557 0x1778 MTConfig - ok
    15:35:05.0713 0x1778 [ 19B006B181E3875FD254F7B67ACF1E7C, 1D68D19522E71F16B8B50F8CCFBC9D884CF2DAC40CC409BD5A40A4D4223ABC61 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
    15:35:05.0717 0x1778 MTsensor - ok
    15:35:05.0777 0x1778 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
    15:35:05.0805 0x1778 Mup - ok
    15:35:06.0132 0x1778 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
    15:35:06.0235 0x1778 napagent - ok
    15:35:06.0456 0x1778 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
    15:35:06.0561 0x1778 NativeWifiP - ok
    15:35:06.0885 0x1778 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
    15:35:07.0622 0x1778 NDIS - ok
    15:35:07.0702 0x1778 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
    15:35:07.0737 0x1778 NdisCap - ok
    15:35:07.0805 0x1778 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
    15:35:07.0838 0x1778 NdisTapi - ok
    15:35:07.0984 0x1778 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
    15:35:08.0041 0x1778 Ndisuio - ok
    15:35:08.0115 0x1778 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
    15:35:08.0224 0x1778 NdisWan - ok
    15:35:08.0298 0x1778 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
    15:35:08.0430 0x1778 NDProxy - ok
    15:35:08.0657 0x1778 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
    15:35:08.0733 0x1778 NetBIOS - ok
    15:35:08.0878 0x1778 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
    15:35:09.0002 0x1778 NetBT - ok
    15:35:09.0036 0x1778 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon C:\Windows\system32\lsass.exe
    15:35:09.0054 0x1778 Netlogon - ok
    15:35:09.0200 0x1778 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
    15:35:09.0236 0x1778 Netman - ok
    15:35:09.0312 0x1778 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    15:35:09.0453 0x1778 NetMsmqActivator - ok
    15:35:09.0526 0x1778 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    15:35:09.0529 0x1778 NetPipeActivator - ok
    15:35:09.0654 0x1778 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
    15:35:09.0670 0x1778 netprofm - ok
    15:35:09.0708 0x1778 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    15:35:09.0710 0x1778 NetTcpActivator - ok
    15:35:09.0767 0x1778 [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    15:35:09.0770 0x1778 NetTcpPortSharing - ok
    15:35:09.0845 0x1778 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
    15:35:09.0976 0x1778 nfrd960 - ok
    15:35:10.0194 0x1778 [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc C:\Windows\System32\nlasvc.dll
    15:35:10.0249 0x1778 NlaSvc - ok
    15:35:10.0323 0x1778 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
    15:35:10.0410 0x1778 Npfs - ok
    15:35:10.0618 0x1778 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
    15:35:10.0711 0x1778 nsi - ok
    15:35:10.0793 0x1778 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
    15:35:10.0822 0x1778 nsiproxy - ok
    15:35:11.0258 0x1778 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
    15:35:11.0504 0x1778 Ntfs - ok
    15:35:11.0579 0x1778 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
    15:35:11.0601 0x1778 Null - ok
    15:35:11.0676 0x1778 [ 8EBCB9165EE7F1571842F4D9D624A74C, 115F46B8391866762AD41B299F0670D8735D124BD518A53EC73DCDBFCA9C28F9 ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys
    15:35:11.0718 0x1778 nusb3hub - ok
    15:35:11.0824 0x1778 [ 5D54DBB12BBFE07CC283FD39F2CD6D63, 3DC3F9121F8892EDABD07ACDE45DB025BA2FC4245A8D3EE343F1FDF7189B391F ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys
    15:35:11.0926 0x1778 nusb3xhc - ok
    15:35:15.0551 0x1778 [ E71E299FF15390E585BACF2C18F55078, 7A51D989DA55349B1761839DEAFD593B6E6F88C433B132E7B027467E050FBA67 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
    15:35:16.0451 0x1778 nvlddmkm - ok
    15:35:16.0720 0x1778 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
    15:35:16.0909 0x1778 nvraid - ok
    15:35:17.0029 0x1778 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
    15:35:17.0171 0x1778 nvstor - ok
    15:35:17.0373 0x1778 [ 415695F5A54E91E869EEBFEA261361A6, 1829C15E07D902686171C8A66EB03040A037CAC1E00E24BF598030D9DA795CEC ] nvsvc C:\Windows\system32\nvvsvc.exe
    15:35:17.0429 0x1778 nvsvc - ok
    15:35:17.0857 0x1778 [ 4789E020D2617046862D1790FC235FF6, FCFD56DF2CADA830E7B2D4B91D5A9D2FE783B1396CBA124000765168FA5B6574 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    15:35:18.0356 0x1778 nvUpdatusService - ok
    15:35:18.0415 0x1778 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
    15:35:18.0532 0x1778 nv_agp - ok
    15:35:18.0576 0x1778 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
    15:35:18.0609 0x1778 ohci1394 - ok
    15:35:18.0735 0x1778 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
    15:35:18.0767 0x1778 p2pimsvc - ok
    15:35:18.0885 0x1778 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
    15:35:18.0942 0x1778 p2psvc - ok
    15:35:18.0998 0x1778 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys
    15:35:19.0124 0x1778 Parport - ok
    15:35:19.0185 0x1778 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
    15:35:19.0240 0x1778 partmgr - ok
    15:35:19.0295 0x1778 [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll
    15:35:19.0656 0x1778 PcaSvc - ok
    15:35:19.0718 0x1778 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
    15:35:19.0854 0x1778 pci - ok
    15:35:19.0884 0x1778 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
    15:35:19.0894 0x1778 pciide - ok
    15:35:20.0095 0x1778 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
    15:35:20.0379 0x1778 pcmcia - ok
    15:35:20.0421 0x1778 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
    15:35:20.0437 0x1778 pcw - ok
    15:35:20.0541 0x1778 [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
    15:35:20.0673 0x1778 PEAUTH - ok
    15:35:20.0906 0x1778 [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
    15:35:21.0071 0x1778 PeerDistSvc - ok
    15:35:23.0150 0x1778 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
    15:35:23.0172 0x1778 PerfHost - ok
    15:35:23.0471 0x1778 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
    15:35:23.0672 0x1778 pla - ok
    15:35:23.0818 0x1778 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
    15:35:23.0843 0x1778 PlugPlay - ok
    15:35:23.0921 0x1778 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
    15:35:23.0991 0x1778 PNRPAutoReg - ok
    15:35:24.0169 0x1778 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
    15:35:24.0248 0x1778 PNRPsvc - ok
    15:35:24.0403 0x1778 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
    15:35:24.0524 0x1778 PolicyAgent - ok
    15:35:24.0649 0x1778 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
    15:35:24.0757 0x1778 Power - ok
    15:35:24.0882 0x1778 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
    15:35:24.0923 0x1778 PptpMiniport - ok
    15:35:24.0969 0x1778 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\DRIVERS\processr.sys
    15:35:25.0013 0x1778 Processor - ok
    15:35:25.0074 0x1778 [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc C:\Windows\system32\profsvc.dll
    15:35:25.0171 0x1778 ProfSvc - ok
    15:35:25.0211 0x1778 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe
    15:35:25.0222 0x1778 ProtectedStorage - ok
    15:35:25.0297 0x1778 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
    15:35:25.0345 0x1778 Psched - ok
    15:35:25.0961 0x1778 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
    15:35:26.0065 0x1778 ql2300 - ok
    15:35:26.0115 0x1778 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
    15:35:26.0174 0x1778 ql40xx - ok
    15:35:26.0205 0x1778 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
    15:35:26.0241 0x1778 QWAVE - ok
    15:35:26.0256 0x1778 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
    15:35:26.0276 0x1778 QWAVEdrv - ok
    15:35:26.0343 0x1778 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
    15:35:26.0359 0x1778 RasAcd - ok
    15:35:26.0446 0x1778 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
    15:35:26.0502 0x1778 RasAgileVpn - ok
    15:35:26.0543 0x1778 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
    15:35:26.0585 0x1778 RasAuto - ok
    15:35:26.0708 0x1778 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
    15:35:26.0778 0x1778 Rasl2tp - ok
    15:35:26.0867 0x1778 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
    15:35:26.0957 0x1778 RasMan - ok
    15:35:27.0019 0x1778 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
    15:35:27.0074 0x1778 RasPppoe - ok
    15:35:27.0142 0x1778 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
    15:35:27.0195 0x1778 RasSstp - ok
    15:35:27.0276 0x1778 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
    15:35:27.0361 0x1778 rdbss - ok
    15:35:27.0391 0x1778 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
    15:35:27.0404 0x1778 rdpbus - ok
    15:35:27.0432 0x1778 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
    15:35:27.0456 0x1778 RDPCDD - ok
    15:35:27.0547 0x1778 [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
    15:35:27.0587 0x1778 RDPDR - ok
    15:35:27.0659 0x1778 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
    15:35:27.0674 0x1778 RDPENCDD - ok
    15:35:27.0864 0x1778 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
    15:35:28.0082 0x1778 RDPREFMP - ok
    15:35:28.0298 0x1778 [ 70CBA1A0C98600A2AA1863479B35CB90, 91A133297921B4955817176251AFC5283DA3C7D2099700C4C92ECC94DBE9A99E ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
    15:35:28.0340 0x1778 RdpVideoMiniport - ok
    15:35:28.0454 0x1778 [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
    15:35:28.0651 0x1778 RDPWD - ok
    15:35:28.0731 0x1778 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
    15:35:28.0814 0x1778 rdyboost - ok
    15:35:28.0946 0x1778 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
    15:35:29.0010 0x1778 RemoteAccess - ok
    15:35:29.0119 0x1778 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
    15:35:29.0184 0x1778 RemoteRegistry - ok
    15:35:29.0272 0x1778 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
    15:35:29.0330 0x1778 RpcEptMapper - ok
    15:35:29.0407 0x1778 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
    15:35:29.0452 0x1778 RpcLocator - ok
    15:35:29.0596 0x1778 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
    15:35:29.0608 0x1778 RpcSs - ok
    15:35:29.0705 0x1778 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
    15:35:29.0763 0x1778 rspndr - ok
    15:35:29.0918 0x1778 [ 7EA8D2EB9BBFD2AB8A3117A1E96D3B3A, 9F6CFBE7E64A63E0AFEF546C4B8D889657B2055CE80279EA1B63EB5650E730F8 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
    15:35:29.0961 0x1778 RTL8167 - ok
    15:35:30.0062 0x1778 [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap C:\Windows\system32\drivers\vms3cap.sys
    15:35:30.0161 0x1778 s3cap - ok
    15:35:30.0240 0x1778 [ A49CDA75F8E41F769D19E2669BD62B37, 768A7CAD039C0285191E9D20E36ED8B9A2009499D75888AD88418385B0B9E1AB ] S3XXx64 C:\Windows\system32\DRIVERS\S3XXx64.sys
    15:35:30.0308 0x1778 S3XXx64 - ok
    15:35:30.0364 0x1778 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs C:\Windows\system32\lsass.exe
    15:35:30.0381 0x1778 SamSs - ok
    15:35:30.0430 0x1778 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
    15:35:30.0813 0x1778 sbp2port - ok
    15:35:30.0917 0x1778 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
    15:35:30.0981 0x1778 SCardSvr - ok
    15:35:31.0033 0x1778 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
    15:35:31.0044 0x1778 scfilter - ok
    15:35:31.0379 0x1778 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll
    15:35:31.0598 0x1778 Schedule - ok
    15:35:31.0653 0x1778 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
    15:35:31.0655 0x1778 SCPolicySvc - ok
    15:35:31.0732 0x1778 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
    15:35:31.0756 0x1778 SDRSVC - ok
    15:35:31.0837 0x1778 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
    15:35:31.0944 0x1778 secdrv - ok
    15:35:32.0057 0x1778 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
    15:35:32.0071 0x1778 seclogon - ok
    15:35:32.0154 0x1778 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
    15:35:32.0195 0x1778 SENS - ok
    15:35:32.0259 0x1778 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
    15:35:32.0278 0x1778 SensrSvc - ok
    15:35:32.0304 0x1778 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
    15:35:32.0333 0x1778 Serenum - ok
    15:35:32.0380 0x1778 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
    15:35:32.0406 0x1778 Serial - ok
    15:35:32.0466 0x1778 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
    15:35:32.0494 0x1778 sermouse - ok
    15:35:32.0561 0x1778 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
    15:35:32.0623 0x1778 SessionEnv - ok
    15:35:32.0685 0x1778 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
    15:35:32.0776 0x1778 sffdisk - ok
    15:35:32.0827 0x1778 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
    15:35:32.0873 0x1778 sffp_mmc - ok
    15:35:32.0905 0x1778 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
    15:35:32.0967 0x1778 sffp_sd - ok
    15:35:33.0058 0x1778 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
    15:35:33.0374 0x1778 sfloppy - ok
    15:35:33.0497 0x1778 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
    15:35:33.0657 0x1778 SharedAccess - ok
    15:35:33.0742 0x1778 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
    15:35:33.0762 0x1778 ShellHWDetection - ok
    15:35:33.0865 0x1778 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
    15:35:33.0915 0x1778 SiSRaid2 - ok
    15:35:34.0021 0x1778 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
    15:35:34.0352 0x1778 SiSRaid4 - ok
    15:35:34.0378 0x1778 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
    15:35:34.0401 0x1778 Smb - ok
    15:35:34.0604 0x1778 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
    15:35:34.0616 0x1778 SNMPTRAP - ok
    15:35:34.0639 0x1778 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
    15:35:34.0691 0x1778 spldr - ok
    15:35:34.0778 0x1778 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
    15:35:34.0796 0x1778 Spooler - ok
    15:35:35.0316 0x1778 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
    15:35:35.0571 0x1778 sppsvc - ok
    15:35:35.0643 0x1778 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
    15:35:35.0671 0x1778 sppuinotify - ok
    15:35:35.0799 0x1778 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
    15:35:35.0966 0x1778 srv - ok
    15:35:36.0177 0x1778 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
    15:35:36.0332 0x1778 srv2 - ok
    15:35:36.0381 0x1778 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
    15:35:36.0461 0x1778 srvnet - ok
    15:35:36.0577 0x1778 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
    15:35:36.0634 0x1778 SSDPSRV - ok
    15:35:36.0693 0x1778 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
    15:35:36.0746 0x1778 SstpSvc - ok
    15:35:36.0853 0x1778 [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
    15:35:36.0933 0x1778 ssudmdm - ok
    15:35:37.0228 0x1778 [ 6E1A473DD2A4714EAF7D11E2315DF794, 4460546191072C7DF8B2E5A00577BA8E4FF5A1B2EA399DDF65EBE1AE4A5A5C84 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    15:35:37.0239 0x1778 Steam Client Service - ok
    15:35:37.0522 0x1778 [ A9D26626BEADF5A0641BF6B5095EF309, EABC711466FECA20058D7E24CA2593059E1F113B38A2E7574822E48BFBBF4146 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    15:35:37.0572 0x1778 Stereo Service - ok
    15:35:37.0602 0x1778 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
    15:35:37.0681 0x1778 stexstor - ok
    15:35:37.0891 0x1778 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
    15:35:37.0957 0x1778 stisvc - ok
    15:35:38.0068 0x1778 [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt C:\Windows\system32\drivers\vmstorfl.sys
    15:35:38.0127 0x1778 storflt - ok
    15:35:38.0178 0x1778 [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc C:\Windows\system32\drivers\storvsc.sys
    15:35:38.0216 0x1778 storvsc - ok
    15:35:38.0263 0x1778 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys
    15:35:38.0319 0x1778 swenum - ok
    15:35:38.0512 0x1778 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
    15:35:38.0655 0x1778 swprv - ok
    15:35:38.0765 0x1778 Synth3dVsc - ok
    15:35:39.0198 0x1778 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll
    15:35:39.0267 0x1778 SysMain - ok
    15:35:39.0320 0x1778 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
    15:35:39.0377 0x1778 TabletInputService - ok
    15:35:39.0467 0x1778 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
    15:35:39.0574 0x1778 TapiSrv - ok
    15:35:39.0899 0x1778 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
    15:35:39.0919 0x1778 TBS - ok
    15:35:40.0062 0x1778 [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] Tcpip C:\Windows\system32\drivers\tcpip.sys
    15:35:40.0264 0x1778 Tcpip - ok
    15:35:40.0480 0x1778 [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
    15:35:40.0516 0x1778 TCPIP6 - ok
    15:35:40.0600 0x1778 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
    15:35:40.0611 0x1778 tcpipreg - ok
    15:35:40.0684 0x1778 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
    15:35:40.0695 0x1778 TDPIPE - ok
    15:35:40.0748 0x1778 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
    15:35:40.0762 0x1778 TDTCP - ok
    15:35:40.0822 0x1778 [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
    15:35:40.0860 0x1778 tdx - ok
    15:35:40.0923 0x1778 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys
    15:35:41.0076 0x1778 TermDD - ok
    15:35:41.0225 0x1778 [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService C:\Windows\System32\termsrv.dll
    15:35:41.0365 0x1778 TermService - ok
    15:35:41.0422 0x1778 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
    15:35:41.0457 0x1778 Themes - ok
    15:35:41.0546 0x1778 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
    15:35:41.0581 0x1778 THREADORDER - ok
    15:35:41.0776 0x1778 [ E4FAD21646088D79F8889B6531396ACF, D0C8F0E3293D423245FD2233F283A1FE2463E15F8B9F4ED6AC96C2164EC51F75 ] TomTomHOMEService E:\Program Files\TomTom Home\TomTomHOMEService.exe
    15:35:41.0789 0x1778 TomTomHOMEService - ok
    15:35:41.0892 0x1778 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
    15:35:41.0943 0x1778 TrkWks - ok
    15:35:42.0057 0x1778 [ D5747C16225B4C7B0D04511DB0407544,
  17. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    413AC0BF02EE3E4B93784DAA6F29BA41E569948D4B3A41AA1AB7E06720EBEBD5 ] Trufos C:\Windows\system32\DRIVERS\Trufos.sys
    15:35:42.0125 0x1778 Trufos - ok
    15:35:42.0239 0x1778 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
    15:35:42.0314 0x1778 TrustedInstaller - ok
    15:35:42.0358 0x1778 [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
    15:35:42.0389 0x1778 tssecsrv - ok
    15:35:42.0442 0x1778 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
    15:35:42.0488 0x1778 TsUsbFlt - ok
    15:35:42.0536 0x1778 tsusbhub - ok
    15:35:42.0631 0x1778 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
    15:35:42.0731 0x1778 tunnel - ok
    15:35:42.0779 0x1778 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
    15:35:42.0828 0x1778 uagp35 - ok
    15:35:42.0910 0x1778 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
    15:35:43.0035 0x1778 udfs - ok
    15:35:43.0131 0x1778 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
    15:35:43.0154 0x1778 UI0Detect - ok
    15:35:43.0214 0x1778 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
    15:35:43.0289 0x1778 uliagpkx - ok
    15:35:43.0381 0x1778 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
    15:35:43.0403 0x1778 umbus - ok
    15:35:43.0509 0x1778 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
    15:35:43.0523 0x1778 UmPass - ok
    15:35:43.0594 0x1778 [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService C:\Windows\System32\umrdp.dll
    15:35:43.0675 0x1778 UmRdpService - ok
    15:35:43.0775 0x1778 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
    15:35:43.0816 0x1778 upnphost - ok
    15:35:43.0862 0x1778 [ FB251567F41BC61988B26731DEC19E4B, 6A535F5A18EB43DD2E18AF0A05301630A1D1484B7D85DA79A7CD122DA4D018E2 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
    15:35:43.0885 0x1778 USBAAPL64 - ok
    15:35:43.0947 0x1778 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
    15:35:44.0037 0x1778 usbaudio - ok
    15:35:44.0102 0x1778 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
    15:35:44.0181 0x1778 usbccgp - ok
    15:35:44.0281 0x1778 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
    15:35:44.0420 0x1778 usbcir - ok
    15:35:44.0468 0x1778 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
    15:35:44.0524 0x1778 usbehci - ok
    15:35:44.0647 0x1778 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
    15:35:44.0752 0x1778 usbhub - ok
    15:35:44.0813 0x1778 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
    15:35:44.0841 0x1778 usbohci - ok
    15:35:44.0897 0x1778 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
    15:35:44.0914 0x1778 usbprint - ok
    15:35:44.0978 0x1778 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\drivers\usbscan.sys
    15:35:45.0008 0x1778 usbscan - ok
    15:35:45.0072 0x1778 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
    15:35:45.0103 0x1778 USBSTOR - ok
    15:35:45.0157 0x1778 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
    15:35:45.0191 0x1778 usbuhci - ok
    15:35:45.0347 0x1778 [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
    15:35:45.0362 0x1778 usb_rndisx - ok
    15:35:45.0441 0x1778 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
    15:35:45.0521 0x1778 UxSms - ok
    15:35:45.0547 0x1778 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc C:\Windows\system32\lsass.exe
    15:35:45.0549 0x1778 VaultSvc - ok
    15:35:45.0631 0x1778 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
    15:35:45.0685 0x1778 vdrvroot - ok
    15:35:45.0886 0x1778 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
    15:35:45.0956 0x1778 vds - ok
    15:35:46.0094 0x1778 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
    15:35:46.0401 0x1778 vga - ok
    15:35:46.0440 0x1778 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
    15:35:46.0482 0x1778 VgaSave - ok
    15:35:46.0505 0x1778 VGPU - ok
    15:35:46.0562 0x1778 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
    15:35:47.0074 0x1778 vhdmp - ok
    15:35:47.0226 0x1778 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
    15:35:47.0251 0x1778 viaide - ok
    15:35:47.0368 0x1778 [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus C:\Windows\system32\drivers\vmbus.sys
    15:35:47.0452 0x1778 vmbus - ok
    15:35:47.0521 0x1778 [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
    15:35:47.0699 0x1778 VMBusHID - ok
    15:35:47.0726 0x1778 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
    15:35:47.0755 0x1778 volmgr - ok
    15:35:47.0931 0x1778 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
    15:35:47.0992 0x1778 volmgrx - ok
    15:35:48.0037 0x1778 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
    15:35:48.0097 0x1778 volsnap - ok
    15:35:48.0182 0x1778 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
    15:35:48.0230 0x1778 vsmraid - ok
    15:35:48.0447 0x1778 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
    15:35:48.0578 0x1778 VSS - ok
    15:35:48.0608 0x1778 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
    15:35:48.0627 0x1778 vwifibus - ok
    15:35:48.0740 0x1778 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
    15:35:48.0865 0x1778 W32Time - ok
    15:35:48.0952 0x1778 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
    15:35:49.0031 0x1778 WacomPen - ok
    15:35:49.0144 0x1778 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
    15:35:49.0209 0x1778 WANARP - ok
    15:35:49.0254 0x1778 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
    15:35:49.0256 0x1778 Wanarpv6 - ok
    15:35:49.0561 0x1778 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
    15:35:49.0719 0x1778 WatAdminSvc - ok
    15:35:50.0254 0x1778 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
    15:35:50.0403 0x1778 wbengine - ok
    15:35:50.0492 0x1778 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
    15:35:50.0582 0x1778 WbioSrvc - ok
    15:35:50.0699 0x1778 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
    15:35:50.0758 0x1778 wcncsvc - ok
    15:35:50.0808 0x1778 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
    15:35:50.0859 0x1778 WcsPlugInService - ok
    15:35:50.0930 0x1778 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\DRIVERS\wd.sys
    15:35:50.0942 0x1778 Wd - ok
    15:35:51.0031 0x1778 [ A3D04EBF5227886029B4532F20D026F7, D90F7B9C176008675DA0B5FD7E4973CBC2A04172CEDF8FB7D3B3B4F27B5440D7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys
    15:35:51.0043 0x1778 WDC_SAM - ok
    15:35:51.0225 0x1778 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
    15:35:51.0338 0x1778 Wdf01000 - ok
    15:35:51.0465 0x1778 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll
    15:35:51.0515 0x1778 WdiServiceHost - ok
    15:35:51.0559 0x1778 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll
    15:35:51.0562 0x1778 WdiSystemHost - ok
    15:35:51.0694 0x1778 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll
    15:35:51.0797 0x1778 WebClient - ok
    15:35:51.0884 0x1778 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
    15:35:52.0267 0x1778 Wecsvc - ok
    15:35:52.0335 0x1778 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
    15:35:52.0358 0x1778 wercplsupport - ok
    15:35:52.0434 0x1778 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
    15:35:52.0516 0x1778 WerSvc - ok
    15:35:52.0657 0x1778 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
    15:35:52.0670 0x1778 WfpLwf - ok
    15:35:52.0697 0x1778 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
    15:35:52.0709 0x1778 WIMMount - ok
    15:35:52.0785 0x1778 WinDefend - ok
    15:35:52.0792 0x1778 WinHttpAutoProxySvc - ok
    15:35:53.0305 0x1778 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
    15:35:53.0348 0x1778 Winmgmt - ok
    15:35:53.0576 0x1778 [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM C:\Windows\system32\WsmSvc.dll
    15:35:53.0741 0x1778 WinRM - ok
    15:35:53.0846 0x1778 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
    15:35:53.0912 0x1778 WinUsb - ok
    15:35:54.0167 0x1778 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
    15:35:54.0343 0x1778 Wlansvc - ok
    15:35:54.0425 0x1778 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
    15:35:54.0453 0x1778 WmiAcpi - ok
    15:35:54.0574 0x1778 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
    15:35:54.0662 0x1778 wmiApSrv - ok
    15:35:54.0721 0x1778 WMPNetworkSvc - ok
    15:35:54.0799 0x1778 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
    15:35:54.0808 0x1778 WPCSvc - ok
    15:35:54.0881 0x1778 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
    15:35:54.0939 0x1778 WPDBusEnum - ok
    15:35:55.0021 0x1778 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
    15:35:55.0054 0x1778 ws2ifsl - ok
    15:35:55.0116 0x1778 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
    15:35:55.0132 0x1778 wscsvc - ok
    15:35:55.0136 0x1778 WSearch - ok
    15:35:55.0607 0x1778 [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv C:\Windows\system32\wuaueng.dll
    15:35:55.0708 0x1778 wuauserv - ok
    15:35:55.0760 0x1778 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
    15:35:55.0900 0x1778 WudfPf - ok
    15:35:56.0085 0x1778 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
    15:35:56.0293 0x1778 WUDFRd - ok
    15:35:56.0510 0x1778 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
    15:35:56.0567 0x1778 wudfsvc - ok
    15:35:56.0698 0x1778 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
    15:35:56.0897 0x1778 WwanSvc - ok
    15:35:56.0995 0x1778 [ 2EE48CFCE7CA8E0DB4C44C7476C0943B, 2C324592F3F2D50BABA7123B6F9FC922667CC132777E019FF615F2D6F273A45E ] xusb21 C:\Windows\system32\DRIVERS\xusb21.sys
    15:35:57.0032 0x1778 xusb21 - ok
    15:35:57.0116 0x1778 ================ Scan global ===============================
    15:35:57.0170 0x1778 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
    15:35:57.0307 0x1778 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    15:35:57.0429 0x1778 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
    15:35:57.0501 0x1778 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
    15:35:57.0666 0x1778 [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
    15:35:57.0704 0x1778 [ Global ] - ok
    15:35:57.0705 0x1778 ================ Scan MBR ==================================
    15:35:57.0723 0x1778 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
    15:36:07.0195 0x1778 \Device\Harddisk0\DR0 - ok
    15:36:07.0209 0x1778 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
    15:36:07.0347 0x1778 \Device\Harddisk1\DR1 - ok
    15:36:07.0348 0x1778 ================ Scan VBR ==================================
    15:36:07.0362 0x1778 [ 492EEEEBA7F06A761430AEA75EBCC211 ] \Device\Harddisk0\DR0\Partition1
    15:36:07.0475 0x1778 \Device\Harddisk0\DR0\Partition1 - ok
    15:36:07.0505 0x1778 [ D6E28907C3856859A7821B33CAFCDC29 ] \Device\Harddisk0\DR0\Partition2
    15:36:07.0646 0x1778 \Device\Harddisk0\DR0\Partition2 - ok
    15:36:07.0658 0x1778 [ 327314B7E00134B3FA3008044DDCCF08 ] \Device\Harddisk1\DR1\Partition1
    15:36:07.0690 0x1778 \Device\Harddisk1\DR1\Partition1 - ok
    15:36:07.0691 0x1778 Waiting for KSN requests completion. In queue: 191
    15:36:08.0691 0x1778 Waiting for KSN requests completion. In queue: 191
    15:36:09.0691 0x1778 Waiting for KSN requests completion. In queue: 191
    15:36:11.0015 0x1778 AV detected via SS2: Ad-Aware Antivirus, C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareSecurityCenter.exe ( 11.1.5354.0 ), 0x41010 ( enabled : outofdate )
    15:36:11.0029 0x1778 AV detected via SS2: COMODO Antivirus, C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe ( 7.0.55655.4142 ), 0x61000 ( enabled : updated )
    15:36:11.0067 0x1778 FW detected via SS2: Ad-Aware Firewall, C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareSecurityCenter.exe ( 11.1.5354.0 ), 0x40010 ( disabled )
    15:36:11.0195 0x1778 Win FW state via NFP2: enabled
    15:36:20.0390 0x1778 ============================================================
    15:36:20.0390 0x1778 Scan finished
    15:36:20.0390 0x1778 ============================================================
    15:36:20.0403 0x1714 Detected object count: 0
    15:36:20.0403 0x1714 Actual detected object count: 0
  18. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    DDS (Ver_2012-11-20.01) - NTFS_AMD64
    Internet Explorer: BrowserJavaVersion: 10.60.2
    Run by Edward at 15:45:50 on 2014-06-02
    Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.4094.1847 [GMT -5:00]
    .
    AV: Ad-Aware Antivirus *Enabled/Outdated* {D87B6541-12A1-DAEA-0033-9B8057AAB996}
    AV: COMODO Antivirus *Enabled/Updated* {B74CC7D2-B407-E1DC-1033-DD315BCDC8C8}
    SP: Ad-Aware Antivirus *Enabled/Outdated* {631A84A5-349B-D564-3A83-A0F22C2DF32B}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: COMODO Antivirus *Enabled/Updated* {0C2D2636-923D-EE52-2A83-E643204A8275}
    FW: Ad-Aware Firewall *Disabled* {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\nvvsvc.exe
    C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\atieclxx.exe
    C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
    C:\ASUS.SYS\config\DVMExportService.exe
    C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
    C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
    C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
    C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
    C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
    C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
    C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
    C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
    C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
    C:\Program Files (x86)\Steam\Steam.exe
    C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
    C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
    C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\COMODO\COMODO Internet Security\cis.exe
    C:\Windows\splwow64.exe
    C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
    C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
    C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE
    C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\System32\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = about:blank
    mStart Page = about:blank
    mWinlogon: Userinit = userinit.exe,
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
    BHO: {95B7759C-8C7F-4BF1-B163-73684A933233} - <orphaned>
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
    uRun: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
    uRun: [MyDriveConnect.exe] C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
    uRun: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
    uRun: [DisplayFusion] "C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
    mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
    mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
    mRun: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    StartupFolder: C:\Users\Edward\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
    mPolicies-Explorer: NoActiveDesktop = dword:1
    mPolicies-Explorer: NoActiveDesktopChanges = dword:1
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
    mPolicies-System: ConsentPromptBehaviorUser = dword:3
    mPolicies-System: EnableUIADesktopToggle = dword:0
    TCP: NameServer = 192.168.1.254
    TCP: Interfaces\{13073585-9D0F-453C-BB4F-631B179C466D} : NameServer = 156.154.70.22,156.154.71.22
    TCP: Interfaces\{13073585-9D0F-453C-BB4F-631B179C466D} : DHCPNameServer = 192.168.1.254
    SSODL: WebCheck - <orphaned>
    x64-mStart Page = about:blank
    x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    x64-Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
    x64-Run: [AdAwareTray] "C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe"
    x64-Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
    x64-DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
    x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
    x64-SSODL: WebCheck - <orphaned>
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Edward\AppData\Roaming\Mozilla\Firefox\Profiles\js1rcphm.default\
    FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
    FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/|https://www.navyfederal.org/
    FF - prefs.js: keyword.URL -
    FF - prefs.js: network.proxy.type - 0
    FF - component: C:\Users\Edward\AppData\Roaming\Mozilla\Firefox\Profiles\js1rcphm.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
    FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
    FF - plugin: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
    FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
    FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
    FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
    FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
    FF - plugin: C:\Program Files (x86)\Winamp Detect\npwachk.dll
    FF - plugin: C:\Users\Edward\AppData\Roaming\raidcall\plugins\nprcplugin.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfndisf6.sys [2013-10-21 93160]
    R1 bdfwfpf;bdfwfpf;C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [2013-10-21 102992]
    R1 cmderd;COMODO Internet Security Eradication Driver;C:\Windows\System32\drivers\cmderd.sys [2014-4-16 23168]
    R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:\Windows\System32\drivers\cmdguard.sys [2014-4-16 738472]
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2011-4-20 203776]
    R2 DisplayFusionService;DisplayFusionService;C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [2014-5-12 1375600]
    R2 DvmMDES;DeviceVM Meta Data Export Service;C:\ASUS.SYS\config\DVMExportService.exe [2009-10-16 319488]
    R2 Garmin Core Update Service;Garmin Core Update Service;C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-2-12 387928]
    R2 LavasoftAdAwareService11;Ad-Aware Service 11;C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [2014-1-23 702744]
    R2 LMIGuardianSvc;LMIGuardianSvc;C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-4-15 377616]
    R2 MotoHelper;MotoHelper Service;C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [2011-12-6 214896]
    R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-10-23 414496]
    R3 gzflt;gzflt;C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [2013-7-17 138232]
    R3 Lycosa;Lycosa Keyboard;C:\Windows\System32\drivers\Lycosa.sys [2008-1-17 18816]
    R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2010-1-22 77824]
    R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2010-1-22 180224]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-11-5 346144]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
    S3 cmdvirth;COMODO Virtual Service Manager;C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2014-3-25 2264280]
    S3 copperhd;Razer Copperhead Driver;C:\Windows\System32\drivers\copperhd.sys [2006-5-24 13824]
    S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\drivers\ssudbus.sys [2014-1-22 108800]
    S3 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-5-13 2228048]
    S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-4-29 111616]
    S3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-5-12 119512]
    S3 motccgp;Motorola USB Composite Device Driver;C:\Windows\System32\drivers\motccgp.sys [2011-4-4 21504]
    S3 motccgpfl;MotCcgpFlService;C:\Windows\System32\drivers\motccgpfl.sys [2009-1-29 9216]
    S3 MotDev;Motorola Inc. USB Device;C:\Windows\System32\drivers\motodrv.sys [2009-5-8 53632]
    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2011-6-27 20992]
    S3 S3XXx64;SCR3xx USB SmartCardReader64;C:\Windows\System32\drivers\S3XXx64.sys [2013-6-5 73984]
    S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\drivers\ssudmdm.sys [2014-1-22 206080]
    S3 TomTomHOMEService;TomTomHOMEService;E:\Program Files\TomTom Home\TomTomHOMEService.exe [2013-8-27 93072]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-27 59392]
    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-2-15 52736]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-11-5 1255736]
    S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]
    .
    =============== File Associations ===============
    .
    ShellExec: SC2Editor.exe: open="C:/Program Files (x86)/StarCraft II/Support/SC2Editor.exe" "%1"
    ShellExec: SC2Switcher.exe: open="C:/Program Files (x86)/StarCraft II/Support/SC2Switcher.exe" "%1"
    .
    =============== Created Last 30 ================
    .
    2014-06-02 12:21:25 -------- d-----w- C:\TDSSKiller_Quarantine
    2014-06-02 01:20:55 -------- d--h--w- C:\VTRoot
    2014-06-01 09:48:59 -------- d-----w- C:\Users\Edward\AppData\Local\CrashDumps
    2014-06-01 05:22:03 75888 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{0E5FC61D-6AD5-4212-9631-5992073FC5A8}\offreg.dll
    2014-05-30 12:27:01 10702536 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{0E5FC61D-6AD5-4212-9631-5992073FC5A8}\mpengine.dll
    2014-05-29 17:58:12 98216 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
    2014-05-29 12:36:52 -------- d-----w- C:\ProgramData\RogueKiller
    2014-05-29 06:52:17 163504 ----a-w- C:\ProgramData\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
    2014-05-29 04:14:41 -------- d-s---w- C:\ProgramData\Shared Space
    2014-05-29 04:13:56 -------- d-----w- C:\Program Files\COMODO
    2014-05-29 04:13:09 -------- d-----w- C:\ProgramData\Comodo Downloader
    2014-05-29 04:12:14 -------- d-----w- C:\ProgramData\Comodo
    2014-05-28 22:13:37 -------- d-----w- C:\Users\Edward\AppData\Roaming\Douxfe
    2014-05-28 21:55:55 -------- d-----w- C:\Program Files (x86)\LogMeIn Hamachi
    2014-05-28 21:51:54 -------- d-----w- C:\Users\Edward\AppData\Local\ElevatedDiagnostics
    2014-05-28 21:09:36 204800 ----a-w- C:\Users\Edward\AppData\Local\vcqvtsif.exe
    2014-05-19 02:14:23 -------- d-----w- C:\Program Files (x86)\StarCraft II
    2014-05-19 01:50:03 -------- d-----w- C:\Users\Edward\AppData\Local\Blizzard Entertainment
    2014-05-19 01:49:45 -------- d-----w- C:\Users\Edward\AppData\Roaming\Battle.net
    2014-05-19 01:49:45 -------- d-----w- C:\Users\Edward\AppData\Local\Battle.net
    2014-05-19 01:49:27 -------- d-----w- C:\Program Files (x86)\Battle.net
    2014-05-15 01:56:59 86528 ----a-w- C:\Windows\System32\TSpkg.dll
    2014-05-13 01:32:43 -------- d-sh--w- C:\Users\Edward\AppData\Roaming\Common
    2014-05-13 01:32:37 -------- d-----w- C:\Users\Edward\AppData\Roaming\DisplayFusion
    2014-05-13 01:32:29 -------- d-----w- C:\ProgramData\Binary Fortress Software
    2014-05-13 01:32:17 -------- d-----w- C:\Program Files (x86)\DisplayFusion
    2014-05-13 00:04:42 -------- d-----w- C:\Users\Edward\AppData\Roaming\LavasoftStatistics
    2014-05-12 23:09:27 -------- d-----w- C:\ProgramData\BitDefender
    2014-05-12 22:53:59 2084072 ----a-w- C:\Windows\System32\bdnc.dll
    2014-05-12 22:53:56 96160 ----a-w- C:\Windows\System32\bdpredir.dll
    2014-05-12 22:53:56 209984 ----a-w- C:\Windows\System32\BdFirewallSDK.dll
    2014-05-12 22:53:56 195016 ----a-w- C:\Windows\System32\httproxy.dll
    2014-05-12 22:53:56 156936 ----a-w- C:\Windows\System32\bdfwcore.dll
    2014-05-12 22:53:56 155912 ----a-w- C:\Windows\System32\bdpop3p.dll
    2014-05-12 22:53:56 122928 ----a-w- C:\Windows\System32\OEMbdpredir.dll
    2014-05-12 22:53:56 1061776 ----a-w- C:\Windows\System32\bdsmtpp.dll
    2014-05-12 22:51:29 119512 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
    2014-05-12 22:50:46 -------- d-----w- C:\Program Files\Lavasoft
    2014-05-12 22:49:24 91352 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
    2014-05-12 22:49:24 63192 ----a-w- C:\Windows\System32\drivers\mwac.sys
    2014-05-12 22:49:24 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys
    2014-05-12 22:49:24 -------- d-----w- C:\ProgramData\Malwarebytes
    2014-05-12 22:49:24 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware
    2014-05-12 22:49:01 -------- d-----w- C:\Users\Edward\AppData\Local\Programs
    2014-05-12 22:40:29 -------- d-----w- C:\Program Files\Common Files\Lavasoft
    2014-05-08 11:21:12 188272 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll
    2014-05-06 08:08:35 -------- d-s---w- C:\Windows\System32\CompatTel
    .
    ==================== Find3M ====================
    .
    2014-05-14 12:51:16 70832 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2014-05-14 12:51:16 692400 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
    2014-05-14 12:51:09 17938608 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
    2014-05-09 06:14:03 477184 ----a-w- C:\Windows\System32\aepdu.dll
    2014-05-09 06:11:23 424448 ----a-w- C:\Windows\System32\aeinv.dll
    2014-04-29 13:40:58 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
    2014-04-29 12:34:22 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
    2014-04-17 03:12:58 48360 ----a-w- C:\Windows\System32\drivers\cmdhlp.sys
    2014-04-17 03:12:56 738472 ----a-w- C:\Windows\System32\drivers\cmdguard.sys
    2014-04-17 03:12:56 23168 ----a-w- C:\Windows\System32\drivers\cmderd.sys
    2014-04-12 02:22:05 95680 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
    2014-04-12 02:22:05 155072 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
    2014-04-12 02:19:38 29184 ----a-w- C:\Windows\System32\sspisrv.dll
    2014-04-12 02:19:38 136192 ----a-w- C:\Windows\System32\sspicli.dll
    2014-04-12 02:19:37 28160 ----a-w- C:\Windows\System32\secur32.dll
    2014-04-12 02:19:32 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
    2014-04-12 02:19:05 31232 ----a-w- C:\Windows\System32\lsass.exe
    2014-04-12 02:12:06 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
    2014-04-12 02:10:56 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
    2014-03-31 14:35:08 270496 ------w- C:\Windows\System32\MpSigStub.exe
    2014-03-26 01:22:38 43216 ----a-w- C:\Windows\System32\cmdcsr.dll
    2014-03-26 01:22:38 363504 ----a-w- C:\Windows\SysWow64\guard32.dll
    2014-03-26 01:22:36 453680 ----a-w- C:\Windows\System32\guard64.dll
    2014-03-26 01:22:30 45784 ----a-w- C:\Windows\System32\cmdkbd64.dll
    2014-03-26 01:22:30 352984 ----a-w- C:\Windows\System32\cmdvrt64.dll
    2014-03-26 01:22:26 284888 ----a-w- C:\Windows\SysWow64\cmdvrt32.dll
    2014-03-26 01:22:24 40664 ----a-w- C:\Windows\SysWow64\cmdkbd32.dll
    2014-03-06 09:31:33 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
    2014-03-06 08:59:04 66048 ----a-w- C:\Windows\System32\iesetup.dll
    2014-03-06 08:57:34 548352 ----a-w- C:\Windows\System32\vbscript.dll
    2014-03-06 08:57:20 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
    2014-03-06 08:29:40 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
    2014-03-06 08:29:14 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
    2014-03-06 08:28:15 752640 ----a-w- C:\Windows\System32\jscript9diag.dll
    2014-03-06 08:15:54 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
    2014-03-06 08:11:41 5784064 ----a-w- C:\Windows\System32\jscript9.dll
    2014-03-06 08:02:34 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
    2014-03-06 08:02:33 455168 ----a-w- C:\Windows\SysWow64\vbscript.dll
    2014-03-06 08:01:01 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
    2014-03-06 07:56:43 38400 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
    2014-03-06 07:46:36 4254720 ----a-w- C:\Windows\SysWow64\jscript9.dll
    2014-03-06 07:38:13 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
    2014-03-06 07:36:40 592896 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
    2014-03-06 07:13:43 32256 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
    2014-03-06 07:11:15 2043904 ----a-w- C:\Windows\System32\inetcpl.cpl
    2014-03-06 06:40:39 1967104 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
    2014-03-06 06:22:40 2260480 ----a-w- C:\Windows\System32\wininet.dll
    2014-03-06 05:41:49 1789440 ----a-w- C:\Windows\SysWow64\wininet.dll
    .
    ============= FINISH: 15:48:08.26 ===============
  19. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows 7 Ultimate
    Boot Device: \Device\HarddiskVolume1
    Install Date: 11/5/2010 1:34:52 PM
    System Uptime: 6/2/2014 7:24:22 AM (8 hours ago)
    .
    Motherboard: ASUSTeK Computer INC. | | M4A89GTD-PRO/USB3
    Processor: AMD Athlon(tm) II X2 255 Processor | AM3 | 3100/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 931 GiB total, 502.85 GiB free.
    D: is CDROM ()
    E: is FIXED (NTFS) - 233 GiB total, 211.417 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP271: 5/29/2014 12:13:49 PM - Prior to MBAR
    RP272: 5/29/2014 12:37:38 PM - Malwarebytes Anti-Rootkit Restore Point
    RP273: 5/29/2014 12:52:35 PM - Installed Java 7 Update 60
    RP274: 5/30/2014 7:25:27 AM - Windows Update
    .
    ==== Installed Programs ======================
    .
    Ad-Aware Antivirus
    AdAwareInstaller
    AdAwareUpdater
    Adobe AIR
    Adobe Flash Player 13 ActiveX
    Adobe Flash Player 13 Plugin
    Adobe Reader X (10.1.10)
    Age of Empires II: HD Edition
    Age of Empires® III: Complete Collection
    AntimalwareEngine
    AntispamEngine
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Battle.net
    Bonjour
    Canon Easy-PhotoPrint EX
    Canon IJ Network Scanner Selector EX
    Canon IJ Network Tool
    Canon Inkjet Printer/Scanner/Fax Extended Survey Program
    Canon MP Navigator EX 5.1
    Canon MX430 series MP Drivers
    Canon MX430 series On-screen Manual
    Canon MX430 series User Registration
    Canon My Printer
    Canon Solution Menu EX
    Canon Speed Dial Utility
    COMODO Internet Security Premium
    Conduit Engine
    Curse Client
    Dead Island
    Dead Island Riptide
    Diablo II
    Diablo III
    DisplayFusion 5.1.1
    Don't Starve
    Dota 2
    Elevated Installer
    Express Gate
    Fallout: New Vegas
    FirewallEngine
    Garmin Express
    Garmin Express Tray
    Heroes of Might and Magic 3 Complete
    Heroes of Might and Magic V Bundle
    iCloud
    iTunes
    Jamestown
    Java 7 Update 60
    Java Auto Updater
    Java(TM) 6 Update 24 (64-bit)
    Just Cause 2
    Just Cause 2: Multiplayer Mod
    League of Legends
    LEGO Lord of the Rings
    LogMeIn Hamachi
    Malwarebytes Anti-Malware version 2.0.1.1004
    Mass Effect
    Mass Effect 2
    Microsoft .NET Framework 4.5.1
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2005 Redistributable (x64)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
    Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
    Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
    Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
    Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
    Microsoft XNA Framework Redistributable 4.0
    MobileMe Control Panel
    MotoHelper 2.1.32 Driver 5.4.0
    MotoHelper MergeModules
    Motorola Mobile Drivers Installation 5.4.0
    Mozilla Firefox 29.0.1 (x86 en-US)
    Mozilla Maintenance Service
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MyDriveConnect 3.3.0.1342
    NEC Electronics USB 3.0 Host Controller Driver
    Notepad++
    NVIDIA Control Panel 331.65
    NVIDIA Display Control Panel
    NVIDIA Graphics Driver 331.65
    NVIDIA Install Application
    NVIDIA Stereoscopic 3D Driver
    NVIDIA Update 1.11.3
    NVIDIA Update Components
    NVIDIA WDM Drivers
    OnlineThreatsEngine
    ORION: Dino Horde
    PAK Explorer
    Pixel Piracy
    Portal 2
    PVSonyDll
    QuickTime
    RaidCall
    Realtek Ethernet Controller Driver For Windows 7
    RIFT
    Safari
    SAMSUNG USB Driver for Mobile Phones
    Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
    Sid Meier's Civilization V
    SimCity 2000 Special Edition
    Space Engineers
    Star Wars: Knights of the Old Republic
    Starbound
    StarCraft
    StarCraft II
    Steam
    TeamSpeak 3 Client
    Terrafirma
    Terraria
    The Elder Scrolls V: Skyrim
    The Mighty Quest For Epic Loot
    The Sims(TM) 3
    TomTom HOME
    TomTom HOME Visual Studio Merge Modules
    Vampire - The Masquerade - Redemption
    Ventrilo Client
    Visual Studio C++ 10.0 Runtime
    VLC media player 2.1.2
    Vuze
    WebFilteringEngine
    Winamp
    Winamp Detector Plug-in
    Windows Media Player Firefox Plugin
    WinRAR archiver
    WinZip 17.5
    World of Warcraft
    XCOM: Enemy Unknown
    .
    ==== Event Viewer Messages From Past Week ========
    .
    6/2/2014 7:27:33 AM, Error: Service Control Manager [7038] - The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error: Logon failure: the specified account password has expired. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
    6/2/2014 7:27:33 AM, Error: Service Control Manager [7000] - The NVIDIA Update Service Daemon service failed to start due to the following error: The service did not start due to a logon failure.
    6/2/2014 7:19:45 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.
    6/2/2014 6:59:20 AM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
    6/2/2014 6:56:38 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Garmin Core Update Service service to connect.
    6/2/2014 6:56:38 AM, Error: Service Control Manager [7000] - The Garmin Core Update Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    6/2/2014 6:54:11 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the LogMeIn Hamachi Tunneling Engine service to connect.
    6/2/2014 6:54:11 AM, Error: Service Control Manager [7000] - The LogMeIn Hamachi Tunneling Engine service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    6/2/2014 6:52:45 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the DisplayFusionService service to connect.
    6/2/2014 6:52:45 AM, Error: Service Control Manager [7000] - The DisplayFusionService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    5/30/2014 7:39:54 AM, Error: Service Control Manager [7031] - The Garmin Core Update Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    5/30/2014 7:39:47 AM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    .
    ==== End Of File ===========================
  20. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    Malwarebytes Anti-Rootkit BETA 1.07.0.1009
    www.malwarebytes.org

    Database version: v2014.06.02.08

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 11.0.9600.17105
    Edward :: BAHAMUT [administrator]

    6/2/2014 3:51:47 PM
    mbar-log-2014-06-02 (15-51-47).txt

    Scan type: Quick scan
    Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
    Scan options disabled:
    Objects scanned: 315324
    Time elapsed: 19 minute(s), 1 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 0
    (No malicious items detected)

    Physical Sectors Detected: 0
    (No malicious items detected)

    (end)
  21. Broni

    Broni Malware Annihilator Posts: 46,319   +252

    Good job :)

    [​IMG] You're running two AV programs, Comodo and Ad-aware.
    You must uninstall one of them.
    I suggest Ad-aware goes.

    [​IMG] Create new restore point before proceeding with the next step....
    How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

    [​IMG] Please download ComboFix from Here, Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      If the connection is not there use restore point you created prior to running Combofix.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try the following...

    Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
    iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

    Restart computer in safe mode

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    When the scan is done Notepad will open with rKill.txt log.
    NOTE. rKill.txt log will also be present on your desktop.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
  22. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    ComboFix 14-05-29.01 - Edward 06/02/2014 20:49:19.1.2 - x64
    Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.4094.2320 [GMT -5:00]
    Running from: c:\users\Edward\Desktop\ComboFix.exe
    AV: COMODO Antivirus *Disabled/Updated* {B74CC7D2-B407-E1DC-1033-DD315BCDC8C8}
    SP: COMODO Antivirus *Disabled/Updated* {0C2D2636-923D-EE52-2A83-E643204A8275}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    C:\install.exe
    c:\programdata\adaware-installer-reboot-required.tmp
    c:\users\Edward\AppData\Roaming\Microsoft\Windows\Recent\Curse Client.appref-ms
    c:\users\Edward\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
    c:\windows\SysWow64\SETCFC1.tmp
    c:\windows\SysWow64\SETF10F.tmp
    .
    .
    ((((((((((((((((((((((((( Files Created from 2014-05-03 to 2014-06-03 )))))))))))))))))))))))))))))))
    .
    .
    2014-06-03 02:07 . 2014-06-03 02:07 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
    2014-06-03 02:07 . 2014-06-03 02:07 -------- d-----w- c:\users\Default\AppData\Local\temp
    2014-06-03 00:34 . 2014-06-03 00:34 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
    2014-06-02 21:17 . 2014-06-02 21:17 -------- d-----w- c:\program files\WinRAR
    2014-06-02 20:51 . 2014-06-02 21:11 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
    2014-06-02 12:21 . 2014-06-02 12:21 -------- d-----w- C:\TDSSKiller_Quarantine
    2014-06-02 01:20 . 2014-06-02 01:20 -------- d-----w- C:\VTRoot
    2014-06-01 09:48 . 2014-06-03 01:57 -------- d-----w- c:\users\Edward\AppData\Local\CrashDumps
    2014-06-01 05:22 . 2014-06-02 13:07 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0E5FC61D-6AD5-4212-9631-5992073FC5A8}\offreg.dll
    2014-05-30 12:27 . 2014-04-30 23:20 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0E5FC61D-6AD5-4212-9631-5992073FC5A8}\mpengine.dll
    2014-05-29 17:58 . 2014-05-29 17:58 -------- d-----w- c:\program files (x86)\Common Files\Java
    2014-05-29 17:58 . 2014-05-07 20:02 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
    2014-05-29 12:36 . 2014-05-29 12:36 -------- d-----w- c:\programdata\RogueKiller
    2014-05-29 04:14 . 2014-05-29 04:15 -------- d-s---w- c:\programdata\Shared Space
    2014-05-29 04:13 . 2014-05-29 04:13 -------- d-----w- c:\program files\COMODO
    2014-05-29 04:13 . 2014-05-29 04:13 -------- d-----w- c:\programdata\Comodo Downloader
    2014-05-29 04:12 . 2014-05-29 04:15 -------- d-----w- c:\programdata\Comodo
    2014-05-28 22:13 . 2014-05-29 01:17 -------- d-----w- c:\users\Edward\AppData\Roaming\Douxfe
    2014-05-28 21:55 . 2014-05-28 21:55 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
    2014-05-28 21:51 . 2014-06-02 12:20 -------- d-----w- c:\users\Edward\AppData\Local\ElevatedDiagnostics
    2014-05-19 02:14 . 2014-05-20 13:08 -------- d-----w- c:\program files (x86)\StarCraft II
    2014-05-19 01:50 . 2014-05-19 01:50 -------- d-----w- c:\users\Edward\AppData\Local\Blizzard Entertainment
    2014-05-19 01:49 . 2014-05-20 20:15 -------- d-----w- c:\users\Edward\AppData\Local\Battle.net
    2014-05-19 01:49 . 2014-05-19 02:11 -------- d-----w- c:\users\Edward\AppData\Roaming\Battle.net
    2014-05-19 01:49 . 2014-05-19 01:49 -------- d-----w- c:\program files (x86)\Battle.net
    2014-05-15 01:56 . 2014-04-12 02:22 155072 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
    2014-05-13 01:32 . 2014-05-13 01:32 -------- d-sh--w- c:\users\Edward\AppData\Roaming\Common
    2014-05-13 01:32 . 2014-06-03 02:29 -------- d-----w- c:\users\Edward\AppData\Roaming\DisplayFusion
    2014-05-13 01:32 . 2014-05-13 01:32 -------- d-----w- c:\programdata\Binary Fortress Software
    2014-05-13 01:32 . 2014-05-13 01:32 -------- d-----w- c:\program files (x86)\DisplayFusion
    2014-05-13 00:04 . 2014-05-13 00:04 -------- d-----w- c:\users\Edward\AppData\Roaming\LavasoftStatistics
    2014-05-12 23:09 . 2014-05-12 23:09 -------- d-----w- c:\programdata\BitDefender
    2014-05-12 22:51 . 2014-06-02 20:51 119000 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
    2014-05-12 22:50 . 2014-05-12 22:50 -------- d-----w- c:\program files\Lavasoft
    2014-05-12 22:49 . 2014-06-02 20:51 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
    2014-05-12 22:49 . 2014-05-12 22:49 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
    2014-05-12 22:49 . 2014-05-12 22:49 -------- d-----w- c:\programdata\Malwarebytes
    2014-05-12 22:49 . 2014-04-03 14:51 63192 ----a-w- c:\windows\system32\drivers\mwac.sys
    2014-05-12 22:49 . 2014-04-03 14:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
    2014-05-12 22:49 . 2014-05-12 22:49 -------- d-----w- c:\users\Edward\AppData\Local\Programs
    2014-05-12 22:36 . 2014-05-12 22:36 -------- d-----w- c:\programdata\Lavasoft
    2014-05-06 08:08 . 2014-05-15 08:21 -------- d-s---w- c:\windows\system32\CompatTel
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2014-05-15 08:02 . 2010-11-05 20:05 93223848 ----a-w- c:\windows\system32\MRT.exe
    2014-05-14 12:51 . 2012-06-15 21:20 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
    2014-05-14 12:51 . 2011-05-25 05:55 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2014-05-14 12:51 . 2014-04-29 01:51 17938608 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
    2014-04-29 14:01 . 2014-05-03 08:06 23547904 ----a-w- c:\windows\system32\mshtml.dll
    2014-04-29 13:40 . 2014-05-03 08:06 2724864 ----a-w- c:\windows\system32\mshtml.tlb
    2014-04-29 12:34 . 2014-05-03 08:06 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
    2014-04-17 03:12 . 2014-04-17 03:12 48360 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
    2014-04-17 03:12 . 2014-04-17 03:12 105552 ----a-w- c:\windows\system32\drivers\inspect.sys
    2014-04-17 03:12 . 2014-04-17 03:12 738472 ----a-w- c:\windows\system32\drivers\cmdguard.sys
    2014-04-17 03:12 . 2014-04-17 03:12 23168 ----a-w- c:\windows\system32\drivers\cmderd.sys
    2014-03-31 14:35 . 2010-11-05 19:34 270496 ------w- c:\windows\system32\MpSigStub.exe
    2014-03-26 01:22 . 2014-03-26 01:22 43216 ----a-w- c:\windows\system32\cmdcsr.dll
    2014-03-26 01:22 . 2014-03-26 01:22 363504 ----a-w- c:\windows\SysWow64\guard32.dll
    2014-03-26 01:22 . 2014-03-26 01:22 453680 ----a-w- c:\windows\system32\guard64.dll
    2014-03-26 01:22 . 2014-03-26 01:22 45784 ----a-w- c:\windows\system32\cmdkbd64.dll
    2014-03-26 01:22 . 2014-03-26 01:22 352984 ----a-w- c:\windows\system32\cmdvrt64.dll
    2014-03-26 01:22 . 2014-03-26 01:22 284888 ----a-w- c:\windows\SysWow64\cmdvrt32.dll
    2014-03-26 01:22 . 2014-03-26 01:22 40664 ----a-w- c:\windows\SysWow64\cmdkbd32.dll
    2014-03-06 09:31 . 2014-04-29 08:01 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
    2014-03-06 08:59 . 2014-04-29 08:00 66048 ----a-w- c:\windows\system32\iesetup.dll
    2014-03-06 08:57 . 2014-04-29 08:01 548352 ----a-w- c:\windows\system32\vbscript.dll
    2014-03-06 08:57 . 2014-04-29 08:00 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
    2014-03-06 08:53 . 2014-04-29 08:00 2767360 ----a-w- c:\windows\system32\iertutil.dll
    2014-03-06 08:40 . 2014-04-29 08:01 51200 ----a-w- c:\windows\system32\jsproxy.dll
    2014-03-06 08:39 . 2014-04-29 08:01 33792 ----a-w- c:\windows\system32\iernonce.dll
    2014-03-06 08:32 . 2014-04-29 08:01 574976 ----a-w- c:\windows\system32\ieui.dll
    2014-03-06 08:29 . 2014-04-29 08:01 139264 ----a-w- c:\windows\system32\ieUnatt.exe
    2014-03-06 08:29 . 2014-04-29 08:00 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
    2014-03-06 08:28 . 2014-04-29 08:01 752640 ----a-w- c:\windows\system32\jscript9diag.dll
    2014-03-06 08:15 . 2014-04-29 08:00 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
    2014-03-06 08:11 . 2014-04-29 08:00 5784064 ----a-w- c:\windows\system32\jscript9.dll
    2014-03-06 08:09 . 2014-04-29 08:01 453120 ----a-w- c:\windows\system32\dxtmsft.dll
    2014-03-06 08:03 . 2014-04-29 08:01 586240 ----a-w- c:\windows\system32\ie4uinit.exe
    2014-03-06 08:02 . 2014-04-29 08:00 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
    2014-03-06 08:02 . 2014-04-29 08:01 455168 ----a-w- c:\windows\SysWow64\vbscript.dll
    2014-03-06 08:01 . 2014-04-29 08:00 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
    2014-03-06 07:56 . 2014-04-29 08:01 38400 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
    2014-03-06 07:48 . 2014-04-29 08:01 195584 ----a-w- c:\windows\system32\msrating.dll
    2014-03-06 07:46 . 2014-04-29 08:00 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll
    2014-03-06 07:42 . 2014-04-29 08:01 296960 ----a-w- c:\windows\system32\dxtrans.dll
    2014-03-06 07:38 . 2014-04-29 08:01 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
    2014-03-06 07:36 . 2014-04-29 08:00 592896 ----a-w- c:\windows\SysWow64\jscript9diag.dll
    2014-03-06 07:21 . 2014-04-29 08:01 628736 ----a-w- c:\windows\system32\msfeeds.dll
    2014-03-06 07:13 . 2014-04-29 08:00 32256 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
    2014-03-06 07:11 . 2014-04-29 08:00 2043904 ----a-w- c:\windows\system32\inetcpl.cpl
    2014-03-06 06:53 . 2014-04-29 08:00 13551104 ----a-w- c:\windows\system32\ieframe.dll
    2014-03-06 06:40 . 2014-04-29 08:00 1967104 ----a-w- c:\windows\SysWow64\inetcpl.cpl
    2014-03-06 06:22 . 2014-04-29 08:00 2260480 ----a-w- c:\windows\system32\wininet.dll
    2014-03-06 05:58 . 2014-04-29 08:00 1400832 ----a-w- c:\windows\system32\urlmon.dll
    2014-03-06 05:50 . 2014-04-29 08:00 846336 ----a-w- c:\windows\system32\ieapfltr.dll
    2014-03-06 05:41 . 2014-04-29 08:00 1789440 ----a-w- c:\windows\SysWow64\wininet.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Steam"="c:\program files (x86)\Steam\steam.exe" [2014-05-29 1754816]
    "MyDriveConnect.exe"="c:\program files (x86)\MyDrive Connect\MyDriveConnect.exe" [2013-11-29 473496]
    "GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2014-02-12 115032]
    "DisplayFusion"="c:\program files (x86)\DisplayFusion\DisplayFusion.exe" [2013-11-27 7952224]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-11-02 59240]
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
    "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-01-20 43848]
    "WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2013-12-13 85600]
    "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-11-02 152392]
    "CanonSolutionMenuEx"="c:\program files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" [2011-08-04 1637496]
    "IJNetworkScannerSelectorEX"="c:\program files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" [2011-09-27 439440]
    "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-05-13 3814736]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-05-07 256896]
    .
    c:\users\Edward\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
    CurseClientStartup.ccip [2010-11-6 0]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "NoActiveDesktop"= 1 (0x1)
    "NoActiveDesktopChanges"= 1 (0x1)
    "ForceActiveDesktopOn"= 0 (0x0)
    .
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
    R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys;c:\windows\SYSNATIVE\DRIVERS\motfilt.sys [x]
    R3 cmdvirth;COMODO Virtual Service Manager;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe [x]
    R3 copperhd;Razer Copperhead Driver;c:\windows\system32\drivers\copperhd.sys;c:\windows\SYSNATIVE\drivers\copperhd.sys [x]
    R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
    R3 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
    R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
    R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys;c:\windows\SYSNATIVE\DRIVERS\motccgp.sys [x]
    R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys;c:\windows\SYSNATIVE\DRIVERS\motccgpfl.sys [x]
    R3 MotDev;Motorola Inc. USB Device;c:\windows\system32\DRIVERS\motodrv.sys;c:\windows\SYSNATIVE\DRIVERS\motodrv.sys [x]
    R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys;c:\windows\SYSNATIVE\DRIVERS\Motousbnet.sys [x]
    R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys;c:\windows\SYSNATIVE\DRIVERS\motusbdevice.sys [x]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
    R3 S3XXx64;SCR3xx USB SmartCardReader64;c:\windows\system32\DRIVERS\S3XXx64.sys;c:\windows\SYSNATIVE\DRIVERS\S3XXx64.sys [x]
    R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
    R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
    R3 TomTomHOMEService;TomTomHOMEService;e:\program files\TomTom Home\TomTomHOMEService.exe;e:\program files\TomTom Home\TomTomHOMEService.exe [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
    R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
    R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
    R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
    S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x]
    S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
    S2 DisplayFusionService;DisplayFusionService;c:\program files (x86)\DisplayFusion\DisplayFusionService.exe;c:\program files (x86)\DisplayFusion\DisplayFusionService.exe [x]
    S2 DvmMDES;DeviceVM Meta Data Export Service;c:\asus.sys\config\DVMExportService.exe;c:\asus.sys\config\DVMExportService.exe [x]
    S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
    S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
    S2 MotoHelper;MotoHelper Service;c:\program files (x86)\Motorola\MotoHelper\MotoHelperService.exe;c:\program files (x86)\Motorola\MotoHelper\MotoHelperService.exe [x]
    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
    S3 Lycosa;Lycosa Keyboard;c:\windows\system32\drivers\Lycosa.sys;c:\windows\SYSNATIVE\drivers\Lycosa.sys [x]
    S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
    S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
    S4 gzflt;gzflt;c:\program files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys;c:\program files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [x]
    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *NewlyCreated* - 76012542
    *Deregistered* - 76012542
    *Deregistered* - BdfNdisf
    *Deregistered* - bdfwfpf
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2014-06-03 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-15 12:51]
    .
    .
    --------- X64 Entries -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2011-07-19 2780776]
    "COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cistray.exe" [2014-03-26 1275608]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "LoadAppInit_DLLs"=0x0
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = about:blank
    mStart Page = about:blank
    uInternet Settings,ProxyOverride = *.local;192.168.*.*
    TCP: Interfaces\{13073585-9D0F-453C-BB4F-631B179C466D}: NameServer = 156.154.70.22,156.154.71.22
    FF - ProfilePath - c:\users\Edward\AppData\Roaming\Mozilla\Firefox\Profiles\js1rcphm.default\
    FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
    FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/|https://www.navyfederal.org/
    FF - prefs.js: keyword.URL -
    FF - prefs.js: network.proxy.type - 0
    .
    .
    ------- File Associations -------
    .
    regedit=regedit.exe "%1"
    .
    - - - - ORPHANS REMOVED - - - -
    .
    BHO-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
    SafeBoot-76012542.sys
    HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-3325668747-2427616362-1545595919-1000\Software\÷@*]
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.13"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\COMODO\CIS\Installer\Sym_Cam\CIS]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
    .
    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\CmdAgent\Mode\Configurations]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\CmdAgent\Mode\Data]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\CmdAgent\Mode\Options]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
    .
    [HKEY_LOCAL_MACHINE\system\Software\COMODO\Cam]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
    .
    [HKEY_LOCAL_MACHINE\system\Software\COMODO\Firewall Pro]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
    .
    Completion time: 2014-06-02 22:12:58
    ComboFix-quarantined-files.txt 2014-06-03 03:12
    .
    Pre-Run: 541,728,825,344 bytes free
    Post-Run: 550,371,209,216 bytes free
    .
    - - End Of File - - 26DF545BA20B8BE2D2CFFF4EB8CB7FE8
    A36C5E4F47E84449FF07ED3517B43A31
  23. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    Ran on first try.
  24. Broni

    Broni Malware Annihilator Posts: 46,319   +252

    Looks good.

    How is computer doing?

    [​IMG] Please download AdwCleaner by Xplode onto your desktop.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Scan button.
    • When the scan has finished click on Clean button.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the contents of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.

    [​IMG] Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.

    [​IMG] Download OTL to your Desktop.
    Alternate download: http://www.itxassociates.com/OT-Tools/OTL.exe
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Scan All Users checkbox.
    • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them back here.
  25. Songodin

    Songodin Newcomer, in training Topic Starter Posts: 29

    # AdwCleaner v3.211 - Report created 03/06/2014 at 20:22:39
    # Updated 26/05/2014 by Xplode
    # Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
    # Username : Edward - BAHAMUT
    # Running from : C:\Users\Edward\Desktop\Cleanup\adwcleaner_3.211.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Program Files (x86)\Conduit
    Folder Deleted : C:\Program Files (x86)\ConduitEngine
    Folder Deleted : C:\Program Files (x86)\Free Offers from Freeze.com
    Folder Deleted : C:\Program Files (x86)\Vuze
    Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
    Folder Deleted : C:\Users\Edward\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Edward\AppData\LocalLow\ConduitEngine
    Folder Deleted : C:\Users\Edward\AppData\LocalLow\Vuze_Remote
    Folder Deleted : C:\Users\Edward\AppData\Roaming\Mozilla\Firefox\Profiles\js1rcphm.default\Conduit
    Folder Deleted : C:\Users\Edward\AppData\Roaming\Mozilla\Firefox\Profiles\js1rcphm.default\ConduitEngine
    File Deleted : C:\END

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F1D4194-41ED-4C65-9996-B2B13EC6E026}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E9DF7D4-0281-47C6-A3D8-826CA6EB2F52}
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\YahooPartnerToolbar
    Key Deleted : HKCU\Software\AppDataLow\Software
    Key Deleted : HKCU\Software\AppDataLow\Toolbar
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\Software\conduitEngine
    Key Deleted : HKLM\Software\DeviceVM
    Key Deleted : HKLM\Software\Freeze.com
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99AD9D6D-A456-49EE-8360-F22EE7AA1272}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
    Key Deleted : [x64] HKLM\SOFTWARE\DeviceVM

    ***** [ Browsers ] *****

    -\\ Internet Explorer v0.0.0.0


    -\\ Mozilla Firefox v29.0.1 (en-US)

    [ File : C:\Users\Edward\AppData\Roaming\Mozilla\Firefox\Profiles\js1rcphm.default\prefs.js ]

    Line Deleted : user_pref("CT2504091.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Line Deleted : user_pref("CT2504091.CTID", "CT2504091");
    Line Deleted : user_pref("CT2504091.CurrentServerDate", "6-11-2010");
    Line Deleted : user_pref("CT2504091.DialogsAlignMode", "LTR");
    Line Deleted : user_pref("CT2504091.DownloadReferralCookieData", "");
    Line Deleted : user_pref("CT2504091.EMailNotifierPollDate", "Sat Nov 06 2010 08:29:11 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.FeedLastCount129079840422964131", 0);
    Line Deleted : user_pref("CT2504091.FeedPollDate128891351169457140", "Sat Nov 06 2010 08:29:11 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.FeedPollDate129079840422964131", "Sat Nov 06 2010 08:29:11 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.FeedTTL128891351169457140", 40);
    Line Deleted : user_pref("CT2504091.FirstServerDate", "6-11-2010");
    Line Deleted : user_pref("CT2504091.FirstTime", true);
    Line Deleted : user_pref("CT2504091.FirstTimeFF3", true);
    Line Deleted : user_pref("CT2504091.FirstTimeSettingsDone", true);
    Line Deleted : user_pref("CT2504091.FixPageNotFoundErrors", true);
    Line Deleted : user_pref("CT2504091.GroupingServerCheckInterval", 1440);
    Line Deleted : user_pref("CT2504091.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Line Deleted : user_pref("CT2504091.Initialize", true);
    Line Deleted : user_pref("CT2504091.InitializeCommonPrefs", true);
    Line Deleted : user_pref("CT2504091.InstallationAndCookieDataSentCount", 1);
    Line Deleted : user_pref("CT2504091.InstallationType", "UnknownIntegration");
    Line Deleted : user_pref("CT2504091.InstalledDate", "Sat Nov 06 2010 08:29:11 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.IsGrouping", false);
    Line Deleted : user_pref("CT2504091.IsMulticommunity", false);
    Line Deleted : user_pref("CT2504091.IsOpenThankYouPage", false);
    Line Deleted : user_pref("CT2504091.IsOpenUninstallPage", false);
    Line Deleted : user_pref("CT2504091.LanguagePackLastCheckTime", "Sat Nov 06 2010 08:29:21 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.LanguagePackReloadIntervalMM", 1440);
    Line Deleted : user_pref("CT2504091.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
    Line Deleted : user_pref("CT2504091.LastLogin_2.7.2.0", "Sat Nov 06 2010 08:29:11 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.LatestVersion", "2.6.0.14");
    Line Deleted : user_pref("CT2504091.Locale", "en-us");
    Line Deleted : user_pref("CT2504091.LoginCache", 4);
    Line Deleted : user_pref("CT2504091.MCDetectTooltipHeight", "83");
    Line Deleted : user_pref("CT2504091.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Line Deleted : user_pref("CT2504091.MCDetectTooltipWidth", "295");
    Line Deleted : user_pref("CT2504091.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2504091&octid=EB_ORIGINAL_CTID&SearchSource=1");
    Line Deleted : user_pref("CT2504091.SearchFromAddressBarIsInit", true);
    Line Deleted : user_pref("CT2504091.SearchInNewTabEnabled", true);
    Line Deleted : user_pref("CT2504091.SearchInNewTabIntervalMM", 1440);
    Line Deleted : user_pref("CT2504091.SearchInNewTabLastCheckTime", "Sat Nov 06 2010 08:29:11 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
    Line Deleted : user_pref("CT2504091.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
    Line Deleted : user_pref("CT2504091.SettingsCheckIntervalMin", 120);
    Line Deleted : user_pref("CT2504091.SettingsLastCheckTime", "Sat Nov 06 2010 08:29:07 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.SettingsLastUpdate", "1288860765");
    Line Deleted : user_pref("CT2504091.ThirdPartyComponentsInterval", 504);
    Line Deleted : user_pref("CT2504091.ThirdPartyComponentsLastCheck", "Sat Nov 06 2010 08:29:07 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CT2504091.ThirdPartyComponentsLastUpdate", "1246790578");
    Line Deleted : user_pref("CT2504091.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
    Line Deleted : user_pref("CT2504091.UserID", "UN63722222241019646");
    Line Deleted : user_pref("CT2504091.alertChannelId", "897164");
    Line Deleted : user_pref("CT2504091.clientLogIsEnabled", true);
    Line Deleted : user_pref("CT2504091.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
    Line Deleted : user_pref("CT2504091.myStuffEnabled", true);
    Line Deleted : user_pref("CT2504091.myStuffPublihserMinWidth", 400);
    Line Deleted : user_pref("CT2504091.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
    Line Deleted : user_pref("CT2504091.myStuffServiceIntervalMM", 1440);
    Line Deleted : user_pref("CT2504091.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
    Line Deleted : user_pref("CT2504091.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
    Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/US", "\"0\"");
    Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"01ffa8b1cc6cb1:0\"");
    Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"807dc126dd28cc1:0\"");
    Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000");
    Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
    Line Deleted : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
    Line Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
    Line Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
    Line Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
    Line Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
    Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");
    Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");
    Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");
    Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
    Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2504091,ConduitEngine");
    Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2504091");
    Line Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu Mar 24 2011 19:13:06 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
    Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jun 22 2011 17:31:53 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
    Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
    Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
    Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jun 22 2011 17:31:45 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
    Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
    Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
    Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
    Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
    Line Deleted : user_pref("CommunityToolbar.alert.userId", "cc8b9432-b2ef-40cf-928e-0acec2d17a06");
    Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
    Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
    Line Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2504091");
    Line Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri Mar 25 2011 03:03:39 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.CTID", "ConduitEngine");
    Line Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Wed Jun 22 2011 17:31:45 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.FirstServerDate", "03/25/2011 05");
    Line Deleted : user_pref("ConduitEngine.FirstTime", true);
    Line Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
    Line Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
    Line Deleted : user_pref("ConduitEngine.Initialize", true);
    Line Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
    Line Deleted : user_pref("ConduitEngine.InstalledDate", "Thu Mar 24 2011 19:13:22 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
    Line Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
    Line Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
    Line Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Wed Jun 22 2011 17:31:45 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Wed Jun 22 2011 17:31:45 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
    Line Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Wed Jun 22 2011 17:31:45 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.UserID", "UN54342052935122682");
    Line Deleted : user_pref("ConduitEngine.componentAlertEnabled", true);
    Line Deleted : user_pref("ConduitEngine.engineLocale", "en-US");
    Line Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Wed Jun 22 2011 17:31:45 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Wed Jun 22 2011 17:31:45 GMT-0700 (Pacific Daylight Time)");
    Line Deleted : user_pref("ConduitEngine.initDone", true);
    Line Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
    Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
    Line Deleted : user_pref("extensions.enabledItems", "{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,engine@conduit.com:3.3.3.2,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.[...]

    *************************

    AdwCleaner[R0].txt - [14003 octets] - [03/06/2014 20:21:35]
    AdwCleaner[S0].txt - [13760 octets] - [03/06/2014 20:22:39]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13821 octets] ##########


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.