win7OS, FireFox 15.0.1 is really running oddly, stopping, waiting, youtube too

Please download aswMBR.exe ( 511KB ) to your desktop.

Double click the aswMBR.exe to run it



Click the "Scan" button to start scan

Note: Do not take action against any **Rootkit** entries until I have reviewed the log. Often there are false positives



On completion of the scan click save log, save it to your desktop and post in your next reply
*********************************************************
Please download Rooter and Save it to your desktop.

• Double click it to start the tool.Vista and Windows7 run as administrator.
  
• Click Scan.
  
• Eventually, a Notepad file containing the report will open, also found at C:\Rooter.txt. Post that log in your next reply.
  

Superdave,

it asked me to go get "avast", or something like that, and I said no. I ran the scan and the log is below. Thank you for your time on this issue.

888888888888888888888888888 aswMBR Log 8888888888888888888

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-29 15:49:19
-----------------------------
15:49:19.297 OS Version: Windows x64 6.1.7600
15:49:19.297 Number of processors: 8 586 0x1E05
15:49:19.297 ComputerName: ZAPLAP2 UserName: Scott
15:49:20.764 Initialize success
15:50:02.437 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
15:50:02.437 Disk 0 Vendor: ST964032 0002 Size: 610480MB BusType: 3
15:50:02.457 Disk 0 MBR read successfully
15:50:02.457 Disk 0 MBR scan
15:50:02.457 Disk 0 Windows 7 default MBR code
15:50:02.467 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 22003 MB offset 63
15:50:02.477 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 152616 MB offset 45062325
15:50:02.487 Disk 0 Partition - 00 0F Extended LBA 435858 MB offset 357623808
15:50:02.507 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 435857 MB offset 357625856
15:50:02.547 Disk 0 scanning C:\Windows\system32\drivers
15:50:11.461 Service scanning
15:50:31.567 Modules scanning
15:50:31.567 Disk 0 trace - called modules:
15:50:31.629 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll
15:50:31.976 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80066d4060]
15:50:31.986 3 CLASSPNP.SYS[fffff88000dcb43f] -> nt!IofCallDriver -> [0xfffffa80063d5520]
15:50:31.986 5 ACPI.sys[fffff88000f2e781] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80063ed050]
15:50:31.996 Scan finished successfully
15:51:40.200 Disk 0 MBR has been saved successfully to "C:\Users\Scott\Desktop\Virus Tools\MBR.dat"
15:51:40.200 The log file has been saved successfully to "C:\Users\Scott\Desktop\Virus Tools\aswMBR_102912_zap.txt"

I would like to see to Rooter log.

How would I do that?

Scott

Go back three posts and you'll see the instructions for Rooter.

Sorry, didn't see that at the bottom.

8888888888888888888888888 rooter log 888888888888888888888

IRooter.exe (v1.0.2) by Eric_71
.
SeDebugPrivilege granted successfully ...
.
Windows 7 Home Edition (6.1.7600)
[32_bits] - Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
.
[wscsvc] (Security Center) RUNNING (state:4)
[MpsSvc] RUNNING (state:4)
Windows Firewall -> Enabled
Windows Defender -> Enabled
User Account Control (UAC) -> Disabled !
.
Internet Explorer 8.0.7600.16385
Mozilla Firefox 16.0.1 (en-US)
.
C:\ [Fixed-NTFS] .. ( Total:149 Go - Free:31 Go )
D:\ [Fixed-NTFS] .. ( Total:425 Go - Free:358 Go )
E:\ [CD_Rom]
G:\ [Removable]
H:\ [Removable]
I:\ [Removable]
J:\ [Removable]
Y:\ [Network] .. ( Total:229 Go - Free:3 Go )
Z:\ [Network] .. ( Total:227 Go - Free:37 Go )
.
Scan : 13:14.01
Path : C:\Users\Scott\Desktop\Rooter.exe
User : Scott ( Administrator -> YES )
.
----------------------\\ Processes
.
Locked [System Process] (0)
Locked System (4)
______ ?????????? (364)
______ ?????????? (516)
______ ?????????? (592)
______ ?????????? (616)
______ ?????????? (664)
______ ?????????? (672)
______ ?????????? (680)
______ ?????????? (776)
______ ?????????? (844)
______ ?????????? (924)
______ ?????????? (1008)
______ ?????????? (376)
______ ?????????? (536)
______ ?????????? (1048)
______ ?????????? (1188)
______ ?????????? (1388)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (1428)
______ C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (1484)
______ ?????????? (1564)
______ ?????????? (1616)
______ C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (604)
______ C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (1168)
______ C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (412)
______ ?????????? (2108)
______ ?????????? (2132)
______ ?????????? (2172)
______ ?????????? (2236)
______ C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (2316)
______ C:\Program Files (x86)\Norton AntiVirus\Engine\19.6.2.10\ccSvcHst.exe (2408)
______ C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (2516)
______ ?????????? (2564)
______ ?????????? (2628)
______ C:\ExpressGateUtil\VAWinService.exe (2680)
______ ?????????? (2904)
______ ?????????? (2176)
______ ?????????? (3120)
______ ?????????? (1692)
______ ?????????? (1660)
______ ?????????? (3280)
______ C:\Program Files (x86)\Norton AntiVirus\Engine\19.6.2.10\ccSvcHst.exe (3340)
______ ?????????? (3524)
______ ?????????? (3532)
______ ?????????? (3544)
______ ?????????? (3712)
______ C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (3732)
______ ?????????? (3764)
______ ?????????? (3948)
______ ?????????? (916)
______ C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (3968)
______ C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (3996)
______ ?????????? (2552)
______ C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe (4020)
______ C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (1364)
______ C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe (3212)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (3728)
______ C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe (4024)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (3496)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (3296)
______ C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (764)
______ ?????????? (1412)
______ C:\ExpressGateUtil\VAWinAgent.exe (520)
______ C:\Program Files (x86)\iTunes\iTunesHelper.exe (1456)
______ C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4572)
______ ?????????? (5060)
______ C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe (4288)
______ C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (5016)
______ C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (5056)
______ ?????????? (5080)
______ ?????????? (4356)
______ C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (5116)
______ C:\Program Files (x86)\Mozilla Firefox\firefox.exe (2732)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (4220)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (4216)
______ ?????????? (2152)
______ C:\Windows\AsScrPro.exe (4176)
______ C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (4248)
______ C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (4408)
______ ?????????? (1636)
______ ?????????? (4324)
______ C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe (4516)
______ ?????????? (4312)
______ ?????????? (3216)
______ C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (5632)
______ C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (160)
______ ?????????? (5804)
______ ?????????? (4488)
______ C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (7476)
______ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe (6340)
______ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe (7440)
______ ?????????? (2984)
______ C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE (8076)
______ C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE (8508)
______ C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (14308)
______ C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (12764)
______ C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (3068)
______ ?????????? (17196)
______ ?????????? (11804)
______ ?????????? (6124)
______ C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe (17548)
______ C:\Cadence\LicenseManager\cdslmd.exe (17968)
______ C:\Program Files (x86)\asus\VirtualCamera\VirCamWS.exe (18532)
Locked audiodg.exe (15972)
______ ?????????? (17220)
______ ?????????? (16944)
______ ?????????? (18600)
______ C:\Windows\sysWow64\SearchProtocolHost.exe (18484)
______ C:\Users\Scott\Desktop\Rooter.exe (18744)
.
----------------------\\ Device\Harddisk0\
.
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 (Start_Offset:32256 | Length:23071878144)
\Device\Harddisk0\Partition2 --[ MBR ]-- (Start_Offset:23071910400 | Length:160030499328)
\Device\Harddisk0\Partition0 (Start_Offset:183103389696 | Length:457030238208)
\Device\Harddisk0\Partition3 (Start_Offset:183104438272 | Length:457029189632)
.
----------------------\\ Scheduled Tasks
.
C:\Windows\Tasks\Adobe Flash Player Updater.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\SA.DAT
C:\Windows\Tasks\SCHEDLGU.TXT
.
----------------------\\ Registry
.
.
----------------------\\ Files & Folders
.
----------------------\\ Scan completed at 13:14.18
.
C:\Rooter$\Rooter_1.txt - (30/10/2012 | 13:14.18)

I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.
•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

It found no threats...... seems like 31 files might be a bit of a small scan

[/url]

How's your computer running now?

I ran again with archives checked this time..... it did find 2 threats, see below:


C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UXNZST5\index[2].htm JS/Iframe.CV trojan cleaned by deleting - quarantined


C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\2651718b-7cfbb6b2 multiple threats deleted - quarantined

is a reboot require to completely remove the quarantined files?

is a reboot require to completely remove the quarantined files?

No, it's not required for ESET. If there are no other issues, we can do some cleanup.

To set a new Restore Point.

Click Start button , click Control Panel, click System and Maintenance, and then clicking System. In the left pane, click System Protection. If you are prompted for an administrator password or confirmation, type the password or provide confirmation. To turn off System Protection for a hard disk, clear the check box next to the disk, and then click OK. Reboot to Normal Mode.
Click the Start button , click Control Panel, click System and Maintenance, and then click System.
In the left pane, click System Protection. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
To turn on System Protection for a hard disk, select the check box next to the disk, and then click OK.
This will give you a new, clean Restore Point.
************************************************************
To remove all of the tools we used and the files and folders they created do the following:
Double click OTL.exe.

• Click the CleanUp button.
  
• Select Yes when the "Begin cleanup Process?" prompt appears.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes.
  

Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
******************************************************
Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.



Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.



This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)

or

• Click Start.
  
• Click Control Panel.
  
• Click Administration Tools.
  
• Click Free up disk space.
  
• Click Ok.
  
• Click Delete Files.
  

******************************************************
Go to Microsoft Windows Update and get all critical updates.

----------

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!

Superdave,

It looks like my basic complaint is resolved, hard to tell on speed sometimes, so thank you. I have install and done everything above.

* Would you consider Norton a waste of time? Should I move over to AVG or something else?

* Could I use ESET OnlineScan on a Vista PC, and do you consider it a relatively good/safe tool that does not put crap on the PC for an online scan? I ask because this PC had a clean run of Norton, Spybot & Malware bytes.

Scott

Would you consider Norton a waste of time? Should I move over to AVG or something else?

If you've already paid for Norton you may as well use it until the subscription runs out. If you don't want to pay for an AV program your can try MicroSoft Security Essentials.

Could I use ESET OnlineScan on a Vista PC, and do you consider it a relatively good/safe tool that does not put crap on the PC for an online scan? I ask because this PC had a clean run of Norton, Spybot & Malware bytes.

Yes, ESET is good for all versions of Windows and doesn't put any crap on your computer.

Superdave, the same issue is back. I started to slow down a little after completed and then this week it really slowed down. I did take the opportunity to run ESET again and it came up clean. I did all of the suggests that you gave me at the end of this last go around. Have any ideas?

Ok. Start again by running adwCleaner and MBAM and post the logs.

# AdwCleaner v2.004 - Logfile created 11/16/2012 at 14:09:11
# Updated 06/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Scott - ZAPLAP2
# Boot Mode : Normal
# Running from : C:\Users\Scott\Desktop\Virus Tools\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Users\Scott\AppData\Roaming\Mozilla\Firefox\Profiles\hn6tdypz.default\extensions\staged

***** [Registry] *****

Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Registry is clean.

-\\ Mozilla Firefox v16.0.2 (en-US)

Profile name : default
File : C:\Users\Scott\AppData\Roaming\Mozilla\Firefox\Profiles\hn6tdypz.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Scott\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[S2].txt - [6306 octets] - [11/10/2012 13:12:14]
AdwCleaner[R1].txt - [1144 octets] - [16/11/2012 14:09:11]

########## EOF - C:\AdwCleaner[R1].txt - [1204 octets] ##########

Which exe was MBAM?

I have asawMBR, commy, malwarebytes still loaded, but I don't think it was one of those?

Never mind, Malwarebytes Anti Malware..... MBAM, got it, running it now.

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Database version: v2012.11.16.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Scott :: ZAPLAP2 [administrator]

11/16/2012 2:17:03 PM
mbam-log-2012-11-16 (14-17-03).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 698074
Time elapsed: 2 hour(s), 6 minute(s), 7 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Download a new version of CombFix and run the scan and post the log.

Superdave, I thought I sent you a message telling you I was going out of town for the week, but it was still here in the "preview" window when I returned, so I wanted to apologize for that oversight. I have run ComboFix again, see the next post.

ComboFix 12-11-26.01 - Scott 11/26/2012 8:08.5.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6069.1756 [GMT -7:00]
Running from: c:\users\Scott\Desktop\ComboFix.exe
AV: Norton AntiVirus *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Norton AntiVirus *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msxml4-KB2721691-enu.LOG
c:\windows\SysWow64\CCXPButton.ocx
.
.
((((((((((((((((((((((((( Files Created from 2012-10-26 to 2012-11-26 )))))))))))))))))))))))))))))))
.
.
2012-11-26 15:21 . 2012-11-26 15:21 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2012-11-26 15:21 . 2012-11-26 15:21 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-11-26 15:21 . 2012-11-26 15:21 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-11-26 15:21 . 2012-11-26 15:21 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-10-31 22:06 . 2012-10-31 22:06 -------- d-----w- c:\program files (x86)\SpywareBlaster
2012-10-31 21:49 . 2012-10-31 21:49 -------- d-----w- c:\windows\system32\SPReview
2012-10-31 21:48 . 2012-10-31 21:48 -------- d-----w- c:\windows\system32\EventProviders
2012-10-31 21:41 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-10-31 21:41 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-10-31 21:41 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-10-31 21:41 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-10-31 21:41 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-10-31 21:29 . 2012-06-06 06:06 1881600 ----a-w- c:\windows\system32\msxml3.dll
2012-10-31 21:28 . 2012-04-28 03:55 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-10-31 21:28 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-10-31 21:28 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-10-31 21:27 . 2012-04-07 12:31 3216384 ----a-w- c:\windows\system32\msi.dll
2012-10-31 21:27 . 2011-12-16 08:46 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-10-31 21:27 . 2011-12-16 07:52 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2012-10-31 21:27 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\SysWow64\msi.dll
2012-10-31 21:27 . 2012-07-06 20:07 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-10-31 21:25 . 2012-06-02 05:41 1464320 ----a-w- c:\windows\system32\crypt32.dll
2012-10-31 21:25 . 2012-06-02 05:41 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-31 21:25 . 2012-06-02 05:41 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-31 21:25 . 2012-06-02 04:36 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-10-31 21:25 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-10-31 21:25 . 2012-06-02 04:36 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2012-10-31 21:21 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-10-31 21:21 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-10-31 21:20 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-10-31 21:20 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-01 14:18 . 2010-11-29 18:54 45056 ----a-w- c:\windows\system32\acovcnt.exe
2012-10-31 22:37 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-10-31 22:37 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-10-17 20:06 . 2012-10-17 20:06 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-10-17 20:06 . 2012-08-30 18:01 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-10-17 20:06 . 2011-02-04 14:40 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-10-17 19:53 . 2012-10-17 19:54 289768 ----a-w- c:\windows\system32\javaws.exe
2012-10-17 19:53 . 2012-10-17 19:54 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-17 19:53 . 2012-10-17 19:54 189416 ----a-w- c:\windows\system32\javaw.exe
2012-10-17 19:53 . 2012-10-17 19:54 188904 ----a-w- c:\windows\system32\java.exe
2012-10-17 19:53 . 2012-10-17 19:54 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-10-17 19:53 . 2012-04-04 17:17 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-09 16:13 . 2012-04-04 17:20 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-09 16:13 . 2011-08-11 14:47 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-30 02:54 . 2012-03-08 18:46 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-28 07:18 . 2011-01-17 16:36 65309168 ----a-w- c:\windows\system32\MRT.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Syncables"="c:\program files (x86)\syncables\syncables desktop\Syncables.exe" [2010-07-19 370480]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl9"="c:\program files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe" [2009-07-06 87336]
"UpdatePSTShortCut"="c:\program files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2010-06-24 210216]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"Boingo Wi-Fi"="c:\program files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk" [2010-10-29 2429]
"SonicMasterTray"="c:\program files (x86)\ASUS\SonicMaster\SonicMasterTray.exe" [2010-07-10 984400]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-05-03 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-23 1601536]
"VAWinAgent"="c:\expressgateutil\VAWinAgent.exe" [2010-08-13 21504]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-27 30040]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-12-14 421160]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-19 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
c:\users\Scott\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-8-2 1080608]
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2010-10-29 12862]
QuickBooks Update Agent.lnk - c:\program files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2011-1-5 724992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HideSCAHealth"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer5"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R2 VideAceWindowsService;VideAceWindowsService;c:\expressgateutil\VAWinService.exe [2010-08-21 77312]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-07-08 195336]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2009-07-01 52264]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
R3 CYUSB;Cypress Generic USB Driver;c:\windows\system32\Drivers\CYUSB.sys [2011-06-22 48648]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2010-09-28 51712]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-14 1255736]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2010-08-16 24680]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAVx64\1306020.00A\SYMDS64.SYS [2011-07-26 451192]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAVx64\1306020.00A\SYMEFA64.SYS [2012-01-17 1092728]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20120317.002\BHDrvx64.sys [2012-03-03 1157240]
S1 ccSet_NAV;Norton AntiVirus Settings Manager;c:\windows\system32\drivers\NAVx64\1306020.00A\ccSetx64.sys [2011-11-29 167048]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20120327.002\IDSvia64.sys [2012-03-08 488568]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAVx64\1306020.00A\Ironx64.SYS [2012-01-17 190072]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NAVx64\1306020.00A\SYMNETS.SYS [2012-01-17 405624]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [2010-06-22 379520]
S2 aksdf;aksdf;c:\windows\system32\DRIVERS\aksdf.sys [2010-09-27 75648]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-06-16 249648]
S2 Cadence License Manager;Cadence License Manager;c:\cadence\LicenseManager\lmgrd.exe [2010-01-11 1722704]
S2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe [2010-09-27 4180576]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-30 399432]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-30 676936]
S2 NAV;Norton AntiVirus;c:\program files (x86)\Norton AntiVirus\Engine\19.6.2.10\ccSvcHst.exe [2012-01-17 138232]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-08-17 235624]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-04-16 13832]
S2 TurboBoost;Intel(R) Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-04-16 134928]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [2010-05-03 44032]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-03-28 138360]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-07-21 129024]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\DRIVERS\FLxHCIc.sys [2010-09-25 229376]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\DRIVERS\FLxHCIh.sys [2010-09-25 69120]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-03-04 75816]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-30 25928]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-11-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 16:13]
.
2012-11-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 16:02]
.
2012-11-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 16:02]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2010-03-16 1754448]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-09-28 2121320]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-05-03 324096]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Scott\AppData\Roaming\Mozilla\Firefox\Profiles\hn6tdypz.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.hotmail.com
FF - prefs.js: keyword.URL - chrome://browser-region/locale/region.properties
FF - prefs.js: network.proxy.type - 4
FF - ExtSQL: 2012-10-31 16:00; {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}; c:\users\Scott\AppData\Roaming\Mozilla\Firefox\Profiles\hn6tdypz.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe
HKLM-Run-Setwallpaper - c:\programdata\SetWallpaper.cmd
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\NAV]
"ImagePath"="\"c:\program files (x86)\Norton AntiVirus\Engine\19.6.2.10\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files (x86)\Norton AntiVirus\Engine\19.6.2.10\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-11-26 08:46:23
ComboFix-quarantined-files.txt 2012-11-26 15:46
.
Pre-Run: 30,532,325,376 bytes free
Post-Run: 30,455,058,432 bytes free
.
- - End Of File - - 680AAFB6605B8FCB638635E984C46156

What's the deal with your computer now? Is it still the same?

Well it seems about 90% there, just like last time. I did not see where MBAM or ComboFix cleaned or removed anything...... did it? I have a feeling it will creep back like last...... do you want to wait a couple of weeks and we can get back together then, or is there something else you want to try?

Well it seems about 90% there, just like last time.

Let's try a few more scans.

• Download TDSSKiller and save it to your Desktop.
  
• Extract its contents to your desktop.
  
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
  
  
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
  
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
  
  
• Click the Report button and copy/paste the contents of it into your next reply
  

Note:It will also create a log in the C:\ directory..

Sorry for the delay, I have been working real hard on a project. I ran TSSSKiller and it ran clean:

9:04:21.0428 12312 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
09:04:21.0896 12312 ============================================================
09:04:21.0896 12312 Current date / time: 2012/12/17 09:04:21.0896
09:04:21.0896 12312 SystemInfo:
09:04:21.0896 12312
09:04:21.0896 12312 OS Version: 6.1.7601 ServicePack: 1.0
09:04:21.0896 12312 Product type: Workstation
09:04:21.0896 12312 ComputerName: ZAPLAP2
09:04:21.0896 12312 UserName: Scott
09:04:21.0896 12312 Windows directory: C:\Windows
09:04:21.0896 12312 System windows directory: C:\Windows
09:04:21.0896 12312 Running under WOW64
09:04:21.0896 12312 Processor architecture: Intel x64
09:04:21.0896 12312 Number of processors: 8
09:04:21.0896 12312 Page size: 0x1000
09:04:21.0896 12312 Boot type: Normal boot
09:04:21.0896 12312 ============================================================
09:04:22.0738 12312 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
09:04:22.0770 12312 ============================================================
09:04:22.0770 12312 \Device\Harddisk0\DR0:
09:04:22.0770 12312 MBR partitions:
09:04:22.0770 12312 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2AF98B5, BlocksNum 0x12A147D1
09:04:22.0801 12312 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1550F000, BlocksNum 0x35348800
09:04:22.0801 12312 ============================================================
09:04:22.0832 12312 C: <-> \Device\Harddisk0\DR0\Partition1
09:04:22.0879 12312 D: <-> \Device\Harddisk0\DR0\Partition2
09:04:22.0879 12312 ============================================================
09:04:22.0879 12312 Initialize success
09:04:22.0879 12312 ============================================================
09:04:34.0641 14052 ============================================================
09:04:34.0641 14052 Scan started
09:04:34.0641 14052 Mode: Manual;
09:04:34.0641 14052 ============================================================
09:04:35.0998 14052 ================ Scan system memory ========================
09:04:35.0998 14052 System memory - ok
09:04:35.0998 14052 ================ Scan services =============================
09:04:36.0170 14052 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
09:04:36.0186 14052 1394ohci - ok
09:04:36.0217 14052 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
09:04:36.0232 14052 ACPI - ok
09:04:36.0279 14052 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
09:04:36.0295 14052 AcpiPmi - ok
09:04:36.0420 14052 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
09:04:36.0420 14052 AdobeARMservice - ok
09:04:36.0544 14052 [ 95CE557D16A75606CCC2D7F3B0B0BCCB ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
09:04:36.0544 14052 AdobeFlashPlayerUpdateSvc - ok
09:04:36.0591 14052 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
09:04:36.0622 14052 adp94xx - ok
09:04:36.0654 14052 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
09:04:36.0654 14052 adpahci - ok
09:04:36.0685 14052 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
09:04:36.0700 14052 adpu320 - ok
09:04:36.0716 14052 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
09:04:36.0732 14052 AeLookupSvc - ok
09:04:36.0763 14052 [ 734D1BA96BE6AD8D04E6AFEAD569EA8A ] AFBAgent C:\Windows\system32\FBAgent.exe
09:04:36.0778 14052 AFBAgent - ok
09:04:36.0825 14052 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
09:04:36.0825 14052 AFD - ok
09:04:36.0872 14052 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
09:04:36.0872 14052 agp440 - ok
09:04:36.0919 14052 [ 94C0972B06C75456ED574DD46417B1D8 ] aksdf C:\Windows\system32\DRIVERS\aksdf.sys
09:04:36.0934 14052 aksdf - ok
09:04:36.0950 14052 [ 7B0BC062CA6ABAB23F88EA483B5A538E ] aksfridge C:\Windows\system32\DRIVERS\aksfridge.sys
09:04:36.0966 14052 aksfridge - ok
09:04:36.0997 14052 [ A56F1B0F967AEF8A82D7771E6D166DEF ] akshasp C:\Windows\system32\DRIVERS\akshasp.sys
09:04:37.0012 14052 akshasp - ok
09:04:37.0028 14052 [ 67DFF8C8F95CB21C9C3380DD4C0387F2 ] akshhl C:\Windows\system32\DRIVERS\akshhl.sys
09:04:37.0044 14052 akshhl - ok
09:04:37.0106 14052 [ A9A09BC526E614CE9F29BB23C2A76CED ] aksusb C:\Windows\system32\DRIVERS\aksusb.sys
09:04:37.0122 14052 aksusb - ok
09:04:37.0153 14052 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
09:04:37.0168 14052 ALG - ok
09:04:37.0215 14052 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
09:04:37.0231 14052 aliide - ok
09:04:37.0246 14052 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
09:04:37.0262 14052 amdide - ok
09:04:37.0278 14052 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
09:04:37.0293 14052 AmdK8 - ok
09:04:37.0309 14052 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
09:04:37.0324 14052 AmdPPM - ok
09:04:37.0371 14052 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
09:04:37.0402 14052 amdsata - ok
09:04:37.0449 14052 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
09:04:37.0449 14052 amdsbs - ok
09:04:37.0465 14052 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
09:04:37.0480 14052 amdxata - ok
09:04:37.0527 14052 [ 9C7F164B49CADC658D1B3C575782F346 ] AmUStor C:\Windows\system32\drivers\AmUStor.SYS
09:04:37.0527 14052 AmUStor - ok
09:04:37.0558 14052 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
09:04:37.0574 14052 AppID - ok
09:04:37.0605 14052 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
09:04:37.0621 14052 AppIDSvc - ok
09:04:37.0652 14052 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
09:04:37.0652 14052 Appinfo - ok
09:04:37.0699 14052 [ 018857EAD9A077A56AEDFC0E5EF7A24A ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
09:04:37.0699 14052 Apple Mobile Device - ok
09:04:37.0761 14052 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
09:04:37.0777 14052 arc - ok
09:04:37.0792 14052 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
09:04:37.0792 14052 arcsas - ok
09:04:37.0855 14052 [ 18E5C2F937F9DEB8C282DF66A3761925 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
09:04:37.0855 14052 ASLDRService - ok
09:04:37.0870 14052 [ 4C016FD76ED5C05E84CA8CAB77993961 ] ASMMAP64 C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
09:04:37.0886 14052 ASMMAP64 - ok
09:04:37.0902 14052 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
09:04:37.0917 14052 AsyncMac - ok
09:04:37.0964 14052 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
09:04:37.0964 14052 atapi - ok
09:04:38.0011 14052 [ F8633CDD09647A64EE8DB550630427FF ] athr C:\Windows\system32\DRIVERS\athrx.sys
09:04:38.0042 14052 athr - ok
09:04:38.0073 14052 [ 7910158929571214A959D5A6D16DD9C0 ] ATKGFNEXSrv C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
09:04:38.0073 14052 ATKGFNEXSrv - ok
09:04:38.0120 14052 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
09:04:38.0136 14052 AudioEndpointBuilder - ok
09:04:38.0136 14052 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
09:04:38.0136 14052 AudioSrv - ok
09:04:38.0198 14052 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
09:04:38.0229 14052 AxInstSV - ok
09:04:38.0276 14052 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
09:04:38.0307 14052 b06bdrv - ok
09:04:38.0385 14052 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
09:04:38.0432 14052 b57nd60a - ok
09:04:38.0541 14052 [ 2ED050291BC1D7F9E322E328DB3AAECF ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
09:04:38.0557 14052 BBSvc - ok
09:04:38.0619 14052 [ 785DE7ABDA13309D6065305542829E76 ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
09:04:38.0619 14052 BBUpdate - ok
09:04:38.0666 14052 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
09:04:38.0666 14052 BDESVC - ok
09:04:38.0697 14052 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
09:04:38.0713 14052 Beep - ok
09:04:38.0775 14052 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
09:04:38.0791 14052 BFE - ok
09:04:38.0962 14052 [ 6C64FA457C200874FAA87D74152E0D84 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20120317.002\BHDrvx64.sys
09:04:39.0009 14052 BHDrvx64 - ok
09:04:39.0056 14052 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
09:04:39.0103 14052 BITS - ok
09:04:39.0134 14052 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
09:04:39.0134 14052 blbdrive - ok
09:04:39.0212 14052 [ F832F1505AD8B83474BD9A5B1B985E01 ] Bonjour Service C:\Program Files (x86)\Bonjour\mDNSResponder.exe
09:04:39.0212 14052 Bonjour Service - ok
09:04:39.0259 14052 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
09:04:39.0274 14052 bowser - ok
09:04:39.0306 14052 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
09:04:39.0321 14052 BrFiltLo - ok
09:04:39.0337 14052 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
09:04:39.0337 14052 BrFiltUp - ok
09:04:39.0384 14052 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
09:04:39.0399 14052 BridgeMP - ok
09:04:39.0446 14052 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
09:04:39.0462 14052 Browser - ok
09:04:39.0477 14052 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
09:04:39.0477 14052 Brserid - ok
09:04:39.0493 14052 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
09:04:39.0493 14052 BrSerWdm - ok
09:04:39.0524 14052 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
09:04:39.0540 14052 BrUsbMdm - ok
09:04:39.0540 14052 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
09:04:39.0555 14052 BrUsbSer - ok
09:04:39.0602 14052 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
09:04:39.0602 14052 BthEnum - ok
09:04:39.0633 14052 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
09:04:39.0649 14052 BTHMODEM - ok
09:04:39.0664 14052 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
09:04:39.0680 14052 BthPan - ok
09:04:39.0727 14052 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
09:04:39.0742 14052 BTHPORT - ok
09:04:39.0789 14052 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
09:04:39.0789 14052 bthserv - ok
09:04:39.0805 14052 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
09:04:39.0820 14052 BTHUSB - ok
09:04:39.0852 14052 [ 6E04458E98DAF28826482E41A7A62DF5 ] btusbflt C:\Windows\system32\drivers\btusbflt.sys
09:04:39.0883 14052 btusbflt - ok
09:04:39.0914 14052 [ 6BCFDC2B5B7F66D484486D4BD4B39A6B ] btwaudio C:\Windows\system32\drivers\btwaudio.sys
09:04:39.0914 14052 btwaudio - ok
09:04:39.0945 14052 [ 82DC8B7C626E526681C1BEBED2BC3FF9 ] btwavdt C:\Windows\system32\drivers\btwavdt.sys
09:04:39.0945 14052 btwavdt - ok
09:04:40.0023 14052 [ 1E08DC82525282E34AD66FFBA0782565 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
09:04:40.0054 14052 btwdins - ok
09:04:40.0070 14052 [ 6149301DC3F81D6F9667A3FBAC410975 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys
09:04:40.0086 14052 btwl2cap - ok
09:04:40.0101 14052 [ 28E105AD3B79F440BF94780F507BF66A ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys
09:04:40.0117 14052 btwrchid - ok
09:04:40.0210 14052 [ 647CD6B1AE2B42B7F27706A6A72E3DDC ] Cadence License Manager C:\Cadence\LicenseManager\lmgrd.exe
09:04:40.0242 14052 Cadence License Manager - ok
09:04:40.0273 14052 catchme - ok
09:04:40.0382 14052 [ 0E1737A63AEC0F6DE231BB59836C0A11 ] ccSet_NAV C:\Windows\system32\drivers\NAVx64\1306020.00A\ccSetx64.sys
09:04:40.0398 14052 ccSet_NAV - ok
09:04:40.0413 14052 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
09:04:40.0413 14052 cdfs - ok
09:04:40.0476 14052 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys
09:04:40.0491 14052 cdrom - ok
09:04:40.0538 14052 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
09:04:40.0538 14052 CertPropSvc - ok
09:04:40.0569 14052 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
09:04:40.0569 14052 circlass - ok
09:04:40.0616 14052 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
09:04:40.0616 14052 CLFS - ok
09:04:40.0694 14052 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:04:40.0710 14052 clr_optimization_v2.0.50727_32 - ok
09:04:40.0741 14052 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
09:04:40.0756 14052 clr_optimization_v2.0.50727_64 - ok
09:04:40.0866 14052 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
09:04:40.0897 14052 clr_optimization_v4.0.30319_32 - ok
09:04:40.0912 14052 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
09:04:40.0928 14052 clr_optimization_v4.0.30319_64 - ok
09:04:40.0959 14052 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
09:04:40.0990 14052 CmBatt - ok
09:04:41.0006 14052 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
09:04:41.0022 14052 cmdide - ok
09:04:41.0084 14052 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
09:04:41.0115 14052 CNG - ok
09:04:41.0271 14052 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
09:04:41.0287 14052 Compbatt - ok
09:04:41.0334 14052 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
09:04:41.0349 14052 CompositeBus - ok
09:04:41.0365 14052 COMSysApp - ok
09:04:41.0396 14052 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
09:04:41.0396 14052 crcdisk - ok
09:04:41.0427 14052 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
09:04:41.0443 14052 CryptSvc - ok
09:04:41.0474 14052 [ E9E37E84A5431B51CEC9D4FD39534901 ] CYUSB C:\Windows\system32\Drivers\CYUSB.sys
09:04:41.0490 14052 CYUSB - ok
09:04:41.0536 14052 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
09:04:41.0536 14052 DcomLaunch - ok
09:04:41.0568 14052 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
09:04:41.0583 14052 defragsvc - ok
09:04:41.0614 14052 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
09:04:41.0630 14052 DfsC - ok
09:04:41.0692 14052 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
09:04:41.0692 14052 Dhcp - ok
09:04:41.0724 14052 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
09:04:41.0724 14052 discache - ok
09:04:41.0770 14052 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
09:04:41.0786 14052 Disk - ok
09:04:41.0817 14052 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
09:04:41.0817 14052 Dnscache - ok
09:04:41.0848 14052 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
09:04:41.0864 14052 dot3svc - ok
09:04:41.0895 14052 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
09:04:41.0895 14052 DPS - ok
09:04:41.0926 14052 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
09:04:41.0942 14052 drmkaud - ok
09:04:41.0973 14052 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
09:04:42.0020 14052 DXGKrnl - ok
09:04:42.0036 14052 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
09:04:42.0036 14052 EapHost - ok
09:04:42.0114 14052 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
09:04:42.0192 14052 ebdrv - ok
09:04:42.0270 14052 [ 0C3F9EFF8DDD9F9EB56D754B4620155F ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
09:04:42.0301 14052 eeCtrl - ok
09:04:42.0348 14052 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
09:04:42.0348 14052 EFS - ok
09:04:42.0426 14052 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
09:04:42.0457 14052 ehRecvr - ok
09:04:42.0472 14052 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
09:04:42.0488 14052 ehSched - ok
09:04:42.0550 14052 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
09:04:42.0566 14052 elxstor - ok
09:04:42.0628 14052 [ 8C0F9B877BC0B7FFD327EF55F9EFB642 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
09:04:42.0644 14052 EraserUtilRebootDrv - ok
09:04:42.0675 14052 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
09:04:42.0675 14052 ErrDev - ok
09:04:42.0722 14052 [ 38B0A3E42DE9B36AA56F72A5ECB62331 ] ETD C:\Windows\system32\DRIVERS\ETD.sys
09:04:42.0738 14052 ETD - ok
09:04:42.0769 14052 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
09:04:42.0784 14052 EventSystem - ok
09:04:42.0816 14052 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
09:04:42.0816 14052 exfat - ok
09:04:42.0847 14052 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
09:04:42.0847 14052 fastfat - ok
09:04:42.0909 14052 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
09:04:42.0925 14052 Fax - ok
09:04:42.0956 14052 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
09:04:42.0956 14052 fdc - ok
09:04:42.0972 14052 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
09:04:42.0972 14052 fdPHost - ok
09:04:42.0987 14052 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
09:04:42.0987 14052 FDResPub - ok
09:04:43.0018 14052 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
09:04:43.0034 14052 FileInfo - ok
09:04:43.0050 14052 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
09:04:43.0050 14052 Filetrace - ok
09:04:43.0065 14052 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
09:04:43.0081 14052 flpydisk - ok
09:04:43.0128 14052 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
09:04:43.0128 14052 FltMgr - ok
09:04:43.0159 14052 [ 480E31B064E6F7B4EAAB8B00437298B6 ] FLxHCIc C:\Windows\system32\DRIVERS\FLxHCIc.sys
09:04:43.0174 14052 FLxHCIc - ok
09:04:43.0190 14052 [ E9CF4C5A0C31197351F89A1DF4522B96 ] FLxHCIh C:\Windows\system32\DRIVERS\FLxHCIh.sys
09:04:43.0206 14052 FLxHCIh - ok
09:04:43.0252 14052 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
09:04:43.0268 14052 FontCache - ok
09:04:43.0330 14052 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
09:04:43.0330 14052 FontCache3.0.0.0 - ok
09:04:43.0362 14052 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
09:04:43.0362 14052 FsDepends - ok
09:04:43.0393 14052 [ 5814011B2F6E088E29D689B5FCD49B8F ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
09:04:43.0408 14052 fssfltr - ok
09:04:43.0471 14052 [ F6717211C1EC2CDDAA81B97B0727C2E9 ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
09:04:43.0486 14052 fsssvc - ok
09:04:43.0518 14052 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
09:04:43.0518 14052 Fs_Rec - ok
09:04:43.0564 14052 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
09:04:43.0564 14052 fvevol - ok
09:04:43.0596 14052 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
09:04:43.0611 14052 gagp30kx - ok
09:04:43.0627 14052 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
09:04:43.0642 14052 GEARAspiWDM - ok
09:04:43.0689 14052 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
09:04:43.0705 14052 gpsvc - ok
09:04:43.0783 14052 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:04:43.0799 14052 gupdate - ok
09:04:43.0830 14052 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:04:43.0830 14052 gupdatem - ok
09:04:43.0861 14052 [ CC839E8D766CC31A7710C9F38CF3E375 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
09:04:43.0877 14052 gusvc - ok
09:04:43.0939 14052 [ 78FAD9117E4527F2CA82259DA10F40BD ] Hardlock C:\Windows\system32\drivers\hardlock.sys
09:04:43.0939 14052 Hardlock - ok
09:04:43.0955 14052 hasplms - ok
09:04:43.0986 14052 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
09:04:43.0986 14052 hcw85cir - ok
09:04:44.0048 14052 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
09:04:44.0064 14052 HdAudAddService - ok
09:04:44.0095 14052 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
09:04:44.0111 14052 HDAudBus - ok
09:04:44.0142 14052 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
09:04:44.0157 14052 HECIx64 - ok
09:04:44.0157 14052 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
09:04:44.0173 14052 HidBatt - ok
09:04:44.0189 14052 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
09:04:44.0189 14052 HidBth - ok
09:04:44.0220 14052 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
09:04:44.0220 14052 HidIr - ok
09:04:44.0251 14052 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
09:04:44.0251 14052 hidserv - ok
09:04:44.0298 14052 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys
09:04:44.0298 14052 HidUsb - ok
09:04:44.0329 14052 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
09:04:44.0329 14052 hkmsvc - ok
09:04:44.0376 14052 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
09:04:44.0407 14052 HomeGroupListener - ok
09:04:44.0454 14052 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
09:04:44.0454 14052 HomeGroupProvider - ok
09:04:44.0501 14052 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
09:04:44.0501 14052 HpSAMD - ok
09:04:44.0547 14052 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
09:04:44.0563 14052 HTTP - ok
09:04:44.0610 14052 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
09:04:44.0610 14052 hwpolicy - ok
09:04:44.0657 14052 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
09:04:44.0672 14052 i8042prt - ok
09:04:44.0719 14052 [ ABBF174CB394F5C437410A788B7E404A ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
09:04:44.0719 14052 iaStor - ok
09:04:44.0750 14052 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
09:04:44.0750 14052 iaStorV - ok
09:04:44.0828 14052 [ 6F95324909B502E2651442C1548AB12F ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
09:04:44.0844 14052 IDriverT - ok
09:04:44.0906 14052 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
09:04:44.0937 14052 idsvc - ok
09:04:45.0015 14052 [ 18C40C3F368323B203ACE403CB430DB1 ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20120327.002\IDSvia64.sys
09:04:45.0031 14052 IDSVia64 - ok
09:04:45.0062 14052 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
09:04:45.0062 14052 iirsp - ok
09:04:45.0125 14052 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
09:04:45.0140 14052 IKEEXT - ok
09:04:45.0218 14052 [ E02A55F45EDB35641CB470A2CD56E74E ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
09:04:45.0296 14052 IntcAzAudAddService - ok
09:04:45.0327 14052 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
09:04:45.0343 14052 intelide - ok
09:04:45.0374 14052 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
09:04:45.0374 14052 intelppm - ok
09:04:45.0405 14052 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
09:04:45.0421 14052 IPBusEnum - ok
09:04:45.0452 14052 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
09:04:45.0468 14052 IpFilterDriver - ok
09:04:45.0499 14052 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
09:04:45.0499 14052 iphlpsvc - ok
09:04:45.0546 14052 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
09:04:45.0546 14052 IPMIDRV - ok
09:04:45.0561 14052 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
09:04:45.0577 14052 IPNAT - ok
09:04:45.0639 14052 [ 9B812A3484D89EB934982D67FB7D9313 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
09:04:45.0655 14052 iPod Service - ok
09:04:45.0671 14052 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
09:04:45.0686 14052 IRENUM - ok
09:04:45.0717 14052 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
09:04:45.0717 14052 isapnp - ok
09:04:45.0764 14052 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
09:04:45.0780 14052 iScsiPrt - ok
09:04:45.0795 14052 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
09:04:45.0795 14052 kbdclass - ok
09:04:45.0827 14052 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
09:04:45.0827 14052 kbdhid - ok
09:04:45.0858 14052 [ E63EF8C3271D014F14E2469CE75FECB4 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys
09:04:45.0873 14052 kbfiltr - ok
09:04:45.0889 14052 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
09:04:45.0889 14052 KeyIso - ok
09:04:45.0920 14052 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
09:04:45.0920 14052 KSecDD - ok
09:04:45.0936 14052 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
09:04:45.0936 14052 KSecPkg - ok
09:04:45.0967 14052 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
09:04:45.0967 14052 ksthunk - ok
09:04:45.0998 14052 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
09:04:46.0029 14052 KtmRm - ok
09:04:46.0061 14052 [ 48686C29856F46443952A831424F8D6F ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys
09:04:46.0076 14052 L1C - ok
09:04:46.0123 14052 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
09:04:46.0139 14052 LanmanServer - ok
09:04:46.0170 14052 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
09:04:46.0185 14052 LanmanWorkstation - ok
09:04:46.0217 14052 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
09:04:46.0232 14052 lltdio - ok
09:04:46.0248 14052 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
09:04:46.0279 14052 lltdsvc - ok
09:04:46.0295 14052 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
09:04:46.0295 14052 lmhosts - ok
09:04:46.0357 14052 [ A1C148801B4AF64847AEB9F3AD9594EF ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
09:04:46.0357 14052 LMS - ok
09:04:46.0404 14052 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
09:04:46.0419 14052 LSI_FC - ok
09:04:46.0435 14052 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
09:04:46.0435 14052 LSI_SAS - ok
09:04:46.0451 14052 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
09:04:46.0451 14052 LSI_SAS2 - ok
09:04:46.0466 14052 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
09:04:46.0466 14052 LSI_SCSI - ok
09:04:46.0497 14052 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
09:04:46.0497 14052 luafv - ok
09:04:46.0575 14052 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
09:04:46.0575 14052 MBAMProtector - ok
09:04:46.0653 14052 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
09:04:46.0653 14052 MBAMScheduler - ok
09:04:46.0700 14052 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
09:04:46.0716 14052 MBAMService - ok
09:04:46.0747 14052 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
09:04:46.0747 14052 Mcx2Svc - ok
09:04:46.0778 14052 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
09:04:46.0794 14052 megasas - ok
09:04:46.0809 14052 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
09:04:46.0825 14052 MegaSR - ok
09:04:46.0903 14052 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
09:04:46.0919 14052 Microsoft Office Groove Audit Service - ok
09:04:46.0950 14052 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
09:04:46.0950 14052 MMCSS - ok
09:04:46.0981 14052 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
09:04:46.0981 14052 Modem - ok
09:04:47.0012 14052 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
09:04:47.0012 14052 monitor - ok
09:04:47.0043 14052 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys
09:04:47.0059 14052 mouclass - ok
09:04:47.0106 14052 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
09:04:47.0121 14052 mouhid - ok
09:04:47.0168 14052 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
09:04:47.0168 14052 mountmgr - ok
09:04:47.0246 14052 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
09:04:47.0246 14052 MozillaMaintenance - ok
09:04:47.0277 14052 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
09:04:47.0277 14052 mpio - ok
09:04:47.0324 14052 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
09:04:47.0324 14052 mpsdrv - ok
09:04:47.0371 14052 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
09:04:47.0402 14052 MpsSvc - ok
09:04:47.0433 14052 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
09:04:47.0449 14052 MRxDAV - ok
09:04:47.0496 14052 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
09:04:47.0511 14052 mrxsmb - ok
09:04:47.0543 14052 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
09:04:47.0558 14052 mrxsmb10 - ok
09:04:47.0574 14052 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
09:04:47.0574 14052 mrxsmb20 - ok
09:04:47.0605 14052 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
09:04:47.0605 14052 msahci - ok
09:04:47.0636 14052 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
09:04:47.0636 14052 msdsm - ok
09:04:47.0652 14052 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
09:04:47.0652 14052 MSDTC - ok
09:04:47.0699 14052 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
09:04:47.0714 14052 Msfs - ok
09:04:47.0730 14052 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
09:04:47.0730 14052 mshidkmdf - ok
09:04:47.0761 14052 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
09:04:47.0777 14052 msisadrv - ok
09:04:47.0808 14052 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
09:04:47.0823 14052 MSiSCSI - ok
09:04:47.0823 14052 msiserver - ok
09:04:47.0855 14052 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
09:04:47.0855 14052 MSKSSRV - ok
09:04:47.0886 14052 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
09:04:47.0886 14052 MSPCLOCK - ok
09:04:47.0901 14052 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
09:04:47.0901 14052 MSPQM - ok
09:04:47.0933 14052 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
09:04:47.0964 14052 MsRPC - ok
09:04:47.0995 14052 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
09:04:48.0011 14052 mssmbios - ok
09:04:48.0042 14052 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
09:04:48.0057 14052 MSTEE - ok
09:04:48.0073 14052 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
09:04:48.0073 14052 MTConfig - ok
09:04:48.0104 14052 [ 032D35C996F21D19A205A7C8F0B76F3C ] MTsensor C:\Windows\system32\DRIVERS\ATK64AMD.sys
09:04:48.0120 14052 MTsensor - ok
09:04:48.0135 14052 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
09:04:48.0151 14052 Mup - ok
09:04:48.0182 14052 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll

09:04:48.0198 14052 napagent - ok
09:04:48.0229 14052 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
09:04:48.0229 14052 NativeWifiP - ok
09:04:48.0307 14052 [ 7A02F128A454BB22E300F3F80BC1BD22 ] NAV C:\Program Files (x86)\Norton AntiVirus\Engine\19.6.2.10\ccSvcHst.exe
09:04:48.0307 14052 NAV - ok
09:04:48.0354 14052 [ 2DBE90210DE76BE6E1653BB20EC70EC2 ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20120328.002\ENG64.SYS
09:04:48.0354 14052 NAVENG - ok
09:04:48.0401 14052 [ 346DA70E203B8E2C850277713DE8F71B ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20120328.002\EX64.SYS
09:04:48.0432 14052 NAVEX15 - ok
09:04:48.0494 14052 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys
09:04:48.0525 14052 NDIS - ok
09:04:48.0557 14052 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
09:04:48.0557 14052 NdisCap - ok
09:04:48.0588 14052 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
09:04:48.0603 14052 NdisTapi - ok
09:04:48.0619 14052 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
09:04:48.0635 14052 Ndisuio - ok
09:04:48.0666 14052 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
09:04:48.0666 14052 NdisWan - ok
09:04:48.0697 14052 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
09:04:48.0697 14052 NDProxy - ok
09:04:48.0728 14052 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
09:04:48.0744 14052 NetBIOS - ok
09:04:48.0775 14052 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
09:04:48.0775 14052 NetBT - ok
09:04:48.0791 14052 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
09:04:48.0791 14052 Netlogon - ok
09:04:48.0837 14052 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
09:04:48.0837 14052 Netman - ok
09:04:48.0853 14052 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
09:04:48.0869 14052 netprofm - ok
09:04:48.0900 14052 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:04:48.0900 14052 NetTcpPortSharing - ok
09:04:48.0947 14052 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
09:04:48.0947 14052 nfrd960 - ok
09:04:48.0993 14052 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
09:04:48.0993 14052 NlaSvc - ok
09:04:49.0009 14052 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
09:04:49.0009 14052 Npfs - ok
09:04:49.0040 14052 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
09:04:49.0040 14052 nsi - ok
09:04:49.0056 14052 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
09:04:49.0056 14052 nsiproxy - ok
09:04:49.0103 14052 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
09:04:49.0134 14052 Ntfs - ok
09:04:49.0165 14052 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
09:04:49.0181 14052 Null - ok
09:04:49.0212 14052 [ E20ABD5B229760158F753CA90B97E090 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
09:04:49.0227 14052 NVHDA - ok
09:04:49.0477 14052 [ 240E2667AA8A63BCDF253C11A44C465C ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
09:04:49.0695 14052 nvlddmkm - ok
09:04:49.0727 14052 [ 7E11307E8E48EE6FF73FACA6C62E3BE4 ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
09:04:49.0727 14052 nvpciflt - ok
09:04:49.0789 14052 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
09:04:49.0789 14052 nvraid - ok
09:04:49.0805 14052 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
09:04:49.0820 14052 nvstor - ok
09:04:49.0867 14052 [ E0ECB3C5C905B4942D3740373605A31A ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
09:04:49.0898 14052 nvUpdatusService - ok
09:04:49.0945 14052 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
09:04:49.0961 14052 nv_agp - ok
09:04:50.0039 14052 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
09:04:50.0039 14052 odserv - ok
09:04:50.0085 14052 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
09:04:50.0101 14052 ohci1394 - ok
09:04:50.0117 14052 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:04:50.0132 14052 ose - ok
09:04:50.0179 14052 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
09:04:50.0195 14052 p2pimsvc - ok
09:04:50.0210 14052 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
09:04:50.0226 14052 p2psvc - ok
09:04:50.0257 14052 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
09:04:50.0273 14052 Parport - ok
09:04:50.0304 14052 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
09:04:50.0319 14052 partmgr - ok
09:04:50.0335 14052 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
09:04:50.0351 14052 PcaSvc - ok
09:04:50.0351 14052 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
09:04:50.0366 14052 pci - ok
09:04:50.0413 14052 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
09:04:50.0413 14052 pciide - ok
09:04:50.0429 14052 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
09:04:50.0429 14052 pcmcia - ok
09:04:50.0444 14052 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
09:04:50.0460 14052 pcw - ok
09:04:50.0491 14052 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
09:04:50.0507 14052 PEAUTH - ok
09:04:50.0678 14052 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
09:04:50.0694 14052 PerfHost - ok
09:04:50.0756 14052 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
09:04:50.0803 14052 pla - ok
09:04:50.0834 14052 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
09:04:50.0834 14052 PlugPlay - ok
09:04:50.0865 14052 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
09:04:50.0865 14052 PNRPAutoReg - ok
09:04:50.0881 14052 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
09:04:50.0881 14052 PNRPsvc - ok
09:04:50.0928 14052 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
09:04:50.0928 14052 PolicyAgent - ok
09:04:50.0959 14052 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
09:04:50.0959 14052 Power - ok
09:04:50.0990 14052 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
09:04:51.0006 14052 PptpMiniport - ok
09:04:51.0037 14052 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
09:04:51.0053 14052 Processor - ok
09:04:51.0084 14052 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
09:04:51.0084 14052 ProfSvc - ok
09:04:51.0099 14052 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
09:04:51.0099 14052 ProtectedStorage - ok
09:04:51.0146 14052 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
09:04:51.0146 14052 Psched - ok
09:04:51.0193 14052 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
09:04:51.0224 14052 ql2300 - ok
09:04:51.0240 14052 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
09:04:51.0240 14052 ql40xx - ok
09:04:51.0271 14052 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
09:04:51.0287 14052 QWAVE - ok
09:04:51.0287 14052 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
09:04:51.0302 14052 QWAVEdrv - ok
09:04:51.0318 14052 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
09:04:51.0318 14052 RasAcd - ok
09:04:51.0349 14052 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
09:04:51.0349 14052 RasAgileVpn - ok
09:04:51.0365 14052 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
09:04:51.0380 14052 RasAuto - ok
09:04:51.0427 14052 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
09:04:51.0443 14052 Rasl2tp - ok
09:04:51.0474 14052 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
09:04:51.0489 14052 RasMan - ok
09:04:51.0505 14052 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
09:04:51.0536 14052 RasPppoe - ok
09:04:51.0536 14052 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
09:04:51.0536 14052 RasSstp - ok
09:04:51.0583 14052 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
09:04:51.0583 14052 rdbss - ok
09:04:51.0599 14052 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
09:04:51.0599 14052 rdpbus - ok
09:04:51.0630 14052 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
09:04:51.0630 14052 RDPCDD - ok
09:04:51.0645 14052 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
09:04:51.0645 14052 RDPENCDD - ok
09:04:51.0645 14052 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
09:04:51.0645 14052 RDPREFMP - ok
09:04:51.0692 14052 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
09:04:51.0708 14052 RDPWD - ok
09:04:51.0739 14052 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
09:04:51.0739 14052 rdyboost - ok
09:04:51.0755 14052 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
09:04:51.0770 14052 RemoteAccess - ok
09:04:51.0801 14052 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
09:04:51.0817 14052 RemoteRegistry - ok
09:04:51.0864 14052 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
09:04:51.0879 14052 RFCOMM - ok
09:04:51.0957 14052 [ F12A68ED55053940CADD59CA5E3468DD ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
09:04:51.0957 14052 RichVideo - ok
09:04:51.0973 14052 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
09:04:51.0989 14052 RpcEptMapper - ok
09:04:52.0004 14052 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
09:04:52.0020 14052 RpcLocator - ok
09:04:52.0067 14052 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\System32\rpcss.dll
09:04:52.0067 14052 RpcSs - ok
09:04:52.0098 14052 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
09:04:52.0098 14052 rspndr - ok
09:04:52.0129 14052 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
09:04:52.0129 14052 SamSs - ok
09:04:52.0176 14052 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
09:04:52.0176 14052 sbp2port - ok
09:04:52.0191 14052 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
09:04:52.0207 14052 SCardSvr - ok
09:04:52.0254 14052 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
09:04:52.0254 14052 scfilter - ok
09:04:52.0301 14052 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
09:04:52.0332 14052 Schedule - ok
09:04:52.0363 14052 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
09:04:52.0363 14052 SCPolicySvc - ok
09:04:52.0410 14052 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
09:04:52.0441 14052 SDRSVC - ok
09:04:52.0457 14052 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
09:04:52.0472 14052 secdrv - ok
09:04:52.0519 14052 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
09:04:52.0519 14052 seclogon - ok
09:04:52.0535 14052 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
09:04:52.0535 14052 SENS - ok
09:04:52.0550 14052 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
09:04:52.0566 14052 SensrSvc - ok
09:04:52.0597 14052 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
09:04:52.0613 14052 Serenum - ok
09:04:52.0644 14052 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
09:04:52.0644 14052 Serial - ok
09:04:52.0659 14052 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
09:04:52.0659 14052 sermouse - ok
09:04:52.0706 14052 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
09:04:52.0706 14052 SessionEnv - ok
09:04:52.0737 14052 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
09:04:52.0737 14052 sffdisk - ok
09:04:52.0753 14052 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
09:04:52.0769 14052 sffp_mmc - ok
09:04:52.0784 14052 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
09:04:52.0784 14052 sffp_sd - ok
09:04:52.0831 14052 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
09:04:52.0831 14052 sfloppy - ok
09:04:52.0893 14052 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
09:04:52.0909 14052 SharedAccess - ok
09:04:52.0940 14052 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
09:04:52.0940 14052 ShellHWDetection - ok
09:04:52.0971 14052 [ 1BC348CF6BAA90EC8E533EF6E6A69933 ] SiSGbeLH C:\Windows\system32\DRIVERS\SiSG664.sys
09:04:52.0971 14052 SiSGbeLH - ok
09:04:53.0018 14052 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
09:04:53.0018 14052 SiSRaid2 - ok
09:04:53.0049 14052 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
09:04:53.0049 14052 SiSRaid4 - ok
09:04:53.0096 14052 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
09:04:53.0096 14052 SkypeUpdate - ok
09:04:53.0143 14052 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
09:04:53.0143 14052 Smb - ok
09:04:53.0190 14052 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
09:04:53.0190 14052 SNMPTRAP - ok
09:04:53.0252 14052 [ 2114518E55B380A3ACC28B2C27FD499A ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys
09:04:53.0299 14052 SNP2UVC - ok
09:04:53.0377 14052 [ 4945020BC094C322571184A6E8056B3A ] SolidWorks Licensing Service C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
09:04:53.0408 14052 SolidWorks Licensing Service - ok
09:04:53.0424 14052 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
09:04:53.0424 14052 spldr - ok
09:04:53.0471 14052 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
09:04:53.0471 14052 Spooler - ok
09:04:53.0564 14052 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
09:04:53.0658 14052 sppsvc - ok
09:04:53.0673 14052 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
09:04:53.0689 14052 sppuinotify - ok
09:04:53.0798 14052 [ 4D56F175F76C685A06471800A03219B2 ] SRTSP C:\Windows\System32\Drivers\NAVx64\1306020.00A\SRTSP64.SYS
09:04:53.0829 14052 SRTSP - ok
09:04:53.0845 14052 [ 7B02F64DC80C0EC7300AF302ED5D1CB3 ] SRTSPX C:\Windows\system32\drivers\NAVx64\1306020.00A\SRTSPX64.SYS
09:04:53.0845 14052 SRTSPX - ok
09:04:53.0876 14052 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
09:04:53.0907 14052 srv - ok
09:04:53.0923 14052 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
09:04:53.0923 14052 srv2 - ok
09:04:53.0939 14052 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
09:04:53.0954 14052 srvnet - ok
09:04:53.0985 14052 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
09:04:53.0985 14052 SSDPSRV - ok
09:04:54.0001 14052 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
09:04:54.0001 14052 SstpSvc - ok
09:04:54.0032 14052 [ 9029786EE426CE2A01E1D8D4C493C363 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
09:04:54.0032 14052 Stereo Service - ok
09:04:54.0048 14052 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
09:04:54.0063 14052 stexstor - ok
09:04:54.0095 14052 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
09:04:54.0110 14052 stisvc - ok
09:04:54.0141 14052 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
09:04:54.0141 14052 swenum - ok
09:04:54.0173 14052 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
09:04:54.0204 14052 swprv - ok
09:04:54.0251 14052 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\Windows\system32\drivers\NAVx64\1306020.00A\SYMDS64.SYS
09:04:54.0266 14052 SymDS - ok
09:04:54.0329 14052 [ F90C7A190399165D3AB2245048D34786 ] SymEFA C:\Windows\system32\drivers\NAVx64\1306020.00A\SYMEFA64.SYS
09:04:54.0360 14052 SymEFA - ok
09:04:54.0407 14052 [ 894579207E39C465737E850A252CE4F2 ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
09:04:54.0422 14052 SymEvent - ok
09:04:54.0469 14052 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\Windows\system32\drivers\NAVx64\1306020.00A\Ironx64.SYS
09:04:54.0485 14052 SymIRON - ok
09:04:54.0516 14052 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\Windows\System32\Drivers\NAVx64\1306020.00A\SYMNETS.SYS
09:04:54.0516 14052 SymNetS - ok
09:04:54.0578 14052 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
09:04:54.0609 14052 SysMain - ok
09:04:54.0656 14052 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
09:04:54.0672 14052 TabletInputService - ok
09:04:54.0687 14052 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
09:04:54.0703 14052 TapiSrv - ok
09:04:54.0719 14052 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
09:04:54.0719 14052 TBS - ok
09:04:54.0797 14052 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
09:04:54.0843 14052 Tcpip - ok
09:04:54.0890 14052 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
09:04:54.0906 14052 TCPIP6 - ok
09:04:54.0953 14052 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
09:04:54.0968 14052 tcpipreg - ok
09:04:54.0999 14052 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
09:04:55.0015 14052 TDPIPE - ok
09:04:55.0062 14052 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
09:04:55.0062 14052 TDTCP - ok
09:04:55.0109 14052 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
09:04:55.0140 14052 tdx - ok
09:04:55.0171 14052 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
09:04:55.0171 14052 TermDD - ok
09:04:55.0202 14052 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
09:04:55.0218 14052 TermService - ok
09:04:55.0249 14052 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
09:04:55.0249 14052 Themes - ok
09:04:55.0280 14052 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
09:04:55.0280 14052 THREADORDER - ok
09:04:55.0311 14052 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
09:04:55.0311 14052 TrkWks - ok
09:04:55.0374 14052 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
09:04:55.0374 14052 TrustedInstaller - ok
09:04:55.0405 14052 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
09:04:55.0421 14052 tssecsrv - ok
09:04:55.0483 14052 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
09:04:55.0499 14052 TsUsbFlt - ok
09:04:55.0545 14052 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
09:04:55.0545 14052 tunnel - ok
09:04:55.0561 14052 [ B355581A9DA34C92E2DBAFA410D2F829 ] TurboB C:\Windows\system32\DRIVERS\TurboB.sys
09:04:55.0577 14052 TurboB - ok
09:04:55.0623 14052 [ 6564E84B1522C12EA1C3A181ED03276F ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe
09:04:55.0623 14052 TurboBoost - ok
09:04:55.0655 14052 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
09:04:55.0655 14052 uagp35 - ok
09:04:55.0670 14052 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
09:04:55.0686 14052 udfs - ok
09:04:55.0717 14052 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
09:04:55.0733 14052 UI0Detect - ok
09:04:55.0764 14052 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
09:04:55.0764 14052 uliagpkx - ok
09:04:55.0795 14052 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
09:04:55.0795 14052 umbus - ok
09:04:55.0826 14052 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
09:04:55.0842 14052 UmPass - ok
09:04:55.0935 14052 [ 41118D920B2B268C0ADC36421248CDCF ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
09:04:55.0982 14052 UNS - ok
09:04:55.0998 14052 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
09:04:56.0013 14052 upnphost - ok
09:04:56.0029 14052 [ F724B03C3DFAACF08D17D38BF3333583 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
09:04:56.0045 14052 USBAAPL64 - ok
09:04:56.0091 14052 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
09:04:56.0091 14052 usbccgp - ok
09:04:56.0138 14052 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
09:04:56.0154 14052 usbcir - ok
09:04:56.0154 14052 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
09:04:56.0169 14052 usbehci - ok
09:04:56.0185 14052 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
09:04:56.0201 14052 usbhub - ok
09:04:56.0201 14052 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
09:04:56.0216 14052 usbohci - ok
09:04:56.0232 14052 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
09:04:56.0232 14052 usbprint - ok
09:04:56.0247 14052 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
09:04:56.0263 14052 USBSTOR - ok
09:04:56.0279 14052 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
09:04:56.0294 14052 usbuhci - ok
09:04:56.0325 14052 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
09:04:56.0325 14052 usbvideo - ok
09:04:56.0357 14052 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
09:04:56.0357 14052 UxSms - ok
09:04:56.0372 14052 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
09:04:56.0372 14052 VaultSvc - ok
09:04:56.0388 14052 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
09:04:56.0388 14052 vdrvroot - ok
09:04:56.0435 14052 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
09:04:56.0450 14052 vds - ok
09:04:56.0466 14052 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
09:04:56.0466 14052 vga - ok
09:04:56.0481 14052 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
09:04:56.0481 14052 VgaSave - ok
09:04:56.0528 14052 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
09:04:56.0544 14052 vhdmp - ok
09:04:56.0575 14052 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
09:04:56.0575 14052 viaide - ok
09:04:56.0622 14052 [ 0ADF410187B71C9B855721C8D59CEC7A ] VideAceWindowsService C:\ExpressGateUtil\VAWinService.exe
09:04:56.0622 14052 VideAceWindowsService - ok
09:04:56.0637 14052 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
09:04:56.0653 14052 volmgr - ok
09:04:56.0684 14052 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
09:04:56.0684 14052 volmgrx - ok
09:04:56.0700 14052 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
09:04:56.0700 14052 volsnap - ok
09:04:56.0731 14052 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
09:04:56.0747 14052 vsmraid - ok
09:04:56.0793 14052 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
09:04:56.0856 14052 VSS - ok
09:04:56.0856 14052 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
09:04:56.0871 14052 vwifibus - ok
09:04:56.0887 14052 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
09:04:56.0887 14052 vwififlt - ok
09:04:56.0934 14052 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
09:04:56.0934 14052 vwifimp - ok
09:04:56.0965 14052 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
09:04:56.0981 14052 W32Time - ok
09:04:56.0996 14052 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
09:04:57.0012 14052 WacomPen - ok
09:04:57.0059 14052 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
09:04:57.0059 14052 WANARP - ok
09:04:57.0074 14052 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
09:04:57.0074 14052 Wanarpv6 - ok
09:04:57.0137 14052 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
09:04:57.0183 14052 WatAdminSvc - ok
09:04:57.0230 14052 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
09:04:57.0261 14052 wbengine - ok
09:04:57.0293 14052 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
09:04:57.0308 14052 WbioSrvc - ok
09:04:57.0339 14052 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
09:04:57.0355 14052 wcncsvc - ok
09:04:57.0355 14052 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
09:04:57.0355 14052 WcsPlugInService - ok
09:04:57.0386 14052 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
09:04:57.0402 14052 Wd - ok
09:04:57.0433 14052 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
09:04:57.0464 14052 Wdf01000 - ok
09:04:57.0480 14052 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
09:04:57.0495 14052 WdiServiceHost - ok
09:04:57.0495 14052 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
09:04:57.0495 14052 WdiSystemHost - ok
09:04:57.0527 14052 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
09:04:57.0527 14052 WebClient - ok
09:04:57.0558 14052 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
09:04:57.0558 14052 Wecsvc - ok
09:04:57.0573 14052 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
09:04:57.0589 14052 wercplsupport - ok
09:04:57.0589 14052 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
09:04:57.0605 14052 WerSvc - ok
09:04:57.0605 14052 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
09:04:57.0620 14052 WfpLwf - ok
09:04:57.0651 14052 [ 52DED146E4797E6CCF94799E8E22BB2A ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys
09:04:57.0683 14052 WimFltr - ok
09:04:57.0714 14052 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
09:04:57.0714 14052 WIMMount - ok
09:04:57.0729 14052 WinDefend - ok
09:04:57.0729 14052 WinHttpAutoProxySvc - ok
09:04:57.0776 14052 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
09:04:57.0792 14052 Winmgmt - ok
09:04:57.0854 14052 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
09:04:57.0901 14052 WinRM - ok
09:04:57.0963 14052 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
09:04:57.0979 14052 WinUsb - ok
09:04:58.0010 14052 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
09:04:58.0026 14052 Wlansvc - ok
09:04:58.0057 14052 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
09:04:58.0057 14052 WmiAcpi - ok
09:04:58.0088 14052 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
09:04:58.0104 14052 wmiApSrv - ok
09:04:58.0119 14052 WMPNetworkSvc - ok
09:04:58.0151 14052 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
09:04:58.0151 14052 WPCSvc - ok
09:04:58.0182 14052 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
09:04:58.0182 14052 WPDBusEnum - ok
09:04:58.0197 14052 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
09:04:58.0197 14052 ws2ifsl - ok
09:04:58.0275 14052 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
09:04:58.0275 14052 wscsvc - ok
09:04:58.0307 14052 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
09:04:58.0322 14052 WSDPrintDevice - ok
09:04:58.0322 14052 WSearch - ok
09:04:58.0385 14052 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
09:04:58.0447 14052 wuauserv - ok
09:04:58.0463 14052 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
09:04:58.0463 14052 WudfPf - ok
09:04:58.0509 14052 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
09:04:58.0509 14052 WUDFRd - ok
09:04:58.0541 14052 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
09:04:58.0541 14052 wudfsvc - ok
09:04:58.0572 14052 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
09:04:58.0587 14052 WwanSvc - ok
09:04:58.0619 14052 ================ Scan global ===============================
09:04:58.0634 14052 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
09:04:58.0665 14052 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
09:04:58.0665 14052 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
09:04:58.0697 14052 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
09:04:58.0728 14052 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
09:04:58.0728 14052 [Global] - ok
09:04:58.0728 14052 ================ Scan MBR ==================================
09:04:58.0743 14052 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
09:04:59.0118 14052 \Device\Harddisk0\DR0 - ok
09:04:59.0118 14052 ================ Scan VBR ==================================
09:04:59.0118 14052 [ F4E459CB895541DFB8A8D76022AA4B82 ] \Device\Harddisk0\DR0\Partition1
09:04:59.0118 14052 \Device\Harddisk0\DR0\Partition1 - ok
09:04:59.0165 14052 [ F7B2733A3145A7EAD44F1427131703A1 ] \Device\Harddisk0\DR0\Partition2
09:04:59.0165 14052 \Device\Harddisk0\DR0\Partition2 - ok
09:04:59.0165 14052 ============================================================
09:04:59.0165 14052 Scan finished
09:04:59.0165 14052 ============================================================
09:04:59.0165 8900 Detected object count: 0
09:04:59.0165 8900 Actual detected object count: 0

Malwarebytes' Anti-Rootkit

Please download Malwarebytes' Anti-Rootkit and save it to your desktop.

• Be sure to print out and follow the instructions provided on that same page for performing a scan.
  
• Caution: This is a beta version so also read the disclaimer and back up all your data before using.
  
• When the scan completes, click on the Cleanup button to remove any threats found and reboot the computer if prompted to do so.
  
• Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
  
• If there are problems with Internet access, Windows Update, Windows Firewall or other system issues, run the fixdamage tool located in the folder Malwarebytes Anti-Rootkit was run from and reboot your computer.
  
• Two files (mbar-log-YYYY-MM-DD, system-log.txt) will be created and saved within that same folder.
  
• Copy and paste the contents of these two log files in your next reply.
  

Dave, I don't have a good backup system, so this will take a little time. I have important stuff backed up on my server, but I have to do it manually..... maybe I will go get a backup drive.