Inactive [A] Avast keeps giving me <malwere, rootkit, and trojan blocked>

FYI, when I ran aswMBR .. it didn't show me "complete" message, but it didn't proceed at some point.. so I just saved the log...
 
Download attached fixlist.txt file and save it to the very same USB flash drive you've been using. Plug the drive back in.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

On Vista or Windows 7: Now please enter System Recovery Options.
On Windows XP: Now please boot into the UBCD.
Run FRST/FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

Next...

Restart normally and see if Combofix will run.
 

Attachments

  • fixlist.txt
    391 bytes · Views: 1
Fix result of Farbar Recovery Tool (FRST written by Farbar) Version: 18-08-2012
Ran by SYSTEM at 2012-08-20 01:18:43 Run:2
Running from H:\

==============================================

C:\Users\2nd_Window\AppData\Local\Temp\~!#E0DE.tmp moved successfully.
C:\Users\2nd_Window\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\5081d48-3d4f9e1b moved successfully.
C:\Users\2nd_Window\AppData\Roaming\prolts.dll moved successfully.
C:\Windows\System32\user32.dll moved successfully.
C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll copied successfully to C:\Windows\System32\user32.dll

==== End of Fixlog ====
 
Give me fresh aswMBR and rKill logs and....

Download TDSSKiller and save it to your desktop.
  • Extract (unzip) its contents to your desktop.
  • Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.
 
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-21 07:26:11
-----------------------------
07:26:11.805 OS Version: Windows 6.1.7600
07:26:11.805 Number of processors: 4 586 0xF0B
07:26:11.805 ComputerName: 2ND_WINDOW-PC UserName: 2nd_Window
07:26:13.069 Initialize success
07:26:14.052 AVAST engine defs: 12082100
07:26:15.097 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-1
07:26:15.097 Disk 0 Vendor: Maxtor_6Y060L0 YAR41VW0 Size: 58644MB BusType: 3
07:26:15.097 Disk 1 \Device\Harddisk1\DR1 -> \Device\00000071
07:26:15.113 Disk 1 Vendor: ST336032 3.CH Size: 343399MB BusType: 3
07:26:15.113 Disk 2 (boot) \Device\Harddisk2\DR2 -> \Device\00000072
07:26:15.128 Disk 2 Vendor: Hitachi_ ST6O Size: 953869MB BusType: 3
07:26:15.128 Disk 2 MBR read successfully
07:26:15.144 Disk 2 MBR scan
07:26:15.503 Disk 2 Windows XP default MBR code
07:26:15.534 Disk 2 Partition 1 00 07 HPFS/NTFS NTFS 499999 MB offset 63
07:26:15.877 Disk 2 Partition - 00 0F Extended LBA 453859 MB offset 1023999165
07:26:15.893 Disk 2 Partition 2 00 07 HPFS/NTFS NTFS 453859 MB offset 1023999228
07:26:16.017 Disk 2 scanning sectors +1953504000
07:26:16.361 Disk 2 scanning C:\Windows\system32\drivers
07:26:28.170 Service scanning
07:26:53.550 Modules scanning
07:27:12.952 Disk 2 trace - called modules:
07:27:12.963 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor.sys
07:27:12.963 1 nt!IofCallDriver -> \Device\Harddisk2\DR2[0x860419f8]
07:27:12.963 3 CLASSPNP.SYS[8b25459e] -> nt!IofCallDriver -> [0x85dd7e00]
07:27:12.963 5 ACPI.sys[8aaa13b2] -> nt!IofCallDriver -> \Device\00000072[0x85918688]
07:27:14.528 AVAST engine scan C:\Windows
07:27:17.669 AVAST engine scan C:\Windows\system32
07:29:05.227 AVAST engine scan C:\Windows\system32\drivers
07:29:13.542 AVAST engine scan C:\Users\2nd_Window
07:46:48.363 Disk 2 MBR has been saved successfully to "C:\Users\2nd_Window\Desktop\MBR.dat"
07:46:48.409 The log file has been saved successfully to "C:\Users\2nd_Window\Desktop\aswMBR.txt"


Rkill 2.2.1 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 08/21/2012 07:18:27 AM in x86 mode.
Windows Version: Windows 7

Checking for Windows services to stop.

* No malware services found to stop.

Checking for processes to terminate.

* No malware processes found to kill.

Checking Registry for malware related settings.

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks.

* No issues found.

Checking Windows Service Integrity:

* MpsSvc [Missing Service]
* SharedAccess [Missing ImagePath]
* BITS [Missing Parameters Key]

Searching for Missing Digital Signatures:
* No issues found.

Program finished at: 08/21/2012 07:18:33 AM
Execution time: 0 hours(s), 0 minute(s), and 5 seconds(s)
 
07:52:50.0534 3976 TDSS rootkit removing tool 2.8.7.0 Aug 20 2012 17:30:03
07:52:50.0990 3976 ============================================================
07:52:50.0990 3976 Current date / time: 2012/08/21 07:52:50.0990
07:52:50.0990 3976 SystemInfo:
07:52:50.0990 3976
07:52:50.0990 3976 OS Version: 6.1.7600 ServicePack: 0.0
07:52:50.0990 3976 Product type: Workstation
07:52:50.0990 3976 ComputerName: 2ND_WINDOW-PC
07:52:50.0990 3976 UserName: 2nd_Window
07:52:50.0990 3976 Windows directory: C:\Windows
07:52:50.0990 3976 System windows directory: C:\Windows
07:52:50.0990 3976 Processor architecture: Intel x86
07:52:50.0990 3976 Number of processors: 4
07:52:50.0990 3976 Page size: 0x1000
07:52:50.0990 3976 Boot type: Normal boot
07:52:50.0990 3976 ============================================================
07:52:52.0912 3976 Drive \Device\Harddisk0\DR0 - Size: 0xE51424000 (57.27 Gb), SectorSize: 0x200, Cylinders: 0x1D34, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
07:52:52.0934 3976 Drive \Device\Harddisk1\DR1 - Size: 0x53D67B6000 (335.35 Gb), SectorSize: 0x200, Cylinders: 0xAB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
07:52:52.0936 3976 Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
07:52:52.0941 3976 ============================================================
07:52:52.0941 3976 \Device\Harddisk0\DR0:
07:52:52.0945 3976 MBR partitions:
07:52:52.0945 3976 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x7289800
07:52:52.0945 3976 \Device\Harddisk1\DR1:
07:52:52.0945 3976 MBR partitions:
07:52:52.0945 3976 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x29EB3000
07:52:52.0945 3976 \Device\Harddisk2\DR2:
07:52:52.0945 3976 MBR partitions:
07:52:52.0945 3976 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3D08FC7E
07:52:52.0961 3976 \Device\Harddisk2\DR2\Partition2: MBR, Type 0x7, StartLBA 0x3D08FCFC, BlocksNum 0x37671E04
07:52:52.0961 3976 ============================================================
07:52:52.0977 3976 C: <-> \Device\Harddisk2\DR2\Partition1
07:52:52.0990 3976 D: <-> \Device\Harddisk0\DR0\Partition1
07:52:53.0000 3976 E: <-> \Device\Harddisk1\DR1\Partition1
07:52:53.0030 3976 F: <-> \Device\Harddisk2\DR2\Partition2
07:52:53.0030 3976 ============================================================
07:52:53.0030 3976 Initialize success
07:52:53.0030 3976 ============================================================
07:52:58.0060 4416 ============================================================
07:52:58.0060 4416 Scan started
07:52:58.0060 4416 Mode: Manual;
07:52:58.0060 4416 ============================================================
07:52:59.0318 4416 ================ Scan system memory ========================
07:52:59.0318 4416 System memory - ok
07:52:59.0319 4416 ================ Scan services =============================
07:52:59.0475 4416 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
07:52:59.0478 4416 1394ohci - ok
07:52:59.0502 4416 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
07:52:59.0505 4416 ACPI - ok
07:52:59.0524 4416 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
07:52:59.0525 4416 AcpiPmi - ok
07:52:59.0644 4416 [ 62B7936F9036DD6ED36E6A7EFA805DC0 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
07:52:59.0645 4416 AdobeARMservice - ok
07:52:59.0677 4416 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
07:52:59.0682 4416 adp94xx - ok
07:52:59.0723 4416 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
07:52:59.0727 4416 adpahci - ok
07:52:59.0745 4416 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
07:52:59.0748 4416 adpu320 - ok
07:52:59.0784 4416 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
07:52:59.0795 4416 AeLookupSvc - ok
07:52:59.0904 4416 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\Windows\system32\drivers\afd.sys
07:52:59.0911 4416 AFD - ok
07:52:59.0957 4416 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
07:52:59.0967 4416 agp440 - ok
07:52:59.0998 4416 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
07:53:00.0006 4416 aic78xx - ok
07:53:00.0083 4416 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
07:53:00.0094 4416 ALG - ok
07:53:00.0115 4416 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
07:53:00.0116 4416 aliide - ok
07:53:00.0261 4416 ALSysIO - ok
07:53:00.0291 4416 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
07:53:00.0293 4416 amdagp - ok
07:53:00.0307 4416 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
07:53:00.0308 4416 amdide - ok
07:53:00.0327 4416 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
07:53:00.0329 4416 AmdK8 - ok
07:53:00.0346 4416 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
07:53:00.0347 4416 AmdPPM - ok
07:53:00.0361 4416 [ 2101A86C25C154F8314B24EF49D7FBC2 ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
07:53:00.0362 4416 amdsata - ok
07:53:00.0378 4416 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
07:53:00.0381 4416 amdsbs - ok
07:53:00.0390 4416 [ B81C2B5616F6420A9941EA093A92B150 ] amdxata C:\Windows\system32\DRIVERS\amdxata.sys
07:53:00.0391 4416 amdxata - ok
07:53:00.0448 4416 [ FEC7A4E71710D4776F32F8700190B9EB ] AMonTDLH C:\Windows\system32\Drivers\AMonTDLH.sys
07:53:00.0449 4416 AMonTDLH - ok
07:53:00.0475 4416 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
07:53:00.0477 4416 AppID - ok
07:53:00.0513 4416 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
07:53:00.0514 4416 AppIDSvc - ok
07:53:00.0527 4416 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
07:53:00.0529 4416 Appinfo - ok
07:53:00.0541 4416 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
07:53:00.0544 4416 AppMgmt - ok
07:53:00.0584 4416 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
07:53:00.0586 4416 arc - ok
07:53:00.0598 4416 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
07:53:00.0599 4416 arcsas - ok
07:53:00.0703 4416 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
07:53:00.0719 4416 aspnet_state - ok
07:53:00.0763 4416 [ 1C1F3D6DDDC046C920C493A779649F66 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
07:53:00.0764 4416 aswFsBlk - ok
07:53:00.0777 4416 [ A48D8015AF2A0D8B4937613FFBFD28DE ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
07:53:00.0778 4416 aswMonFlt - ok
07:53:00.0797 4416 [ 4A951BEBA9E49410CDE478B6F6ABB252 ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
07:53:00.0798 4416 aswRdr - ok
07:53:00.0831 4416 [ 73DBCF808E00580F2A47F93DD9B03876 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
07:53:00.0836 4416 aswSnx - ok
07:53:00.0870 4416 [ 6CBD7D3A33F498D09C831CDD732DA2E0 ] aswSP C:\Windows\system32\drivers\aswSP.sys
07:53:00.0872 4416 aswSP - ok
07:53:00.0906 4416 [ 7109A9AA551F37CD168C02368465957E ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
07:53:00.0907 4416 aswTdi - ok
07:53:00.0926 4416 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
07:53:00.0928 4416 AsyncMac - ok
07:53:00.0966 4416 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
07:53:00.0966 4416 atapi - ok
07:53:01.0024 4416 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
07:53:01.0035 4416 AudioEndpointBuilder - ok
07:53:01.0052 4416 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
07:53:01.0055 4416 Audiosrv - ok
07:53:01.0148 4416 [ 2F7C0F3E39C45E0127FB78B2F18A41F3 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
07:53:01.0149 4416 avast! Antivirus - ok
07:53:01.0185 4416 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
07:53:01.0187 4416 AxInstSV - ok
07:53:01.0227 4416 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
07:53:01.0233 4416 b06bdrv - ok
07:53:01.0254 4416 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
07:53:01.0257 4416 b57nd60x - ok
07:53:01.0278 4416 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
07:53:01.0280 4416 BDESVC - ok
07:53:01.0294 4416 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
07:53:01.0295 4416 Beep - ok
07:53:01.0372 4416 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
07:53:01.0402 4416 BFE - ok
07:53:01.0442 4416 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
07:53:01.0443 4416 blbdrive - ok
07:53:01.0481 4416 [ 73686FE0B2E0469F89FD2075BE724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
07:53:01.0484 4416 Bonjour Service - ok
07:53:01.0517 4416 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
07:53:01.0519 4416 bowser - ok
07:53:01.0548 4416 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
07:53:01.0549 4416 BrFiltLo - ok
07:53:01.0562 4416 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
07:53:01.0564 4416 BrFiltUp - ok
07:53:01.0590 4416 [ 77361D72A04F18809D0EFB6CCEB74D4B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
07:53:01.0592 4416 BridgeMP - ok
07:53:01.0627 4416 [ 598E1280E7FF3744F4B8329366CC5635 ] Browser C:\Windows\System32\browser.dll
07:53:01.0629 4416 Browser - ok
07:53:01.0648 4416 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
07:53:01.0651 4416 Brserid - ok
07:53:01.0659 4416 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
07:53:01.0661 4416 BrSerWdm - ok
07:53:01.0678 4416 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
07:53:01.0680 4416 BrUsbMdm - ok
07:53:01.0689 4416 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
07:53:01.0690 4416 BrUsbSer - ok
07:53:01.0695 4416 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
07:53:01.0697 4416 BTHMODEM - ok
07:53:01.0722 4416 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
07:53:01.0724 4416 bthserv - ok
07:53:01.0740 4416 catchme - ok
07:53:01.0758 4416 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
07:53:01.0759 4416 cdfs - ok
07:53:01.0823 4416 [ 21C0133490FC6AFB1FBDC7ED9EE32312 ] CdmDrvNt C:\Windows\system32\Drivers\CdmDrvNt.sys
07:53:01.0825 4416 CdmDrvNt - ok
07:53:01.0889 4416 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
07:53:01.0897 4416 cdrom - ok
07:53:01.0945 4416 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
07:53:01.0952 4416 CertPropSvc - ok
07:53:01.0983 4416 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
07:53:01.0992 4416 circlass - ok
07:53:02.0014 4416 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
07:53:02.0029 4416 CLFS - ok
07:53:02.0186 4416 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
07:53:02.0242 4416 clr_optimization_v2.0.50727_32 - ok
07:53:02.0400 4416 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
07:53:02.0716 4416 clr_optimization_v4.0.30319_32 - ok
07:53:02.0749 4416 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
07:53:02.0750 4416 CmBatt - ok
07:53:02.0792 4416 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
07:53:02.0793 4416 cmdide - ok
07:53:02.0833 4416 [ 1B675691ED940766149C93E8F4488D68 ] CNG C:\Windows\system32\Drivers\cng.sys
07:53:02.0837 4416 CNG - ok
07:53:02.0860 4416 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
07:53:02.0862 4416 Compbatt - ok
07:53:02.0882 4416 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
07:53:02.0883 4416 CompositeBus - ok
07:53:02.0899 4416 COMSysApp - ok
07:53:02.0941 4416 [ 3411FDF098AA20193EEE5FFA36BA43B2 ] cpuz135 C:\Windows\system32\drivers\cpuz135_x32.sys
07:53:02.0942 4416 cpuz135 - ok
07:53:02.0976 4416 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
07:53:02.0977 4416 crcdisk - ok
07:53:03.0015 4416 [ 9C231178CE4FB385F4B54B0A9080B8A4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
07:53:03.0018 4416 CryptSvc - ok
07:53:03.0063 4416 [ F054744F67576A01139885173392502B ] CrystalSysInfo C:\Program Files\MediaCoder\SysInfo.sys
07:53:03.0064 4416 CrystalSysInfo - ok
07:53:03.0098 4416 [ 27C9490BDD0AE48911AB8CF1932591ED ] CSC C:\Windows\system32\drivers\csc.sys
07:53:03.0103 4416 CSC - ok
07:53:03.0134 4416 [ 56FB5F222EA30D3D3FC459879772CB73 ] CscService C:\Windows\System32\cscsvc.dll
07:53:03.0140 4416 CscService - ok
07:53:03.0177 4416 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
07:53:03.0184 4416 DcomLaunch - ok
07:53:03.0220 4416 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
07:53:03.0224 4416 defragsvc - ok
07:53:03.0256 4416 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
07:53:03.0258 4416 DfsC - ok
07:53:03.0282 4416 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
07:53:03.0286 4416 Dhcp - ok
07:53:03.0311 4416 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
07:53:03.0313 4416 discache - ok
07:53:03.0335 4416 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
07:53:03.0336 4416 Disk - ok
07:53:03.0370 4416 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
07:53:03.0373 4416 Dnscache - ok
07:53:03.0392 4416 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
07:53:03.0395 4416 dot3svc - ok
07:53:03.0434 4416 [ B5E479EB83707DD698F66953E922042C ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
07:53:03.0437 4416 Dot4 - ok
07:53:03.0467 4416 [ C25FEA07A8E7767E8B89AB96A3B96519 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
07:53:03.0469 4416 Dot4Print - ok
07:53:03.0485 4416 [ CF491FF38D62143203C065260567E2F7 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
07:53:03.0487 4416 dot4usb - ok
07:53:03.0502 4416 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
07:53:03.0505 4416 DPS - ok
07:53:03.0542 4416 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
07:53:03.0544 4416 drmkaud - ok
07:53:03.0570 4416 [ 555E54AC2F601A8821CEF58961653991 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
07:53:03.0572 4416 dtsoftbus01 - ok
07:53:03.0602 4416 [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
07:53:03.0607 4416 DXGKrnl - ok
07:53:03.0635 4416 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
07:53:03.0638 4416 EapHost - ok
07:53:03.0758 4416 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
07:53:03.0791 4416 ebdrv - ok
07:53:03.0824 4416 [ F42309C4191C506B71DB5D1126D26318 ] EFS C:\Windows\System32\lsass.exe
07:53:03.0827 4416 EFS - ok
07:53:03.0895 4416 [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
07:53:03.0903 4416 ehRecvr - ok
07:53:03.0941 4416 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
07:53:03.0947 4416 ehSched - ok
07:53:03.0993 4416 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
07:53:04.0005 4416 elxstor - ok
07:53:04.0023 4416 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
07:53:04.0024 4416 ErrDev - ok
07:53:04.0080 4416 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
07:53:04.0084 4416 EventSystem - ok
07:53:04.0118 4416 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
07:53:04.0121 4416 exfat - ok
07:53:04.0144 4416 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
07:53:04.0147 4416 fastfat - ok
07:53:04.0177 4416 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
07:53:04.0184 4416 Fax - ok
07:53:04.0212 4416 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
07:53:04.0213 4416 fdc - ok
07:53:04.0223 4416 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
07:53:04.0225 4416 fdPHost - ok
07:53:04.0249 4416 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
07:53:04.0252 4416 FDResPub - ok
07:53:04.0277 4416 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
07:53:04.0278 4416 FileInfo - ok
07:53:04.0291 4416 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
07:53:04.0292 4416 Filetrace - ok
07:53:04.0343 4416 [ D94B4EEC9205656BA26C9A2376758893 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
07:53:04.0355 4416 FLEXnet Licensing Service - ok
07:53:04.0364 4416 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
07:53:04.0365 4416 flpydisk - ok
07:53:04.0384 4416 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
07:53:04.0386 4416 FltMgr - ok
07:53:04.0430 4416 [ B6512A85815FDC3D560C3705F5BDB93D ] FontCache C:\Windows\system32\FntCache.dll
07:53:04.0440 4416 FontCache - ok
07:53:04.0499 4416 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
07:53:04.0501 4416 FontCache3.0.0.0 - ok
07:53:04.0528 4416 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
07:53:04.0537 4416 FsDepends - ok
07:53:04.0551 4416 [ A574B4360E438977038AAE4BF60D79A2 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
07:53:04.0552 4416 Fs_Rec - ok
07:53:04.0591 4416 [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
07:53:04.0594 4416 fvevol - ok
07:53:04.0614 4416 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
07:53:04.0624 4416 gagp30kx - ok
07:53:04.0660 4416 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\Windows\system32\giveio.sys
07:53:04.0662 4416 giveio - ok
07:53:04.0725 4416 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
07:53:04.0738 4416 gpsvc - ok
07:53:04.0899 4416 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
07:53:04.0901 4416 gupdate - ok
07:53:04.0945 4416 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
07:53:04.0946 4416 gupdatem - ok
07:53:04.0987 4416 [ 89364CC2A694364F4AA148B7CB802D57 ] HCW85BDA C:\Windows\system32\drivers\HCW85BDA.sys
07:53:05.0002 4416 HCW85BDA - ok
07:53:05.0029 4416 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
07:53:05.0030 4416 hcw85cir - ok
07:53:05.0071 4416 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
07:53:05.0074 4416 HdAudAddService - ok
07:53:05.0096 4416 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
07:53:05.0106 4416 HDAudBus - ok
07:53:05.0120 4416 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
07:53:05.0122 4416 HidBatt - ok
07:53:05.0136 4416 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
07:53:05.0138 4416 HidBth - ok
07:53:05.0172 4416 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
07:53:05.0174 4416 HidIr - ok
07:53:05.0202 4416 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\System32\hidserv.dll
07:53:05.0204 4416 hidserv - ok
07:53:05.0232 4416 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
07:53:05.0233 4416 HidUsb - ok
07:53:05.0266 4416 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
07:53:05.0269 4416 hkmsvc - ok
07:53:05.0280 4416 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
07:53:05.0284 4416 HomeGroupListener - ok
07:53:05.0321 4416 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
07:53:05.0326 4416 HomeGroupProvider - ok
07:53:05.0357 4416 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
07:53:05.0359 4416 HpSAMD - ok
07:53:05.0388 4416 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
07:53:05.0394 4416 HTTP - ok
07:53:05.0407 4416 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
07:53:05.0408 4416 hwpolicy - ok
07:53:05.0435 4416 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
07:53:05.0437 4416 i8042prt - ok
07:53:05.0461 4416 [ 934AF4D7C5F457B9F0743F4299B77B67 ] iaStorV C:\Windows\system32\DRIVERS\iaStorV.sys
07:53:05.0473 4416 iaStorV - ok
07:53:05.0519 4416 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
07:53:05.0522 4416 IDriverT - ok
07:53:05.0575 4416 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
07:53:05.0586 4416 idsvc - ok
07:53:05.0606 4416 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
07:53:05.0607 4416 iirsp - ok
07:53:05.0653 4416 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
07:53:05.0662 4416 IKEEXT - ok
07:53:05.0698 4416 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
07:53:05.0699 4416 intelide - ok
07:53:05.0718 4416 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
07:53:05.0719 4416 intelppm - ok
07:53:05.0729 4416 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
07:53:05.0732 4416 IPBusEnum - ok
07:53:05.0746 4416 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
07:53:05.0747 4416 IpFilterDriver - ok
07:53:05.0770 4416 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
07:53:05.0777 4416 iphlpsvc - ok
07:53:05.0795 4416 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
07:53:05.0797 4416 IPMIDRV - ok
07:53:05.0818 4416 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
07:53:05.0820 4416 IPNAT - ok
07:53:05.0846 4416 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
07:53:05.0847 4416 IRENUM - ok
07:53:05.0864 4416 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
07:53:05.0866 4416 isapnp - ok
07:53:05.0889 4416 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
07:53:05.0892 4416 iScsiPrt - ok
07:53:05.0921 4416 JRSKD24 - ok
07:53:05.0949 4416 [ 139D9D538284EC721D759DF7238B8850 ] JRSUKD25 C:\Windows\system32\JRSUKD25.SYS
07:53:05.0951 4416 JRSUKD25 - ok
07:53:05.0988 4416 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
07:53:05.0989 4416 kbdclass - ok
07:53:06.0009 4416 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
07:53:06.0011 4416 kbdhid - ok
07:53:06.0042 4416 [ CBBC332B9A94D9EB16E3328B50760587 ] kcrtx86 C:\Windows\system32\kcrtx86.sys
07:53:06.0045 4416 kcrtx86 - ok
07:53:06.0074 4416 [ F42309C4191C506B71DB5D1126D26318 ] KeyIso C:\Windows\system32\lsass.exe
07:53:06.0077 4416 KeyIso - ok
07:53:06.0103 4416 [ E36A061EC11B373826905B21BE10948F ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
07:53:06.0105 4416 KSecDD - ok
07:53:06.0134 4416 [ 365C6154BBBC5377173F1CA7BFB6CC59 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
07:53:06.0136 4416 KSecPkg - ok
07:53:06.0176 4416 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
07:53:06.0182 4416 KtmRm - ok
07:53:06.0207 4416 [ 7175434625B350D7F2F53E82A16C45AE ] L8042mou C:\Windows\system32\DRIVERS\L8042mou.Sys
07:53:06.0209 4416 L8042mou - ok
07:53:06.0244 4416 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\Windows\System32\srvsvc.dll
07:53:06.0251 4416 LanmanServer - ok
07:53:06.0271 4416 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
07:53:06.0277 4416 LanmanWorkstation - ok
07:53:06.0372 4416 [ 910344E2A984010435AE84783B25E5EB ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
07:53:06.0376 4416 LBTServ - ok
07:53:06.0412 4416 [ 01CC7FB6E790EF044B411377F3A1FF41 ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
07:53:06.0413 4416 LHidFilt - ok
07:53:06.0459 4416 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
07:53:06.0460 4416 lltdio - ok
07:53:06.0495 4416 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
07:53:06.0499 4416 lltdsvc - ok
07:53:06.0514 4416 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
07:53:06.0517 4416 lmhosts - ok
07:53:06.0543 4416 [ A2E7EAE8898D7B4B8C302B8F4E836BB5 ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
07:53:06.0543 4416 LMouFilt - ok
07:53:06.0575 4416 [ 435F23FC9B93D46720A0E9D43EC80DD0 ] LMouKE C:\Windows\system32\DRIVERS\LMouKE.Sys
07:53:06.0610 4416 LMouKE - ok
07:53:06.0679 4416 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
07:53:06.0682 4416 LSI_FC - ok
07:53:06.0693 4416 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
07:53:06.0695 4416 LSI_SAS - ok
07:53:06.0708 4416 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
07:53:06.0710 4416 LSI_SAS2 - ok
07:53:06.0721 4416 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
07:53:06.0723 4416 LSI_SCSI - ok
07:53:06.0746 4416 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
07:53:06.0749 4416 luafv - ok
07:53:06.0785 4416 [ DDFA88E36D5F8DB5FBDBDDDC4969DB0A ] LUsbFilt C:\Windows\system32\Drivers\LUsbFilt.Sys
07:53:06.0786 4416 LUsbFilt - ok
07:53:06.0824 4416 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
07:53:06.0827 4416 Mcx2Svc - ok
07:53:06.0858 4416 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
07:53:06.0860 4416 megasas - ok
07:53:06.0878 4416 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
07:53:06.0882 4416 MegaSR - ok
07:53:06.0987 4416 [ 5A60A55F6B8AF51A6B7642B8981FD834 ] MfFWEnt C:\Program Files\AhnLab\ASP\MyFirewall 4.0\MfFWEnt.sys
07:53:07.0007 4416 MfFWEnt - ok
07:53:07.0074 4416 [ 99C7209B747E4D25AFAF241A140E4BE5 ] MfIPSEnt C:\Program Files\AhnLab\ASP\MyFirewall 4.0\MfIPSEnt.sys
07:53:07.0087 4416 MfIPSEnt - ok
07:53:07.0131 4416 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
07:53:07.0140 4416 MMCSS - ok
07:53:07.0173 4416 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
07:53:07.0184 4416 Modem - ok
07:53:07.0239 4416 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
07:53:07.0240 4416 monitor - ok
07:53:07.0269 4416 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
07:53:07.0270 4416 mouclass - ok
07:53:07.0301 4416 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
07:53:07.0302 4416 mouhid - ok
07:53:07.0344 4416 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
07:53:07.0345 4416 mountmgr - ok
07:53:07.0361 4416 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
07:53:07.0364 4416 mpio - ok
07:53:07.0380 4416 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
07:53:07.0382 4416 mpsdrv - ok
07:53:07.0400 4416 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
07:53:07.0402 4416 MRxDAV - ok
07:53:07.0443 4416 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
07:53:07.0445 4416 mrxsmb - ok
07:53:07.0463 4416 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
07:53:07.0467 4416 mrxsmb10 - ok
07:53:07.0478 4416 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
07:53:07.0480 4416 mrxsmb20 - ok
07:53:07.0510 4416 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
07:53:07.0511 4416 msahci - ok
07:53:07.0520 4416 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
07:53:07.0522 4416 msdsm - ok
07:53:07.0540 4416 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
07:53:07.0545 4416 MSDTC - ok
07:53:07.0575 4416 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
07:53:07.0577 4416 Msfs - ok
07:53:07.0585 4416 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
07:53:07.0587 4416 mshidkmdf - ok
07:53:07.0591 4416 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
07:53:07.0592 4416 msisadrv - ok
07:53:07.0644 4416 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
07:53:07.0648 4416 MSiSCSI - ok
07:53:07.0656 4416 msiserver - ok
07:53:07.0672 4416 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
07:53:07.0673 4416 MSKSSRV - ok
07:53:07.0689 4416 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
07:53:07.0690 4416 MSPCLOCK - ok
07:53:07.0717 4416 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
07:53:07.0718 4416 MSPQM - ok
07:53:07.0730 4416 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
07:53:07.0732 4416 MsRPC - ok
07:53:07.0741 4416 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
07:53:07.0742 4416 mssmbios - ok
07:53:07.0747 4416 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
07:53:07.0748 4416 MSTEE - ok
07:53:07.0765 4416 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
07:53:07.0767 4416 MTConfig - ok
07:53:07.0810 4416 [ D48659BB24C48345D926ECB45C1EBDF5 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
07:53:07.0811 4416 MTsensor - ok
07:53:07.0819 4416 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
07:53:07.0820 4416 Mup - ok
07:53:07.0856 4416 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
07:53:07.0863 4416 napagent - ok
07:53:07.0897 4416 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
07:53:07.0901 4416 NativeWifiP - ok
07:53:07.0925 4416 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
07:53:07.0933 4416 NDIS - ok
07:53:07.0954 4416 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
07:53:07.0955 4416 NdisCap - ok
07:53:07.0973 4416 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
07:53:07.0974 4416 NdisTapi - ok
07:53:07.0986 4416 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
07:53:07.0987 4416 Ndisuio - ok
07:53:07.0999 4416 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
 
07:53:08.0001 4416 NdisWan - ok
07:53:08.0013 4416 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
07:53:08.0014 4416 NDProxy - ok
07:53:08.0021 4416 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
07:53:08.0022 4416 NetBIOS - ok
07:53:08.0049 4416 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
07:53:08.0077 4416 NetBT - ok
07:53:08.0107 4416 [ F42309C4191C506B71DB5D1126D26318 ] Netlogon C:\Windows\system32\lsass.exe
07:53:08.0110 4416 Netlogon - ok
07:53:08.0162 4416 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
07:53:08.0168 4416 Netman - ok
07:53:08.0227 4416 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
07:53:08.0256 4416 NetMsmqActivator - ok
07:53:08.0270 4416 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
07:53:08.0271 4416 NetPipeActivator - ok
07:53:08.0279 4416 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
07:53:08.0294 4416 netprofm - ok
07:53:08.0302 4416 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
07:53:08.0303 4416 NetTcpActivator - ok
07:53:08.0307 4416 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
07:53:08.0309 4416 NetTcpPortSharing - ok
07:53:08.0353 4416 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
07:53:08.0355 4416 nfrd960 - ok
07:53:08.0371 4416 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
07:53:08.0376 4416 NlaSvc - ok
07:53:08.0384 4416 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
07:53:08.0386 4416 Npfs - ok
07:53:08.0410 4416 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
07:53:08.0414 4416 nsi - ok
07:53:08.0425 4416 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
07:53:08.0426 4416 nsiproxy - ok
07:53:08.0453 4416 [ 3795DCD21F740EE799FB7223234215AF ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
07:53:08.0467 4416 Ntfs - ok
07:53:08.0482 4416 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
07:53:08.0484 4416 Null - ok
07:53:08.0528 4416 [ B5E37E31C053BC9950455A257526514B ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x32.sys
07:53:08.0532 4416 NVENETFD - ok
07:53:08.0561 4416 [ 3D7FB57354703809B5F0C23287FAC1D6 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
07:53:08.0563 4416 NVHDA - ok
07:53:08.0762 4416 [ E891B3979F0CF2740C1B073F834221FE ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
07:53:08.0827 4416 nvlddmkm - ok
07:53:08.0868 4416 [ 3F3D04B1D08D43C16EA7963954EC768D ] nvraid C:\Windows\system32\DRIVERS\nvraid.sys
07:53:08.0870 4416 nvraid - ok
07:53:08.0881 4416 [ C99F251A5DE63C6F129CF71933ACED0F ] nvstor C:\Windows\system32\DRIVERS\nvstor.sys
07:53:08.0882 4416 nvstor - ok
07:53:08.0935 4416 [ AE2DE8E165DCB93A66B21748E6F913DF ] NVSvc C:\Windows\system32\nvvsvc.exe
07:53:08.0944 4416 NVSvc - ok
07:53:09.0052 4416 [ C78581C14699C46FE0F0817416383134 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
07:53:09.0066 4416 nvUpdatusService - ok
07:53:09.0084 4416 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
07:53:09.0086 4416 nv_agp - ok
07:53:09.0110 4416 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
07:53:09.0112 4416 ohci1394 - ok
07:53:09.0147 4416 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
07:53:09.0154 4416 p2pimsvc - ok
07:53:09.0171 4416 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
07:53:09.0178 4416 p2psvc - ok
07:53:09.0210 4416 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
07:53:09.0211 4416 Parport - ok
07:53:09.0221 4416 [ FF4218952B51DE44FE910953A3E686B9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
07:53:09.0222 4416 partmgr - ok
07:53:09.0234 4416 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
07:53:09.0236 4416 Parvdm - ok
07:53:09.0250 4416 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
07:53:09.0255 4416 PcaSvc - ok
07:53:09.0266 4416 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
07:53:09.0269 4416 pci - ok
07:53:09.0283 4416 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
07:53:09.0285 4416 pciide - ok
07:53:09.0301 4416 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
07:53:09.0313 4416 pcmcia - ok
07:53:09.0359 4416 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
07:53:09.0360 4416 pcw - ok
07:53:09.0412 4416 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
07:53:09.0424 4416 PEAUTH - ok
07:53:09.0502 4416 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
07:53:09.0516 4416 PeerDistSvc - ok
07:53:09.0564 4416 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
07:53:09.0583 4416 pla - ok
07:53:09.0613 4416 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
07:53:09.0621 4416 PlugPlay - ok
07:53:09.0634 4416 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
07:53:09.0639 4416 PNRPAutoReg - ok
07:53:09.0655 4416 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
07:53:09.0660 4416 PNRPsvc - ok
07:53:09.0694 4416 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
07:53:09.0700 4416 PolicyAgent - ok
07:53:09.0729 4416 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
07:53:09.0735 4416 Power - ok
07:53:09.0777 4416 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
07:53:09.0778 4416 PptpMiniport - ok
07:53:09.0789 4416 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
07:53:09.0791 4416 Processor - ok
07:53:09.0822 4416 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
07:53:09.0827 4416 ProfSvc - ok
07:53:09.0840 4416 [ F42309C4191C506B71DB5D1126D26318 ] ProtectedStorage C:\Windows\system32\lsass.exe
07:53:09.0843 4416 ProtectedStorage - ok
07:53:09.0858 4416 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
07:53:09.0859 4416 Psched - ok
07:53:09.0909 4416 [ D24DFD16A1E2A76034DF5AA18125C35D ] PSI C:\Windows\system32\DRIVERS\psi_mf.sys
07:53:09.0910 4416 PSI - ok
07:53:09.0953 4416 [ A6A7AD767BF5141665F5C675F671B3E1 ] PSI_SVC_2 c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
07:53:09.0955 4416 PSI_SVC_2 - ok
07:53:09.0984 4416 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
07:53:09.0999 4416 ql2300 - ok
07:53:10.0038 4416 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
07:53:10.0040 4416 ql40xx - ok
07:53:10.0082 4416 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
07:53:10.0088 4416 QWAVE - ok
07:53:10.0107 4416 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
07:53:10.0108 4416 QWAVEdrv - ok
07:53:10.0137 4416 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
07:53:10.0139 4416 RasAcd - ok
07:53:10.0157 4416 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
07:53:10.0158 4416 RasAgileVpn - ok
07:53:10.0165 4416 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
07:53:10.0170 4416 RasAuto - ok
07:53:10.0201 4416 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
07:53:10.0202 4416 Rasl2tp - ok
07:53:10.0222 4416 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
07:53:10.0229 4416 RasMan - ok
07:53:10.0254 4416 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
07:53:10.0255 4416 RasPppoe - ok
07:53:10.0290 4416 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
07:53:10.0292 4416 RasSstp - ok
07:53:10.0304 4416 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
07:53:10.0307 4416 rdbss - ok
07:53:10.0343 4416 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
07:53:10.0345 4416 rdpbus - ok
07:53:10.0355 4416 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
07:53:10.0356 4416 RDPCDD - ok
07:53:10.0372 4416 [ C5FF95883FFEF704D50C40D21CFB3AB5 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
07:53:10.0374 4416 RDPDR - ok
07:53:10.0391 4416 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
07:53:10.0392 4416 RDPENCDD - ok
07:53:10.0409 4416 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
07:53:10.0410 4416 RDPREFMP - ok
07:53:10.0430 4416 [ 801371BA9782282892D00AADB08EE367 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
07:53:10.0433 4416 RDPWD - ok
07:53:10.0457 4416 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
07:53:10.0459 4416 rdyboost - ok
07:53:10.0494 4416 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
07:53:10.0497 4416 RemoteAccess - ok
07:53:10.0529 4416 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
07:53:10.0534 4416 RemoteRegistry - ok
07:53:10.0544 4416 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
07:53:10.0548 4416 RpcEptMapper - ok
07:53:10.0556 4416 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
07:53:10.0559 4416 RpcLocator - ok
07:53:10.0576 4416 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
07:53:10.0582 4416 RpcSs - ok
07:53:10.0617 4416 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
07:53:10.0619 4416 rspndr - ok
07:53:10.0646 4416 [ CA5A4FBFE341F13733955B8AAC98F0B5 ] RTL8187B C:\Windows\system32\DRIVERS\RTL8187B.sys
07:53:10.0651 4416 RTL8187B - ok
07:53:10.0666 4416 [ 5423D8437051E89DD34749F242C98648 ] s3cap C:\Windows\system32\DRIVERS\vms3cap.sys
07:53:10.0667 4416 s3cap - ok
07:53:10.0682 4416 [ F42309C4191C506B71DB5D1126D26318 ] SamSs C:\Windows\system32\lsass.exe
07:53:10.0684 4416 SamSs - ok
07:53:10.0755 4416 [ 230FD3749904CA045EA5EC0AA14006E9 ] SANDRA C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP1\WNt500x86\Sandra.sys
07:53:10.0758 4416 SANDRA - ok
07:53:10.0770 4416 [ 96F6F3E594D780B7E20FDC94504D4D89 ] SandraAgentSrv C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP1\RpcAgentSrv.exe
07:53:10.0773 4416 SandraAgentSrv - ok
07:53:10.0815 4416 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
07:53:10.0817 4416 sbp2port - ok
07:53:10.0841 4416 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
07:53:10.0846 4416 SCardSvr - ok
07:53:10.0858 4416 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
07:53:10.0859 4416 scfilter - ok
07:53:10.0901 4416 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\Windows\system32\schedsvc.dll
07:53:10.0912 4416 Schedule - ok
07:53:10.0927 4416 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
07:53:10.0928 4416 SCPolicySvc - ok
07:53:10.0971 4416 [ FD0C8A2AACC788D415F1957099827F80 ] scskusbf C:\Windows\system32\drivers\scskusbf.sys
07:53:10.0972 4416 scskusbf - ok
07:53:11.0006 4416 [ 47C0A9E02BD4832ED4E522F906CCE724 ] scskusbs C:\Windows\system32\drivers\scskusbs.sys
07:53:11.0009 4416 scskusbs - ok
07:53:11.0043 4416 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
07:53:11.0048 4416 SDRSVC - ok
07:53:11.0084 4416 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
07:53:11.0086 4416 secdrv - ok
07:53:11.0095 4416 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
07:53:11.0099 4416 seclogon - ok
07:53:11.0162 4416 [ 5B66DB4877BBAC9F7493AA8D84421E49 ] Secunia PSI Agent C:\Program Files\Secunia\PSI\PSIA.exe
07:53:11.0169 4416 Secunia PSI Agent - ok
07:53:11.0191 4416 [ 0E88FDF474F2CDD370A4A6CE77D018F0 ] Secunia Update Agent C:\Program Files\Secunia\PSI\sua.exe
07:53:11.0193 4416 Secunia Update Agent - ok
07:53:11.0228 4416 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\system32\sens.dll
07:53:11.0232 4416 SENS - ok
07:53:11.0244 4416 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
07:53:11.0248 4416 SensrSvc - ok
07:53:11.0289 4416 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
07:53:11.0291 4416 Serenum - ok
07:53:11.0306 4416 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
07:53:11.0308 4416 Serial - ok
07:53:11.0323 4416 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
07:53:11.0324 4416 sermouse - ok
07:53:11.0345 4416 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
07:53:11.0350 4416 SessionEnv - ok
07:53:11.0365 4416 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
07:53:11.0366 4416 sffdisk - ok
07:53:11.0373 4416 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
07:53:11.0375 4416 sffp_mmc - ok
07:53:11.0385 4416 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
07:53:11.0387 4416 sffp_sd - ok
07:53:11.0391 4416 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
07:53:11.0393 4416 sfloppy - ok
07:53:11.0429 4416 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
07:53:11.0436 4416 ShellHWDetection - ok
07:53:11.0455 4416 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
07:53:11.0457 4416 sisagp - ok
07:53:11.0505 4416 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
07:53:11.0508 4416 SiSRaid2 - ok
07:53:11.0526 4416 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
07:53:11.0530 4416 SiSRaid4 - ok
07:53:11.0612 4416 [ 68EA68D03BF58389FE6AD2B38FAD798C ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
07:53:11.0613 4416 SkypeUpdate - ok
07:53:11.0656 4416 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
07:53:11.0662 4416 Smb - ok
07:53:11.0722 4416 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
07:53:11.0729 4416 SNMPTRAP - ok
07:53:11.0784 4416 [ 3FA2E254BFBCE52B3C6F1BF23AAB6911 ] speedfan C:\Windows\system32\speedfan.sys
07:53:11.0788 4416 speedfan - ok
07:53:11.0823 4416 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
07:53:11.0824 4416 spldr - ok
07:53:11.0872 4416 [ D1BB750EB51694DE183E08B9C33BE5B2 ] Spooler C:\Windows\System32\spoolsv.exe
07:53:11.0883 4416 Spooler - ok
07:53:12.0012 4416 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
07:53:12.0049 4416 sppsvc - ok
07:53:12.0108 4416 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
07:53:12.0113 4416 sppuinotify - ok
07:53:12.0170 4416 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\Windows\system32\DRIVERS\srv.sys
07:53:12.0174 4416 srv - ok
07:53:12.0191 4416 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
07:53:12.0195 4416 srv2 - ok
07:53:12.0207 4416 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
07:53:12.0209 4416 srvnet - ok
07:53:12.0236 4416 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
07:53:12.0242 4416 SSDPSRV - ok
07:53:12.0281 4416 [ EF3458337D7341A05169CEFC73709264 ] SSPORT C:\Windows\system32\Drivers\SSPORT.sys
07:53:12.0282 4416 SSPORT - ok
07:53:12.0295 4416 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
07:53:12.0300 4416 SstpSvc - ok
07:53:12.0374 4416 [ FC0A58529A02B1EED55DDC58696B7908 ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
07:53:12.0378 4416 Stereo Service - ok
07:53:12.0405 4416 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
07:53:12.0406 4416 stexstor - ok
07:53:12.0445 4416 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
07:53:12.0454 4416 StiSvc - ok
07:53:12.0471 4416 [ 957E346CA948668F2496A6CCF6FF82CC ] storflt C:\Windows\system32\DRIVERS\vmstorfl.sys
07:53:12.0473 4416 storflt - ok
07:53:12.0482 4416 [ D5751969DC3E4B88BF482AC8EC9FE019 ] storvsc C:\Windows\system32\DRIVERS\storvsc.sys
07:53:12.0483 4416 storvsc - ok
07:53:12.0498 4416 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
07:53:12.0498 4416 swenum - ok
07:53:12.0620 4416 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
07:53:12.0624 4416 SwitchBoard - ok
07:53:12.0653 4416 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
07:53:12.0661 4416 swprv - ok
07:53:12.0695 4416 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
07:53:12.0711 4416 SysMain - ok
07:53:12.0725 4416 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
07:53:12.0730 4416 TabletInputService - ok
07:53:12.0877 4416 [ 77E974834B9C246DE54DE4F430315B09 ] TabletServiceWacom C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
07:53:12.0942 4416 TabletServiceWacom - ok
07:53:12.0973 4416 [ 0C3B2A9C4BD2DD9A6C2E4084314DD719 ] taphss C:\Windows\system32\DRIVERS\taphss.sys
07:53:12.0975 4416 taphss - ok
07:53:13.0004 4416 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
07:53:13.0010 4416 TapiSrv - ok
07:53:13.0020 4416 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
07:53:13.0025 4416 TBS - ok
07:53:13.0067 4416 [ 56C198AC82EFA622DD93E9E43575F79C ] Tcpip C:\Windows\system32\drivers\tcpip.sys
07:53:13.0081 4416 Tcpip - ok
07:53:13.0107 4416 [ 56C198AC82EFA622DD93E9E43575F79C ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
07:53:13.0115 4416 TCPIP6 - ok
07:53:13.0150 4416 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
07:53:13.0152 4416 tcpipreg - ok
07:53:13.0163 4416 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
07:53:13.0164 4416 TDPIPE - ok
07:53:13.0176 4416 [ 7551E91EA999EE9A8E9C331D5A9C31F3 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
07:53:13.0177 4416 TDTCP - ok
07:53:13.0199 4416 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
07:53:13.0200 4416 tdx - ok
07:53:13.0214 4416 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
07:53:13.0215 4416 TermDD - ok
07:53:13.0254 4416 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
07:53:13.0263 4416 TermService - ok
07:53:13.0276 4416 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
07:53:13.0281 4416 Themes - ok
07:53:13.0289 4416 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
07:53:13.0291 4416 THREADORDER - ok
07:53:13.0346 4416 [ 7496F4C86CAC98CA7A24586570E214AA ] TouchServiceWacom C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe
07:53:13.0351 4416 TouchServiceWacom - ok
07:53:13.0374 4416 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
07:53:13.0379 4416 TrkWks - ok
07:53:13.0434 4416 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
07:53:13.0437 4416 TrustedInstaller - ok
07:53:13.0449 4416 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
07:53:13.0451 4416 tssecsrv - ok
07:53:13.0493 4416 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
07:53:13.0495 4416 tunnel - ok
07:53:13.0505 4416 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
07:53:13.0507 4416 uagp35 - ok
07:53:13.0527 4416 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
07:53:13.0531 4416 udfs - ok
07:53:13.0570 4416 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
07:53:13.0574 4416 UI0Detect - ok
07:53:13.0584 4416 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
07:53:13.0586 4416 uliagpkx - ok
07:53:13.0609 4416 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
07:53:13.0610 4416 umbus - ok
07:53:13.0626 4416 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
07:53:13.0627 4416 UmPass - ok
07:53:13.0647 4416 [ 8ECACA5454844F66386F7BE4AE0D7CD1 ] UmRdpService C:\Windows\System32\umrdp.dll
07:53:13.0653 4416 UmRdpService - ok
07:53:13.0665 4416 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
07:53:13.0672 4416 upnphost - ok
07:53:13.0731 4416 USADISK_AGENT - ok
07:53:13.0764 4416 [ 8455C4ED038EFD09E99327F9D2D48FFA ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
07:53:13.0766 4416 usbccgp - ok
07:53:13.0800 4416 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
07:53:13.0802 4416 usbcir - ok
07:53:13.0834 4416 [ FF32D4F3EC3C68B2CA61782C7964F54E ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
07:53:13.0835 4416 usbehci - ok
07:53:13.0858 4416 [ B0DFC7B484E0CA0C27BDA5433B82D94A ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
07:53:13.0862 4416 usbhub - ok
07:53:13.0877 4416 [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
07:53:13.0879 4416 usbohci - ok
07:53:13.0895 4416 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
07:53:13.0897 4416 usbprint - ok
07:53:13.0913 4416 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
07:53:13.0914 4416 usbscan - ok
07:53:13.0929 4416 [ D8889D56E0D27E57ED4591837FE71D27 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
07:53:13.0947 4416 USBSTOR - ok
07:53:13.0965 4416 [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
07:53:13.0993 4416 usbuhci - ok
07:53:14.0049 4416 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
07:53:14.0097 4416 UxSms - ok
07:53:14.0148 4416 [ F42309C4191C506B71DB5D1126D26318 ] VaultSvc C:\Windows\system32\lsass.exe
07:53:14.0150 4416 VaultSvc - ok
07:53:14.0191 4416 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
07:53:14.0201 4416 vdrvroot - ok
07:53:14.0241 4416 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
07:53:14.0250 4416 vds - ok
07:53:14.0289 4416 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
07:53:14.0291 4416 vga - ok
07:53:14.0301 4416 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
07:53:14.0303 4416 VgaSave - ok
07:53:14.0322 4416 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
07:53:14.0325 4416 vhdmp - ok
07:53:14.0349 4416 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
07:53:14.0363 4416 viaagp - ok
07:53:14.0383 4416 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
07:53:14.0385 4416 ViaC7 - ok
07:53:14.0415 4416 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
07:53:14.0417 4416 viaide - ok
07:53:14.0453 4416 [ 379B349F65F453D2A6E75EA6B7448E49 ] vmbus C:\Windows\system32\DRIVERS\vmbus.sys
07:53:14.0456 4416 vmbus - ok
07:53:14.0474 4416 [ EC2BBAB4B84D0738C6C83D2234DC36FE ] VMBusHID C:\Windows\system32\DRIVERS\VMBusHID.sys
07:53:14.0476 4416 VMBusHID - ok
07:53:14.0487 4416 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
07:53:14.0488 4416 volmgr - ok
07:53:14.0501 4416 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
07:53:14.0504 4416 volmgrx - ok
07:53:14.0520 4416 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
07:53:14.0524 4416 volsnap - ok
07:53:14.0540 4416 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
07:53:14.0542 4416 vsmraid - ok
07:53:14.0587 4416 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
07:53:14.0602 4416 VSS - ok
07:53:14.0632 4416 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
07:53:14.0634 4416 vwifibus - ok
07:53:14.0654 4416 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
07:53:14.0662 4416 W32Time - ok
07:53:14.0682 4416 [ 427A8BC96F16C40DF81C2D2F4EDD32DD ] wacommousefilter C:\Windows\system32\DRIVERS\wacommousefilter.sys
07:53:14.0683 4416 wacommousefilter - ok
07:53:14.0694 4416 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
07:53:14.0696 4416 WacomPen - ok
07:53:14.0731 4416 [ 846B58EA44BF8C92E4B59F4E2252C4C0 ] wacomvhid C:\Windows\system32\DRIVERS\wacomvhid.sys
07:53:14.0732 4416 wacomvhid - ok
07:53:14.0744 4416 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
07:53:14.0746 4416 WANARP - ok
07:53:14.0750 4416 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
07:53:14.0751 4416 Wanarpv6 - ok
07:53:14.0809 4416 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
07:53:14.0823 4416 WatAdminSvc - ok
07:53:14.0874 4416 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
07:53:14.0891 4416 wbengine - ok
07:53:14.0907 4416 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
07:53:14.0913 4416 WbioSrvc - ok
07:53:14.0939 4416 [ 6D9B75275C3E3A5F51AEF81AFFADB2B6 ] wcncsvc C:\Windows\System32\wcncsvc.dll
07:53:14.0946 4416 wcncsvc - ok
07:53:14.0963 4416 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
07:53:14.0968 4416 WcsPlugInService - ok
07:53:15.0002 4416 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
07:53:15.0004 4416 Wd - ok
07:53:15.0018 4416 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
07:53:15.0023 4416 Wdf01000 - ok
07:53:15.0056 4416 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
07:53:15.0061 4416 WdiServiceHost - ok
07:53:15.0065 4416 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
07:53:15.0069 4416 WdiSystemHost - ok
07:53:15.0087 4416 [ D87C7D2C517F82A5AB7A73E203063D9E ] WebClient C:\Windows\System32\webclnt.dll
07:53:15.0093 4416 WebClient - ok
07:53:15.0111 4416 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
07:53:15.0117 4416 Wecsvc - ok
07:53:15.0132 4416 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
07:53:15.0137 4416 wercplsupport - ok
07:53:15.0160 4416 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
07:53:15.0165 4416 WerSvc - ok
07:53:15.0188 4416 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
07:53:15.0190 4416 WfpLwf - ok
07:53:15.0206 4416 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
07:53:15.0208 4416 WIMMount - ok
07:53:15.0281 4416 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
07:53:15.0289 4416 WinDefend - ok
07:53:15.0305 4416 WinHttpAutoProxySvc - ok
07:53:15.0358 4416 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
07:53:15.0361 4416 Winmgmt - ok
07:53:15.0414 4416 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
07:53:15.0431 4416 WinRM - ok
07:53:15.0473 4416 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
07:53:15.0475 4416 WinUsb - ok
07:53:15.0496 4416 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
07:53:15.0508 4416 Wlansvc - ok
07:53:15.0572 4416 [ 0A70F4022EC2E14C159EFC4F69AA2477 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
07:53:15.0583 4416 wlidsvc - ok
07:53:15.0616 4416 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
07:53:15.0617 4416 WmiAcpi - ok
07:53:15.0655 4416 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
07:53:15.0658 4416 wmiApSrv - ok
07:53:15.0717 4416 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
07:53:15.0724 4416 WMPNetworkSvc - ok
07:53:15.0753 4416 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
07:53:15.0758 4416 WPCSvc - ok
07:53:15.0768 4416 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
07:53:15.0773 4416 WPDBusEnum - ok
07:53:15.0787 4416 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
07:53:15.0788 4416 ws2ifsl - ok
07:53:15.0801 4416 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\system32\wscsvc.dll
07:53:15.0807 4416 wscsvc - ok
07:53:15.0811 4416 WSearch - ok
07:53:15.0870 4416 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
07:53:15.0896 4416 wuauserv - ok
07:53:15.0928 4416 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
07:53:15.0930 4416 WudfPf - ok
07:53:15.0952 4416 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
07:53:15.0955 4416 WUDFRd - ok
07:53:15.0988 4416 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
07:53:15.0994 4416 wudfsvc - ok
07:53:16.0012 4416 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
07:53:16.0019 4416 WwanSvc - ok
07:53:16.0101 4416 [ 556B5CFE8D21B256ADD7F87D7F4B4123 ] {B154377D-700F-42cc-9474-23858FBDF4BD} C:\Program Files\CyberLink\PowerDVD9\000.fcl
07:53:16.0102 4416 {B154377D-700F-42cc-9474-23858FBDF4BD} - ok
07:53:16.0106 4416 ================ Scan global ===============================
07:53:16.0147 4416 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
07:53:16.0175 4416 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
07:53:16.0186 4416 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
07:53:16.0219 4416 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
07:53:16.0249 4416 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
07:53:16.0254 4416 [Global] - ok
07:53:16.0273 4416 ================ Scan MBR ==================================
07:53:16.0291 4416 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
07:53:16.0363 4416 \Device\Harddisk0\DR0 - ok
07:53:16.0390 4416 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
07:53:16.0566 4416 \Device\Harddisk1\DR1 - ok
07:53:16.0575 4416 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2
07:53:16.0578 4416 \Device\Harddisk2\DR2 - ok
07:53:16.0579 4416 ================ Scan VBR ==================================
07:53:16.0583 4416 [ 60B4F17CAB3AA2BB6B90D217B6996728 ] \Device\Harddisk0\DR0\Partition1
07:53:16.0584 4416 \Device\Harddisk0\DR0\Partition1 - ok
07:53:16.0590 4416 [ 4BE64327A8E0661588982428E4FB61CE ] \Device\Harddisk1\DR1\Partition1
07:53:16.0591 4416 \Device\Harddisk1\DR1\Partition1 - ok
07:53:16.0596 4416 [ 325C37512A99D9AA35EC347DEAB82D62 ] \Device\Harddisk2\DR2\Partition1
07:53:16.0597 4416 \Device\Harddisk2\DR2\Partition1 - ok
07:53:16.0616 4416 [ 3A91685AA1CB3EC61B735C5F8AF1D558 ] \Device\Harddisk2\DR2\Partition2
07:53:16.0617 4416 \Device\Harddisk2\DR2\Partition2 - ok
07:53:16.0617 4416 ============================================================
07:53:16.0617 4416 Scan finished
07:53:16.0617 4416 ============================================================
07:53:16.0630 4352 Detected object count: 0
07:53:16.0630 4352 Actual detected object count: 0
 
All look good.

How is computer doing?

============================

Download OTL to your Desktop.
Alternate download: http://www.itxassociates.com/OT-Tools/OTL.exe

  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Click the Scan All Users checkbox.
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them back here.
 
I don't see any problem in my computer.
The constant Avast warning stopped since your very first FRST fix.


OTL logfile created on: 22/08/2012 12:10:20 PM - Run 1
OTL by OldTimer - Version 3.2.58.1 Folder = C:\Users\2nd_Window\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.00 Gb Total Physical Memory | 2.14 Gb Available Physical Memory | 71.39% Memory free
6.00 Gb Paging File | 5.01 Gb Available in Paging File | 83.61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 488.28 Gb Total Space | 62.60 Gb Free Space | 12.82% Space Free | Partition Type: NTFS
Drive D: | 57.27 Gb Total Space | 24.10 Gb Free Space | 42.07% Space Free | Partition Type: NTFS
Drive E: | 335.35 Gb Total Space | 281.47 Gb Free Space | 83.93% Space Free | Partition Type: NTFS
Drive F: | 443.22 Gb Total Space | 150.45 Gb Free Space | 33.95% Space Free | Partition Type: NTFS
Drive G: | 4.33 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: 2ND_WINDOW-PC | User Name: 2nd_Window | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/08/22 12:09:28 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\2nd_Window\Desktop\OTL.exe
PRC - [2012/07/03 12:21:30 | 004,273,976 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012/07/03 12:21:29 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012/06/21 13:54:15 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2012/02/29 19:59:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012/02/29 16:58:46 | 000,857,408 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2012/02/29 16:58:36 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012/02/29 13:26:46 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012/01/23 08:38:24 | 006,321,016 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
PRC - [2012/01/23 08:38:24 | 003,591,544 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
PRC - [2012/01/23 08:38:24 | 001,609,080 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
PRC - [2012/01/23 08:38:24 | 000,470,904 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe
PRC - [2012/01/03 09:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/12/02 12:18:16 | 001,000,288 | ---- | M] (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041) -- C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
PRC - [2011/10/14 02:01:50 | 000,994,360 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\psia.exe
PRC - [2011/10/14 02:01:48 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\sua.exe
PRC - [2011/10/14 02:01:46 | 000,291,896 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\psi_tray.exe
PRC - [2011/07/06 03:28:17 | 000,688,128 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
PRC - [2011/06/13 05:05:28 | 000,155,856 | ---- | M] () -- C:\Program Files\USADISK\WEBHARD_Agent.exe
PRC - [2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/07/13 21:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009/02/28 20:40:38 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files\CyberLink\Shared Files\brs.exe
PRC - [2009/02/16 09:55:38 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
PRC - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2004/05/02 13:02:51 | 000,062,464 | ---- | M] (Elias Fotinis) -- C:\Program Files\DeskPins\DeskPins.exe


========== Modules (No Company Name) ==========

MOD - [2012/01/23 08:38:24 | 000,963,448 | ---- | M] () -- C:\Program Files\Tablet\Wacom\libxml2.dll
MOD - [2011/08/31 16:44:40 | 000,315,392 | ---- | M] () -- C:\Program Files\Evernote\Evernote\libtidy.dll
MOD - [2011/08/31 16:44:38 | 000,433,664 | ---- | M] () -- C:\Program Files\Evernote\Evernote\libxml2.dll
MOD - [2011/07/06 03:28:17 | 000,688,128 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
MOD - [2010/11/21 10:54:34 | 000,094,208 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll


========== Win32 Services (SafeList) ==========

SRV - [2012/07/03 12:21:29 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012/06/16 18:06:37 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012/04/05 11:37:38 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/02/29 19:59:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/02/29 13:26:46 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012/01/23 08:38:24 | 006,321,016 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV - [2012/01/23 08:38:24 | 000,470,904 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe -- (TouchServiceWacom)
SRV - [2012/01/03 09:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/10/14 02:01:50 | 000,994,360 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\psia.exe -- (Secunia PSI Agent)
SRV - [2011/10/14 02:01:48 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2011/09/27 15:03:28 | 000,295,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2011/06/13 05:05:28 | 000,155,856 | ---- | M] () [Auto | Running] -- C:\Program Files\USADISK\WEBHARD_Agent.exe -- (USADISK_AGENT)
SRV - [2011/01/24 00:46:08 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010/02/19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 21:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 21:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/12/12 04:20:08 | 000,095,896 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP1\RpcAgentSrv.exe -- (SandraAgentSrv)
SRV - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\JRSKD24.SYS -- (JRSKD24)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\2ND_WI~1\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\2ND_WI~1\AppData\Local\Temp\ALSysIO.sys -- (ALSysIO)
DRV - [2012/07/03 12:21:54 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012/07/03 12:21:53 | 000,721,000 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012/07/03 12:21:53 | 000,353,688 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012/07/03 12:21:53 | 000,057,656 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012/07/03 12:21:53 | 000,044,784 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2012/07/03 12:21:53 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012/05/07 20:25:12 | 000,194,792 | ---- | M] (SoftCamp) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\scskusbs.sys -- (scskusbs)
DRV - [2012/05/07 20:25:12 | 000,018,696 | ---- | M] (SoftCamp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\scskusbf.sys -- (scskusbf)
DRV - [2012/02/29 19:59:00 | 010,819,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012/01/17 08:45:56 | 000,148,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2011/11/30 02:18:42 | 000,022,480 | R--- | M] (Soft Security Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\JRSUKD25.SYS -- (JRSUKD25)
DRV - [2011/11/14 11:29:44 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV - [2011/11/14 11:29:42 | 000,014,120 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2011/09/27 21:05:04 | 000,126,048 | ---- | M] (Kings Information & Network) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\kcrtx86.sys -- (kcrtx86)
DRV - [2011/09/21 11:25:34 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\cpuz135_x32.sys -- (cpuz135)
DRV - [2011/09/02 02:31:28 | 000,081,304 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2011/09/02 02:31:28 | 000,039,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2011/09/02 02:31:28 | 000,030,360 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2011/09/02 02:31:20 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2011/09/02 02:30:58 | 000,065,048 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2011/07/26 13:49:12 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\taphss.sys -- (taphss)
DRV - [2011/05/26 12:23:00 | 000,090,208 | ---- | M] (AhnLab, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\AmonTDLh.sys -- (AMonTDLH)
DRV - [2011/04/30 17:33:05 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011/03/18 12:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\Windows\System32\speedfan.sys -- (speedfan)
DRV - [2010/10/14 21:41:44 | 000,005,120 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SSPORT.sys -- (SSPORT)
DRV - [2010/09/01 04:30:58 | 000,015,544 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\psi_mf.sys -- (PSI)
DRV - [2010/06/28 03:54:00 | 000,121,536 | ---- | M] (AhnLab, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\AhnLab\ASP\MyFirewall 4.0\mfipsent.sys -- (MfIPSEnt)
DRV - [2010/06/28 03:54:00 | 000,101,368 | ---- | M] (AhnLab, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\AhnLab\ASP\MyFirewall 4.0\mffwent.sys -- (MfFWEnt)
DRV - [2009/08/07 23:46:56 | 000,023,112 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP1\WNt500x86\sandra.sys -- (SANDRA)
DRV - [2009/07/20 21:13:00 | 000,019,616 | ---- | M] (AhnLab, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CdmDrvNt.sys -- (CdmDrvNt)
DRV - [2009/07/13 21:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009/07/13 21:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009/07/13 21:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009/07/13 19:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/07/13 19:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009/07/13 19:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2009/07/13 18:54:14 | 001,394,688 | ---- | M] (Hauppauge Computer Works) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HCW85BDA.sys -- (HCW85BDA)
DRV - [2009/07/13 18:02:53 | 000,347,136 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTL8187B.sys -- (RTL8187B)
DRV - [2009/07/13 18:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
DRV - [2009/02/28 19:40:18 | 000,087,536 | ---- | M] (CyberLink Corp.) [2012/06/24 13:34:23] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD9\000.fcl -- ({B154377D-700F-42cc-9474-23858FBDF4BD})
DRV - [2007/09/25 10:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2004/08/13 10:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
DRV - [1996/04/03 15:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\giveio.sys -- (giveio)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?lang=en-ca&OCID=iehp
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 40 3E 36 1B E7 60 CD 01 [binary data]
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\..\SearchScopes\{51AAF215-731A-4D51-8CE2-8F6FC3872DBE}: "URL" = http://www.google.com/search?q={sea...rce}&ie={inputEncoding?}&oe={outputEncoding?}
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-206085528-472393337-1987398177-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"
FF - prefs.js..browser.startup.homepage: "http://www.freegamepick.com/start-search.html"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@ahnlab.com/asp/npaosmgr.1: C:\Program Files\AhnLab\ASP\Components\aosmgr\npaosmgr.dll (AhnLab, Inc.)
FF - HKLM\Software\MozillaPlugins\@gomtv.com/gomtvx-plugin: C:\Program Files\Common Files\GRETECH\npgomtvx_nie.dll (Gretech Corporation)
FF - HKLM\Software\MozillaPlugins\@interezen.co.kr/npi3gmanager: C:\Program Files\Interezen\Plugins\NPI3GManager.dll (Interezen (c) Interezen.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@softforum.com/npKeyPro: C:\Windows\system32\npKeyPro.dll (Softsecurity Co., Ltd.)
FF - HKLM\Software\MozillaPlugins\@softforum.com/npxwebplugins: C:\Program Files\SoftForum\XecureWeb\ActiveX\npxwebplugin.dll (SoftForum Co., Ltd.)
FF - HKLM\Software\MozillaPlugins\@softforum.com/npxwebplugins_file: C:\Program Files\SoftForum\XecureWeb\ActiveX\npxwebplugin_file.dll (SoftForum Co., Ltd.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.10: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.0.0.4: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@softforum.com/npxwebplugins: C:\Program Files\SoftForum\XecureWeb\ActiveX\npxwebplugin.dll (SoftForum Co., Ltd.)
FF - HKCU\Software\MozillaPlugins\@softforum.com/npxwebplugins_file: C:\Program Files\SoftForum\XecureWeb\ActiveX\npxwebplugin_file.dll (SoftForum Co., Ltd.)
FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/06/21 13:54:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/08/19 13:05:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/19 14:31:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/08/19 18:21:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/19 14:31:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/08/19 18:21:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{6399FACC-F586-4E5B-95F5-C6A670BDF3A4}: C:\Users\2nd_Window\AppData\Local\{6399FACC-F586-4E5B-95F5-C6A670BDF3A4}

[2011/01/25 11:51:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\2nd_Window\AppData\Roaming\Mozilla\Extensions
[2012/08/01 22:56:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\2nd_Window\AppData\Roaming\Mozilla\Firefox\Profiles\jum4g5z1.default\extensions
[2012/03/09 00:24:16 | 000,000,000 | ---D | M] (WOT) -- C:\Users\2nd_Window\AppData\Roaming\Mozilla\Firefox\Profiles\jum4g5z1.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012/03/05 12:53:45 | 000,000,000 | ---D | M] (Evernote Web Clipper) -- C:\Users\2nd_Window\AppData\Roaming\Mozilla\Firefox\Profiles\jum4g5z1.default\extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800}
[2011/05/03 16:55:14 | 000,000,000 | ---D | M] (FoxLingo) -- C:\Users\2nd_Window\AppData\Roaming\Mozilla\Firefox\Profiles\jum4g5z1.default\extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
[2012/08/01 22:56:29 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\2nd_Window\AppData\Roaming\Mozilla\Firefox\Profiles\jum4g5z1.default\extensions\foxyproxy@eric.h.jung
[2012/03/16 03:55:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/07/19 14:31:22 | 000,134,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/06/21 13:54:20 | 000,129,144 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2010/02/04 08:58:50 | 000,090,112 | ---- | M] (SoftForum Co., Ltd.) -- C:\Program Files\mozilla firefox\plugins\npxecure.dll
[2010/02/04 08:58:48 | 000,073,728 | ---- | M] (SoftForum Co., Ltd.) -- C:\Program Files\mozilla firefox\plugins\npxwfile.dll
[2012/03/09 21:35:35 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/03/09 21:35:35 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:eek:riginalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage:
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\21.0.1180.79\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\21.0.1180.79\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\21.0.1180.79\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpplugin.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: XecureWeb Plugin for Mozilla (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npxecure.dll
CHR - plugin: XecureWeb File Plugin for Mozilla (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npxwfile.dll
CHR - plugin: AhnLab Online Security (Enabled) = C:\Program Files\AhnLab\ASP\Components\aosmgr\npaosmgr.dll
CHR - plugin: gomtvx NIE Module (Enabled) = C:\Program Files\Common Files\GRETECH\npgomtvx_nie.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: NPI3GManager (c) Interezen. plugin (Enabled) = C:\Program Files\Interezen\Plugins\NPI3GManager.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: SoftForum XecureWeb Control Plug-in (Enabled) = C:\Program Files\SoftForum\XecureWeb\ActiveX\npxwebplugin.dll
CHR - plugin: SoftForum XecureWeb File Control Plug-in (Enabled) = C:\Program Files\SoftForum\XecureWeb\ActiveX\npxwebplugin_file.dll
CHR - plugin: WacomTabletPlugin (Enabled) = C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll
CHR - plugin: Wacom Dynamic Link Library (Enabled) = C:\Program Files\TabletPlugins\npwacom.dll
CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: TouchEn Key for Multi-Browser (Enabled) = C:\Windows\system32\npKeyPro.dll
CHR - Extension: YouTube = C:\Users\2nd_Window\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Users\2nd_Window\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\2nd_Window\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: General Crawler = C:\Users\2nd_Window\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpihmmhdcobmllpcnpfbhnipmhamldje\2.0_0\
CHR - Extension: Gmail = C:\Users\2nd_Window\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
========== Files/Folders - Created Within 30 Days ==========

[2012/08/22 12:09:20 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\2nd_Window\Desktop\OTL.exe
[2012/08/22 08:23:36 | 000,000,000 | R--D | C] -- C:\Users\2nd_Window\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
[2012/08/21 07:52:45 | 002,212,440 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\2nd_Window\Desktop\TDSSKiller.exe
[2012/08/20 01:22:43 | 000,000,000 | --SD | C] -- C:\ComboFix
[2012/08/20 00:38:47 | 000,000,000 | ---D | C] -- C:\Users\2nd_Window\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
[2012/08/20 00:38:47 | 000,000,000 | ---D | C] -- C:\Users\2nd_Window\AppData\Roaming\IrfanView
[2012/08/20 00:38:46 | 000,000,000 | ---D | C] -- C:\Program Files\IrfanView
[2012/08/20 00:37:51 | 001,539,072 | ---- | C] (Irfan Skiljan) -- C:\Users\2nd_Window\Desktop\iview433_setup.exe
[2012/08/19 18:23:37 | 000,000,000 | ---D | C] -- C:\Users\2nd_Window\AppData\Roaming\.minecraft
[2012/08/19 18:22:15 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
[2012/08/19 13:05:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012/08/19 13:05:23 | 000,353,688 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2012/08/19 13:05:23 | 000,021,256 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2012/08/19 13:05:20 | 000,044,784 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2012/08/19 13:05:13 | 000,721,000 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2012/08/19 13:05:13 | 000,054,232 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2012/08/19 13:05:12 | 000,057,656 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2012/08/19 13:04:53 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2012/08/19 13:04:52 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2012/08/19 13:04:42 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012/08/19 12:52:26 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/08/19 12:52:26 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/08/19 12:52:26 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/08/19 12:48:56 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/08/19 12:46:15 | 004,735,580 | R--- | C] (Swearware) -- C:\Users\2nd_Window\Desktop\ComboFix.exe
[2012/08/19 00:17:45 | 000,000,000 | ---D | C] -- C:\FRST
[2012/08/18 19:11:38 | 000,897,686 | ---- | C] (Farbar) -- C:\Users\2nd_Window\Desktop\FRST.exe
[2012/08/18 15:56:06 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012/08/18 15:52:24 | 029,852,304 | ---- | C] (Any-Video-Converter.com ) -- C:\Users\2nd_Window\Desktop\avc-free.exe
[2012/08/18 15:52:15 | 000,000,000 | ---D | C] -- C:\Users\2nd_Window\AppData\Roaming\AnvSoft
[2012/08/18 15:52:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
[2012/08/18 15:51:49 | 000,000,000 | ---D | C] -- C:\Program Files\AnvSoft
[2012/08/18 15:49:49 | 030,455,120 | ---- | C] (Any-Video-Converter.com ) -- C:\Users\2nd_Window\Desktop\avc-ultimate.exe
[2012/08/18 00:06:15 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\2nd_Window\Desktop\aswMBR.exe
[2012/08/18 00:03:00 | 001,545,120 | ---- | C] (Bleeping Computer, LLC) -- C:\Users\2nd_Window\Desktop\rkill.exe
[2012/08/16 21:36:00 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\2nd_Window\Desktop\dds.com
[2012/08/15 19:47:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/08/15 19:47:56 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/08/15 19:46:05 | 010,652,120 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\2nd_Window\Desktop\mbam-setup-1.62.0.1300.exe
[2012/08/14 14:03:58 | 000,000,000 | ---D | C] -- C:\ProgramData\6C82D124A26398738E1D86D34F147C45
[2012/08/06 11:56:17 | 000,000,000 | ---D | C] -- C:\Users\2nd_Window\AppData\Local\cYo
[2012/07/28 15:27:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Lunch Design
[2012/07/28 15:27:39 | 000,000,000 | ---D | C] -- C:\games
[2012/07/28 08:28:16 | 000,000,000 | ---D | C] -- C:\Users\2nd_Window\AppData\Roaming\RealNetworks
[2012/07/24 22:11:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeGamePick.com
[2012/07/24 22:11:14 | 000,000,000 | ---D | C] -- C:\Program Files\FreeGamePick.com
[2011/04/07 19:56:54 | 000,114,688 | -HS- | C] (Microsoft Corporation) -- C:\Users\2nd_Window\AppData\Local\ixu.exe
[2009/05/14 21:02:10 | 003,392,872 | ---- | C] (Acresso Software Inc.) -- C:\Program Files\Common Files\adlmint_libFNP.dll
[2009/05/14 21:02:10 | 003,298,152 | ---- | C] (Autodesk) -- C:\Program Files\Common Files\adlmint.dll

========== Files - Modified Within 30 Days ==========

[2012/08/22 12:09:28 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\2nd_Window\Desktop\OTL.exe
[2012/08/22 12:06:38 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/08/22 12:06:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/08/22 08:23:29 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/08/22 08:23:07 | 2414,780,416 | -HS- | M] () -- C:\hiberfil.sys
[2012/08/22 02:10:49 | 001,001,224 | ---- | M] () -- C:\Users\2nd_Window\Documents\face.psd
[2012/08/21 20:16:42 | 000,002,302 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012/08/21 07:51:56 | 002,193,345 | ---- | M] () -- C:\Users\2nd_Window\Desktop\tdsskiller.zip
[2012/08/21 07:46:48 | 000,000,512 | ---- | M] () -- C:\Users\2nd_Window\Desktop\MBR.dat
[2012/08/20 17:33:26 | 002,212,440 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\2nd_Window\Desktop\TDSSKiller.exe
[2012/08/20 00:38:47 | 000,001,864 | ---- | M] () -- C:\Users\2nd_Window\Desktop\IrfanView Thumbnails.lnk
[2012/08/20 00:37:53 | 001,539,072 | ---- | M] (Irfan Skiljan) -- C:\Users\2nd_Window\Desktop\iview433_setup.exe
[2012/08/20 00:29:36 | 000,469,359 | ---- | M] () -- C:\Users\2nd_Window\Documents\Statement.pdf
[2012/08/19 13:20:35 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/08/19 13:20:34 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/08/19 13:05:24 | 000,002,091 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012/08/19 13:05:12 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012/08/19 12:46:22 | 004,735,580 | R--- | M] (Swearware) -- C:\Users\2nd_Window\Desktop\ComboFix.exe
[2012/08/19 11:52:57 | 089,340,632 | ---- | M] () -- C:\Users\2nd_Window\Desktop\avast_free_antivirus_setup.exe
[2012/08/19 11:18:21 | 000,001,352 | ---- | M] () -- C:\Users\2nd_Window\Documents\AutoHotkey.ahk
[2012/08/18 19:12:03 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/08/18 19:12:03 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/08/18 15:56:05 | 000,001,210 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Any Video Converter.lnk
[2012/08/18 15:52:37 | 029,852,304 | ---- | M] (Any-Video-Converter.com ) -- C:\Users\2nd_Window\Desktop\avc-free.exe
[2012/08/18 15:52:13 | 000,001,258 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Any Video Converter Ultimate.lnk
[2012/08/18 15:50:02 | 030,455,120 | ---- | M] (Any-Video-Converter.com ) -- C:\Users\2nd_Window\Desktop\avc-ultimate.exe
[2012/08/18 13:28:25 | 000,897,686 | ---- | M] (Farbar) -- C:\Users\2nd_Window\Desktop\FRST.exe
[2012/08/18 00:06:43 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\2nd_Window\Desktop\aswMBR.exe
[2012/08/18 00:03:07 | 001,545,120 | ---- | M] (Bleeping Computer, LLC) -- C:\Users\2nd_Window\Desktop\rkill.exe
[2012/08/16 21:36:04 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\2nd_Window\Desktop\dds.com
[2012/08/16 20:01:53 | 000,302,592 | ---- | M] () -- C:\Users\2nd_Window\Desktop\82hdu87u.exe
[2012/08/15 19:47:58 | 000,001,083 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/08/15 19:46:13 | 010,652,120 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\2nd_Window\Desktop\mbam-setup-1.62.0.1300.exe
[2012/08/13 23:08:16 | 000,116,857 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Receipt.pdf
[2012/08/13 23:07:30 | 000,121,071 | ---- | M] () -- C:\Users\2nd_Window\Desktop\HP Warranty - Warranty information.pdf
[2012/08/13 22:57:52 | 000,328,764 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Correspondence_2011792.pdf
[2012/08/07 07:43:32 | 000,112,764 | ---- | M] () -- C:\Users\2nd_Window\Documents\Scan008.pdf
[2012/08/06 11:54:03 | 011,581,288 | ---- | M] () -- C:\Users\2nd_Window\Desktop\ComicRackSetup09155.exe
[2012/08/05 10:16:43 | 1336,045,568 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Ã౸ ³²ÀÚ 8° ´ëÇѹα¹ vs ¿µ±¹ Àü¹Ý.120804.HDTV.x264.720p-HEAD.avi
[2012/08/05 10:02:39 | 2587,789,312 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Ã౸ ³²ÀÚ 8° ´ëÇѹα¹ vs ¿µ±¹ ÈĹÝ, ¿¬Àå, ½ÂºÎÂ÷±â.120804.HDTV.x264.720p-HEAD.avi
[2012/08/01 20:54:49 | 003,591,925 | ---- | M] () -- C:\Users\2nd_Window\Desktop\BH_266.psd
[2012/08/01 20:41:47 | 004,784,596 | ---- | M] () -- C:\Users\2nd_Window\Desktop\BH_275a.psd
[2012/07/31 20:05:04 | 019,884,489 | ---- | M] () -- C:\Users\2nd_Window\Documents\Waterdown.ma
[2012/07/31 19:47:11 | 001,704,389 | ---- | M] () -- C:\Users\2nd_Window\Documents\human.ma
[2012/07/28 15:27:40 | 000,000,759 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Icy Tower.lnk
[2012/07/24 22:11:24 | 000,002,091 | ---- | M] () -- C:\Users\2nd_Window\Desktop\Aerial Fire.lnk
[2012/07/23 23:37:21 | 001,449,684 | ---- | M] () -- C:\Users\2nd_Window\Documents\face3.psd

========== Files Created - No Company Name ==========

[2012/08/22 02:10:47 | 001,001,224 | ---- | C] () -- C:\Users\2nd_Window\Documents\face.psd
[2012/08/21 07:51:50 | 002,193,345 | ---- | C] () -- C:\Users\2nd_Window\Desktop\tdsskiller.zip
[2012/08/20 00:38:47 | 000,001,864 | ---- | C] () -- C:\Users\2nd_Window\Desktop\IrfanView Thumbnails.lnk
[2012/08/19 13:05:24 | 000,002,091 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012/08/19 12:52:26 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/08/19 12:52:26 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/08/19 12:52:26 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/08/19 12:52:26 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/08/19 12:52:26 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/08/19 11:52:17 | 089,340,632 | ---- | C] () -- C:\Users\2nd_Window\Desktop\avast_free_antivirus_setup.exe
[2012/08/19 11:18:21 | 000,001,352 | ---- | C] () -- C:\Users\2nd_Window\Documents\AutoHotkey.ahk
[2012/08/18 15:56:05 | 000,001,210 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Any Video Converter.lnk
[2012/08/18 15:52:13 | 000,001,258 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Any Video Converter Ultimate.lnk
[2012/08/18 00:45:31 | 000,000,512 | ---- | C] () -- C:\Users\2nd_Window\Desktop\MBR.dat
[2012/08/16 22:08:17 | 000,469,359 | ---- | C] () -- C:\Users\2nd_Window\Documents\Statement.pdf
[2012/08/16 20:01:52 | 000,302,592 | ---- | C] () -- C:\Users\2nd_Window\Desktop\82hdu87u.exe
[2012/08/15 19:47:58 | 000,001,083 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/08/13 23:08:16 | 000,116,857 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Receipt.pdf
[2012/08/13 23:07:29 | 000,121,071 | ---- | C] () -- C:\Users\2nd_Window\Desktop\HP Warranty - Warranty information.pdf
[2012/08/13 22:41:27 | 000,328,764 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Correspondence_2011792.pdf
[2012/08/07 07:43:32 | 000,112,764 | ---- | C] () -- C:\Users\2nd_Window\Documents\Scan008.pdf
[2012/08/06 11:47:29 | 011,581,288 | ---- | C] () -- C:\Users\2nd_Window\Desktop\ComicRackSetup09155.exe
[2012/08/05 16:45:59 | 2587,789,312 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Ã౸ ³²ÀÚ 8° ´ëÇѹα¹ vs ¿µ±¹ ÈĹÝ, ¿¬Àå, ½ÂºÎÂ÷±â.120804.HDTV.x264.720p-HEAD.avi
[2012/08/05 11:36:31 | 1336,045,568 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Ã౸ ³²ÀÚ 8° ´ëÇѹα¹ vs ¿µ±¹ Àü¹Ý.120804.HDTV.x264.720p-HEAD.avi
[2012/08/01 20:26:10 | 003,591,925 | ---- | C] () -- C:\Users\2nd_Window\Desktop\BH_266.psd
[2012/08/01 20:25:56 | 004,784,596 | ---- | C] () -- C:\Users\2nd_Window\Desktop\BH_275a.psd
[2012/07/31 19:47:10 | 001,704,389 | ---- | C] () -- C:\Users\2nd_Window\Documents\human.ma
[2012/07/31 19:46:26 | 019,884,489 | ---- | C] () -- C:\Users\2nd_Window\Documents\Waterdown.ma
[2012/07/28 15:27:40 | 000,000,759 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Icy Tower.lnk
[2012/07/24 22:11:24 | 000,002,091 | ---- | C] () -- C:\Users\2nd_Window\Desktop\Aerial Fire.lnk
[2012/07/13 06:55:21 | 000,204,952 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2012/05/07 20:31:57 | 000,015,512 | ---- | C] () -- C:\Windows\System32\IRTrace.dll
[2012/05/07 20:25:12 | 000,000,024 | ---- | C] () -- C:\Windows\System32\scskConfigEH.ini
[2012/04/18 09:41:55 | 002,515,790 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin
[2012/03/05 14:44:21 | 011,296,768 | ---- | C] () -- C:\Users\2nd_Window\AppData\Roaming\Sandra.mdb
[2012/02/29 13:26:56 | 000,416,064 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2012/02/10 13:10:49 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2012/02/10 13:10:49 | 000,000,008 | RHS- | C] () -- C:\ProgramData\53958F55BF.sys
[2012/01/25 01:56:22 | 000,000,218 | ---- | C] () -- C:\Users\2nd_Window\.recently-used.xbel
[2012/01/18 20:18:20 | 000,493,432 | ---- | C] () -- C:\Windows\ssndii.exe
[2012/01/18 20:17:48 | 000,024,064 | ---- | C] () -- C:\Windows\System32\ssp8ml3.dll
[2012/01/16 22:00:48 | 000,026,624 | ---- | C] () -- C:\Windows\System32\ssb6mlm.dll
[2011/11/02 20:29:20 | 000,000,000 | ---- | C] () -- C:\Windows\System32\cd.dat
[2011/09/26 13:30:56 | 000,024,576 | ---- | C] () -- C:\Windows\INIUpdateAdmin.dll
[2011/07/20 23:46:40 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011/07/20 23:46:40 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011/07/20 23:46:36 | 000,644,608 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011/07/20 23:46:36 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011/07/20 23:46:36 | 000,073,216 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011/07/05 17:49:38 | 000,000,686 | ---- | C] () -- C:\Windows\cedt.INI
[2011/06/20 00:00:49 | 000,072,272 | ---- | C] () -- C:\Windows\System32\cosa.dll
[2011/05/19 12:01:24 | 001,266,880 | ---- | C] () -- C:\Windows\System32\ISPPopUpDlg.exe
[2011/03/29 23:52:58 | 000,000,398 | ---- | C] () -- C:\Windows\miniMBC.INI
[2011/03/07 23:41:06 | 000,000,405 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2011/03/07 23:40:25 | 000,017,920 | ---- | C] () -- C:\Windows\System32\Implode.dll
[2011/02/22 16:24:26 | 000,339,968 | ---- | C] () -- C:\Windows\System32\KvpUpCom.dll
[2011/02/15 23:54:42 | 002,463,976 | ---- | C] () -- C:\Windows\System32\NPSWF32.dll
[2011/01/18 12:56:27 | 000,064,000 | ---- | C] () -- C:\Windows\System32\esfw52.bin

========== LOP Check ==========

[2012/08/19 18:23:45 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\.minecraft
[2011/09/27 21:18:57 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\AhnLab
[2012/08/18 15:56:44 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\AnvSoft
[2012/02/10 13:00:37 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Autodesk
[2012/02/10 17:14:43 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/03/10 17:33:53 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\ClientKeeper
[2011/07/02 17:40:45 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Clunet
[2011/10/30 00:54:29 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\cYo
[2011/04/30 17:34:51 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\DAEMON Tools Lite
[2012/08/22 08:23:52 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Dropbox
[2011/01/18 13:01:19 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\EPSON
[2012/08/13 22:47:55 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\FileZilla
[2012/01/25 01:56:03 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\gtk-2.0
[2011/03/29 23:48:05 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\iMBC
[2012/08/20 00:38:47 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\IrfanView
[2012/02/05 14:48:43 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Leadertech
[2011/04/28 22:31:26 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Lingoes
[2012/01/28 21:02:27 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Media Finder
[2011/03/08 17:57:19 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\OpenOffice.org
[2012/02/02 12:23:04 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Samsung
[2012/01/30 16:02:23 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Softarium.com
[2012/02/10 02:07:46 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012/05/29 21:59:10 | 000,000,000 | ---D | M] -- C:\Users\2nd_Window\AppData\Roaming\Toon Boom Animation
[2012/07/16 20:00:26 | 000,032,668 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:BC359956

< End of report >
 
OTL Extras logfile created on: 22/08/2012 12:10:20 PM - Run 1
OTL by OldTimer - Version 3.2.58.1 Folder = C:\Users\2nd_Window\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.00 Gb Total Physical Memory | 2.14 Gb Available Physical Memory | 71.39% Memory free
6.00 Gb Paging File | 5.01 Gb Available in Paging File | 83.61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 488.28 Gb Total Space | 62.60 Gb Free Space | 12.82% Space Free | Partition Type: NTFS
Drive D: | 57.27 Gb Total Space | 24.10 Gb Free Space | 42.07% Space Free | Partition Type: NTFS
Drive E: | 335.35 Gb Total Space | 281.47 Gb Free Space | 83.93% Space Free | Partition Type: NTFS
Drive F: | 443.22 Gb Total Space | 150.45 Gb Free Space | 33.95% Space Free | Partition Type: NTFS
Drive G: | 4.33 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: 2ND_WINDOW-PC | User Name: 2nd_Window | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_USERS\S-1-5-21-206085528-472393337-1987398177-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{5B51BB5F-4E7C-4275-A653-E98534E9C1D2}" = Corel Painter 11
"{0224CACC-994D-45F8-B973-D65056EA9C2F}" = Adobe XMP DVA Panels CS3
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.0 RC3
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0E56FBDB-28F6-49E5-829F-E42FE3616743}" = mini
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{1AED4ABF-0852-4B3F-9F87-00CF88F25CE0}" = IconHandler 32 bit
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{28F8F8F0-C278-454A-9507-46B344AAD188}" = Corel Painter 11
"{2BD5C305-1B27-4D41-B690-7A61172D2FEB}" = Macromedia Flash 8
"{2C294A0B-DF22-4023-B168-8C7645B10019}" = Adobe Setup
"{2F05CEAF-A575-41E5-B3D0-FE4CEF83CA0A}" = Maya 2009
"{310AFA6B-094D-45DA-8389-4712074B6A22}" = Maya 2010
"{35BA2BAF-FFD4-4B12-B42B-AA8CC902CD23}" = Autodesk DirectConnect 2009
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{485ACF57-F364-440A-8496-E1E81C8FA1AA}" = Adobe Premiere Pro CS3 Third Party Content
"{4B215C29-1A3E-4736-92AA-10C83FA56EB9}" = Adobe After Effects CS3 Presets
"{4BF62C05-3943-4ECB-B233-6E37E3FB5BCF}" = ZBrush 4
"{50F102CA-4BE2-41A9-9810-5BB05EB91B9A}" = Adobe Premiere Pro CS3 Functional Content
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}" = Macromedia Extension Manager
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{58DCEEE5-532E-44F4-B1D7-A146EF9E9FDA}" = Adobe Premiere Pro CS3
"{5B51BB5F-4E7C-4275-A653-E98534E9C1D2}" = Corel Painter 11 - ICA
"{5E4ADF05-F045-4F82-9E98-422B2FCB944C}" = StudioTax 2011
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7288831E-1418-40E5-A70A-A55D0AA6657B}" = Simply Accounting by Sage 2006
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7EC69F77-5494-4E1F-8BC6-956DAA5A91F2}" = Corel Painter 11 - IPM
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{840BF2FE-033D-437C-89D1-AAA206BA13B6}" = Langauge
"{845A8DB9-8802-4FD3-9FE3-938A6C46A2EC}" = Adobe Video Profiles
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8AF3FB06-BDA3-42A3-995C-308812D2F094}" = Adobe After Effects CS3
"{8B4AB829-DFD3-436D-B808-D9733D76C590}" = Macromedia Dreamweaver MX
"{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}" = Macromedia Flash 8 Video Encoder
"{8CE152BA-1D16-11E1-867D-984BE15F174E}" = Evernote v. 4.5.2
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97C4F970-C753-443F-B61C-525C739BBC3D}" = Maya 2009 Documentation (en_US)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-1048-8780-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Russian
"{AC76BA86-1048-8780-7760-000000000004}_952" = Adobe Acrobat 9.5.2 - CPSID_83708
"{AC76BA86-1048-8780-7760-000000000004}{AC76BA86-1048-8780-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Russian
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 296.10
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.7.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.12.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B369483E-0728-405C-8F8C-3427B263B01F}" = Content
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B7F653CF-1BE5-4F40-BA4A-E3BBC6869116}" = Æ÷Æ®¸®½º2 Forever
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{BB81360F-041C-4CF7-B15E-71380D154244}" = Adobe Setup
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2296}_is1" = SiSoftware Sandra Lite 2012.SP1
"{C7822DAD-D89C-4CC2-87F4-D28AA719905E}" = NetFolder
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFC9F871-7C40-40B6-BE4A-B98A5B309716}" = Adobe Flash Professional CS5
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D5A31AB1-345D-47C7-A87B-036A669F6DF1}" = Adobe XMP Panels CS3
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E417A85A-EA99-4307-B5FC-99A800AE361E}" = Toon Boom Harmony 9.2
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9
"{F0B27584-72DD-4CED-A329-57C7F91586C0}" = Autodesk SketchBookPro 2011
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"7-Zip" = 7-Zip 9.20
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_32fdd767b4383606e8168e834af5d90" = Adobe Premiere Pro CS3
"Adobe_b7dd24a87e82dcf8af8876fd727b7cf" = Adobe After Effects CS3
"Aerial Fire_is1" = Aerial Fire
"AhnLab Online Security" = AhnLab Online Security
"ALUpdate_is1" = 알툴즈 업데이트
"ALZip_is1" = 알집 8.52
"Any Video Converter Ultimate_is1" = Any Video Converter Ultimate 4.4.2
"Any Video Converter_is1" = Any Video Converter 3.4.2
"AutoHotkey" = AutoHotkey 1.0.48.05
"avast" = avast! Free Antivirus
"Bulk Rename Utility_is1" = Bulk Rename Utility 2.7.1.2
"CacaoEncoder" = CacaoEncoder 삭제
"CCleaner" = CCleaner
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"ComicRack" = ComicRack v0.9.155
"CoreAVC Professional Edition" = CoreAVC Professional Edition (remove only)
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.60
"Crimson Editor SVN286" = Crimson Editor SVN286
"DAEMON Tools Lite" = DAEMON Tools Lite
"Design-Lib.Com - Batch PSD to JPG 1.5" = Design-Lib.Com - Batch PSD to JPG 1.5
"DeskPins" = DeskPins (remove only)
"DtsFilter" = DTS+AC3 Filter
"EasyBCD" = EasyBCD 2.1
"EPSON Scanner" = EPSON Scan
"ESET Online Scanner" = ESET Online Scanner v3
"FileZilla Client" = FileZilla Client 3.3.5.1
"GOM Player" = GOM Player
"GomTV Launcher Plugin" = GOMTV Plug-in
"Google Chrome" = Google Chrome
"HaaliMkx" = Haali Media Splitter
"Icy Tower v1.5.1_is1" = Icy Tower v1.5.1
"InstallShield_{4BF62C05-3943-4ECB-B233-6E37E3FB5BCF}" = ZBrush 4
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 7.2.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.62.0.1300
"MediaCoder" = MediaCoder 0.6.2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 10.0.6 (x86 en-US)" = Mozilla Firefox 10.0.6 (x86 en-US)
"MPEG2 Codec(libmpeg2/mad)" = MPEG2 Codec(libmpeg2/mad)
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PS3 Media Server" = PS3 Media Server
"RealPlayer 15.0" = RealPlayer
"Samsung ML-1865W Series" = Samsung ML-1865W Series
"SDM WebHard" = SDM WebHard Program
"Secunia PSI" = Secunia PSI (2.0.0.4003)
"SoftcampSCSK" = SoftCamp Secure KeyStroke 4.0
"sp6" = Logitech SetPoint 6.32
"SpeedFan" = SpeedFan (remove only)
"StuffPlug3" = StuffPlug 3
"UnINISafeWeb7" = INISafeWeb 7.0 (SFilter v1.0)
"USADISK" = 미주디스크 프로그램 삭제
"VeraPort" = VeraPort (보안모듈관리 프로그램)
"VLC media player" = VLC media player 1.1.9
"Wacom Tablet Driver" = Wacom Tablet
"Wacom WebTabletPlugin for IE" = WebTablet IE Plugin
"Wacom WebTabletPlugin for Internet Explorer and Netscape" = WebTablet FB Plugin
"Wacom WebTabletPlugin for Netscape" = WebTablet Netscape Plugin
"WinLiveSuite" = Windows Live Essentials
"XecureCK" = TouchEn Key with E2E for 32bit
"XecureWeb Control" = XecureWeb Control

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-206085528-472393337-1987398177-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"fec6edc179e1ea07" = OhCASTra

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 20/08/2012 3:29:27 PM | Computer Name = 2nd_Window-PC | Source = Winlogon | ID = 4103
Description = Windows license activation failed. Error 0x80070005.

Error - 20/08/2012 3:29:30 PM | Computer Name = 2nd_Window-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Wacom_Tablet.exe, version: 6.2.0.5, time
stamp: 0x4f1a0d84 Faulting module name: Wacom_Tablet.exe, version: 6.2.0.5, time
stamp: 0x4f1a0d84 Exception code: 0xc0000005 Fault offset: 0x0027ec8a Faulting process
id: 0x85c Faulting application start time: 0x01cd7f0a1cc83600 Faulting application
path: C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe Faulting module path: C:\Program
Files\Tablet\Wacom\Wacom_Tablet.exe Report Id: 5c1c75a0-eafd-11e1-818a-485b3910853a

Error - 20/08/2012 9:43:20 PM | Computer Name = 2nd_Window-PC | Source = Winlogon | ID = 4103
Description = Windows license activation failed. Error 0x80070005.

Error - 21/08/2012 4:56:51 AM | Computer Name = 2nd_Window-PC | Source = Winlogon | ID = 4103
Description = Windows license activation failed. Error 0x80070005.

Error - 21/08/2012 7:13:50 AM | Computer Name = 2nd_Window-PC | Source = Winlogon | ID = 4103
Description = Windows license activation failed. Error 0x80070005.

Error - 21/08/2012 7:49:38 AM | Computer Name = 2nd_Window-PC | Source = Winlogon | ID = 4103
Description = Windows license activation failed. Error 0x80070005.

Error - 21/08/2012 7:49:39 AM | Computer Name = 2nd_Window-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Wacom_Tablet.exe, version: 6.2.0.5, time
stamp: 0x4f1a0d84 Faulting module name: Wacom_Tablet.exe, version: 6.2.0.5, time
stamp: 0x4f1a0d84 Exception code: 0xc0000005 Fault offset: 0x00315341 Faulting process
id: 0x850 Faulting application start time: 0x01cd7f9306ee8760 Faulting application
path: C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe Faulting module path: C:\Program
Files\Tablet\Wacom\Wacom_Tablet.exe Report Id: 49460480-eb86-11e1-9fc2-485b3910853a

Error - 22/08/2012 6:13:20 AM | Computer Name = 2nd_Window-PC | Source = Winlogon | ID = 4103
Description = Windows license activation failed. Error 0x80070005.

Error - 22/08/2012 6:13:21 AM | Computer Name = 2nd_Window-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Wacom_Tablet.exe, version: 6.2.0.5, time
stamp: 0x4f1a0d84 Faulting module name: Wacom_Tablet.exe, version: 6.2.0.5, time
stamp: 0x4f1a0d84 Exception code: 0xc0000005 Fault offset: 0x00315341 Faulting process
id: 0x850 Faulting application start time: 0x01cd804ebfca1220 Faulting application
path: C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe Faulting module path: C:\Program
Files\Tablet\Wacom\Wacom_Tablet.exe Report Id: ff6cdf20-ec41-11e1-8733-485b3910853a

Error - 22/08/2012 8:23:29 AM | Computer Name = 2nd_Window-PC | Source = Winlogon | ID = 4103
Description = Windows license activation failed. Error 0x80070005.

[ Media Center Events ]
Error - 07/06/2012 10:12:32 PM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 10:12:32 PM - Failed to retrieve Directory (Error: The underlying
connection was closed: An unexpected error occurred on a receive.)

Error - 21/06/2012 7:17:20 AM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 7:17:20 AM - Error connecting to the internet. 7:17:20 AM - Unable
to contact server..

Error - 21/06/2012 7:18:01 AM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 7:17:50 AM - Error connecting to the internet. 7:17:50 AM - Unable
to contact server..

Error - 21/06/2012 10:59:10 AM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 10:59:10 AM - Error connecting to the internet. 10:59:10 AM - Unable
to contact server..

Error - 21/06/2012 10:59:26 AM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 10:59:16 AM - Error connecting to the internet. 10:59:16 AM - Unable
to contact server..

Error - 21/06/2012 1:04:20 PM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 1:04:20 PM - Error connecting to the internet. 1:04:20 PM - Unable
to contact server..

Error - 21/06/2012 1:04:47 PM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 1:04:25 PM - Error connecting to the internet. 1:04:25 PM - Unable
to contact server..

Error - 06/07/2012 11:08:12 AM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 11:08:02 AM - Error connecting to the internet. 11:08:02 AM - Unable
to contact server..

Error - 06/07/2012 2:37:10 PM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 2:37:01 PM - Error connecting to the internet. 2:37:01 PM - Unable
to contact server..

Error - 18/07/2012 8:57:54 AM | Computer Name = 2nd_Window-PC | Source = MCUpdate | ID = 0
Description = 8:57:40 AM - Error connecting to the internet. 8:57:41 AM - Unable
to contact server..

[ System Events ]
Error - 22/08/2012 6:13:21 AM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7023
Description = The Computer Browser service terminated with the following error:
%%1060

Error - 22/08/2012 6:13:44 AM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7001
Description = The HomeGroup Provider service depends on the Function Discovery Resource
Publication service which failed to start because of the following error: %%-2147024891

Error - 22/08/2012 6:13:44 AM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891

Error - 22/08/2012 6:16:08 AM | Computer Name = 2nd_Window-PC | Source = DCOM | ID = 10001
Description =

Error - 22/08/2012 8:23:28 AM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891

Error - 22/08/2012 8:23:33 AM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7023
Description = The Computer Browser service terminated with the following error:
%%1060

Error - 22/08/2012 8:23:44 AM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891

Error - 22/08/2012 8:23:44 AM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7001
Description = The HomeGroup Provider service depends on the Function Discovery Resource
Publication service which failed to start because of the following error: %%-2147024891

Error - 22/08/2012 12:06:38 PM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891

Error - 22/08/2012 12:06:38 PM | Computer Name = 2nd_Window-PC | Source = Service Control Manager | ID = 7001
Description = The HomeGroup Provider service depends on the Function Discovery Resource
Publication service which failed to start because of the following error: %%-2147024891


< End of report >
 
Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

    Code: 
    :OTL
[2011/04/07 19:56:54 | 000,114,688 | -HS- | C] (Microsoft Corporation) -- C:\Users\2nd_Window\AppData\Local\ixu.exe
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:BC359956

:Commands
[purity]
[emptytemp]
[emptyjava]
[emptyflash]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • You will get a log that shows the results of the fix. Please post it.

NOTE. If for any reason OTL stalls (most likely at "killing processes..." step) run the fix from safe mode.

========================================

Last scans...

1. Download Security Check from HERE, and save it to your Desktop.
  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

    NOTE SecurityCheck may produce some false warning(s), so leave the results reading to me.

2. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center
    • Windows Update
    • Windows Defender
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.


3. Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe
  • Double click on TFC.exe to run the program.
  • Click on Start button to begin cleaning process.
  • TFC will close all running programs, and it may ask you to restart computer.


4. Please run a free online scan with the ESET Online Scanner

  • Disable your antivirus program
  • Tick the box next to YES, I accept the Terms of Use
  • Click Start
  • Accept any security warnings from your browser.
  • Check Scan archives
  • Click Start
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click on List of found threats
  • Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • NOTE. If Eset won't find any threats, it won't produce any log.
 
All processes killed
========== OTL ==========
C:\Users\2nd_Window\AppData\Local\ixu.exe moved successfully.
ADS C:\ProgramData\Temp:BC359956 deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: 2nd_Window
->Temp folder emptied: 1917214802 bytes
->Temporary Internet Files folder emptied: 363742283 bytes
->Java cache emptied: 395878 bytes
->FireFox cache emptied: 251343551 bytes
->Google Chrome cache emptied: 15060774 bytes
->Flash cache emptied: 164505 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56468 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: UpdatusUser.2nd_Window-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56468 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 26925924 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 223261 bytes

Total Files Cleaned = 2,456.00 mb


[EMPTYJAVA]

User: 2nd_Window
->Java cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Public

User: UpdatusUser

User: UpdatusUser.2nd_Window-PC

Total Java Files Cleaned = 0.00 mb


[EMPTYFLASH]

User: 2nd_Window
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Flash cache emptied: 0 bytes

User: UpdatusUser.2nd_Window-PC
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.58.1 log created on 08252012_133906

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
 
Results of screen317's Security Check version 0.99.46
Windows 7 x86 (UAC is disabled!)
Out of date service pack!!
Internet Explorer 8 Out of date!
``````````````Antivirus/Firewall Check:``````````````
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Secunia PSI (2.0.0.4003)
Malwarebytes Anti-Malware version 1.62.0.1300
CCleaner
JavaFX 2.1.1
Java(TM) 6 Update 31
Java(TM) 7 Update 5
Java version out of Date!
Adobe Flash Player 11.1.102.63
Adobe Reader X 10.1.3 Adobe Reader out of Date!
Mozilla Firefox 10.0.6 Firefox out of Date!
Google Chrome 21.0.1180.79
Google Chrome 21.0.1180.83
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4%
````````````````````End of Log``````````````````````
 
Farbar Service Scanner Version: 06-08-2012
Ran by 2nd_Window (administrator) on 25-08-2012 at 13:53:31
Running from "C:\Users\2nd_Window\Desktop"
Microsoft Windows 7 Ultimate (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
mpsdrv Service is not running. Checking service configuration:
The start type of mpsdrv service is OK.
The ImagePath of mpsdrv service is OK.

MpsSvc Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist.


Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============
BITS Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to retrieve start type of BITS. The value does not exist.
The ImagePath of BITS service is OK.
Checking ServiceDll: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============
Checking Start type of SharedAccess: ATTENTION!=====> Unable to retrieve start type of SharedAccess. The value does not exist.
Checking ImagePath of SharedAccess: ATTENTION!=====> Unable to retrieve ImagePath of SharedAccess. The value does not exist.
Checking ServiceDll of SharedAccess: ATTENTION!=====> Unable to open SharedAccess registry key. The service key does not exist.


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2012-03-09 00:32] - [2011-09-29 11:43] - 1285488 ____A (Microsoft Corporation) 56C198AC82EFA622DD93E9E43575F79C

C:\Windows\system32\dnsrslvr.dll
[2012-03-09 00:32] - [2011-03-03 01:29] - 0132608 ____A (Microsoft Corporation) B15BE77A2BACF9C3177D27518AFE26A9

C:\Windows\system32\mpssvc.dll
[2009-07-13 19:53] - [2009-07-13 21:15] - 0565760 ____A (Microsoft Corporation) 5CD996CECF45CBC3E8D109C86B82D69E

C:\Windows\system32\bfe.dll
[2009-07-13 19:54] - [2009-07-13 21:14] - 0493568 ____A (Microsoft Corporation) 85AC71C045CEB054ED48A7841AAE0C11

C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll
[2009-07-13 19:23] - [2009-07-13 21:16] - 0125952 ____A (Microsoft Corporation) 5FD90ABDBFAEE85986802622CBB03446

C:\Windows\system32\vssvc.exe
[2009-07-13 19:24] - [2009-07-13 21:14] - 1025536 ____A (Microsoft Corporation) 7EA2BCD94D9CFAF4C556F5CC94532A6C

C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll
[2009-07-13 19:30] - [2009-07-13 21:16] - 0589312 ____A (Microsoft Corporation) 53F476476F55A27F580661BDE09C4EC4

C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****
 
C:\FRST\Quarantine\5081d48-3d4f9e1b Win32/TrojanDownloader.Vespula.AY trojan cleaned by deleting - quarantined
C:\FRST\Quarantine\prolts.dll a variant of Win32/Medfos.CO trojan cleaned by deleting - quarantined
C:\FRST\Quarantine\services.exe Win32/Sirefef.FC trojan deleted - quarantined
C:\FRST\Quarantine\~!#E0DE.tmp a variant of Win32/Medfos.CO trojan cleaned by deleting - quarantined
C:\FRST\Quarantine\{73783ce1-e3e6-81c6-7c24-5397954904e4}\U\00000001.@ Win32/Conedex.I trojan cleaned by deleting - quarantined
C:\FRST\Quarantine\{73783ce1-e3e6-81c6-7c24-5397954904e4}\{73783ce1-e3e6-81c6-7c24-5397954904e4}\n Win32/Sirefef.EV trojan cleaned by deleting - quarantined
 
Update Adobe Reader

You can download it from https://www.techspot.com/downloads/2083-adobe-reader-dc.html
After installing the latest Adobe Reader, uninstall all previous versions (if present).
Note. If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition.

Alternatively, you can uninstall Adobe Reader (33.5 MB), download and install Foxit PDF Reader(3.5MB) from HERE.
It's a much smaller file to download and uses a lot less resources than Adobe Reader.
Note: When installing FoxitReader, make sure to UN-check any pre-checked toolbar, or any other garbage.

==================================

1. Update your Java version here: http://www.java.com/en/download/installed.jsp

Note 1: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

Note 2: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. If you don't want to run another extra service, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and restart your computer.

2. Now, we need to remove old Java version and its remnants...

Download JavaRa to your desktop and unzip it.
  • Run JavaRa.exe (Vista users! Right click on JavaRa.exe, click Run As Administrator), pick the language of your choice and click Select. Then click Remove Older Versions.
  • Accept any prompts.
  • Do NOT post JavaRa log.

===================================

We have some registry keys missing...

Download Windows Repair (all in one) from this site

Install the program then run it.

Go to Step 2 and allow it to run CheckDisk by clicking on Do It button:

p22001645.gif




Once that is done then go to Step 3 and allow it to run System File Check by clicking on Do It button:

p22001646.gif



Go to Step 4 and under "System Restore" click on Create button:

p22001644.gif



Go to Start Repairs tab and click Start button.

p22001166.gif



Please ensure that ONLY items seen in the image below are ticked as indicated (they're all checked by default):

p22001647.gif


Click on box next to the Restart System when Finished. Then click on Start.

Post new FSS log.
 
Before I go ahead and follow the steps... what's the issue with the Adobe Reader?
I actually need professional version.. and it is of course not the latest version.
 
If your Adobe Reader is a part of some other Adobe product you can leave it alone.
 
Alrighty. Finally done..

Farbar Service Scanner Version: 06-08-2012
Ran by 2nd_Window (administrator) on 30-08-2012 at 22:20:45
Running from "C:\Users\2nd_Window\Desktop"
Microsoft Windows 7 Ultimate (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============
BITS Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to retrieve start type of BITS. The value does not exist.
The ImagePath of BITS service is OK.
Checking ServiceDll: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2012-03-09 00:32] - [2011-09-29 11:43] - 1285488 ____A (Microsoft Corporation) 56C198AC82EFA622DD93E9E43575F79C

C:\Windows\system32\dnsrslvr.dll
[2012-03-09 00:32] - [2011-03-03 01:29] - 0132608 ____A (Microsoft Corporation) B15BE77A2BACF9C3177D27518AFE26A9

C:\Windows\system32\mpssvc.dll
[2009-07-13 19:53] - [2009-07-13 21:15] - 0565760 ____A (Microsoft Corporation) 5CD996CECF45CBC3E8D109C86B82D69E

C:\Windows\system32\bfe.dll
[2009-07-13 19:54] - [2009-07-13 21:14] - 0493568 ____A (Microsoft Corporation) 85AC71C045CEB054ED48A7841AAE0C11

C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll
[2009-07-13 19:23] - [2009-07-13 21:16] - 0125952 ____A (Microsoft Corporation) 5FD90ABDBFAEE85986802622CBB03446

C:\Windows\system32\vssvc.exe
[2009-07-13 19:24] - [2009-07-13 21:14] - 1025536 ____A (Microsoft Corporation) 7EA2BCD94D9CFAF4C556F5CC94532A6C

C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll
[2009-07-13 19:30] - [2009-07-13 21:16] - 0589312 ____A (Microsoft Corporation) 53F476476F55A27F580661BDE09C4EC4

C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****
 

Similar threads

C
Solved Malware \ProductData + possibly more, on two devices
Replies
4
Views
8K
Broni
Broni
B
Solved MachineLearning/Anomalous.94%
2
Replies
29
Views
12K
Broni
Broni
DeadpixeI
Solved PUP.Optional.ASK and PUP.Optional.Delta won't go away.
2
Replies
31
Views
8K
Broni
Broni

Latest posts

Back