virus mystart.incredibar.com?

[jarsteve]

Mag mijn symantec endpoint protection trouwens terug aan?

[kape]

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

c:\users\Jonas\AppData\Roaming\Oxby

c:\program files\Conduit

c:\users\Jonas\AppData\Local\Conduit

c:\program files\BittorrentBar_NL

c:\program files\Web Assistant

c:\program files\1ClickDownload

Registry::

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Ylahewly"=-

Firefox::

FF - ProfilePath - c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\

FF - prefs.js: browser.startup.homepage - hxxp://mystart.incredibar.com/mb128?a=6R8yiA4Lp5&i=26

FF - prefs.js: keyword.URL - hxxp://mystart.incredibar.com/mb128/?loc=IB_DS&a=6R8yiA4Lp5&&i=26&search=

FF - Ext: BittorrentBar_NL Community Toolbar: {2d8d9acc-f6d7-4362-8876-a275ca929591} - %profile%\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}

FF - Ext: Web Assistant: {336D0C35-8A85-403a-B9D2-65C292C39087} - c:\program files\Web Assistant\Firefox

FF - user.js: extensions.incredibar_i.newTab - false

FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6R8yiA4Lp5&loc=IB_TB&i=26&search=

FF - user.js: extensions.incredibar_i.id - 84adbed90000000000000626b67c15e5

FF - user.js: extensions.incredibar_i.instlDay - 15528

FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14

FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14

FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.1422:26

FF - user.js: extensions.incredibar_i.prtnrId - Incredibar

FF - user.js: extensions.incredibar_i.prdct - incredibar

FF - user.js: extensions.incredibar_i.aflt - orgnl

FF - user.js: extensions.incredibar_i.smplGrp - none

FF - user.js: extensions.incredibar_i.tlbrId - base

FF - user.js: extensions.incredibar_i.instlRef -

FF - user.js: extensions.incredibar_i.dfltLng -

FF - user.js: extensions.incredibar_i.excTlbr - false

FF - user.js: extensions.incredibar_i.ms_url_id -

FF - user.js: extensions.incredibar_i.upn2 - 6R8yiA4Lp5

FF - user.js: extensions.incredibar_i.upn2n - 92824666021914927

FF - user.js: extensions.incredibar_i.productid - 26

FF - user.js: extensions.incredibar_i.installerproductid - 26

FF - user.js: extensions.incredibar_i.did - 10658

FF - user.js: extensions.incredibar_i.ppd -

Sla dit bestand op je bureaublad op als CFScript.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

[jarsteve]

Dit is het volgende logje dat ik verkreeg. Er was geen vraag tot herstarten.

ComboFix 12-07-08.02 - Jonas 09/07/2012 21:44:15.2.2 - x86

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.3005.2010 [GMT 2:00]

Gestart vanuit: c:\users\Jonas\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Jonas\Desktop\CFScript.txt

AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files\1ClickDownload

c:\program files\1ClickDownload\1Click.cfg

c:\program files\1ClickDownload\1click12.crx

c:\program files\1ClickDownload\1ClickDownloader.exe

c:\program files\1ClickDownload\1clicktemp.xpi

c:\program files\1ClickDownload\Anno_1701.magnet

c:\program files\1ClickDownload\mainpacklt.exe

c:\program files\1ClickDownload\uninst.exe

c:\program files\BittorrentBar_NL

c:\program files\BittorrentBar_NL\BittorrentBar_NLToolbarHelper.exe

c:\program files\BittorrentBar_NL\GottenAppsContextMenu.xml

c:\program files\BittorrentBar_NL\ldrtbBitt.dll

c:\program files\BittorrentBar_NL\OtherAppsContextMenu.xml

c:\program files\BittorrentBar_NL\SharedAppsContextMenu.xml

c:\program files\BittorrentBar_NL\tbBitt.dll

c:\program files\BittorrentBar_NL\toolbar.cfg

c:\program files\BittorrentBar_NL\ToolbarContextMenu.xml

c:\program files\BittorrentBar_NL\uninstall.exe

c:\program files\Conduit

c:\program files\Conduit\Community Alerts\Alert.dll

c:\program files\Web Assistant

c:\program files\Web Assistant\ExtensionUpdaterService.exe

c:\program files\Web Assistant\Firefox\chrome.manifest

c:\program files\Web Assistant\Firefox\chrome\content\libraries\DataExchangeScript.js

c:\program files\Web Assistant\Firefox\chrome\content\main.js

c:\program files\Web Assistant\Firefox\chrome\content\main.xul

c:\program files\Web Assistant\Firefox\chrome\content\resources\localscript.js

c:\program files\Web Assistant\Firefox\chrome\locale\en-US\overlay.dtd

c:\program files\Web Assistant\Firefox\chrome\skin\overlay.css

c:\program files\Web Assistant\Firefox\defaults\preferences\defaults.js

c:\program files\Web Assistant\Firefox\install.rdf

c:\program files\Web Assistant\InstallerHelper.dll

c:\program files\Web Assistant\libraries\DataExchangeScript.js

c:\program files\Web Assistant\resources\localscript.js

c:\program files\Web Assistant\source.crx

c:\program files\Web Assistant\unins000.dat

c:\program files\Web Assistant\unins000.exe

c:\users\Jonas\AppData\Local\Conduit

c:\users\Jonas\AppData\Local\Conduit\CT2849859\BittorrentBar_NLAutoUpdateHelper.exe

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\chrome.manifest

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\chrome\bittorrentbar_nl.jar

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\components\ConduitAutoCompleteSearch.js

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\components\ConduitAutoCompleteSearch.xpt

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\defaults\alertSettingsComponent.xml

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\defaults\appContextMenu.xml

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\defaults\fbAlert.js

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\defaults\getAppsContextMenu.xml

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\defaults\postAppsContextMenu.xml

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\defaults\toolbarContextMenu.xml

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\defaults\unsharedAppsContextMenu.xml

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\install.rdf

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\META-INF\manifest.mf

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\META-INF\zigbert.rsa

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\META-INF\zigbert.sf

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\Chat.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\DataStructures.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\EBEncryption.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\ExternalLibraryLoader.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\HTTP.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\IO.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\Log.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\MainSingleton.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\MD5.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\Notifications.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\ObserversAndEvents.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\Prefs.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\SearchProtector.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\SearchSuggestIO.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\String.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\TEAEncryption.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\Timer.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\Twitter.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\URL.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\WebProgress.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\Windows.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\modules\XML.jsm

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\Plugins\np-mswmp.dll

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\searchplugin\conduit.xml

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\setup.ini

c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\extensions\{2d8d9acc-f6d7-4362-8876-a275ca929591}\version.txt

c:\users\Jonas\AppData\Roaming\Oxby

c:\users\Jonas\AppData\Roaming\Oxby\sieby.exe

c:\users\Jonas\AppData\Roaming\Poumko

c:\users\Jonas\AppData\Roaming\Poumko\gahae.odg

c:\users\Jonas\AppData\Roaming\Ylapf

c:\users\Jonas\AppData\Roaming\Ylapf\wiil.goz

c:\users\Jonas\AppData\Roaming\Ylapf\wiil.tmp

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-06-09 to 2012-07-09 ))))))))))))))))))))))))))))))

.

.

2012-07-09 19:50 . 2012-07-09 19:50 -------- d-----w- c:\users\Jonas\AppData\Local\temp

2012-07-09 19:50 . 2012-07-09 19:50 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-09 19:50 . 2012-07-09 19:50 -------- d-----w- c:\users\Danny\AppData\Local\temp

2012-07-09 17:48 . 2012-07-09 17:48 -------- d-----w- c:\users\Jonas\AppData\Roaming\Ygehze

2012-07-09 17:43 . 2012-07-09 17:43 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC8DF5B6-422F-4E46-8557-5EAB2EC58C80}\offreg.dll

2012-07-09 13:52 . 2012-07-09 13:52 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys

2012-07-08 18:37 . 2012-07-09 12:21 271360 ----a-w- c:\windows\system32\drivers\atksgt.sys

2012-07-08 18:37 . 2012-07-08 18:37 18048 ----a-w- c:\windows\system32\drivers\lirsgt.sys

2012-07-08 10:13 . 2012-07-08 10:13 -------- d-----w- c:\program files\Common Files\SWF Studio

2012-07-07 23:10 . 2012-07-09 22:16 -------- d-----w- c:\users\Jonas\AppData\Roaming\DAEMON Tools Lite

2012-07-07 23:08 . 2012-07-09 22:16 -------- d-----w- c:\programdata\DAEMON Tools Lite

2012-07-07 22:38 . 2012-07-07 22:38 -------- d-----w- c:\users\Jonas\AppData\Local\CRE

2012-07-07 22:37 . 2012-07-09 16:21 -------- d-----w- c:\users\Jonas\AppData\Roaming\BitTorrent

2012-07-07 20:44 . 2012-07-07 22:33 -------- d-----w- c:\users\Jonas\AppData\Roaming\uTorrent

2012-07-07 20:05 . 2012-07-09 13:07 -------- d-----w- c:\users\Jonas\anno

2012-06-21 08:36 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-21 08:36 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

2012-06-21 08:36 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-21 08:36 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

2012-06-21 08:35 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

2012-06-21 08:35 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

2012-06-21 08:35 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

2012-06-21 08:35 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

2012-06-21 08:35 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe

2012-06-20 18:22 . 2012-06-20 18:22 -------- d-----w- c:\programdata\jmhjsleidlvueef

2012-06-13 07:08 . 2012-04-28 03:17 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-06-13 07:08 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\system32\msi.dll

2012-06-13 07:08 . 2012-05-15 01:05 2343936 ----a-w- c:\windows\system32\win32k.sys

2012-06-13 07:08 . 2012-04-26 04:45 58880 ----a-w- c:\windows\system32\rdpwsx.dll

2012-06-13 07:08 . 2012-04-26 04:45 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll

2012-06-13 07:08 . 2012-04-26 04:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe

2012-06-13 07:08 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll

2012-06-13 07:08 . 2012-04-24 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll

2012-06-13 07:08 . 2012-04-24 04:36 1158656 ----a-w- c:\windows\system32\crypt32.dll

2012-06-13 07:08 . 2012-04-24 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll

2012-06-10 14:22 . 2012-06-10 14:22 -------- d-----w- c:\programdata\Lexmark Pro700 Series

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-07-05 16:03 . 2012-03-29 18:58 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-07-05 16:03 . 2011-05-17 15:17 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-06-09 13:25 . 2012-06-09 13:25 135680 ----a-w- c:\users\Jonas\AppData\Roaming\pkg_0ll.exe

2012-05-30 08:29 . 2012-05-30 08:29 121856 ----a-w- c:\users\Jonas\AppData\Roaming\opret0l.exe

2012-05-08 16:40 . 2012-06-01 07:01 6737808 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC8DF5B6-422F-4E46-8557-5EAB2EC58C80}\mpengine.dll

2012-04-18 18:56 . 2012-04-18 18:56 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2012-04-18 18:56 . 2012-04-18 18:56 69632 ----a-w- c:\windows\system32\QuickTime.qts

2009-10-26 14:05 . 2009-10-26 14:05 124240 ----a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll

2009-10-26 14:10 . 2009-10-26 14:10 13136 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll

2009-10-26 14:08 . 2009-10-26 14:08 70488 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll

2009-10-26 14:09 . 2009-10-26 14:09 91480 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll

2009-10-26 14:08 . 2009-10-26 14:08 22360 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll

2009-10-26 14:06 . 2009-10-26 14:06 255312 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll

2009-10-26 14:08 . 2009-10-26 14:08 31064 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll

2009-10-26 14:09 . 2009-10-26 14:09 40280 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll

2009-10-19 16:58 . 2009-10-19 16:58 652640 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll

2009-10-26 14:08 . 2009-10-26 14:08 23896 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="c:\users\Jonas\anno\daemon tools\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]

"Iguhogv"="c:\users\Jonas\AppData\Roaming\Ygehze\fuehd.exe" [2012-06-12 319488]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-08-19 7711264]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-14 1541416]

"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2009-07-08 115560]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 136216]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 171032]

"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 170520]

"ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2009-10-26 103768]

"MRT"="c:\windows\system32\MRT.exe" [2012-06-14 56731752]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"lxeemon.exe"="c:\program files\Lexmark Pro700 Series\lxeemon.exe" [2011-01-24 770728]

"EzPrint"="c:\program files\Lexmark Pro700 Series\ezprint.exe" [2011-01-24 148280]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-27 421736]

.

c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]

R2 lxeeCATSCustConnectService;lxeeCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [x]

R2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]

R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [x]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]

S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 lxee_device;lxee_device;c:\windows\system32\lxeecoms.exe [x]

S2 OberonGameConsoleService;Oberon Media Game Console service;c:\program files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [x]

S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [x]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

.

.

--- Andere Services/Drivers In Geheugen ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

HPService REG_MULTI_SZ HPSLPSVC

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.

Inhoud van de 'Gedeelde Taken' map

.

2012-07-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 20:57]

.

2012-07-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 20:57]

.

2012-03-29 c:\windows\Tasks\SpeedyPC Registration3.job

- c:\program files\Common Files\SpeedyPC Software\UUS3\UUS3.dll [2011-10-06 16:18]

.

2012-03-29 c:\windows\Tasks\SpeedyPC Update Version3.job

- c:\program files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe [2011-10-06 16:18]

.

2012-07-08 c:\windows\Tasks\SyncBack Backup Jonas Bibliotheken.job

- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2009-12-30 11:00]

.

2012-07-08 c:\windows\Tasks\SyncBack Synchronise Folder RECHTEN.job

- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2009-12-30 11:00]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

uInternet Settings,ProxyOverride = *.local

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 55758

FF - prefs.js: network.proxy.type - 1

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

- - - - ORPHANS VERWIJDERD - - - -

.

AddRemove-1ClickDownload - c:\program files\1ClickDownload\uninst.exe

AddRemove-BittorrentBar_NL Toolbar - c:\program files\BittorrentBar_NL\uninstall.exe

AddRemove-{336D0C35-8A85-403a-B9D2-65C292C39087}_is1 - c:\program files\Web Assistant\unins000.exe

.

.

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2012-07-09 21:52:17

ComboFix-quarantined-files.txt 2012-07-09 19:52

ComboFix2.txt 2012-07-09 17:37

.

Pre-Run: 142.454.538.240 bytes beschikbaar

Post-Run: 142.451.204.096 bytes beschikbaar

.

- - End Of File - - BAAE24703095A14351AE2B43D838D8DA

[kape]

Download TDSSKiller en plaats het op je bureaublad.

Pak de bestanden in tdsskiller.zip uit.

Open de map tdsskiller en dubbelklik op TDSSKiller.exe om de tool te starten.

Windows 7 en Windows Vista gebruikers:

Rechtsklik op TDSSKiller.exe -> Uitvoeren als Administrator om de tool te starten.

Als TDSSKiller bericht geeft van een beschikbare update, dan voer je deze eerst uit.

Klik op de knop "Start Scan" en volg de instructies.

Wanneer de scan klaar is klik je op de knop "Report".

Er opent een kladblokbestand. Post de inhoud van dit bestand.

Herstart de pc als TDSSKiller die optie geeft. (Reboot now)

Wanneer er een herstart nodig was, vind je de logfile in C:\TDSSKiller.[Version]_[Date]_[Time]_log.txt

[jarsteve]

Ik heb bij de TDSSKiller de addiotele mogelijkheden moeten aanklikken vooraleer er een bedreiging werd gevonden. Dit is het logje van TDSSkiller:

22:37:47.0275 4904 TDSS rootkit removing tool 2.7.45.0 Jul 9 2012 12:46:35

22:37:47.0446 4904 ============================================================

22:37:47.0446 4904 Current date / time: 2012/07/09 22:37:47.0446

22:37:47.0446 4904 SystemInfo:

22:37:47.0446 4904

22:37:47.0446 4904 OS Version: 6.1.7601 ServicePack: 1.0

22:37:47.0446 4904 Product type: Workstation

22:37:47.0446 4904 ComputerName: JONAS-PC

22:37:47.0446 4904 UserName: Jonas

22:37:47.0446 4904 Windows directory: C:\windows

22:37:47.0446 4904 System windows directory: C:\windows

22:37:47.0446 4904 Processor architecture: Intel x86

22:37:47.0446 4904 Number of processors: 2

22:37:47.0446 4904 Page size: 0x1000

22:37:47.0446 4904 Boot type: Normal boot

22:37:47.0446 4904 ============================================================

22:37:48.0070 4904 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

22:37:48.0070 4904 ============================================================

22:37:48.0070 4904 \Device\Harddisk0\DR0:

22:37:48.0070 4904 MBR partitions:

22:37:48.0070 4904 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1E00800, BlocksNum 0x32000

22:37:48.0070 4904 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E32800, BlocksNum 0x16A3A000

22:37:48.0070 4904 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1886C800, BlocksNum 0xCBC1800

22:37:48.0070 4904 ============================================================

22:37:48.0117 4904 C: <-> \Device\Harddisk0\DR0\Partition1

22:37:48.0148 4904 D: <-> \Device\Harddisk0\DR0\Partition2

22:37:48.0148 4904 ============================================================

22:37:48.0148 4904 Initialize success

22:37:48.0148 4904 ============================================================

22:38:20.0053 5932 ============================================================

22:38:20.0053 5932 Scan started

22:38:20.0053 5932 Mode: Manual;

22:38:20.0053 5932 ============================================================

22:38:20.0458 5932 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys

22:38:20.0458 5932 1394ohci - ok

22:38:20.0521 5932 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys

22:38:20.0536 5932 ACPI - ok

22:38:20.0583 5932 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys

22:38:20.0583 5932 AcpiPmi - ok

22:38:20.0677 5932 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys

22:38:20.0677 5932 adp94xx - ok

22:38:20.0723 5932 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys

22:38:20.0723 5932 adpahci - ok

22:38:20.0755 5932 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys

22:38:20.0755 5932 adpu320 - ok

22:38:20.0801 5932 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll

22:38:20.0801 5932 AeLookupSvc - ok

22:38:20.0879 5932 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys

22:38:20.0879 5932 AFD - ok

22:38:20.0911 5932 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys

22:38:20.0911 5932 agp440 - ok

22:38:20.0973 5932 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys

22:38:20.0973 5932 aic78xx - ok

22:38:21.0020 5932 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe

22:38:21.0035 5932 ALG - ok

22:38:21.0035 5932 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys

22:38:21.0035 5932 aliide - ok

22:38:21.0067 5932 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys

22:38:21.0067 5932 amdagp - ok

22:38:21.0113 5932 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys

22:38:21.0129 5932 amdide - ok

22:38:21.0191 5932 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys

22:38:21.0191 5932 AmdK8 - ok

22:38:21.0223 5932 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys

22:38:21.0223 5932 AmdPPM - ok

22:38:21.0285 5932 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys

22:38:21.0285 5932 amdsata - ok

22:38:21.0347 5932 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys

22:38:21.0347 5932 amdsbs - ok

22:38:21.0363 5932 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys

22:38:21.0363 5932 amdxata - ok

22:38:21.0425 5932 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys

22:38:21.0425 5932 AppID - ok

22:38:21.0472 5932 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll

22:38:21.0472 5932 AppIDSvc - ok

22:38:21.0519 5932 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll

22:38:21.0519 5932 Appinfo - ok

22:38:21.0628 5932 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

22:38:21.0628 5932 Apple Mobile Device - ok

22:38:21.0769 5932 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys

22:38:21.0784 5932 arc - ok

22:38:21.0800 5932 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys

22:38:21.0800 5932 arcsas - ok

22:38:21.0815 5932 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys

22:38:21.0815 5932 AsyncMac - ok

22:38:21.0847 5932 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys

22:38:21.0862 5932 atapi - ok

22:38:21.0971 5932 athr (de0fbcccd6af0f0e7bf12e8d041cc48f) C:\windows\system32\DRIVERS\athr.sys

22:38:21.0987 5932 athr - ok

22:38:22.0065 5932 atksgt (6e996cf8459a2594e0e9609d0e34d41f) C:\windows\system32\DRIVERS\atksgt.sys

22:38:22.0065 5932 atksgt - ok

22:38:22.0143 5932 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:38:22.0143 5932 AudioEndpointBuilder - ok

22:38:22.0159 5932 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:38:22.0159 5932 Audiosrv - ok

22:38:22.0237 5932 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll

22:38:22.0237 5932 AxInstSV - ok

22:38:22.0315 5932 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys

22:38:22.0315 5932 b06bdrv - ok

22:38:22.0330 5932 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys

22:38:22.0346 5932 b57nd60x - ok

22:38:22.0424 5932 BcmSqlStartupSvc (6163664c7e9cd110af70180c126c3fdc) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

22:38:22.0439 5932 BcmSqlStartupSvc - ok

22:38:22.0502 5932 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll

22:38:22.0502 5932 BDESVC - ok

22:38:22.0533 5932 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys

22:38:22.0533 5932 Beep - ok

22:38:22.0627 5932 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll

22:38:22.0627 5932 BFE - ok

22:38:22.0658 5932 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\system32\qmgr.dll

22:38:22.0673 5932 BITS - ok

22:38:22.0705 5932 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys

22:38:22.0705 5932 blbdrive - ok

22:38:22.0829 5932 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe

22:38:22.0829 5932 Bonjour Service - ok

22:38:22.0892 5932 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys

22:38:22.0892 5932 bowser - ok

22:38:22.0923 5932 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys

22:38:22.0923 5932 BrFiltLo - ok

22:38:22.0939 5932 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys

22:38:22.0939 5932 BrFiltUp - ok

22:38:22.0985 5932 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\windows\system32\DRIVERS\bridge.sys

22:38:22.0985 5932 BridgeMP - ok

22:38:23.0032 5932 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll

22:38:23.0032 5932 Browser - ok

22:38:23.0079 5932 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys

22:38:23.0079 5932 Brserid - ok

22:38:23.0095 5932 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys

22:38:23.0095 5932 BrSerWdm - ok

22:38:23.0110 5932 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys

22:38:23.0110 5932 BrUsbMdm - ok

22:38:23.0141 5932 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys

22:38:23.0141 5932 BrUsbSer - ok

22:38:23.0157 5932 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys

22:38:23.0157 5932 BTHMODEM - ok

22:38:23.0219 5932 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll

22:38:23.0219 5932 bthserv - ok

22:38:23.0313 5932 catchme - ok

22:38:23.0422 5932 ccEvtMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:38:23.0422 5932 ccEvtMgr - ok

22:38:23.0422 5932 ccSetMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:38:23.0422 5932 ccSetMgr - ok

22:38:23.0485 5932 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys

22:38:23.0485 5932 cdfs - ok

22:38:23.0547 5932 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\DRIVERS\cdrom.sys

22:38:23.0563 5932 cdrom - ok

22:38:23.0625 5932 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:38:23.0625 5932 CertPropSvc - ok

22:38:23.0672 5932 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys

22:38:23.0672 5932 circlass - ok

22:38:23.0703 5932 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys

22:38:23.0703 5932 CLFS - ok

22:38:23.0828 5932 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

22:38:23.0828 5932 clr_optimization_v2.0.50727_32 - ok

22:38:23.0968 5932 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

22:38:23.0968 5932 clr_optimization_v4.0.30319_32 - ok

22:38:23.0999 5932 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys

22:38:23.0999 5932 CmBatt - ok

22:38:24.0031 5932 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys

22:38:24.0031 5932 cmdide - ok

22:38:24.0077 5932 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys

22:38:24.0093 5932 CNG - ok

22:38:24.0124 5932 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys

22:38:24.0124 5932 Compbatt - ok

22:38:24.0187 5932 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys

22:38:24.0202 5932 CompositeBus - ok

22:38:24.0218 5932 COMSysApp - ok

22:38:24.0249 5932 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys

22:38:24.0249 5932 crcdisk - ok

22:38:24.0280 5932 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\windows\system32\cryptsvc.dll

22:38:24.0280 5932 CryptSvc - ok

22:38:24.0358 5932 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\windows\system32\DRIVERS\ctxusbm.sys

22:38:24.0358 5932 ctxusbm - ok

22:38:24.0421 5932 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:38:24.0436 5932 DcomLaunch - ok

22:38:24.0483 5932 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll

22:38:24.0483 5932 defragsvc - ok

22:38:24.0530 5932 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys

22:38:24.0530 5932 DfsC - ok

22:38:24.0608 5932 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll

22:38:24.0623 5932 Dhcp - ok

22:38:24.0655 5932 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys

22:38:24.0655 5932 discache - ok

22:38:24.0717 5932 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys

22:38:24.0717 5932 Disk - ok

22:38:24.0764 5932 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll

22:38:24.0764 5932 Dnscache - ok

22:38:24.0795 5932 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll

22:38:24.0811 5932 dot3svc - ok

22:38:24.0857 5932 Dot4 (b5e479eb83707dd698f66953e922042c) C:\windows\system32\DRIVERS\Dot4.sys

22:38:24.0857 5932 Dot4 - ok

22:38:24.0920 5932 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\windows\system32\drivers\Dot4Prt.sys

22:38:24.0920 5932 Dot4Print - ok

22:38:24.0935 5932 dot4usb (cf491ff38d62143203c065260567e2f7) C:\windows\system32\DRIVERS\dot4usb.sys

22:38:24.0935 5932 dot4usb - ok

22:38:24.0982 5932 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll

22:38:24.0982 5932 DPS - ok

22:38:25.0045 5932 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys

22:38:25.0045 5932 drmkaud - ok

22:38:25.0123 5932 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\windows\system32\DRIVERS\dtsoftbus01.sys

22:38:25.0123 5932 dtsoftbus01 - ok

22:38:25.0185 5932 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys

22:38:25.0201 5932 DXGKrnl - ok

22:38:25.0279 5932 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll

22:38:25.0279 5932 EapHost - ok

22:38:25.0528 5932 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys

22:38:25.0575 5932 ebdrv - ok

22:38:25.0700 5932 eeCtrl (fce87ba643d5e9a8b6e0378508d1b22d) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

22:38:25.0700 5932 eeCtrl - ok

22:38:25.0809 5932 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe

22:38:25.0809 5932 EFS - ok

22:38:25.0903 5932 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe

22:38:25.0903 5932 ehRecvr - ok

22:38:25.0934 5932 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe

22:38:25.0934 5932 ehSched - ok

22:38:26.0027 5932 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys

22:38:26.0043 5932 elxstor - ok

22:38:26.0183 5932 EraserUtilRebootDrv (115dc729465a8c386615207f28875255) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

22:38:26.0183 5932 EraserUtilRebootDrv - ok

22:38:26.0215 5932 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys

22:38:26.0215 5932 ErrDev - ok

22:38:26.0293 5932 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll

22:38:26.0293 5932 EventSystem - ok

22:38:26.0324 5932 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys

22:38:26.0324 5932 exfat - ok

22:38:26.0355 5932 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys

22:38:26.0355 5932 fastfat - ok

22:38:26.0433 5932 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe

22:38:26.0449 5932 Fax - ok

22:38:26.0464 5932 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys

22:38:26.0464 5932 fdc - ok

22:38:26.0495 5932 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll

22:38:26.0495 5932 fdPHost - ok

22:38:26.0527 5932 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll

22:38:26.0527 5932 FDResPub - ok

22:38:26.0542 5932 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys

22:38:26.0542 5932 FileInfo - ok

22:38:26.0558 5932 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys

22:38:26.0558 5932 Filetrace - ok

22:38:26.0573 5932 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys

22:38:26.0573 5932 flpydisk - ok

22:38:26.0636 5932 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys

22:38:26.0636 5932 FltMgr - ok

22:38:26.0745 5932 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll

22:38:26.0761 5932 FontCache - ok

22:38:26.0807 5932 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

22:38:26.0807 5932 FontCache3.0.0.0 - ok

22:38:26.0823 5932 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys

22:38:26.0823 5932 FsDepends - ok

22:38:26.0885 5932 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys

22:38:26.0885 5932 fssfltr - ok

22:38:27.0104 5932 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

22:38:27.0119 5932 fsssvc - ok

22:38:27.0244 5932 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys

22:38:27.0244 5932 Fs_Rec - ok

22:38:27.0307 5932 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys

22:38:27.0307 5932 fvevol - ok

22:38:27.0369 5932 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys

22:38:27.0385 5932 gagp30kx - ok

22:38:27.0431 5932 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys

22:38:27.0431 5932 GEARAspiWDM - ok

22:38:27.0494 5932 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll

22:38:27.0509 5932 gpsvc - ok

22:38:27.0619 5932 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:38:27.0619 5932 gupdate - ok

22:38:27.0650 5932 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:38:27.0650 5932 gupdatem - ok

22:38:27.0712 5932 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

22:38:27.0712 5932 gusvc - ok

22:38:27.0759 5932 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys

22:38:27.0759 5932 hcw85cir - ok

22:38:27.0837 5932 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys

22:38:27.0837 5932 HdAudAddService - ok

22:38:27.0884 5932 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys

22:38:27.0884 5932 HDAudBus - ok

22:38:27.0899 5932 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys

22:38:27.0899 5932 HidBatt - ok

22:38:27.0915 5932 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys

22:38:27.0915 5932 HidBth - ok

22:38:27.0962 5932 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys

22:38:27.0962 5932 HidIr - ok

22:38:27.0977 5932 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\System32\hidserv.dll

22:38:27.0977 5932 hidserv - ok

22:38:28.0055 5932 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys

22:38:28.0055 5932 HidUsb - ok

22:38:28.0118 5932 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll

22:38:28.0118 5932 hkmsvc - ok

22:38:28.0149 5932 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll

22:38:28.0149 5932 HomeGroupListener - ok

22:38:28.0180 5932 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll

22:38:28.0196 5932 HomeGroupProvider - ok

22:38:28.0243 5932 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys

22:38:28.0243 5932 HpSAMD - ok

22:38:28.0321 5932 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys

22:38:28.0321 5932 HTTP - ok

22:38:28.0336 5932 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys

22:38:28.0336 5932 hwpolicy - ok

22:38:28.0414 5932 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys

22:38:28.0414 5932 i8042prt - ok

22:38:28.0539 5932 IAANTMON (7548066df68a8a1a56b043359f915f37) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

22:38:28.0539 5932 IAANTMON - ok

22:38:28.0586 5932 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys

22:38:28.0586 5932 iaStor - ok

22:38:28.0648 5932 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys

22:38:28.0648 5932 iaStorV - ok

22:38:28.0789 5932 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

22:38:28.0804 5932 idsvc - ok

22:38:29.0225 5932 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\windows\system32\DRIVERS\igdkmd32.sys

22:38:29.0428 5932 igfx - ok

22:38:29.0631 5932 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys

22:38:29.0647 5932 iirsp - ok

22:38:29.0803 5932 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll

22:38:29.0803 5932 IKEEXT - ok

22:38:29.0990 5932 IntcAzAudAddService (5ceef2cccb4fe00d3ffbfeb12bcfa07f) C:\windows\system32\drivers\RTKVHDA.sys

22:38:30.0021 5932 IntcAzAudAddService - ok

22:38:30.0146 5932 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys

22:38:30.0146 5932 intelide - ok

22:38:30.0193 5932 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys

22:38:30.0193 5932 intelppm - ok

22:38:30.0224 5932 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll

22:38:30.0224 5932 IPBusEnum - ok

22:38:30.0255 5932 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys

22:38:30.0271 5932 IpFilterDriver - ok

22:38:30.0333 5932 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\windows\System32\iphlpsvc.dll

22:38:30.0333 5932 iphlpsvc - ok

22:38:30.0364 5932 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys

22:38:30.0364 5932 IPMIDRV - ok

22:38:30.0395 5932 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys

22:38:30.0395 5932 IPNAT - ok

22:38:30.0536 5932 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Program Files\iPod\bin\iPodService.exe

22:38:30.0551 5932 iPod Service - ok

22:38:30.0598 5932 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys

22:38:30.0598 5932 IRENUM - ok

22:38:30.0629 5932 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys

22:38:30.0629 5932 isapnp - ok

22:38:30.0676 5932 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys

22:38:30.0676 5932 iScsiPrt - ok

22:38:30.0739 5932 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys

22:38:30.0739 5932 kbdclass - ok

22:38:30.0785 5932 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys

22:38:30.0785 5932 kbdhid - ok

22:38:30.0817 5932 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:30.0832 5932 KeyIso - ok

22:38:30.0832 5932 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys

22:38:30.0832 5932 KSecDD - ok

22:38:30.0848 5932 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys

22:38:30.0863 5932 KSecPkg - ok

22:38:30.0895 5932 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll

22:38:30.0895 5932 KtmRm - ok

22:38:30.0941 5932 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\System32\srvsvc.dll

22:38:30.0957 5932 LanmanServer - ok

22:38:31.0019 5932 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll

22:38:31.0035 5932 LanmanWorkstation - ok

22:38:31.0097 5932 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\windows\system32\DRIVERS\lirsgt.sys

22:38:31.0097 5932 lirsgt - ok

22:38:31.0409 5932 LiveUpdate (e34152d03caaaaa81dd66d803f392522) C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

22:38:31.0456 5932 LiveUpdate - ok

22:38:31.0597 5932 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys

22:38:31.0597 5932 lltdio - ok

22:38:31.0628 5932 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll

22:38:31.0628 5932 lltdsvc - ok

22:38:31.0643 5932 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll

22:38:31.0659 5932 lmhosts - ok

22:38:31.0721 5932 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys

22:38:31.0721 5932 LSI_FC - ok

22:38:31.0737 5932 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys

22:38:31.0737 5932 LSI_SAS - ok

22:38:31.0753 5932 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys

22:38:31.0753 5932 LSI_SAS2 - ok

22:38:31.0768 5932 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys

22:38:31.0768 5932 LSI_SCSI - ok

22:38:31.0831 5932 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys

22:38:31.0831 5932 luafv - ok

22:38:31.0940 5932 lxeeCATSCustConnectService (a9d8d63c7378dd34e4e19036093a9264) C:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe

22:38:31.0955 5932 lxeeCATSCustConnectService - ok

22:38:31.0971 5932 lxee_device - ok

22:38:32.0018 5932 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll

22:38:32.0018 5932 Mcx2Svc - ok

22:38:32.0049 5932 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys

22:38:32.0049 5932 megasas - ok

22:38:32.0111 5932 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys

22:38:32.0111 5932 MegaSR - ok

22:38:32.0205 5932 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

22:38:32.0205 5932 Microsoft Office Groove Audit Service - ok

22:38:32.0236 5932 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:38:32.0236 5932 MMCSS - ok

22:38:32.0252 5932 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys

22:38:32.0252 5932 Modem - ok

22:38:32.0299 5932 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys

22:38:32.0299 5932 monitor - ok

22:38:32.0423 5932 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys

22:38:32.0423 5932 mouclass - ok

22:38:32.0486 5932 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys

22:38:32.0486 5932 mouhid - ok

22:38:32.0533 5932 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys

22:38:32.0533 5932 mountmgr - ok

22:38:32.0564 5932 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys

22:38:32.0564 5932 mpio - ok

22:38:32.0595 5932 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys

22:38:32.0595 5932 mpsdrv - ok

22:38:32.0704 5932 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\windows\system32\mpssvc.dll

22:38:32.0720 5932 MpsSvc - ok

22:38:32.0751 5932 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys

22:38:32.0751 5932 MRxDAV - ok

22:38:32.0813 5932 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys

22:38:32.0813 5932 mrxsmb - ok

22:38:32.0876 5932 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys

22:38:32.0876 5932 mrxsmb10 - ok

22:38:32.0891 5932 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys

22:38:32.0891 5932 mrxsmb20 - ok

22:38:32.0923 5932 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys

22:38:32.0938 5932 msahci - ok

22:38:32.0954 5932 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys

22:38:32.0969 5932 msdsm - ok

22:38:32.0985 5932 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe

22:38:33.0001 5932 MSDTC - ok

22:38:33.0063 5932 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys

22:38:33.0063 5932 Msfs - ok

22:38:33.0079 5932 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys

22:38:33.0079 5932 mshidkmdf - ok

22:38:33.0110 5932 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys

22:38:33.0110 5932 msisadrv - ok

22:38:33.0188 5932 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll

22:38:33.0188 5932 MSiSCSI - ok

22:38:33.0188 5932 msiserver - ok

22:38:33.0203 5932 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys

22:38:33.0219 5932 MSKSSRV - ok

22:38:33.0250 5932 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys

22:38:33.0250 5932 MSPCLOCK - ok

22:38:33.0297 5932 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys

22:38:33.0313 5932 MSPQM - ok

22:38:33.0344 5932 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys

22:38:33.0344 5932 MsRPC - ok

22:38:33.0391 5932 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys

22:38:33.0391 5932 mssmbios - ok

22:38:33.0500 5932 MSSQL$MSSMLBIZ - ok

22:38:33.0531 5932 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe

22:38:33.0531 5932 MSSQLServerADHelper - ok

22:38:33.0578 5932 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys

22:38:33.0578 5932 MSTEE - ok

22:38:33.0593 5932 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys

22:38:33.0593 5932 MTConfig - ok

22:38:33.0625 5932 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys

22:38:33.0625 5932 Mup - ok

22:38:33.0671 5932 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll

22:38:33.0671 5932 napagent - ok

22:38:33.0749 5932 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys

22:38:33.0749 5932 NativeWifiP - ok

22:38:33.0859 5932 NAVENG (f11033730b38260b6892e837c457fb4b) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVENG.SYS

22:38:33.0859 5932 NAVENG - ok

22:38:34.0015 5932 NAVEX15 (4e4e7c0259d3bb97de24a636c0e06aba) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVEX15.SYS

22:38:34.0046 5932 NAVEX15 - ok

22:38:34.0202 5932 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys

22:38:34.0217 5932 NDIS - ok

22:38:34.0264 5932 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys

22:38:34.0264 5932 NdisCap - ok

22:38:34.0311 5932 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys

22:38:34.0311 5932 NdisTapi - ok

22:38:34.0373 5932 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys

22:38:34.0373 5932 Ndisuio - ok

22:38:34.0405 5932 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys

22:38:34.0405 5932 NdisWan - ok

22:38:34.0451 5932 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys

22:38:34.0451 5932 NDProxy - ok

22:38:34.0498 5932 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys

22:38:34.0498 5932 NetBIOS - ok

22:38:34.0529 5932 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys

22:38:34.0545 5932 NetBT - ok

22:38:34.0561 5932 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:34.0576 5932 Netlogon - ok

22:38:34.0639 5932 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll

22:38:34.0654 5932 Netman - ok

22:38:34.0717 5932 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll

22:38:34.0717 5932 netprofm - ok

22:38:34.0779 5932 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

22:38:34.0795 5932 NetTcpPortSharing - ok

22:38:34.0841 5932 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys

22:38:34.0841 5932 nfrd960 - ok

22:38:34.0888 5932 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll

22:38:34.0888 5932 NlaSvc - ok

22:38:34.0904 5932 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys

22:38:34.0904 5932 Npfs - ok

22:38:34.0951 5932 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll

22:38:34.0951 5932 nsi - ok

22:38:34.0951 5932 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys

22:38:34.0966 5932 nsiproxy - ok

22:38:35.0060 5932 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys

22:38:35.0075 5932 Ntfs - ok

22:38:35.0107 5932 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys

22:38:35.0107 5932 Null - ok

22:38:35.0138 5932 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys

22:38:35.0138 5932 nvraid - ok

22:38:35.0169 5932 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys

22:38:35.0169 5932 nvstor - ok

22:38:35.0185 5932 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys

22:38:35.0185 5932 nv_agp - ok

22:38:35.0278 5932 OberonGameConsoleService (b5d5da8230d3d3525839d939a9196c3e) C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

22:38:35.0278 5932 OberonGameConsoleService - ok

22:38:35.0387 5932 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

22:38:35.0387 5932 odserv - ok

22:38:35.0434 5932 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys

22:38:35.0434 5932 ohci1394 - ok

22:38:35.0465 5932 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

22:38:35.0465 5932 ose - ok

22:38:35.0512 5932 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:38:35.0512 5932 p2pimsvc - ok

22:38:35.0543 5932 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll

22:38:35.0543 5932 p2psvc - ok

22:38:35.0606 5932 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys

22:38:35.0606 5932 Parport - ok

22:38:35.0621 5932 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\windows\system32\drivers\partmgr.sys

22:38:35.0637 5932 partmgr - ok

22:38:35.0653 5932 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys

22:38:35.0653 5932 Parvdm - ok

22:38:35.0684 5932 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll

22:38:35.0684 5932 PcaSvc - ok

22:38:35.0731 5932 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys

22:38:35.0731 5932 pci - ok

22:38:35.0777 5932 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys

22:38:35.0777 5932 pciide - ok

22:38:35.0809 5932 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys

22:38:35.0809 5932 pcmcia - ok

22:38:35.0824 5932 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys

22:38:35.0824 5932 pcw - ok

22:38:35.0871 5932 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys

22:38:35.0887 5932 PEAUTH - ok

22:38:35.0996 5932 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll

22:38:36.0027 5932 pla - ok

22:38:36.0136 5932 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll

22:38:36.0136 5932 PlugPlay - ok

22:38:36.0167 5932 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll

22:38:36.0167 5932 PNRPAutoReg - ok

22:38:36.0199 5932 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:38:36.0199 5932 PNRPsvc - ok

22:38:36.0245 5932 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll

22:38:36.0245 5932 PolicyAgent - ok

22:38:36.0292 5932 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll

22:38:36.0308 5932 Power - ok

22:38:36.0370 5932 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys

22:38:36.0370 5932 PptpMiniport - ok

22:38:36.0386 5932 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys

22:38:36.0386 5932 Processor - ok

22:38:36.0448 5932 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\windows\system32\profsvc.dll

22:38:36.0448 5932 ProfSvc - ok

22:38:36.0479 5932 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:36.0479 5932 ProtectedStorage - ok

22:38:36.0526 5932 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys

22:38:36.0526 5932 Psched - ok

22:38:36.0635 5932 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys

22:38:36.0651 5932 ql2300 - ok

22:38:36.0791 5932 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys

22:38:36.0791 5932 ql40xx - ok

22:38:36.0838 5932 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll

22:38:36.0838 5932 QWAVE - ok

22:38:36.0854 5932 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys

22:38:36.0854 5932 QWAVEdrv - ok

22:38:36.0869 5932 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys

22:38:36.0869 5932 RasAcd - ok

22:38:36.0916 5932 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys

22:38:36.0916 5932 RasAgileVpn - ok

22:38:36.0932 5932 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll

22:38:36.0932 5932 RasAuto - ok

22:38:36.0963 5932 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys

22:38:36.0963 5932 Rasl2tp - ok

22:38:37.0041 5932 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll

22:38:37.0041 5932 RasMan - ok

22:38:37.0057 5932 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys

22:38:37.0057 5932 RasPppoe - ok

22:38:37.0103 5932 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys

22:38:37.0119 5932 RasSstp - ok

22:38:37.0135 5932 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys

22:38:37.0135 5932 rdbss - ok

22:38:37.0150 5932 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys

22:38:37.0150 5932 rdpbus - ok

22:38:37.0181 5932 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys

22:38:37.0181 5932 RDPCDD - ok

22:38:37.0228 5932 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys

22:38:37.0228 5932 RDPENCDD - ok

22:38:37.0244 5932 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys

22:38:37.0244 5932 RDPREFMP - ok

22:38:37.0275 5932 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\windows\system32\drivers\RDPWD.sys

22:38:37.0275 5932 RDPWD - ok

22:38:37.0337 5932 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys

22:38:37.0353 5932 rdyboost - ok

22:38:37.0369 5932 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll

22:38:37.0369 5932 RemoteAccess - ok

22:38:37.0400 5932 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll

22:38:37.0400 5932 RemoteRegistry - ok

22:38:37.0447 5932 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll

22:38:37.0447 5932 RpcEptMapper - ok

22:38:37.0478 5932 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe

22:38:37.0478 5932 RpcLocator - ok

22:38:37.0540 5932 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:38:37.0540 5932 RpcSs - ok

22:38:37.0603 5932 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys

22:38:37.0603 5932 rspndr - ok

22:38:37.0634 5932 RTL8167 (6465166dd9b2f841dabad16abdadbe98) C:\windows\system32\DRIVERS\Rt86win7.sys

22:38:37.0634 5932 RTL8167 - ok

22:38:37.0696 5932 SABI (6e5fbb7cbaec47038b945d5e9b144a64) C:\windows\system32\Drivers\SABI.sys

22:38:37.0696 5932 SABI - ok

22:38:37.0727 5932 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:37.0727 5932 SamSs - ok

22:38:37.0774 5932 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys

22:38:37.0790 5932 sbp2port - ok

22:38:37.0837 5932 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll

22:38:37.0837 5932 SCardSvr - ok

22:38:37.0883 5932 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys

22:38:37.0883 5932 scfilter - ok

22:38:37.0946 5932 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll

22:38:37.0961 5932 Schedule - ok

22:38:37.0993 5932 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:38:37.0993 5932 SCPolicySvc - ok

22:38:38.0024 5932 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll

22:38:38.0039 5932 SDRSVC - ok

22:38:38.0086 5932 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys

22:38:38.0086 5932 secdrv - ok

22:38:38.0117 5932 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll

22:38:38.0117 5932 seclogon - ok

22:38:38.0164 5932 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\system32\sens.dll

22:38:38.0164 5932 SENS - ok

22:38:38.0242 5932 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll

22:38:38.0258 5932 SensrSvc - ok

22:38:38.0305 5932 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys

22:38:38.0305 5932 Serenum - ok

22:38:38.0320 5932 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys

22:38:38.0320 5932 Serial - ok

22:38:38.0367 5932 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys

22:38:38.0367 5932 sermouse - ok

22:38:38.0429 5932 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll

22:38:38.0429 5932 SessionEnv - ok

22:38:38.0461 5932 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys

22:38:38.0461 5932 sffdisk - ok

22:38:38.0476 5932 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys

22:38:38.0476 5932 sffp_mmc - ok

22:38:38.0492 5932 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys

22:38:38.0492 5932 sffp_sd - ok

22:38:38.0539 5932 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys

22:38:38.0539 5932 sfloppy - ok

22:38:38.0617 5932 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\windows\System32\ipnathlp.dll

22:38:38.0632 5932 SharedAccess - ok

22:38:38.0679 5932 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll

22:38:38.0695 5932 ShellHWDetection - ok

22:38:38.0726 5932 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys

22:38:38.0726 5932 sisagp - ok

22:38:38.0773 5932 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys

22:38:38.0773 5932 SiSRaid2 - ok

22:38:38.0788 5932 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys

22:38:38.0788 5932 SiSRaid4 - ok

22:38:38.0835 5932 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys

22:38:38.0835 5932 Smb - ok

22:38:39.0038 5932 SmcService (a58c1a086d9c09c6572c948f22cc0e94) C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

22:38:39.0053 5932 SmcService - ok

22:38:39.0100 5932 SNAC (d2c222441255131e29de351475f98f6d) C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE

22:38:39.0100 5932 SNAC - ok

22:38:39.0225 5932 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe

22:38:39.0225 5932 SNMPTRAP - ok

22:38:39.0397 5932 SPBBCDrv (e621bb5839cf45fa477f48092edd2b40) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

22:38:39.0412 5932 SPBBCDrv - ok

22:38:39.0459 5932 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys

22:38:39.0459 5932 spldr - ok

22:38:39.0537 5932 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe

22:38:39.0537 5932 Spooler - ok

22:38:39.0693 5932 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe

22:38:39.0724 5932 sppsvc - ok

22:38:39.0849 5932 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll

22:38:39.0849 5932 sppuinotify - ok

22:38:39.0958 5932 SpyHunter 4 Service (63f2b52947577dbb075fe646bc758a2f) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

22:38:39.0974 5932 SpyHunter 4 Service - ok

22:38:40.0068 5932 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

22:38:40.0083 5932 SQLBrowser - ok

22:38:40.0130 5932 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

22:38:40.0130 5932 SQLWriter - ok

22:38:40.0177 5932 SRTSP (2abf82c8452ab0b9ffc74a2d5da91989) C:\windows\system32\Drivers\SRTSP.SYS

22:38:40.0192 5932 SRTSP - ok

22:38:40.0224 5932 SRTSPL (e2f9e5887bea5bd8784d337e06eda31b) C:\windows\system32\Drivers\SRTSPL.SYS

22:38:40.0224 5932 SRTSPL - ok

22:38:40.0270 5932 SRTSPX (3b974c158fabd910186f98df8d3e23f3) C:\windows\system32\Drivers\SRTSPX.SYS

22:38:40.0270 5932 SRTSPX - ok

22:38:40.0302 5932 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys

22:38:40.0317 5932 srv - ok

22:38:40.0364 5932 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys

22:38:40.0364 5932 srv2 - ok

22:38:40.0395 5932 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys

22:38:40.0395 5932 srvnet - ok

22:38:40.0426 5932 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll

22:38:40.0442 5932 SSDPSRV - ok

22:38:40.0458 5932 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll

22:38:40.0458 5932 SstpSvc - ok

22:38:40.0489 5932 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys

22:38:40.0489 5932 stexstor - ok

22:38:40.0536 5932 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll

22:38:40.0551 5932 StiSvc - ok

22:38:40.0598 5932 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys

22:38:40.0598 5932 swenum - ok

22:38:40.0645 5932 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll

22:38:40.0645 5932 swprv - ok

22:38:40.0863 5932 Symantec AntiVirus (ba2fb8f8ab24d0279caa98a4c118150e) C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

22:38:40.0879 5932 Symantec AntiVirus - ok

22:38:41.0035 5932 SymEvent (a54ff04bd6e75dc4d8cb6f3e352635e0) C:\windows\system32\Drivers\SYMEVENT.SYS

22:38:41.0035 5932 SymEvent - ok

22:38:41.0097 5932 SYMREDRV (394b2368212114d538316812af60fddd) C:\windows\System32\Drivers\SYMREDRV.SYS

22:38:41.0097 5932 SYMREDRV - ok

22:38:41.0128 5932 SYMTDI (d46676bb414c7531bdffe637a33f5033) C:\windows\System32\Drivers\SYMTDI.SYS

22:38:41.0128 5932 SYMTDI - ok

22:38:41.0206 5932 SynTP (7a9025d8f7852b06d6d08ed536135e7e) C:\windows\system32\DRIVERS\SynTP.sys

22:38:41.0206 5932 SynTP - ok

22:38:41.0316 5932 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll

22:38:41.0331 5932 SysMain - ok

22:38:41.0362 5932 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll

22:38:41.0362 5932 TabletInputService - ok

22:38:41.0425 5932 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll

22:38:41.0425 5932 TapiSrv - ok

22:38:41.0440 5932 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll

22:38:41.0456 5932 TBS - ok

22:38:41.0550 5932 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\drivers\tcpip.sys

22:38:41.0565 5932 Tcpip - ok

22:38:41.0612 5932 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\DRIVERS\tcpip.sys

22:38:41.0612 5932 TCPIP6 - ok

22:38:41.0659 5932 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys

22:38:41.0659 5932 tcpipreg - ok

22:38:41.0690 5932 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys

22:38:41.0690 5932 TDPIPE - ok

22:38:41.0721 5932 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys

22:38:41.0721 5932 TDTCP - ok

22:38:41.0784 5932 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys

22:38:41.0784 5932 tdx - ok

22:38:42.0096 5932 TeamViewer6 (839e88db24d2d8f05b72e12b175951ca) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

22:38:42.0111 5932 TeamViewer6 - ok

22:38:42.0236 5932 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys

22:38:42.0252 5932 TermDD - ok

22:38:42.0298 5932 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll

22:38:42.0314 5932 TermService - ok

22:38:42.0330 5932 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll

22:38:42.0345 5932 Themes - ok

22:38:42.0376 5932 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:38:42.0376 5932 THREADORDER - ok

22:38:42.0423 5932 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll

22:38:42.0423 5932 TrkWks - ok

22:38:42.0486 5932 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe

22:38:42.0486 5932 TrustedInstaller - ok

22:38:42.0517 5932 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys

22:38:42.0517 5932 tssecsrv - ok

22:38:42.0548 5932 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys

22:38:42.0548 5932 TsUsbFlt - ok

22:38:42.0626 5932 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys

22:38:42.0626 5932 tunnel - ok

22:38:42.0657 5932 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys

22:38:42.0657 5932 uagp35 - ok

22:38:42.0735 5932 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys

22:38:42.0735 5932 udfs - ok

22:38:42.0782 5932 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe

22:38:42.0782 5932 UI0Detect - ok

22:38:42.0844 5932 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys

22:38:42.0844 5932 uliagpkx - ok

22:38:42.0891 5932 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys

22:38:42.0891 5932 umbus - ok

22:38:42.0938 5932 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys

22:38:42.0938 5932 UmPass - ok

22:38:43.0047 5932 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll

22:38:43.0047 5932 upnphost - ok

22:38:43.0110 5932 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\windows\system32\Drivers\usbaapl.sys

22:38:43.0110 5932 USBAAPL - ok

22:38:43.0156 5932 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys

22:38:43.0156 5932 usbccgp - ok

22:38:43.0188 5932 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys

22:38:43.0203 5932 usbcir - ok

22:38:43.0219 5932 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys

22:38:43.0219 5932 usbehci - ok

22:38:43.0281 5932 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys

22:38:43.0281 5932 usbhub - ok

22:38:43.0312 5932 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\drivers\usbohci.sys

22:38:43.0312 5932 usbohci - ok

22:38:43.0375 5932 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys

22:38:43.0375 5932 usbprint - ok

22:38:43.0422 5932 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys

22:38:43.0422 5932 usbscan - ok

22:38:43.0468 5932 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\drivers\USBSTOR.SYS

22:38:43.0468 5932 USBSTOR - ok

22:38:43.0484 5932 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\DRIVERS\usbuhci.sys

22:38:43.0484 5932 usbuhci - ok

22:38:43.0546 5932 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys

22:38:43.0546 5932 usbvideo - ok

22:38:43.0578 5932 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll

22:38:43.0578 5932 UxSms - ok

22:38:43.0609 5932 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:43.0609 5932 VaultSvc - ok

22:38:43.0671 5932 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys

22:38:43.0671 5932 vdrvroot - ok

22:38:43.0749 5932 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe

22:38:43.0765 5932 vds - ok

22:38:43.0780 5932 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys

22:38:43.0796 5932 vga - ok

22:38:43.0812 5932 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys

22:38:43.0812 5932 VgaSave - ok

22:38:43.0843 5932 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys

22:38:43.0843 5932 vhdmp - ok

22:38:43.0905 5932 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys

22:38:43.0905 5932 viaagp - ok

22:38:43.0921 5932 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys

22:38:43.0921 5932 ViaC7 - ok

22:38:43.0936 5932 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys

22:38:43.0936 5932 viaide - ok

22:38:43.0952 5932 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys

22:38:43.0952 5932 volmgr - ok

22:38:43.0983 5932 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys

22:38:43.0983 5932 volmgrx - ok

22:38:44.0030 5932 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys

22:38:44.0030 5932 volsnap - ok

22:38:44.0108 5932 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys

22:38:44.0108 5932 vsmraid - ok

22:38:44.0202 5932 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe

22:38:44.0217 5932 VSS - ok

22:38:44.0233 5932 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys

22:38:44.0233 5932 vwifibus - ok

22:38:44.0280 5932 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys

22:38:44.0280 5932 vwififlt - ok

22:38:44.0326 5932 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys

22:38:44.0326 5932 vwifimp - ok

22:38:44.0373 5932 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll

22:38:44.0373 5932 W32Time - ok

22:38:44.0404 5932 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys

22:38:44.0420 5932 WacomPen - ok

22:38:44.0467 5932 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:38:44.0467 5932 WANARP - ok

22:38:44.0482 5932 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:38:44.0482 5932 Wanarpv6 - ok

22:38:44.0607 5932 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe

22:38:44.0623 5932 WatAdminSvc - ok

22:38:44.0701 5932 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe

22:38:44.0716 5932 wbengine - ok

22:38:44.0763 5932 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll

22:38:44.0763 5932 WbioSrvc - ok

22:38:44.0810 5932 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll

22:38:44.0826 5932 wcncsvc - ok

22:38:44.0841 5932 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll

22:38:44.0841 5932 WcsPlugInService - ok

22:38:44.0904 5932 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys

22:38:44.0904 5932 Wd - ok

22:38:44.0935 5932 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys

22:38:44.0935 5932 Wdf01000 - ok

22:38:44.0966 5932 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:38:44.0966 5932 WdiServiceHost - ok

22:38:44.0966 5932 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:38:44.0966 5932 WdiSystemHost - ok

22:38:45.0013 5932 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll

22:38:45.0013 5932 WebClient - ok

22:38:45.0044 5932 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll

22:38:45.0044 5932 Wecsvc - ok

22:38:45.0060 5932 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll

22:38:45.0060 5932 wercplsupport - ok

22:38:45.0106 5932 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll

22:38:45.0106 5932 WerSvc - ok

22:38:45.0153 5932 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys

22:38:45.0169 5932 WfpLwf - ok

22:38:45.0184 5932 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys

22:38:45.0184 5932 WIMMount - ok

22:38:45.0262 5932 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

22:38:45.0262 5932 WinDefend - ok

22:38:45.0278 5932 WinHttpAutoProxySvc - ok

22:38:45.0356 5932 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll

22:38:45.0356 5932 Winmgmt - ok

22:38:45.0434 5932 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll

22:38:45.0465 5932 WinRM - ok

22:38:45.0559 5932 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys

22:38:45.0559 5932 WinUsb - ok

22:38:45.0621 5932 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll

22:38:45.0637 5932 Wlansvc - ok

22:38:45.0840 5932 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

22:38:45.0855 5932 wlidsvc - ok

22:38:45.0980 5932 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys

22:38:45.0980 5932 WmiAcpi - ok

22:38:46.0042 5932 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe

22:38:46.0042 5932 wmiApSrv - ok

22:38:46.0198 5932 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

22:38:46.0214 5932 WMPNetworkSvc - ok

22:38:46.0245 5932 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll

22:38:46.0261 5932 WPCSvc - ok

22:38:46.0308 5932 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll

22:38:46.0308 5932 WPDBusEnum - ok

22:38:46.0354 5932 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys

22:38:46.0354 5932 ws2ifsl - ok

22:38:46.0386 5932 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\system32\wscsvc.dll

22:38:46.0401 5932 wscsvc - ok

22:38:46.0401 5932 WSearch - ok

22:38:46.0542 5932 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\windows\system32\wuaueng.dll

22:38:46.0557 5932 wuauserv - ok

22:38:46.0682 5932 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys

22:38:46.0682 5932 WudfPf - ok

22:38:46.0729 5932 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys

22:38:46.0744 5932 WUDFRd - ok

22:38:46.0791 5932 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll

22:38:46.0807 5932 wudfsvc - ok

22:38:46.0838 5932 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll

22:38:46.0838 5932 WwanSvc - ok

22:38:46.0900 5932 MBR (0x1B8) (2e5debb2116b3417023e0d6562d7ed07) \Device\Harddisk0\DR0

22:38:47.0134 5932 \Device\Harddisk0\DR0 - ok

22:38:47.0134 5932 Boot (0x1200) (5fb009d8d1bbe104d22d071977f32a2a) \Device\Harddisk0\DR0\Partition0

22:38:47.0134 5932 \Device\Harddisk0\DR0\Partition0 - ok

22:38:47.0150 5932 Boot (0x1200) (d5688b55e165a627667567455a328efc) \Device\Harddisk0\DR0\Partition1

22:38:47.0166 5932 \Device\Harddisk0\DR0\Partition1 - ok

22:38:47.0181 5932 Boot (0x1200) (78ee0a60b0242cd51c89824323794145) \Device\Harddisk0\DR0\Partition2

22:38:47.0181 5932 \Device\Harddisk0\DR0\Partition2 - ok

22:38:47.0181 5932 ============================================================

22:38:47.0181 5932 Scan finished

22:38:47.0181 5932 ============================================================

22:38:47.0197 5708 Detected object count: 0

22:38:47.0197 5708 Actual detected object count: 0

22:40:10.0251 4324 ============================================================

22:40:10.0251 4324 Scan started

22:40:10.0251 4324 Mode: Manual; SigCheck; TDLFS;

22:40:10.0251 4324 ============================================================

22:40:10.0532 4324 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys

22:40:10.0626 4324 1394ohci - ok

22:40:10.0672 4324 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys

22:40:10.0704 4324 ACPI - ok

22:40:10.0719 4324 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys

22:40:10.0797 4324 AcpiPmi - ok

22:40:10.0844 4324 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys

22:40:10.0891 4324 adp94xx - ok

22:40:10.0922 4324 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys

22:40:10.0938 4324 adpahci - ok

22:40:10.0969 4324 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys

22:40:10.0969 4324 adpu320 - ok

22:40:11.0000 4324 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll

22:40:11.0062 4324 AeLookupSvc - ok

22:40:11.0094 4324 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys

22:40:11.0172 4324 AFD - ok

22:40:11.0203 4324 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys

22:40:11.0218 4324 agp440 - ok

22:40:11.0296 4324 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys

22:40:11.0312 4324 aic78xx - ok

22:40:11.0343 4324 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe

22:40:11.0374 4324 ALG - ok

22:40:11.0406 4324 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys

22:40:11.0406 4324 aliide - ok

22:40:11.0437 4324 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys

22:40:11.0452 4324 amdagp - ok

22:40:11.0484 4324 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys

22:40:11.0499 4324 amdide - ok

22:40:11.0515 4324 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys

22:40:11.0562 4324 AmdK8 - ok

22:40:11.0577 4324 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys

22:40:11.0608 4324 AmdPPM - ok

22:40:11.0655 4324 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys

22:40:11.0655 4324 amdsata - ok

22:40:11.0686 4324 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys

22:40:11.0702 4324 amdsbs - ok

22:40:11.0718 4324 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys

22:40:11.0733 4324 amdxata - ok

22:40:11.0780 4324 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys

22:40:11.0874 4324 AppID - ok

22:40:11.0889 4324 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll

22:40:11.0936 4324 AppIDSvc - ok

22:40:11.0967 4324 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll

22:40:12.0014 4324 Appinfo - ok

22:40:12.0108 4324 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

22:40:12.0123 4324 Apple Mobile Device - ok

22:40:12.0186 4324 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys

22:40:12.0217 4324 arc - ok

22:40:12.0217 4324 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys

22:40:12.0232 4324 arcsas - ok

22:40:12.0248 4324 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys

22:40:12.0279 4324 AsyncMac - ok

22:40:12.0326 4324 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys

22:40:12.0342 4324 atapi - ok

22:40:12.0420 4324 athr (de0fbcccd6af0f0e7bf12e8d041cc48f) C:\windows\system32\DRIVERS\athr.sys

22:40:12.0482 4324 athr - ok

22:40:12.0544 4324 atksgt (6e996cf8459a2594e0e9609d0e34d41f) C:\windows\system32\DRIVERS\atksgt.sys

22:40:12.0560 4324 atksgt ( UnsignedFile.Multi.Generic ) - warning

22:40:12.0560 4324 atksgt - detected UnsignedFile.Multi.Generic (1)

22:40:12.0622 4324 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:40:12.0654 4324 AudioEndpointBuilder - ok

22:40:12.0669 4324 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:40:12.0700 4324 Audiosrv - ok

22:40:12.0732 4324 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll

22:40:12.0778 4324 AxInstSV - ok

22:40:12.0856 4324 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys

22:40:12.0888 4324 b06bdrv - ok

22:40:12.0919 4324 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys

22:40:12.0950 4324 b57nd60x - ok

22:40:13.0012 4324 BcmSqlStartupSvc (6163664c7e9cd110af70180c126c3fdc) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

22:40:13.0028 4324 BcmSqlStartupSvc - ok

22:40:13.0059 4324 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll

22:40:13.0090 4324 BDESVC - ok

22:40:13.0122 4324 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys

22:40:13.0153 4324 Beep - ok

22:40:13.0200 4324 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll

22:40:13.0246 4324 BFE - ok

22:40:13.0293 4324 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\system32\qmgr.dll

22:40:13.0324 4324 BITS - ok

22:40:13.0340 4324 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys

22:40:13.0371 4324 blbdrive - ok

22:40:13.0465 4324 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe

22:40:13.0480 4324 Bonjour Service - ok

22:40:13.0512 4324 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys

22:40:13.0574 4324 bowser - ok

22:40:13.0590 4324 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys

22:40:13.0668 4324 BrFiltLo - ok

22:40:13.0683 4324 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys

22:40:13.0714 4324 BrFiltUp - ok

22:40:13.0730 4324 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\windows\system32\DRIVERS\bridge.sys

22:40:13.0792 4324 BridgeMP - ok

22:40:13.0824 4324 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll

22:40:13.0855 4324 Browser - ok

22:40:13.0886 4324 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys

22:40:13.0902 4324 Brserid - ok

22:40:13.0933 4324 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys

22:40:13.0964 4324 BrSerWdm - ok

22:40:13.0980 4324 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys

22:40:14.0011 4324 BrUsbMdm - ok

22:40:14.0026 4324 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys

22:40:14.0073 4324 BrUsbSer - ok

22:40:14.0089 4324 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys

22:40:14.0104 4324 BTHMODEM - ok

22:40:14.0136 4324 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll

22:40:14.0182 4324 bthserv - ok

22:40:14.0245 4324 catchme - ok

22:40:14.0338 4324 ccEvtMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:40:14.0354 4324 ccEvtMgr - ok

22:40:14.0354 4324 ccSetMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:40:14.0370 4324 ccSetMgr - ok

22:40:14.0401 4324 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys

22:40:14.0432 4324 cdfs - ok

22:40:14.0463 4324 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\DRIVERS\cdrom.sys

22:40:14.0479 4324 cdrom - ok

22:40:14.0510 4324 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:40:14.0572 4324 CertPropSvc - ok

22:40:14.0604 4324 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys

22:40:14.0635 4324 circlass - ok

22:40:14.0666 4324 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys

22:40:14.0682 4324 CLFS - ok

22:40:14.0760 4324 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

22:40:14.0775 4324 clr_optimization_v2.0.50727_32 - ok

22:40:14.0838 4324 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

22:40:14.0853 4324 clr_optimization_v4.0.30319_32 - ok

22:40:14.0869 4324 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys

22:40:14.0916 4324 CmBatt - ok

22:40:14.0947 4324 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys

22:40:14.0962 4324 cmdide - ok

22:40:15.0009 4324 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys

22:40:15.0056 4324 CNG - ok

22:40:15.0072 4324 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys

22:40:15.0072 4324 Compbatt - ok

22:40:15.0103 4324 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys

22:40:15.0150 4324 CompositeBus - ok

22:40:15.0150 4324 COMSysApp - ok

22:40:15.0181 4324 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys

22:40:15.0196 4324 crcdisk - ok

22:40:15.0243 4324 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\windows\system32\cryptsvc.dll

22:40:15.0274 4324 CryptSvc - ok

22:40:15.0306 4324 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\windows\system32\DRIVERS\ctxusbm.sys

22:40:15.0321 4324 ctxusbm - ok

22:40:15.0384 4324 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:40:15.0415 4324 DcomLaunch - ok

22:40:15.0446 4324 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll

22:40:15.0493 4324 defragsvc - ok

22:40:15.0540 4324 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys

22:40:15.0602 4324 DfsC - ok

22:40:15.0633 4324 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll

22:40:15.0664 4324 Dhcp - ok

22:40:15.0696 4324 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys

22:40:15.0727 4324 discache - ok

22:40:15.0742 4324 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys

22:40:15.0758 4324 Disk - ok

22:40:15.0805 4324 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll

22:40:15.0867 4324 Dnscache - ok

22:40:15.0898 4324 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll

22:40:15.0945 4324 dot3svc - ok

22:40:15.0992 4324 Dot4 (b5e479eb83707dd698f66953e922042c) C:\windows\system32\DRIVERS\Dot4.sys

22:40:16.0008 4324 Dot4 - ok

22:40:16.0054 4324 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\windows\system32\drivers\Dot4Prt.sys

22:40:16.0086 4324 Dot4Print - ok

22:40:16.0101 4324 dot4usb (cf491ff38d62143203c065260567e2f7) C:\windows\system32\DRIVERS\dot4usb.sys

22:40:16.0148 4324 dot4usb - ok

22:40:16.0195 4324 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll

22:40:16.0242 4324 DPS - ok

22:40:16.0273 4324 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys

22:40:16.0288 4324 drmkaud - ok

22:40:16.0351 4324 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\windows\system32\DRIVERS\dtsoftbus01.sys

22:40:16.0382 4324 dtsoftbus01 - ok

22:40:16.0444 4324 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys

22:40:16.0460 4324 DXGKrnl - ok

22:40:16.0491 4324 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll

22:40:16.0538 4324 EapHost - ok

22:40:16.0694 4324 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys

22:40:16.0756 4324 ebdrv - ok

22:40:16.0850 4324 eeCtrl (fce87ba643d5e9a8b6e0378508d1b22d) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

22:40:16.0881 4324 eeCtrl - ok

22:40:16.0975 4324 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe

22:40:16.0990 4324 EFS - ok

22:40:17.0084 4324 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe

22:40:17.0131 4324 ehRecvr - ok

22:40:17.0162 4324 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe

22:40:17.0193 4324 ehSched - ok

22:40:17.0271 4324 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys

22:40:17.0302 4324 elxstor - ok

22:40:17.0380 4324 EraserUtilRebootDrv (115dc729465a8c386615207f28875255) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

22:40:17.0396 4324 EraserUtilRebootDrv - ok

22:40:17.0427 4324 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys

22:40:17.0458 4324 ErrDev - ok

22:40:17.0521 4324 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll

22:40:17.0568 4324 EventSystem - ok

22:40:17.0599 4324 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys

22:40:17.0661 4324 exfat - ok

22:40:17.0692 4324 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys

22:40:17.0739 4324 fastfat - ok

22:40:17.0786 4324 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe

22:40:17.0817 4324 Fax - ok

22:40:17.0848 4324 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys

22:40:17.0880 4324 fdc - ok

22:40:17.0911 4324 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll

22:40:17.0958 4324 fdPHost - ok

22:40:17.0973 4324 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll

22:40:18.0020 4324 FDResPub - ok

22:40:18.0051 4324 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys

22:40:18.0051 4324 FileInfo - ok

22:40:18.0082 4324 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys

22:40:18.0129 4324 Filetrace - ok

22:40:18.0145 4324 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys

22:40:18.0192 4324 flpydisk - ok

22:40:18.0207 4324 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys

22:40:18.0223 4324 FltMgr - ok

22:40:18.0285 4324 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll

22:40:18.0332 4324 FontCache - ok

22:40:18.0394 4324 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

22:40:18.0410 4324 FontCache3.0.0.0 - ok

22:40:18.0426 4324 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys

22:40:18.0441 4324 FsDepends - ok

22:40:18.0472 4324 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys

22:40:18.0488 4324 fssfltr - ok

22:40:18.0660 4324 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

22:40:18.0691 4324 fsssvc - ok

22:40:18.0816 4324 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys

22:40:18.0831 4324 Fs_Rec - ok

22:40:18.0862 4324 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys

22:40:18.0878 4324 fvevol - ok

22:40:18.0909 4324 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys

22:40:18.0925 4324 gagp30kx - ok

22:40:18.0956 4324 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys

22:40:18.0972 4324 GEARAspiWDM - ok

22:40:19.0034 4324 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll

22:40:19.0096 4324 gpsvc - ok

22:40:19.0190 4324 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:40:19.0206 4324 gupdate - ok

22:40:19.0206 4324 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:40:19.0221 4324 gupdatem - ok

22:40:19.0252 4324 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

22:40:19.0268 4324 gusvc - ok

22:40:19.0299 4324 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys

22:40:19.0330 4324 hcw85cir - ok

22:40:19.0377 4324 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys

22:40:19.0408 4324 HdAudAddService - ok

22:40:19.0440 4324 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys

22:40:19.0471 4324 HDAudBus - ok

22:40:19.0518 4324 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys

22:40:19.0549 4324 HidBatt - ok

22:40:19.0580 4324 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys

22:40:19.0627 4324 HidBth - ok

22:40:19.0642 4324 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys

22:40:19.0689 4324 HidIr - ok

22:40:19.0720 4324 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\System32\hidserv.dll

22:40:19.0767 4324 hidserv - ok

22:40:19.0798 4324 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys

22:40:19.0830 4324 HidUsb - ok

22:40:19.0876 4324 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll

22:40:19.0908 4324 hkmsvc - ok

22:40:19.0939 4324 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll

22:40:19.0986 4324 HomeGroupListener - ok

22:40:20.0017 4324 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll

22:40:20.0064 4324 HomeGroupProvider - ok

22:40:20.0079 4324 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys

22:40:20.0095 4324 HpSAMD - ok

22:40:20.0157 4324 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys

22:40:20.0204 4324 HTTP - ok

22:40:20.0220 4324 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys

22:40:20.0235 4324 hwpolicy - ok

22:40:20.0266 4324 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys

22:40:20.0298 4324 i8042prt - ok

22:40:20.0360 4324 IAANTMON (7548066df68a8a1a56b043359f915f37) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

22:40:20.0391 4324 IAANTMON - ok

22:40:20.0438 4324 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys

22:40:20.0454 4324 iaStor - ok

22:40:20.0485 4324 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys

22:40:20.0516 4324 iaStorV - ok

22:40:20.0625 4324 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

22:40:20.0656 4324 idsvc - ok

22:40:21.0062 4324 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\windows\system32\DRIVERS\igdkmd32.sys

22:40:21.0265 4324 igfx - ok

22:40:21.0390 4324 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys

22:40:21.0405 4324 iirsp - ok

22:40:21.0468 4324 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll

22:40:21.0530 4324 IKEEXT - ok

22:40:21.0670 4324 IntcAzAudAddService (5ceef2cccb4fe00d3ffbfeb12bcfa07f) C:\windows\system32\drivers\RTKVHDA.sys

22:40:21.0717 4324 IntcAzAudAddService - ok

22:40:21.0842 4324 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys

22:40:21.0858 4324 intelide - ok

22:40:21.0889 4324 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys

22:40:21.0920 4324 intelppm - ok

22:40:21.0967 4324 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll

22:40:22.0014 4324 IPBusEnum - ok

22:40:22.0029 4324 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys

22:40:22.0076 4324 IpFilterDriver - ok

22:40:22.0138 4324 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\windows\System32\iphlpsvc.dll

22:40:22.0170 4324 iphlpsvc - ok

22:40:22.0201 4324 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys

22:40:22.0232 4324 IPMIDRV - ok

22:40:22.0263 4324 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys

22:40:22.0294 4324 IPNAT - ok

22:40:22.0388 4324 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Program Files\iPod\bin\iPodService.exe

22:40:22.0404 4324 iPod Service - ok

22:40:22.0435 4324 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys

22:40:22.0466 4324 IRENUM - ok

22:40:22.0497 4324 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys

22:40:22.0513 4324 isapnp - ok

22:40:22.0544 4324 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys

22:40:22.0560 4324 iScsiPrt - ok

22:40:22.0591 4324 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys

22:40:22.0606 4324 kbdclass - ok

22:40:22.0622 4324 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys

22:40:22.0669 4324 kbdhid - ok

22:40:22.0731 4324 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:22.0747 4324 KeyIso - ok

22:40:22.0747 4324 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys

22:40:22.0762 4324 KSecDD - ok

22:40:22.0778 4324 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys

22:40:22.0794 4324 KSecPkg - ok

22:40:22.0825 4324 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll

22:40:22.0856 4324 KtmRm - ok

22:40:22.0887 4324 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\System32\srvsvc.dll

22:40:22.0934 4324 LanmanServer - ok

22:40:22.0965 4324 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll

22:40:23.0012 4324 LanmanWorkstation - ok

22:40:23.0059 4324 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\windows\system32\DRIVERS\lirsgt.sys

22:40:23.0074 4324 lirsgt ( UnsignedFile.Multi.Generic ) - warning

22:40:23.0074 4324 lirsgt - detected UnsignedFile.Multi.Generic (1)

22:40:23.0293 4324 LiveUpdate (e34152d03caaaaa81dd66d803f392522) C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

22:40:23.0340 4324 LiveUpdate - ok

22:40:23.0449 4324 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys

22:40:23.0511 4324 lltdio - ok

22:40:23.0558 4324 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll

22:40:23.0605 4324 lltdsvc - ok

22:40:23.0620 4324 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll

22:40:23.0683 4324 lmhosts - ok

22:40:23.0698 4324 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys

22:40:23.0714 4324 LSI_FC - ok

22:40:23.0745 4324 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys

22:40:23.0761 4324 LSI_SAS - ok

22:40:23.0792 4324 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys

22:40:23.0808 4324 LSI_SAS2 - ok

22:40:23.0808 4324 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys

22:40:23.0823 4324 LSI_SCSI - ok

22:40:23.0854 4324 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys

22:40:23.0901 4324 luafv - ok

22:40:23.0979 4324 lxeeCATSCustConnectService (a9d8d63c7378dd34e4e19036093a9264) C:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe

22:40:24.0010 4324 lxeeCATSCustConnectService - ok

22:40:24.0010 4324 lxee_device - ok

22:40:24.0042 4324 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll

22:40:24.0057 4324 Mcx2Svc - ok

22:40:24.0088 4324 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys

22:40:24.0104 4324 megasas - ok

22:40:24.0120 4324 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys

22:40:24.0135 4324 MegaSR - ok

22:40:24.0229 4324 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

22:40:24.0244 4324 Microsoft Office Groove Audit Service - ok

22:40:24.0276 4324 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:40:24.0307 4324 MMCSS - ok

22:40:24.0307 4324 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys

22:40:24.0354 4324 Modem - ok

22:40:24.0385 4324 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys

22:40:24.0416 4324 monitor - ok

22:40:24.0463 4324 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys

22:40:24.0478 4324 mouclass - ok

22:40:24.0494 4324 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys

22:40:24.0525 4324 mouhid - ok

22:40:24.0556 4324 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys

22:40:24.0572 4324 mountmgr - ok

22:40:24.0603 4324 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys

22:40:24.0619 4324 mpio - ok

22:40:24.0650 4324 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys

22:40:24.0697 4324 mpsdrv - ok

22:40:24.0759 4324 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\windows\system32\mpssvc.dll

22:40:24.0822 4324 MpsSvc - ok

22:40:24.0868 4324 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys

22:40:24.0884 4324 MRxDAV - ok

22:40:24.0915 4324 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys

22:40:24.0978 4324 mrxsmb - ok

22:40:25.0009 4324 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys

22:40:25.0040 4324 mrxsmb10 - ok

22:40:25.0071 4324 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys

22:40:25.0118 4324 mrxsmb20 - ok

22:40:25.0149 4324 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys

22:40:25.0165 4324 msahci - ok

22:40:25.0196 4324 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys

22:40:25.0212 4324 msdsm - ok

22:40:25.0243 4324 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe

22:40:25.0258 4324 MSDTC - ok

22:40:25.0290 4324 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys

22:40:25.0336 4324 Msfs - ok

22:40:25.0368 4324 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys

22:40:25.0430 4324 mshidkmdf - ok

22:40:25.0461 4324 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys

22:40:25.0477 4324 msisadrv - ok

22:40:25.0508 4324 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll

22:40:25.0539 4324 MSiSCSI - ok

22:40:25.0539 4324 msiserver - ok

22:40:25.0555 4324 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys

22:40:25.0602 4324 MSKSSRV - ok

22:40:25.0633 4324 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys

22:40:25.0695 4324 MSPCLOCK - ok

22:40:25.0711 4324 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys

22:40:25.0742 4324 MSPQM - ok

22:40:25.0758 4324 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys

22:40:25.0773 4324 MsRPC - ok

22:40:25.0804 4324 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys

22:40:25.0836 4324 mssmbios - ok

22:40:25.0929 4324 MSSQL$MSSMLBIZ - ok

22:40:25.0960 4324 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe

22:40:25.0976 4324 MSSQLServerADHelper - ok

22:40:25.0992 4324 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys

22:40:26.0023 4324 MSTEE - ok

22:40:26.0038 4324 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys

22:40:26.0070 4324 MTConfig - ok

22:40:26.0085 4324 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys

22:40:26.0101 4324 Mup - ok

22:40:26.0148 4324 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll

22:40:26.0194 4324 napagent - ok

22:40:26.0226 4324 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys

22:40:26.0272 4324 NativeWifiP - ok

22:40:26.0382 4324 NAVENG (f11033730b38260b6892e837c457fb4b) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVENG.SYS

22:40:26.0397 4324 NAVENG - ok

22:40:26.0475 4324 NAVEX15 (4e4e7c0259d3bb97de24a636c0e06aba) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVEX15.SYS

22:40:26.0506 4324 NAVEX15 - ok

22:40:26.0662 4324 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys

22:40:26.0709 4324 NDIS - ok

22:40:26.0740 4324 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys

22:40:26.0772 4324 NdisCap - ok

22:40:26.0787 4324 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys

22:40:26.0834 4324 NdisTapi - ok

22:40:26.0865 4324 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys

22:40:26.0928 4324 Ndisuio - ok

22:40:26.0974 4324 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys

22:40:27.0037 4324 NdisWan - ok

22:40:27.0068 4324 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys

22:40:27.0099 4324 NDProxy - ok

22:40:27.0115 4324 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys

22:40:27.0162 4324 NetBIOS - ok

22:40:27.0193 4324 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys

22:40:27.0240 4324 NetBT - ok

22:40:27.0271 4324 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:27.0286 4324 Netlogon - ok

22:40:27.0318 4324 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll

22:40:27.0349 4324 Netman - ok

22:40:27.0396 4324 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll

22:40:27.0442 4324 netprofm - ok

22:40:27.0505 4324 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

22:40:27.0536 4324 NetTcpPortSharing - ok

22:40:27.0552 4324 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys

22:40:27.0567 4324 nfrd960 - ok

22:40:27.0614 4324 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll

22:40:27.0676 4324 NlaSvc - ok

22:40:27.0692 4324 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys

22:40:27.0739 4324 Npfs - ok

22:40:27.0786 4324 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll

22:40:27.0817 4324 nsi - ok

22:40:27.0832 4324 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys

22:40:27.0879 4324 nsiproxy - ok

22:40:27.0973 4324 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys

22:40:28.0004 4324 Ntfs - ok

22:40:28.0020 4324 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys

22:40:28.0051 4324 Null - ok

22:40:28.0082 4324 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys

22:40:28.0098 4324 nvraid - ok

22:40:28.0129 4324 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys

22:40:28.0144 4324 nvstor - ok

22:40:28.0160 4324 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys

22:40:28.0176 4324 nv_agp - ok

22:40:28.0238 4324 OberonGameConsoleService (b5d5da8230d3d3525839d939a9196c3e) C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

22:40:28.0254 4324 OberonGameConsoleService - ok

22:40:28.0347 4324 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

22:40:28.0378 4324 odserv - ok

22:40:28.0394 4324 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys

22:40:28.0410 4324 ohci1394 - ok

22:40:28.0441 4324 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

22:40:28.0456 4324 ose - ok

22:40:28.0488 4324 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:40:28.0534 4324 p2pimsvc - ok

22:40:28.0566 4324 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll

22:40:28.0581 4324 p2psvc - ok

22:40:28.0612 4324 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys

22:40:28.0628 4324 Parport - ok

22:40:28.0659 4324 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\windows\system32\drivers\partmgr.sys

22:40:28.0675 4324 partmgr - ok

22:40:28.0706 4324 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys

22:40:28.0737 4324 Parvdm - ok

22:40:28.0784 4324 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll

22:40:28.0815 4324 PcaSvc - ok

22:40:28.0862 4324 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys

22:40:28.0893 4324 pci - ok

22:40:28.0924 4324 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys

22:40:28.0924 4324 pciide - ok

22:40:28.0956 4324 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys

22:40:28.0971 4324 pcmcia - ok

22:40:28.0987 4324 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys

22:40:29.0002 4324 pcw - ok

22:40:29.0034 4324 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys

22:40:29.0080 4324 PEAUTH - ok

22:40:29.0190 4324 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll

22:40:29.0236 4324 pla - ok

22:40:29.0361 4324 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll

22:40:29.0424 4324 PlugPlay - ok

22:40:29.0455 4324 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll

22:40:29.0502 4324 PNRPAutoReg - ok

22:40:29.0533 4324 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:40:29.0564 4324 PNRPsvc - ok

22:40:29.0595 4324 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll

22:40:29.0642 4324 PolicyAgent - ok

22:40:29.0720 4324 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll

22:40:29.0782 4324 Power - ok

22:40:29.0829 4324 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys

22:40:29.0876 4324 PptpMiniport - ok

22:40:29.0907 4324 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys

22:40:29.0923 4324 Processor - ok

22:40:29.0954 4324 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\windows\system32\profsvc.dll

22:40:30.0001 4324 ProfSvc - ok

22:40:30.0032 4324 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:30.0048 4324 ProtectedStorage - ok

22:40:30.0094 4324 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys

22:40:30.0110 4324 Psched - ok

22:40:30.0188 4324 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys

22:40:30.0219 4324 ql2300 - ok

22:40:30.0313 4324 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys

22:40:30.0328 4324 ql40xx - ok

22:40:30.0360 4324 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll

22:40:30.0406 4324 QWAVE - ok

22:40:30.0438 4324 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys

22:40:30.0453 4324 QWAVEdrv - ok

22:40:30.0469 4324 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys

22:40:30.0500 4324 RasAcd - ok

22:40:30.0516 4324 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys

22:40:30.0562 4324 RasAgileVpn - ok

22:40:30.0578 4324 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll

22:40:30.0609 4324 RasAuto - ok

22:40:30.0625 4324 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys

22:40:30.0687 4324 Rasl2tp - ok

22:40:30.0734 4324 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll

22:40:30.0781 4324 RasMan - ok

22:40:30.0796 4324 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys

22:40:30.0828 4324 RasPppoe - ok

22:40:30.0874 4324 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys

22:40:30.0952 4324 RasSstp - ok

22:40:30.0984 4324 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys

22:40:31.0015 4324 rdbss - ok

22:40:31.0030 4324 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys

22:40:31.0062 4324 rdpbus - ok

22:40:31.0108 4324 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys

22:40:31.0140 4324 RDPCDD - ok

22:40:31.0171 4324 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys

22:40:31.0202 4324 RDPENCDD - ok

22:40:31.0249 4324 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys

22:40:31.0264 4324 RDPREFMP - ok

22:40:31.0311 4324 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\windows\system32\drivers\RDPWD.sys

22:40:31.0374 4324 RDPWD - ok

22:40:31.0405 4324 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys

22:40:31.0420 4324 rdyboost - ok

22:40:31.0436 4324 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll

22:40:31.0483 4324 RemoteAccess - ok

22:40:31.0530 4324 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll

22:40:31.0545 4324 RemoteRegistry - ok

22:40:31.0561 4324 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll

22:40:31.0608 4324 RpcEptMapper - ok

22:40:31.0639 4324 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe

22:40:31.0670 4324 RpcLocator - ok

22:40:31.0718 4324 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:40:31.0749 4324 RpcSs - ok

22:40:31.0796 4324 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys

22:40:31.0843 4324 rspndr - ok

22:40:31.0874 4324 RTL8167 (6465166dd9b2f841dabad16abdadbe98) C:\windows\system32\DRIVERS\Rt86win7.sys

22:40:31.0921 4324 RTL8167 - ok

22:40:31.0952 4324 SABI (6e5fbb7cbaec47038b945d5e9b144a64) C:\windows\system32\Drivers\SABI.sys

22:40:32.0014 4324 SABI - ok

22:40:32.0045 4324 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:32.0061 4324 SamSs - ok

22:40:32.0092 4324 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys

22:40:32.0108 4324 sbp2port - ok

22:40:32.0139 4324 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll

22:40:32.0170 4324 SCardSvr - ok

22:40:32.0201 4324 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys

22:40:32.0248 4324 scfilter - ok

22:40:32.0326 4324 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll

22:40:32.0357 4324 Schedule - ok

22:40:32.0389 4324 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:40:32.0420 4324 SCPolicySvc - ok

22:40:32.0451 4324 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll

22:40:32.0482 4324 SDRSVC - ok

22:40:32.0513 4324 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys

22:40:32.0560 4324 secdrv - ok

22:40:32.0591 4324 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll

22:40:32.0623 4324 seclogon - ok

22:40:32.0638 4324 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\system32\sens.dll

22:40:32.0669 4324 SENS - ok

22:40:32.0716 4324 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll

22:40:32.0732 4324 SensrSvc - ok

22:40:32.0747 4324 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys

22:40:32.0779 4324 Serenum - ok

22:40:32.0794 4324 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys

22:40:32.0810 4324 Serial - ok

22:40:32.0857 4324 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys

22:40:32.0888 4324 sermouse - ok

22:40:32.0935 4324 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll

22:40:33.0010 4324 SessionEnv - ok

22:40:33.0041 4324 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys

22:40:33.0088 4324 sffdisk - ok

22:40:33.0103 4324 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys

22:40:33.0119 4324 sffp_mmc - ok

22:40:33.0166 4324 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys

22:40:33.0181 4324 sffp_sd - ok

22:40:33.0197 4324 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys

22:40:33.0228 4324 sfloppy - ok

22:40:33.0259 4324 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\windows\System32\ipnathlp.dll

22:40:33.0306 4324 SharedAccess - ok

22:40:33.0353 4324 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll

22:40:33.0384 4324 ShellHWDetection - ok

22:40:33.0415 4324 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys

22:40:33.0431 4324 sisagp - ok

22:40:33.0462 4324 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys

22:40:33.0478 4324 SiSRaid2 - ok

22:40:33.0493 4324 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys

22:40:33.0493 4324 SiSRaid4 - ok

22:40:33.0524 4324 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys

22:40:33.0571 4324 Smb - ok

22:40:33.0758 4324 SmcService (a58c1a086d9c09c6572c948f22cc0e94) C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

22:40:33.0821 4324 SmcService - ok

22:40:33.0852 4324 SNAC (d2c222441255131e29de351475f98f6d) C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE

22:40:33.0868 4324 SNAC - ok

22:40:33.0961 4324 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe

22:40:33.0992 4324 SNMPTRAP - ok

22:40:34.0189 4324 SPBBCDrv (e621bb5839cf45fa477f48092edd2b40) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

22:40:34.0205 4324 SPBBCDrv - ok

22:40:34.0270 4324 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys

22:40:34.0301 4324 spldr - ok

22:40:34.0384 4324 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe

22:40:34.0418 4324 Spooler - ok

22:40:34.0576 4324 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe

22:40:34.0641 4324 sppsvc - ok

22:40:34.0767 4324 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll

22:40:34.0824 4324 sppuinotify - ok

22:40:34.0904 4324 SpyHunter 4 Service (63f2b52947577dbb075fe646bc758a2f) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

22:40:34.0934 4324 SpyHunter 4 Service - ok

22:40:35.0077 4324 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

22:40:35.0093 4324 SQLBrowser - ok

22:40:35.0124 4324 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

22:40:35.0137 4324 SQLWriter - ok

22:40:35.0190 4324 SRTSP (2abf82c8452ab0b9ffc74a2d5da91989) C:\windows\system32\Drivers\SRTSP.SYS

22:40:35.0193 4324 SRTSP - ok

22:40:35.0224 4324 SRTSPL (e2f9e5887bea5bd8784d337e06eda31b) C:\windows\system32\Drivers\SRTSPL.SYS

22:40:35.0263 4324 SRTSPL - ok

22:40:35.0278 4324 SRTSPX (3b974c158fabd910186f98df8d3e23f3) C:\windows\system32\Drivers\SRTSPX.SYS

22:40:35.0293 4324 SRTSPX - ok

22:40:35.0312 4324 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys

22:40:35.0343 4324 srv - ok

22:40:35.0394 4324 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys

22:40:35.0410 4324 srv2 - ok

22:40:35.0448 4324 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys

22:40:35.0478 4324 srvnet - ok

22:40:35.0514 4324 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll

22:40:35.0546 4324 SSDPSRV - ok

22:40:35.0571 4324 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll

22:40:35.0592 4324 SstpSvc - ok

22:40:35.0623 4324 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys

22:40:35.0639 4324 stexstor - ok

22:40:35.0685 4324 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll

22:40:35.0716 4324 StiSvc - ok

22:40:35.0747 4324 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys

22:40:35.0763 4324 swenum - ok

22:40:35.0778 4324 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll

22:40:35.0810 4324 swprv - ok

22:40:36.0321 4324 Symantec AntiVirus (ba2fb8f8ab24d0279caa98a4c118150e) C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

22:40:36.0373 4324 Symantec AntiVirus - ok

22:40:36.0788 4324 SymEvent (a54ff04bd6e75dc4d8cb6f3e352635e0) C:\windows\system32\Drivers\SYMEVENT.SYS

22:40:36.0811 4324 SymEvent - ok

22:40:36.0858 4324 SYMREDRV (394b2368212114d538316812af60fddd) C:\windows\System32\Drivers\SYMREDRV.SYS

22:40:36.0876 4324 SYMREDRV - ok

22:40:36.0951 4324 SYMTDI (d46676bb414c7531bdffe637a33f5033) C:\windows\System32\Drivers\SYMTDI.SYS

22:40:36.0966 4324 SYMTDI - ok

22:40:37.0021 4324 SynTP (7a9025d8f7852b06d6d08ed536135e7e) C:\windows\system32\DRIVERS\SynTP.sys

22:40:37.0036 4324 SynTP - ok

22:40:37.0130 4324 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll

22:40:37.0177 4324 SysMain - ok

22:40:37.0512 4324 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll

22:40:37.0527 4324 TabletInputService - ok

22:40:37.0574 4324 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll

22:40:37.0605 4324 TapiSrv - ok

22:40:37.0636 4324 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll

22:40:37.0683 4324 TBS - ok

22:40:37.0808 4324 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\drivers\tcpip.sys

22:40:37.0839 4324 Tcpip - ok

22:40:37.0855 4324 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\DRIVERS\tcpip.sys

22:40:37.0886 4324 TCPIP6 - ok

22:40:37.0933 4324 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys

22:40:37.0980 4324 tcpipreg - ok

22:40:38.0026 4324 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys

22:40:38.0073 4324 TDPIPE - ok

22:40:38.0120 4324 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys

22:40:38.0136 4324 TDTCP - ok

22:40:38.0214 4324 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys

22:40:38.0229 4324 tdx - ok

22:40:38.0510 4324 TeamViewer6 (839e88db24d2d8f05b72e12b175951ca) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

22:40:38.0557 4324 TeamViewer6 - ok

22:40:38.0697 4324 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys

22:40:38.0744 4324 TermDD - ok

22:40:38.0791 4324 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll

22:40:38.0822 4324 TermService - ok

22:40:38.0853 4324 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll

22:40:38.0900 4324 Themes - ok

22:40:38.0931 4324 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:40:38.0962 4324 THREADORDER - ok

22:40:38.0978 4324 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll

22:40:39.0025 4324 TrkWks - ok

22:40:39.0103 4324 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe

22:40:39.0134 4324 TrustedInstaller - ok

22:40:39.0165 4324 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys

22:40:39.0196 4324 tssecsrv - ok

22:40:39.0243 4324 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys

22:40:39.0259 4324 TsUsbFlt - ok

22:40:39.0290 4324 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys

22:40:39.0337 4324 tunnel - ok

22:40:39.0368 4324 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys

22:40:39.0384 4324 uagp35 - ok

22:40:39.0430 4324 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys

22:40:39.0462 4324 udfs - ok

22:40:39.0477 4324 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe

22:40:39.0508 4324 UI0Detect - ok

22:40:39.0555 4324 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys

22:40:39.0571 4324 uliagpkx - ok

22:40:39.0602 4324 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys

22:40:39.0618 4324 umbus - ok

22:40:39.0649 4324 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys

22:40:39.0680 4324 UmPass - ok

22:40:39.0711 4324 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll

22:40:39.0742 4324 upnphost - ok

22:40:39.0774 4324 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\windows\system32\Drivers\usbaapl.sys

22:40:39.0805 4324 USBAAPL - ok

22:40:39.0852 4324 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys

22:40:39.0914 4324 usbccgp - ok

22:40:39.0945 4324 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys

22:40:39.0992 4324 usbcir - ok

22:40:40.0008 4324 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys

22:40:40.0023 4324 usbehci - ok

22:40:40.0054 4324 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys

22:40:40.0086 4324 usbhub - ok

22:40:40.0117 4324 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\drivers\usbohci.sys

22:40:40.0148 4324 usbohci - ok

22:40:40.0179 4324 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys

22:40:40.0195 4324 usbprint - ok

22:40:40.0226 4324 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys

22:40:40.0242 4324 usbscan - ok

22:40:40.0257 4324 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\drivers\USBSTOR.SYS

22:40:40.0320 4324 USBSTOR - ok

22:40:40.0351 4324 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\DRIVERS\usbuhci.sys

22:40:40.0382 4324 usbuhci - ok

22:40:40.0429 4324 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys

22:40:40.0476 4324 usbvideo - ok

22:40:40.0522 4324 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll

22:40:40.0569 4324 UxSms - ok

22:40:40.0600 4324 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:40.0616 4324 VaultSvc - ok

22:40:40.0647 4324 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys

22:40:40.0663 4324 vdrvroot - ok

22:40:40.0725 4324 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe

22:40:40.0756 4324 vds - ok

22:40:40.0788 4324 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys

22:40:40.0803 4324 vga - ok

22:40:40.0819 4324 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys

22:40:40.0866 4324 VgaSave - ok

22:40:40.0912 4324 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys

22:40:40.0928 4324 vhdmp - ok

22:40:40.0975 4324 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys

22:40:40.0975 4324 viaagp - ok

22:40:40.0990 4324 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys

22:40:41.0006 4324 ViaC7 - ok

22:40:41.0037 4324 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys

22:40:41.0053 4324 viaide - ok

22:40:41.0084 4324 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys

22:40:41.0100 4324 volmgr - ok

22:40:41.0131 4324 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys

22:40:41.0146 4324 volmgrx - ok

22:40:41.0193 4324 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys

22:40:41.0209 4324 volsnap - ok

22:40:41.0224 4324 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys

22:40:41.0240 4324 vsmraid - ok

22:40:41.0318 4324 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe

22:40:41.0380 4324 VSS - ok

22:40:41.0412 4324 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys

22:40:41.0443 4324 vwifibus - ok

22:40:41.0474 4324 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys

22:40:41.0490 4324 vwififlt - ok

22:40:41.0505 4324 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys

22:40:41.0552 4324 vwifimp - ok

22:40:41.0599 4324 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll

22:40:41.0630 4324 W32Time - ok

22:40:41.0661 4324 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys

22:40:41.0708 4324 WacomPen - ok

22:40:41.0739 4324 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:40:41.0770 4324 WANARP - ok

22:40:41.0770 4324 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:40:41.0802 4324 Wanarpv6 - ok

22:40:41.0880 4324 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe

22:40:41.0911 4324 WatAdminSvc - ok

22:40:41.0989 4324 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe

22:40:42.0036 4324 wbengine - ok

22:40:42.0082 4324 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll

22:40:42.0129 4324 WbioSrvc - ok

22:40:42.0176 4324 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll

22:40:42.0223 4324 wcncsvc - ok

22:40:42.0238 4324 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll

22:40:42.0270 4324 WcsPlugInService - ok

22:40:42.0332 4324 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys

22:40:42.0348 4324 Wd - ok

22:40:42.0379 4324 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys

22:40:42.0410 4324 Wdf01000 - ok

22:40:42.0426 4324 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:40:42.0472 4324 WdiServiceHost - ok

22:40:42.0472 4324 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:40:42.0488 4324 WdiSystemHost - ok

22:40:42.0535 4324 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll

22:40:42.0582 4324 WebClient - ok

22:40:42.0597 4324 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll

22:40:42.0644 4324 Wecsvc - ok

22:40:42.0675 4324 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll

22:40:42.0722 4324 wercplsupport - ok

22:40:42.0753 4324 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll

22:40:42.0784 4324 WerSvc - ok

22:40:42.0800 4324 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys

22:40:42.0862 4324 WfpLwf - ok

22:40:42.0878 4324 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys

22:40:42.0894 4324 WIMMount - ok

22:40:42.0972 4324 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

22:40:43.0018 4324 WinDefend - ok

22:40:43.0034 4324 WinHttpAutoProxySvc - ok

22:40:43.0096 4324 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll

22:40:43.0143 4324 Winmgmt - ok

22:40:43.0221 4324 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll

22:40:43.0268 4324 WinRM - ok

22:40:43.0330 4324 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys

22:40:43.0377 4324 WinUsb - ok

22:40:43.0471 4324 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll

22:40:43.0518 4324 Wlansvc - ok

22:40:43.0658 4324 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

22:40:43.0720 4324 wlidsvc - ok

22:40:43.0830 4324 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys

22:40:43.0876 4324 WmiAcpi - ok

22:40:43.0954 4324 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe

22:40:43.0986 4324 wmiApSrv - ok

22:40:44.0110 4324 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

22:40:44.0142 4324 WMPNetworkSvc - ok

22:40:44.0173 4324 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll

22:40:44.0204 4324 WPCSvc - ok

22:40:44.0235 4324 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll

22:40:44.0266 4324 WPDBusEnum - ok

22:40:44.0329 4324 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys

22:40:44.0360 4324 ws2ifsl - ok

22:40:44.0391 4324 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\system32\wscsvc.dll

22:40:44.0407 4324 wscsvc - ok

22:40:44.0407 4324 WSearch - ok

22:40:44.0516 4324 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\windows\system32\wuaueng.dll

22:40:44.0563 4324 wuauserv - ok

22:40:44.0688 4324 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys

22:40:44.0750 4324 WudfPf - ok

22:40:44.0766 4324 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys

22:40:44.0797 4324 WUDFRd - ok

22:40:44.0828 4324 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll

22:40:44.0875 4324 wudfsvc - ok

22:40:44.0922 4324 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll

22:40:44.0953 4324 WwanSvc - ok

22:40:44.0984 4324 MBR (0x1B8) (2e5debb2116b3417023e0d6562d7ed07) \Device\Harddisk0\DR0

22:40:45.0327 4324 \Device\Harddisk0\DR0 - ok

22:40:45.0327 4324 Boot (0x1200) (5fb009d8d1bbe104d22d071977f32a2a) \Device\Harddisk0\DR0\Partition0

22:40:45.0327 4324 \Device\Harddisk0\DR0\Partition0 - ok

22:40:45.0358 4324 Boot (0x1200) (d5688b55e165a627667567455a328efc) \Device\Harddisk0\DR0\Partition1

22:40:45.0358 4324 \Device\Harddisk0\DR0\Partition1 - ok

22:40:45.0390 4324 Boot (0x1200) (78ee0a60b0242cd51c89824323794145) \Device\Harddisk0\DR0\Partition2

22:40:45.0390 4324 \Device\Harddisk0\DR0\Partition2 - ok

22:40:45.0390 4324 ============================================================

22:40:45.0390 4324 Scan finished

22:40:45.0390 4324 ============================================================

22:40:45.0405 5164 Detected object count: 2

22:40:45.0405 5164 Actual detected object count: 2

22:41:23.0208 5164 atksgt ( UnsignedFile.Multi.Generic ) - skipped by user

22:41:23.0208 5164 atksgt ( UnsignedFile.Multi.Generic ) - User select action: Skip

22:41:23.0224 5164 lirsgt ( UnsignedFile.Multi.Generic ) - skipped by user

22:41:23.0224 5164 lirsgt ( UnsignedFile.Multi.Generic ) - User select action: Skip

22:41:50.0368 4036 ============================================================

22:41:50.0368 4036 Scan started

22:41:50.0368 4036 Mode: Manual; SigCheck; TDLFS;

22:41:50.0368 4036 ============================================================

22:41:50.0618 4036 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys

22:41:50.0664 4036 1394ohci - ok

22:41:50.0711 4036 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys

22:41:50.0727 4036 ACPI - ok

22:41:50.0742 4036 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys

22:41:50.0758 4036 AcpiPmi - ok

22:41:50.0789 4036 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys

22:41:50.0820 4036 adp94xx - ok

22:41:50.0836 4036 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys

22:41:50.0852 4036 adpahci - ok

22:41:50.0883 4036 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys

22:41:50.0883 4036 adpu320 - ok

22:41:50.0914 4036 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll

22:41:50.0930 4036 AeLookupSvc - ok

22:41:50.0976 4036 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys

22:41:50.0992 4036 AFD - ok

22:41:51.0023 4036 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys

22:41:51.0023 4036 agp440 - ok

22:41:51.0054 4036 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys

22:41:51.0070 4036 aic78xx - ok

22:41:51.0086 4036 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe

22:41:51.0101 4036 ALG - ok

22:41:51.0132 4036 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys

22:41:51.0148 4036 aliide - ok

22:41:51.0164 4036 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys

22:41:51.0179 4036 amdagp - ok

22:41:51.0210 4036 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys

22:41:51.0210 4036 amdide - ok

22:41:51.0226 4036 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys

22:41:51.0242 4036 AmdK8 - ok

22:41:51.0288 4036 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys

22:41:51.0304 4036 AmdPPM - ok

22:41:51.0335 4036 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys

22:41:51.0335 4036 amdsata - ok

22:41:51.0382 4036 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys

22:41:51.0398 4036 amdsbs - ok

22:41:51.0413 4036 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys

22:41:51.0429 4036 amdxata - ok

22:41:51.0460 4036 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys

22:41:51.0491 4036 AppID - ok

22:41:51.0507 4036 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll

22:41:51.0538 4036 AppIDSvc - ok

22:41:51.0569 4036 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll

22:41:51.0600 4036 Appinfo - ok

22:41:51.0678 4036 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

22:41:51.0710 4036 Apple Mobile Device - ok

22:41:51.0741 4036 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys

22:41:51.0772 4036 arc - ok

22:41:51.0788 4036 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys

22:41:51.0803 4036 arcsas - ok

22:41:51.0819 4036 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys

22:41:51.0850 4036 AsyncMac - ok

22:41:51.0881 4036 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys

22:41:51.0897 4036 atapi - ok

22:41:51.0959 4036 athr (de0fbcccd6af0f0e7bf12e8d041cc48f) C:\windows\system32\DRIVERS\athr.sys

22:41:51.0990 4036 athr - ok

22:41:52.0037 4036 atksgt (6e996cf8459a2594e0e9609d0e34d41f) C:\windows\system32\DRIVERS\atksgt.sys

22:41:52.0037 4036 atksgt ( UnsignedFile.Multi.Generic ) - warning

22:41:52.0037 4036 atksgt - detected UnsignedFile.Multi.Generic (1)

22:41:52.0334 4036 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:41:52.0380 4036 AudioEndpointBuilder - ok

22:41:52.0380 4036 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:41:52.0412 4036 Audiosrv - ok

22:41:52.0443 4036 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll

22:41:52.0458 4036 AxInstSV - ok

22:41:52.0505 4036 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys

22:41:52.0521 4036 b06bdrv - ok

22:41:52.0536 4036 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys

22:41:52.0552 4036 b57nd60x - ok

22:41:52.0599 4036 BcmSqlStartupSvc (6163664c7e9cd110af70180c126c3fdc) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

22:41:52.0614 4036 BcmSqlStartupSvc - ok

22:41:52.0646 4036 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll

22:41:52.0661 4036 BDESVC - ok

22:41:52.0724 4036 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys

22:41:52.0755 4036 Beep - ok

22:41:52.0802 4036 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll

22:41:52.0833 4036 BFE - ok

22:41:52.0864 4036 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\system32\qmgr.dll

22:41:52.0895 4036 BITS - ok

22:41:52.0911 4036 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys

22:41:52.0926 4036 blbdrive - ok

22:41:52.0989 4036 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe

22:41:53.0020 4036 Bonjour Service - ok

22:41:53.0051 4036 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys

22:41:53.0067 4036 bowser - ok

22:41:53.0082 4036 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys

22:41:53.0098 4036 BrFiltLo - ok

22:41:53.0129 4036 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys

22:41:53.0129 4036 BrFiltUp - ok

22:41:53.0145 4036 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\windows\system32\DRIVERS\bridge.sys

22:41:53.0176 4036 BridgeMP - ok

22:41:53.0223 4036 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll

22:41:53.0238 4036 Browser - ok

22:41:53.0285 4036 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys

22:41:53.0301 4036 Brserid - ok

22:41:53.0301 4036 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys

22:41:53.0316 4036 BrSerWdm - ok

22:41:53.0348 4036 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys

22:41:53.0363 4036 BrUsbMdm - ok

22:41:53.0394 4036 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys

22:41:53.0394 4036 BrUsbSer - ok

22:41:53.0410 4036 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys

22:41:53.0426 4036 BTHMODEM - ok

22:41:53.0457 4036 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll

22:41:53.0488 4036 bthserv - ok

22:41:53.0535 4036 catchme - ok

22:41:53.0613 4036 ccEvtMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:41:53.0628 4036 ccEvtMgr - ok

22:41:53.0644 4036 ccSetMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:41:53.0660 4036 ccSetMgr - ok

22:41:53.0675 4036 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys

22:41:53.0706 4036 cdfs - ok

22:41:53.0738 4036 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\DRIVERS\cdrom.sys

22:41:53.0753 4036 cdrom - ok

22:41:53.0784 4036 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:41:53.0816 4036 CertPropSvc - ok

22:41:53.0831 4036 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys

22:41:53.0847 4036 circlass - ok

22:41:53.0878 4036 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys

22:41:53.0894 4036 CLFS - ok

22:41:53.0956 4036 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

22:41:53.0972 4036 clr_optimization_v2.0.50727_32 - ok

22:41:54.0034 4036 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

22:41:54.0065 4036 clr_optimization_v4.0.30319_32 - ok

22:41:54.0096 4036 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys

22:41:54.0096 4036 CmBatt - ok

22:41:54.0128 4036 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys

22:41:54.0143 4036 cmdide - ok

22:41:54.0190 4036 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys

22:41:54.0206 4036 CNG - ok

22:41:54.0221 4036 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys

22:41:54.0237 4036 Compbatt - ok

22:41:54.0268 4036 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys

22:41:54.0284 4036 CompositeBus - ok

22:41:54.0284 4036 COMSysApp - ok

22:41:54.0299 4036 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys

22:41:54.0315 4036 crcdisk - ok

22:41:54.0346 4036 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\windows\system32\cryptsvc.dll

22:41:54.0362 4036 CryptSvc - ok

22:41:54.0393 4036 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\windows\system32\DRIVERS\ctxusbm.sys

22:41:54.0408 4036 ctxusbm - ok

22:41:54.0455 4036 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:41:54.0486 4036 DcomLaunch - ok

22:41:54.0518 4036 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll

22:41:54.0549 4036 defragsvc - ok

22:41:54.0580 4036 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys

22:41:54.0611 4036 DfsC - ok

22:41:54.0627 4036 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll

22:41:54.0658 4036 Dhcp - ok

22:41:54.0689 4036 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys

22:41:54.0720 4036 discache - ok

22:41:54.0720 4036 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys

22:41:54.0736 4036 Disk - ok

22:41:54.0783 4036 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll

22:41:54.0798 4036 Dnscache - ok

22:41:54.0845 4036 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll

22:41:54.0861 4036 dot3svc - ok

22:41:54.0892 4036 Dot4 (b5e479eb83707dd698f66953e922042c) C:\windows\system32\DRIVERS\Dot4.sys

22:41:54.0908 4036 Dot4 - ok

22:41:54.0939 4036 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\windows\system32\drivers\Dot4Prt.sys

22:41:54.0954 4036 Dot4Print - ok

22:41:54.0986 4036 dot4usb (cf491ff38d62143203c065260567e2f7) C:\windows\system32\DRIVERS\dot4usb.sys

22:41:55.0001 4036 dot4usb - ok

22:41:55.0032 4036 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll

22:41:55.0064 4036 DPS - ok

22:41:55.0079 4036 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys

22:41:55.0095 4036 drmkaud - ok

22:41:55.0126 4036 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\windows\system32\DRIVERS\dtsoftbus01.sys

22:41:55.0142 4036 dtsoftbus01 - ok

22:41:55.0204 4036 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys

22:41:55.0235 4036 DXGKrnl - ok

22:41:55.0266 4036 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll

22:41:55.0298 4036 EapHost - ok

22:41:55.0454 4036 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys

22:41:55.0500 4036 ebdrv - ok

22:41:55.0594 4036 eeCtrl (fce87ba643d5e9a8b6e0378508d1b22d) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

22:41:55.0610 4036 eeCtrl - ok

22:41:55.0719 4036 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe

22:41:55.0734 4036 EFS - ok

22:41:55.0937 4036 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe

22:41:55.0968 4036 ehRecvr - ok

22:41:55.0984 4036 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe

22:41:56.0000 4036 ehSched - ok

22:41:56.0062 4036 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys

22:41:56.0078 4036 elxstor - ok

22:41:56.0156 4036 EraserUtilRebootDrv (115dc729465a8c386615207f28875255) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

22:41:56.0171 4036 EraserUtilRebootDrv - ok

22:41:56.0202 4036 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys

22:41:56.0234 4036 ErrDev - ok

22:41:56.0280 4036 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll

22:41:56.0312 4036 EventSystem - ok

22:41:56.0343 4036 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys

22:41:56.0374 4036 exfat - ok

22:41:56.0390 4036 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys

22:41:56.0421 4036 fastfat - ok

22:41:56.0468 4036 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe

22:41:56.0483 4036 Fax - ok

22:41:56.0499 4036 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys

22:41:56.0514 4036 fdc - ok

22:41:56.0530 4036 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll

22:41:56.0561 4036 fdPHost - ok

22:41:56.0577 4036 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll

22:41:56.0608 4036 FDResPub - ok

22:41:56.0624 4036 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys

22:41:56.0639 4036 FileInfo - ok

22:41:56.0655 4036 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys

22:41:56.0686 4036 Filetrace - ok

22:41:56.0702 4036 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys

22:41:56.0717 4036 flpydisk - ok

22:41:56.0733 4036 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys

22:41:56.0748 4036 FltMgr - ok

22:41:56.0811 4036 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll

22:41:56.0842 4036 FontCache - ok

22:41:56.0904 4036 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

22:41:56.0920 4036 FontCache3.0.0.0 - ok

22:41:56.0936 4036 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys

22:41:56.0951 4036 FsDepends - ok

22:41:56.0982 4036 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys

22:41:56.0982 4036 fssfltr - ok

22:41:57.0154 4036 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

22:41:57.0185 4036 fsssvc - ok

22:41:57.0310 4036 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys

22:41:57.0341 4036 Fs_Rec - ok

22:41:57.0372 4036 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys

22:41:57.0404 4036 fvevol - ok

22:41:57.0419 4036 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys

22:41:57.0435 4036 gagp30kx - ok

22:41:57.0482 4036 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys

22:41:57.0482 4036 GEARAspiWDM - ok

22:41:57.0544 4036 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll

22:41:57.0575 4036 gpsvc - ok

22:41:57.0653 4036 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:41:57.0669 4036 gupdate - ok

22:41:57.0669 4036 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:41:57.0684 4036 gupdatem - ok

22:41:57.0716 4036 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

22:41:57.0731 4036 gusvc - ok

22:41:57.0762 4036 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys

22:41:57.0778 4036 hcw85cir - ok

22:41:57.0809 4036 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys

22:41:57.0840 4036 HdAudAddService - ok

22:41:57.0856 4036 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys

22:41:57.0872 4036 HDAudBus - ok

22:41:57.0872 4036 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys

22:41:57.0887 4036 HidBatt - ok

22:41:57.0903 4036 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys

22:41:57.0918 4036 HidBth - ok

22:41:57.0950 4036 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys

22:41:57.0965 4036 HidIr - ok

22:41:57.0981 4036 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\System32\hidserv.dll

22:41:58.0012 4036 hidserv - ok

22:41:58.0043 4036 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys

22:41:58.0059 4036 HidUsb - ok

22:41:58.0090 4036 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll

22:41:58.0137 4036 hkmsvc - ok

22:41:58.0152 4036 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll

22:41:58.0168 4036 HomeGroupListener - ok

22:41:58.0215 4036 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll

22:41:58.0230 4036 HomeGroupProvider - ok

22:41:58.0262 4036 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys

22:41:58.0277 4036 HpSAMD - ok

22:41:58.0308 4036 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys

22:41:58.0355 4036 HTTP - ok

22:41:58.0371 4036 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys

22:41:58.0371 4036 hwpolicy - ok

22:41:58.0418 4036 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys

22:41:58.0433 4036 i8042prt - ok

22:41:58.0496 4036 IAANTMON (7548066df68a8a1a56b043359f915f37) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

22:41:58.0511 4036 IAANTMON - ok

22:41:58.0558 4036 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys

22:41:58.0574 4036 iaStor - ok

22:41:58.0620 4036 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys

22:41:58.0636 4036 iaStorV - ok

22:41:58.0730 4036 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

22:41:58.0761 4036 idsvc - ok

22:41:59.0166 4036 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\windows\system32\DRIVERS\igdkmd32.sys

22:41:59.0291 4036 igfx - ok

22:41:59.0400 4036 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys

22:41:59.0416 4036 iirsp - ok

22:41:59.0478 4036 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll

22:41:59.0525 4036 IKEEXT - ok

22:41:59.0666 4036 IntcAzAudAddService (5ceef2cccb4fe00d3ffbfeb12bcfa07f) C:\windows\system32\drivers\RTKVHDA.sys

22:41:59.0728 4036 IntcAzAudAddService - ok

22:41:59.0837 4036 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys

22:41:59.0853 4036 intelide - ok

22:41:59.0884 4036 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys

22:41:59.0915 4036 intelppm - ok

22:41:59.0946 4036 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll

22:41:59.0962 4036 IPBusEnum - ok

22:41:59.0993 4036 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys

22:42:00.0024 4036 IpFilterDriver - ok

22:42:00.0056 4036 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\windows\System32\iphlpsvc.dll

22:42:00.0087 4036 iphlpsvc - ok

22:42:00.0134 4036 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys

22:42:00.0149 4036 IPMIDRV - ok

22:42:00.0180 4036 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys

22:42:00.0227 4036 IPNAT - ok

22:42:00.0305 4036 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Program Files\iPod\bin\iPodService.exe

22:42:00.0336 4036 iPod Service - ok

22:42:00.0368 4036 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys

22:42:00.0383 4036 IRENUM - ok

22:42:00.0399 4036 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys

22:42:00.0414 4036 isapnp - ok

22:42:00.0446 4036 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys

22:42:00.0461 4036 iScsiPrt - ok

22:42:00.0492 4036 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys

22:42:00.0508 4036 kbdclass - ok

22:42:00.0524 4036 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys

22:42:00.0539 4036 kbdhid - ok

22:42:00.0570 4036 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:00.0586 4036 KeyIso - ok

22:42:00.0602 4036 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys

22:42:00.0617 4036 KSecDD - ok

22:42:00.0633 4036 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys

22:42:00.0633 4036 KSecPkg - ok

22:42:00.0664 4036 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll

22:42:00.0695 4036 KtmRm - ok

22:42:00.0742 4036 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\System32\srvsvc.dll

22:42:00.0773 4036 LanmanServer - ok

22:42:00.0820 4036 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll

22:42:00.0851 4036 LanmanWorkstation - ok

22:42:00.0882 4036 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\windows\system32\DRIVERS\lirsgt.sys

22:42:00.0898 4036 lirsgt ( UnsignedFile.Multi.Generic ) - warning

22:42:00.0898 4036 lirsgt - detected UnsignedFile.Multi.Generic (1)

22:42:01.0101 4036 LiveUpdate (e34152d03caaaaa81dd66d803f392522) C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

22:42:01.0163 4036 LiveUpdate - ok

22:42:01.0272 4036 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys

22:42:01.0304 4036 lltdio - ok

22:42:01.0350 4036 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll

22:42:01.0382 4036 lltdsvc - ok

22:42:01.0382 4036 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll

22:42:01.0413 4036 lmhosts - ok

22:42:01.0444 4036 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys

22:42:01.0460 4036 LSI_FC - ok

22:42:01.0460 4036 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys

22:42:01.0475 4036 LSI_SAS - ok

22:42:01.0506 4036 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys

22:42:01.0522 4036 LSI_SAS2 - ok

22:42:01.0522 4036 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys

22:42:01.0538 4036 LSI_SCSI - ok

22:42:01.0569 4036 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys

22:42:01.0600 4036 luafv - ok

22:42:01.0678 4036 lxeeCATSCustConnectService (a9d8d63c7378dd34e4e19036093a9264) C:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe

22:42:01.0694 4036 lxeeCATSCustConnectService - ok

22:42:01.0709 4036 lxee_device - ok

22:42:01.0740 4036 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll

22:42:01.0756 4036 Mcx2Svc - ok

22:42:01.0772 4036 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys

22:42:01.0787 4036 megasas - ok

22:42:01.0818 4036 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys

22:42:01.0834 4036 MegaSR - ok

22:42:01.0912 4036 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

22:42:01.0943 4036 Microsoft Office Groove Audit Service - ok

22:42:01.0959 4036 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:42:02.0006 4036 MMCSS - ok

22:42:02.0021 4036 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys

22:42:02.0052 4036 Modem - ok

22:42:02.0068 4036 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys

22:42:02.0084 4036 monitor - ok

22:42:02.0130 4036 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys

22:42:02.0130 4036 mouclass - ok

22:42:02.0146 4036 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys

22:42:02.0162 4036 mouhid - ok

22:42:02.0193 4036 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys

22:42:02.0208 4036 mountmgr - ok

22:42:02.0255 4036 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys

22:42:02.0255 4036 mpio - ok

22:42:02.0286 4036 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys

22:42:02.0318 4036 mpsdrv - ok

22:42:02.0364 4036 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\windows\system32\mpssvc.dll

22:42:02.0396 4036 MpsSvc - ok

22:42:02.0442 4036 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys

22:42:02.0458 4036 MRxDAV - ok

22:42:02.0505 4036 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys

22:42:02.0520 4036 mrxsmb - ok

22:42:02.0567 4036 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys

22:42:02.0583 4036 mrxsmb10 - ok

22:42:02.0598 4036 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys

22:42:02.0614 4036 mrxsmb20 - ok

22:42:02.0645 4036 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys

22:42:02.0661 4036 msahci - ok

22:42:02.0692 4036 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys

22:42:02.0708 4036 msdsm - ok

22:42:02.0723 4036 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe

22:42:02.0739 4036 MSDTC - ok

22:42:02.0786 4036 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys

22:42:02.0801 4036 Msfs - ok

22:42:02.0817 4036 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys

22:42:02.0848 4036 mshidkmdf - ok

22:42:02.0879 4036 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys

22:42:02.0895 4036 msisadrv - ok

22:42:02.0926 4036 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll

22:42:02.0942 4036 MSiSCSI - ok

22:42:02.0957 4036 msiserver - ok

22:42:02.0973 4036 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys

22:42:03.0004 4036 MSKSSRV - ok

22:42:03.0020 4036 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys

22:42:03.0051 4036 MSPCLOCK - ok

22:42:03.0051 4036 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys

22:42:03.0082 4036 MSPQM - ok

22:42:03.0113 4036 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys

22:42:03.0129 4036 MsRPC - ok

22:42:03.0176 4036 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys

22:42:03.0191 4036 mssmbios - ok

22:42:03.0285 4036 MSSQL$MSSMLBIZ - ok

22:42:03.0316 4036 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe

22:42:03.0332 4036 MSSQLServerADHelper - ok

22:42:03.0363 4036 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys

22:42:03.0378 4036 MSTEE - ok

22:42:03.0394 4036 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys

22:42:03.0410 4036 MTConfig - ok

22:42:03.0425 4036 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys

22:42:03.0441 4036 Mup - ok

22:42:03.0488 4036 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll

22:42:03.0519 4036 napagent - ok

22:42:03.0534 4036 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys

22:42:03.0566 4036 NativeWifiP - ok

22:42:03.0675 4036 NAVENG (f11033730b38260b6892e837c457fb4b) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVENG.SYS

22:42:03.0690 4036 NAVENG - ok

22:42:03.0768 4036 NAVEX15 (4e4e7c0259d3bb97de24a636c0e06aba) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVEX15.SYS

22:42:03.0815 4036 NAVEX15 - ok

22:42:03.0940 4036 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys

22:42:03.0971 4036 NDIS - ok

22:42:04.0002 4036 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys

22:42:04.0034 4036 NdisCap - ok

22:42:04.0049 4036 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys

22:42:04.0065 4036 NdisTapi - ok

22:42:04.0112 4036 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys

22:42:04.0127 4036 Ndisuio - ok

22:42:04.0174 4036 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys

22:42:04.0190 4036 NdisWan - ok

22:42:04.0236 4036 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys

22:42:04.0252 4036 NDProxy - ok

22:42:04.0268 4036 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys

22:42:04.0299 4036 NetBIOS - ok

22:42:04.0346 4036 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys

22:42:04.0377 4036 NetBT - ok

22:42:04.0408 4036 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:04.0424 4036 Netlogon - ok

22:42:04.0455 4036 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll

22:42:04.0486 4036 Netman - ok

22:42:04.0502 4036 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll

22:42:04.0533 4036 netprofm - ok

22:42:04.0595 4036 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

22:42:04.0626 4036 NetTcpPortSharing - ok

22:42:04.0642 4036 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys

22:42:04.0658 4036 nfrd960 - ok

22:42:04.0704 4036 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll

22:42:04.0736 4036 NlaSvc - ok

22:42:04.0751 4036 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys

22:42:04.0767 4036 Npfs - ok

22:42:04.0798 4036 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll

22:42:04.0829 4036 nsi - ok

22:42:04.0845 4036 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys

22:42:04.0876 4036 nsiproxy - ok

22:42:04.0970 4036 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys

22:42:05.0001 4036 Ntfs - ok

22:42:05.0032 4036 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys

22:42:05.0063 4036 Null - ok

22:42:05.0094 4036 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys

22:42:05.0110 4036 nvraid - ok

22:42:05.0141 4036 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys

22:42:05.0157 4036 nvstor - ok

22:42:05.0172 4036 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys

22:42:05.0188 4036 nv_agp - ok

22:42:05.0250 4036 OberonGameConsoleService (b5d5da8230d3d3525839d939a9196c3e) C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

22:42:05.0266 4036 OberonGameConsoleService - ok

22:42:05.0360 4036 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

22:42:05.0391 4036 odserv - ok

22:42:05.0406 4036 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys

22:42:05.0422 4036 ohci1394 - ok

22:42:05.0453 4036 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

22:42:05.0469 4036 ose - ok

22:42:05.0500 4036 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:42:05.0516 4036 p2pimsvc - ok

22:42:05.0562 4036 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll

22:42:05.0578 4036 p2psvc - ok

22:42:05.0609 4036 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys

22:42:05.0625 4036 Parport - ok

22:42:05.0656 4036 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\windows\system32\drivers\partmgr.sys

22:42:05.0672 4036 partmgr - ok

22:42:05.0672 4036 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys

22:42:05.0687 4036 Parvdm - ok

22:42:05.0703 4036 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll

22:42:05.0734 4036 PcaSvc - ok

22:42:05.0765 4036 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys

22:42:05.0781 4036 pci - ok

22:42:05.0812 4036 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys

22:42:05.0828 4036 pciide - ok

22:42:05.0859 4036 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys

22:42:05.0874 4036 pcmcia - ok

22:42:05.0874 4036 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys

22:42:05.0890 4036 pcw - ok

22:42:05.0921 4036 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys

22:42:05.0968 4036 PEAUTH - ok

22:42:06.0062 4036 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll

22:42:06.0108 4036 pla - ok

22:42:06.0218 4036 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll

22:42:06.0249 4036 PlugPlay - ok

22:42:06.0264 4036 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll

22:42:06.0280 4036 PNRPAutoReg - ok

22:42:06.0311 4036 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:42:06.0327 4036 PNRPsvc - ok

22:42:06.0374 4036 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll

22:42:06.0405 4036 PolicyAgent - ok

22:42:06.0452 4036 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll

22:42:06.0467 4036 Power - ok

22:42:06.0530 4036 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys

22:42:06.0545 4036 PptpMiniport - ok

22:42:06.0561 4036 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys

22:42:06.0576 4036 Processor - ok

22:42:06.0592 4036 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\windows\system32\profsvc.dll

22:42:06.0608 4036 ProfSvc - ok

22:42:06.0623 4036 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:06.0639 4036 ProtectedStorage - ok

22:42:06.0654 4036 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys

22:42:06.0686 4036 Psched - ok

22:42:06.0764 4036 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys

22:42:06.0810 4036 ql2300 - ok

22:42:06.0904 4036 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys

22:42:06.0920 4036 ql40xx - ok

22:42:06.0951 4036 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll

22:42:06.0966 4036 QWAVE - ok

22:42:06.0982 4036 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys

22:42:06.0998 4036 QWAVEdrv - ok

22:42:07.0013 4036 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys

22:42:07.0044 4036 RasAcd - ok

22:42:07.0060 4036 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys

22:42:07.0091 4036 RasAgileVpn - ok

22:42:07.0122 4036 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll

22:42:07.0138 4036 RasAuto - ok

22:42:07.0169 4036 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys

22:42:07.0185 4036 Rasl2tp - ok

22:42:07.0232 4036 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll

22:42:07.0263 4036 RasMan - ok

22:42:07.0294 4036 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys

22:42:07.0310 4036 RasPppoe - ok

22:42:07.0325 4036 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys

22:42:07.0356 4036 RasSstp - ok

22:42:07.0372 4036 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys

22:42:07.0403 4036 rdbss - ok

22:42:07.0419 4036 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys

22:42:07.0434 4036 rdpbus - ok

22:42:07.0466 4036 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys

22:42:07.0497 4036 RDPCDD - ok

22:42:07.0512 4036 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys

22:42:07.0544 4036 RDPENCDD - ok

22:42:07.0559 4036 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys

22:42:07.0575 4036 RDPREFMP - ok

22:42:07.0606 4036 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\windows\system32\drivers\RDPWD.sys

22:42:07.0622 4036 RDPWD - ok

22:42:07.0653 4036 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys

22:42:07.0668 4036 rdyboost - ok

22:42:07.0700 4036 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll

22:42:07.0731 4036 RemoteAccess - ok

22:42:07.0746 4036 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll

22:42:07.0778 4036 RemoteRegistry - ok

22:42:07.0793 4036 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll

22:42:07.0824 4036 RpcEptMapper - ok

22:42:07.0824 4036 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe

22:42:07.0840 4036 RpcLocator - ok

22:42:07.0902 4036 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:42:07.0918 4036 RpcSs - ok

22:42:07.0949 4036 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys

22:42:07.0980 4036 rspndr - ok

22:42:07.0996 4036 RTL8167 (6465166dd9b2f841dabad16abdadbe98) C:\windows\system32\DRIVERS\Rt86win7.sys

22:42:08.0012 4036 RTL8167 - ok

22:42:08.0043 4036 SABI (6e5fbb7cbaec47038b945d5e9b144a64) C:\windows\system32\Drivers\SABI.sys

22:42:08.0058 4036 SABI - ok

22:42:08.0090 4036 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:08.0105 4036 SamSs - ok

22:42:08.0136 4036 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys

22:42:08.0152 4036 sbp2port - ok

22:42:08.0168 4036 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll

22:42:08.0199 4036 SCardSvr - ok

22:42:08.0230 4036 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys

22:42:08.0277 4036 scfilter - ok

22:42:08.0339 4036 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll

22:42:08.0386 4036 Schedule - ok

22:42:08.0417 4036 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:42:08.0448 4036 SCPolicySvc - ok

22:42:08.0464 4036 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll

22:42:08.0480 4036 SDRSVC - ok

22:42:08.0511 4036 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys

22:42:08.0526 4036 secdrv - ok

22:42:08.0573 4036 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll

22:42:08.0604 4036 seclogon - ok

22:42:08.0620 4036 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\system32\sens.dll

22:42:08.0651 4036 SENS - ok

22:42:08.0682 4036 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll

22:42:08.0698 4036 SensrSvc - ok

22:42:08.0698 4036 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys

22:42:08.0714 4036 Serenum - ok

22:42:08.0729 4036 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys

22:42:08.0745 4036 Serial - ok

22:42:08.0776 4036 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys

22:42:08.0792 4036 sermouse - ok

22:42:08.0838 4036 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll

22:42:08.0870 4036 SessionEnv - ok

22:42:08.0901 4036 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys

22:42:08.0916 4036 sffdisk - ok

22:42:08.0932 4036 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys

22:42:08.0948 4036 sffp_mmc - ok

22:42:08.0963 4036 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys

22:42:08.0979 4036 sffp_sd - ok

22:42:08.0994 4036 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys

22:42:09.0010 4036 sfloppy - ok

22:42:09.0041 4036 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\windows\System32\ipnathlp.dll

22:42:09.0072 4036 SharedAccess - ok

22:42:09.0119 4036 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll

22:42:09.0150 4036 ShellHWDetection - ok

22:42:09.0197 4036 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys

22:42:09.0197 4036 sisagp - ok

22:42:09.0228 4036 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys

22:42:09.0244 4036 SiSRaid2 - ok

22:42:09.0260 4036 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys

22:42:09.0275 4036 SiSRaid4 - ok

22:42:09.0291 4036 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys

22:42:09.0322 4036 Smb - ok

22:42:09.0462 4036 SmcService (a58c1a086d9c09c6572c948f22cc0e94) C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

22:42:09.0509 4036 SmcService - ok

22:42:09.0540 4036 SNAC (d2c222441255131e29de351475f98f6d) C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE

22:42:09.0556 4036 SNAC - ok

22:42:09.0650 4036 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe

22:42:09.0681 4036 SNMPTRAP - ok

22:42:09.0790 4036 SPBBCDrv (e621bb5839cf45fa477f48092edd2b40) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

22:42:09.0806 4036 SPBBCDrv - ok

22:42:09.0852 4036 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys

22:42:09.0868 4036 spldr - ok

22:42:09.0930 4036 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe

22:42:09.0962 4036 Spooler - ok

22:42:10.0118 4036 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe

22:42:10.0180 4036 sppsvc - ok

22:42:10.0289 4036 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll

22:42:10.0336 4036 sppuinotify - ok

22:42:10.0414 4036 SpyHunter 4 Service (63f2b52947577dbb075fe646bc758a2f) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

22:42:10.0430 4036 SpyHunter 4 Service - ok

22:42:10.0492 4036 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

22:42:10.0508 4036 SQLBrowser - ok

22:42:10.0539 4036 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

22:42:10.0554 4036 SQLWriter - ok

22:42:10.0617 4036 SRTSP (2abf82c8452ab0b9ffc74a2d5da91989) C:\windows\system32\Drivers\SRTSP.SYS

22:42:10.0617 4036 SRTSP - ok

22:42:10.0648 4036 SRTSPL (e2f9e5887bea5bd8784d337e06eda31b) C:\windows\system32\Drivers\SRTSPL.SYS

22:42:10.0664 4036 SRTSPL - ok

22:42:10.0695 4036 SRTSPX (3b974c158fabd910186f98df8d3e23f3) C:\windows\system32\Drivers\SRTSPX.SYS

22:42:10.0695 4036 SRTSPX - ok

22:42:10.0726 4036 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys

22:42:10.0742 4036 srv - ok

22:42:10.0773 4036 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys

22:42:10.0788 4036 srv2 - ok

22:42:10.0804 4036 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys

22:42:10.0820 4036 srvnet - ok

22:42:10.0851 4036 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll

22:42:10.0882 4036 SSDPSRV - ok

22:42:10.0882 4036 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll

22:42:10.0913 4036 SstpSvc - ok

22:42:10.0929 4036 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys

22:42:10.0944 4036 stexstor - ok

22:42:11.0007 4036 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll

22:42:11.0022 4036 StiSvc - ok

22:42:11.0054 4036 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys

22:42:11.0069 4036 swenum - ok

22:42:11.0100 4036 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll

22:42:11.0132 4036 swprv - ok

22:42:11.0319 4036 Symantec AntiVirus (ba2fb8f8ab24d0279caa98a4c118150e) C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

22:42:11.0366 4036 Symantec AntiVirus - ok

22:42:11.0475 4036 SymEvent (a54ff04bd6e75dc4d8cb6f3e352635e0) C:\windows\system32\Drivers\SYMEVENT.SYS

22:42:11.0490 4036 SymEvent - ok

22:42:11.0506 4036 SYMREDRV (394b2368212114d538316812af60fddd) C:\windows\System32\Drivers\SYMREDRV.SYS

22:42:11.0522 4036 SYMREDRV - ok

22:42:11.0553 4036 SYMTDI (d46676bb414c7531bdffe637a33f5033) C:\windows\System32\Drivers\SYMTDI.SYS

22:42:11.0553 4036 SYMTDI - ok

22:42:11.0600 4036 SynTP (7a9025d8f7852b06d6d08ed536135e7e) C:\windows\system32\DRIVERS\SynTP.sys

22:42:11.0600 4036 SynTP - ok

22:42:11.0678 4036 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll

22:42:11.0724 4036 SysMain - ok

22:42:11.0756 4036 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll

22:42:11.0771 4036 TabletInputService - ok

22:42:11.0802 4036 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll

22:42:11.0834 4036 TapiSrv - ok

22:42:11.0865 4036 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll

22:42:11.0896 4036 TBS - ok

22:42:12.0005 4036 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\drivers\tcpip.sys

22:42:12.0052 4036 Tcpip - ok

22:42:12.0068 4036 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\DRIVERS\tcpip.sys

22:42:12.0099 4036 TCPIP6 - ok

22:42:12.0130 4036 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys

22:42:12.0161 4036 tcpipreg - ok

22:42:12.0192 4036 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys

22:42:12.0208 4036 TDPIPE - ok

22:42:12.0239 4036 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys

22:42:12.0239 4036 TDTCP - ok

22:42:12.0270 4036 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys

22:42:12.0302 4036 tdx - ok

22:42:12.0442 4036 TeamViewer6 (839e88db24d2d8f05b72e12b175951ca) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

22:42:12.0489 4036 TeamViewer6 - ok

22:42:12.0614 4036 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys

22:42:12.0645 4036 TermDD - ok

22:42:12.0692 4036 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll

22:42:12.0723 4036 TermService - ok

22:42:12.0754 4036 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll

22:42:12.0770 4036 Themes - ok

22:42:12.0801 4036 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:42:12.0832 4036 THREADORDER - ok

22:42:12.0848 4036 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll

22:42:12.0879 4036 TrkWks - ok

22:42:12.0941 4036 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe

22:42:12.0957 4036 TrustedInstaller - ok

22:42:12.0988 4036 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys

22:42:13.0019 4036 tssecsrv - ok

22:42:13.0050 4036 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys

22:42:13.0066 4036 TsUsbFlt - ok

22:42:13.0113 4036 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys

22:42:13.0129 4036 tunnel - ok

22:42:13.0160 4036 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys

22:42:13.0175 4036 uagp35 - ok

22:42:13.0222 4036 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys

22:42:13.0253 4036 udfs - ok

22:42:13.0300 4036 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe

22:42:13.0316 4036 UI0Detect - ok

22:42:13.0363 4036 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys

22:42:13.0378 4036 uliagpkx - ok

22:42:13.0409 4036 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys

22:42:13.0425 4036 umbus - ok

22:42:13.0441 4036 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys

22:42:13.0456 4036 UmPass - ok

22:42:13.0487 4036 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll

22:42:13.0519 4036 upnphost - ok

22:42:13.0550 4036 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\windows\system32\Drivers\usbaapl.sys

22:42:13.0565 4036 USBAAPL - ok

22:42:13.0565 4036 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys

22:42:13.0581 4036 usbccgp - ok

22:42:13.0612 4036 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys

22:42:13.0628 4036 usbcir - ok

22:42:13.0643 4036 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys

22:42:13.0659 4036 usbehci - ok

22:42:13.0706 4036 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys

22:42:13.0737 4036 usbhub - ok

22:42:13.0753 4036 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\drivers\usbohci.sys

22:42:13.0768 4036 usbohci - ok

22:42:13.0784 4036 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys

22:42:13.0799 4036 usbprint - ok

22:42:13.0831 4036 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys

22:42:13.0846 4036 usbscan - ok

22:42:13.0877 4036 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\drivers\USBSTOR.SYS

22:42:13.0877 4036 USBSTOR - ok

22:42:13.0893 4036 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\DRIVERS\usbuhci.sys

22:42:13.0909 4036 usbuhci - ok

22:42:13.0955 4036 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys

22:42:13.0971 4036 usbvideo - ok

22:42:13.0987 4036 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll

22:42:14.0018 4036 UxSms - ok

22:42:14.0049 4036 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:14.0049 4036 VaultSvc - ok

22:42:14.0096 4036 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys

22:42:14.0111 4036 vdrvroot - ok

22:42:14.0174 4036 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe

22:42:14.0205 4036 vds - ok

22:42:14.0236 4036 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys

22:42:14.0252 4036 vga - ok

22:42:14.0283 4036 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys

22:42:14.0299 4036 VgaSave - ok

22:42:14.0345 4036 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys

22:42:14.0361 4036 vhdmp - ok

22:42:14.0377 4036 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys

22:42:14.0377 4036 viaagp - ok

22:42:14.0392 4036 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys

22:42:14.0408 4036 ViaC7 - ok

22:42:14.0439 4036 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys

22:42:14.0455 4036 viaide - ok

22:42:14.0486 4036 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys

22:42:14.0486 4036 volmgr - ok

22:42:14.0533 4036 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys

22:42:14.0548 4036 volmgrx - ok

22:42:14.0564 4036 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys

22:42:14.0579 4036 volsnap - ok

22:42:14.0595 4036 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys

22:42:14.0611 4036 vsmraid - ok

22:42:14.0689 4036 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe

22:42:14.0735 4036 VSS - ok

22:42:14.0751 4036 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys

22:42:14.0767 4036 vwifibus - ok

22:42:14.0782 4036 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys

22:42:14.0798 4036 vwififlt - ok

22:42:14.0813 4036 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys

22:42:14.0829 4036 vwifimp - ok

22:42:14.0860 4036 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll

22:42:14.0891 4036 W32Time - ok

22:42:14.0923 4036 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys

22:42:14.0938 4036 WacomPen - ok

22:42:14.0969 4036 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:42:15.0001 4036 WANARP - ok

22:42:15.0001 4036 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:42:15.0016 4036 Wanarpv6 - ok

22:42:15.0094 4036 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe

22:42:15.0125 4036 WatAdminSvc - ok

22:42:15.0219 4036 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe

22:42:15.0250 4036 wbengine - ok

22:42:15.0281 4036 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll

22:42:15.0313 4036 WbioSrvc - ok

22:42:15.0359 4036 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll

22:42:15.0375 4036 wcncsvc - ok

22:42:15.0391 4036 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll

22:42:15.0406 4036 WcsPlugInService - ok

22:42:15.0453 4036 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys

22:42:15.0469 4036 Wd - ok

22:42:15.0500 4036 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys

22:42:15.0515 4036 Wdf01000 - ok

22:42:15.0547 4036 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:42:15.0562 4036 WdiServiceHost - ok

22:42:15.0562 4036 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:42:15.0593 4036 WdiSystemHost - ok

22:42:15.0625 4036 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll

22:42:15.0656 4036 WebClient - ok

22:42:15.0671 4036 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll

22:42:15.0703 4036 Wecsvc - ok

22:42:15.0718 4036 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll

22:42:15.0749 4036 wercplsupport - ok

22:42:15.0765 4036 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll

22:42:15.0796 4036 WerSvc - ok

22:42:15.0812 4036 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys

22:42:15.0843 4036 WfpLwf - ok

22:42:15.0859 4036 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys

22:42:15.0874 4036 WIMMount - ok

22:42:15.0937 4036 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

22:42:15.0983 4036 WinDefend - ok

22:42:15.0983 4036 WinHttpAutoProxySvc - ok

22:42:16.0046 4036 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll

22:42:16.0093 4036 Winmgmt - ok

22:42:16.0171 4036 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll

22:42:16.0202 4036 WinRM - ok

22:42:16.0264 4036 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys

22:42:16.0280 4036 WinUsb - ok

22:42:16.0342 4036 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll

22:42:16.0373 4036 Wlansvc - ok

22:42:16.0514 4036 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

22:42:16.0545 4036 wlidsvc - ok

22:42:16.0670 4036 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys

22:42:16.0685 4036 WmiAcpi - ok

22:42:16.0748 4036 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe

22:42:16.0779 4036 wmiApSrv - ok

22:42:16.0888 4036 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

22:42:16.0919 4036 WMPNetworkSvc - ok

22:42:16.0951 4036 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll

22:42:16.0966 4036 WPCSvc - ok

22:42:17.0013 4036 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll

22:42:17.0029 4036 WPDBusEnum - ok

22:42:17.0075 4036 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys

22:42:17.0122 4036 ws2ifsl - ok

22:42:17.0138 4036 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\system32\wscsvc.dll

22:42:17.0153 4036 wscsvc - ok

22:42:17.0153 4036 WSearch - ok

22:42:17.0278 4036 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\windows\system32\wuaueng.dll

22:42:17.0325 4036 wuauserv - ok

22:42:17.0450 4036 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys

22:42:17.0481 4036 WudfPf - ok

22:42:17.0497 4036 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys

22:42:17.0528 4036 WUDFRd - ok

22:42:17.0559 4036 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll

22:42:17.0590 4036 wudfsvc - ok

22:42:17.0606 4036 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll

22:42:17.0621 4036 WwanSvc - ok

22:42:17.0653 4036 MBR (0x1B8) (2e5debb2116b3417023e0d6562d7ed07) \Device\Harddisk0\DR0

22:42:17.0965 4036 \Device\Harddisk0\DR0 - ok

22:42:17.0965 4036 Boot (0x1200) (5fb009d8d1bbe104d22d071977f32a2a) \Device\Harddisk0\DR0\Partition0

22:42:17.0980 4036 \Device\Harddisk0\DR0\Partition0 - ok

22:42:17.0996 4036 Boot (0x1200) (d5688b55e165a627667567455a328efc) \Device\Harddisk0\DR0\Partition1

22:42:17.0996 4036 \Device\Harddisk0\DR0\Partition1 - ok

22:42:18.0027 4036 Boot (0x1200) (78ee0a60b0242cd51c89824323794145) \Device\Harddisk0\DR0\Partition2

22:42:18.0027 4036 \Device\Harddisk0\DR0\Partition2 - ok

22:42:18.0027 4036 ============================================================

22:42:18.0027 4036 Scan finished

22:42:18.0027 4036 ============================================================

22:42:18.0043 2232 Detected object count: 2

22:42:18.0043 2232 Actual detected object count: 2

22:42:44.0361 2232 C:\windows\system32\DRIVERS\atksgt.sys - copied to quarantine

22:42:44.0361 2232 HKLM\SYSTEM\ControlSet001\services\atksgt - will be deleted on reboot

22:42:44.0408 2232 HKLM\SYSTEM\ControlSet002\services\atksgt - will be deleted on reboot

22:42:44.0564 2232 C:\windows\system32\DRIVERS\atksgt.sys - will be deleted on reboot

22:42:44.0564 2232 atksgt ( UnsignedFile.Multi.Generic ) - User select action: Delete

22:42:44.0579 2232 C:\windows\system32\DRIVERS\lirsgt.sys - copied to quarantine

22:42:44.0579 2232 HKLM\SYSTEM\ControlSet001\services\lirsgt - will be deleted on reboot

22:42:44.0579 2232 HKLM\SYSTEM\ControlSet002\services\lirsgt - will be deleted on reboot

22:42:44.0579 2232 C:\windows\system32\DRIVERS\lirsgt.sys - will be deleted on reboot

22:42:44.0579 2232 lirsgt ( UnsignedFile.Multi.Generic ) - User select action: Delete

[jarsteve]

Ik heb de additionele mogelijkheden moeten aanduiden vooraleer er bedreigingen werden gesignaleerd. Hier is mijn TDSSKiller-log:

22:37:47.0275 4904 TDSS rootkit removing tool 2.7.45.0 Jul 9 2012 12:46:35

22:37:47.0446 4904 ============================================================

22:37:47.0446 4904 Current date / time: 2012/07/09 22:37:47.0446

22:37:47.0446 4904 SystemInfo:

22:37:47.0446 4904

22:37:47.0446 4904 OS Version: 6.1.7601 ServicePack: 1.0

22:37:47.0446 4904 Product type: Workstation

22:37:47.0446 4904 ComputerName: JONAS-PC

22:37:47.0446 4904 UserName: Jonas

22:37:47.0446 4904 Windows directory: C:\windows

22:37:47.0446 4904 System windows directory: C:\windows

22:37:47.0446 4904 Processor architecture: Intel x86

22:37:47.0446 4904 Number of processors: 2

22:37:47.0446 4904 Page size: 0x1000

22:37:47.0446 4904 Boot type: Normal boot

22:37:47.0446 4904 ============================================================

22:37:48.0070 4904 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

22:37:48.0070 4904 ============================================================

22:37:48.0070 4904 \Device\Harddisk0\DR0:

22:37:48.0070 4904 MBR partitions:

22:37:48.0070 4904 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1E00800, BlocksNum 0x32000

22:37:48.0070 4904 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E32800, BlocksNum 0x16A3A000

22:37:48.0070 4904 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1886C800, BlocksNum 0xCBC1800

22:37:48.0070 4904 ============================================================

22:37:48.0117 4904 C: <-> \Device\Harddisk0\DR0\Partition1

22:37:48.0148 4904 D: <-> \Device\Harddisk0\DR0\Partition2

22:37:48.0148 4904 ============================================================

22:37:48.0148 4904 Initialize success

22:37:48.0148 4904 ============================================================

22:38:20.0053 5932 ============================================================

22:38:20.0053 5932 Scan started

22:38:20.0053 5932 Mode: Manual;

22:38:20.0053 5932 ============================================================

22:38:20.0458 5932 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys

22:38:20.0458 5932 1394ohci - ok

22:38:20.0521 5932 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys

22:38:20.0536 5932 ACPI - ok

22:38:20.0583 5932 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys

22:38:20.0583 5932 AcpiPmi - ok

22:38:20.0677 5932 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys

22:38:20.0677 5932 adp94xx - ok

22:38:20.0723 5932 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys

22:38:20.0723 5932 adpahci - ok

22:38:20.0755 5932 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys

22:38:20.0755 5932 adpu320 - ok

22:38:20.0801 5932 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll

22:38:20.0801 5932 AeLookupSvc - ok

22:38:20.0879 5932 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys

22:38:20.0879 5932 AFD - ok

22:38:20.0911 5932 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys

22:38:20.0911 5932 agp440 - ok

22:38:20.0973 5932 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys

22:38:20.0973 5932 aic78xx - ok

22:38:21.0020 5932 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe

22:38:21.0035 5932 ALG - ok

22:38:21.0035 5932 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys

22:38:21.0035 5932 aliide - ok

22:38:21.0067 5932 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys

22:38:21.0067 5932 amdagp - ok

22:38:21.0113 5932 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys

22:38:21.0129 5932 amdide - ok

22:38:21.0191 5932 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys

22:38:21.0191 5932 AmdK8 - ok

22:38:21.0223 5932 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys

22:38:21.0223 5932 AmdPPM - ok

22:38:21.0285 5932 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys

22:38:21.0285 5932 amdsata - ok

22:38:21.0347 5932 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys

22:38:21.0347 5932 amdsbs - ok

22:38:21.0363 5932 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys

22:38:21.0363 5932 amdxata - ok

22:38:21.0425 5932 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys

22:38:21.0425 5932 AppID - ok

22:38:21.0472 5932 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll

22:38:21.0472 5932 AppIDSvc - ok

22:38:21.0519 5932 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll

22:38:21.0519 5932 Appinfo - ok

22:38:21.0628 5932 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

22:38:21.0628 5932 Apple Mobile Device - ok

22:38:21.0769 5932 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys

22:38:21.0784 5932 arc - ok

22:38:21.0800 5932 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys

22:38:21.0800 5932 arcsas - ok

22:38:21.0815 5932 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys

22:38:21.0815 5932 AsyncMac - ok

22:38:21.0847 5932 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys

22:38:21.0862 5932 atapi - ok

22:38:21.0971 5932 athr (de0fbcccd6af0f0e7bf12e8d041cc48f) C:\windows\system32\DRIVERS\athr.sys

22:38:21.0987 5932 athr - ok

22:38:22.0065 5932 atksgt (6e996cf8459a2594e0e9609d0e34d41f) C:\windows\system32\DRIVERS\atksgt.sys

22:38:22.0065 5932 atksgt - ok

22:38:22.0143 5932 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:38:22.0143 5932 AudioEndpointBuilder - ok

22:38:22.0159 5932 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:38:22.0159 5932 Audiosrv - ok

22:38:22.0237 5932 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll

22:38:22.0237 5932 AxInstSV - ok

22:38:22.0315 5932 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys

22:38:22.0315 5932 b06bdrv - ok

22:38:22.0330 5932 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys

22:38:22.0346 5932 b57nd60x - ok

22:38:22.0424 5932 BcmSqlStartupSvc (6163664c7e9cd110af70180c126c3fdc) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

22:38:22.0439 5932 BcmSqlStartupSvc - ok

22:38:22.0502 5932 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll

22:38:22.0502 5932 BDESVC - ok

22:38:22.0533 5932 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys

22:38:22.0533 5932 Beep - ok

22:38:22.0627 5932 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll

22:38:22.0627 5932 BFE - ok

22:38:22.0658 5932 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\system32\qmgr.dll

22:38:22.0673 5932 BITS - ok

22:38:22.0705 5932 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys

22:38:22.0705 5932 blbdrive - ok

22:38:22.0829 5932 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe

22:38:22.0829 5932 Bonjour Service - ok

22:38:22.0892 5932 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys

22:38:22.0892 5932 bowser - ok

22:38:22.0923 5932 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys

22:38:22.0923 5932 BrFiltLo - ok

22:38:22.0939 5932 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys

22:38:22.0939 5932 BrFiltUp - ok

22:38:22.0985 5932 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\windows\system32\DRIVERS\bridge.sys

22:38:22.0985 5932 BridgeMP - ok

22:38:23.0032 5932 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll

22:38:23.0032 5932 Browser - ok

22:38:23.0079 5932 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys

22:38:23.0079 5932 Brserid - ok

22:38:23.0095 5932 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys

22:38:23.0095 5932 BrSerWdm - ok

22:38:23.0110 5932 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys

22:38:23.0110 5932 BrUsbMdm - ok

22:38:23.0141 5932 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys

22:38:23.0141 5932 BrUsbSer - ok

22:38:23.0157 5932 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys

22:38:23.0157 5932 BTHMODEM - ok

22:38:23.0219 5932 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll

22:38:23.0219 5932 bthserv - ok

22:38:23.0313 5932 catchme - ok

22:38:23.0422 5932 ccEvtMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:38:23.0422 5932 ccEvtMgr - ok

22:38:23.0422 5932 ccSetMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:38:23.0422 5932 ccSetMgr - ok

22:38:23.0485 5932 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys

22:38:23.0485 5932 cdfs - ok

22:38:23.0547 5932 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\DRIVERS\cdrom.sys

22:38:23.0563 5932 cdrom - ok

22:38:23.0625 5932 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:38:23.0625 5932 CertPropSvc - ok

22:38:23.0672 5932 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys

22:38:23.0672 5932 circlass - ok

22:38:23.0703 5932 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys

22:38:23.0703 5932 CLFS - ok

22:38:23.0828 5932 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

22:38:23.0828 5932 clr_optimization_v2.0.50727_32 - ok

22:38:23.0968 5932 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

22:38:23.0968 5932 clr_optimization_v4.0.30319_32 - ok

22:38:23.0999 5932 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys

22:38:23.0999 5932 CmBatt - ok

22:38:24.0031 5932 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys

22:38:24.0031 5932 cmdide - ok

22:38:24.0077 5932 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys

22:38:24.0093 5932 CNG - ok

22:38:24.0124 5932 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys

22:38:24.0124 5932 Compbatt - ok

22:38:24.0187 5932 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys

22:38:24.0202 5932 CompositeBus - ok

22:38:24.0218 5932 COMSysApp - ok

22:38:24.0249 5932 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys

22:38:24.0249 5932 crcdisk - ok

22:38:24.0280 5932 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\windows\system32\cryptsvc.dll

22:38:24.0280 5932 CryptSvc - ok

22:38:24.0358 5932 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\windows\system32\DRIVERS\ctxusbm.sys

22:38:24.0358 5932 ctxusbm - ok

22:38:24.0421 5932 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:38:24.0436 5932 DcomLaunch - ok

22:38:24.0483 5932 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll

22:38:24.0483 5932 defragsvc - ok

22:38:24.0530 5932 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys

22:38:24.0530 5932 DfsC - ok

22:38:24.0608 5932 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll

22:38:24.0623 5932 Dhcp - ok

22:38:24.0655 5932 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys

22:38:24.0655 5932 discache - ok

22:38:24.0717 5932 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys

22:38:24.0717 5932 Disk - ok

22:38:24.0764 5932 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll

22:38:24.0764 5932 Dnscache - ok

22:38:24.0795 5932 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll

22:38:24.0811 5932 dot3svc - ok

22:38:24.0857 5932 Dot4 (b5e479eb83707dd698f66953e922042c) C:\windows\system32\DRIVERS\Dot4.sys

22:38:24.0857 5932 Dot4 - ok

22:38:24.0920 5932 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\windows\system32\drivers\Dot4Prt.sys

22:38:24.0920 5932 Dot4Print - ok

22:38:24.0935 5932 dot4usb (cf491ff38d62143203c065260567e2f7) C:\windows\system32\DRIVERS\dot4usb.sys

22:38:24.0935 5932 dot4usb - ok

22:38:24.0982 5932 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll

22:38:24.0982 5932 DPS - ok

22:38:25.0045 5932 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys

22:38:25.0045 5932 drmkaud - ok

22:38:25.0123 5932 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\windows\system32\DRIVERS\dtsoftbus01.sys

22:38:25.0123 5932 dtsoftbus01 - ok

22:38:25.0185 5932 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys

22:38:25.0201 5932 DXGKrnl - ok

22:38:25.0279 5932 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll

22:38:25.0279 5932 EapHost - ok

22:38:25.0528 5932 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys

22:38:25.0575 5932 ebdrv - ok

22:38:25.0700 5932 eeCtrl (fce87ba643d5e9a8b6e0378508d1b22d) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

22:38:25.0700 5932 eeCtrl - ok

22:38:25.0809 5932 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe

22:38:25.0809 5932 EFS - ok

22:38:25.0903 5932 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe

22:38:25.0903 5932 ehRecvr - ok

22:38:25.0934 5932 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe

22:38:25.0934 5932 ehSched - ok

22:38:26.0027 5932 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys

22:38:26.0043 5932 elxstor - ok

22:38:26.0183 5932 EraserUtilRebootDrv (115dc729465a8c386615207f28875255) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

22:38:26.0183 5932 EraserUtilRebootDrv - ok

22:38:26.0215 5932 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys

22:38:26.0215 5932 ErrDev - ok

22:38:26.0293 5932 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll

22:38:26.0293 5932 EventSystem - ok

22:38:26.0324 5932 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys

22:38:26.0324 5932 exfat - ok

22:38:26.0355 5932 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys

22:38:26.0355 5932 fastfat - ok

22:38:26.0433 5932 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe

22:38:26.0449 5932 Fax - ok

22:38:26.0464 5932 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys

22:38:26.0464 5932 fdc - ok

22:38:26.0495 5932 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll

22:38:26.0495 5932 fdPHost - ok

22:38:26.0527 5932 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll

22:38:26.0527 5932 FDResPub - ok

22:38:26.0542 5932 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys

22:38:26.0542 5932 FileInfo - ok

22:38:26.0558 5932 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys

22:38:26.0558 5932 Filetrace - ok

22:38:26.0573 5932 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys

22:38:26.0573 5932 flpydisk - ok

22:38:26.0636 5932 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys

22:38:26.0636 5932 FltMgr - ok

22:38:26.0745 5932 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll

22:38:26.0761 5932 FontCache - ok

22:38:26.0807 5932 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

22:38:26.0807 5932 FontCache3.0.0.0 - ok

22:38:26.0823 5932 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys

22:38:26.0823 5932 FsDepends - ok

22:38:26.0885 5932 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys

22:38:26.0885 5932 fssfltr - ok

22:38:27.0104 5932 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

22:38:27.0119 5932 fsssvc - ok

22:38:27.0244 5932 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys

22:38:27.0244 5932 Fs_Rec - ok

22:38:27.0307 5932 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys

22:38:27.0307 5932 fvevol - ok

22:38:27.0369 5932 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys

22:38:27.0385 5932 gagp30kx - ok

22:38:27.0431 5932 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys

22:38:27.0431 5932 GEARAspiWDM - ok

22:38:27.0494 5932 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll

22:38:27.0509 5932 gpsvc - ok

22:38:27.0619 5932 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:38:27.0619 5932 gupdate - ok

22:38:27.0650 5932 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:38:27.0650 5932 gupdatem - ok

22:38:27.0712 5932 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

22:38:27.0712 5932 gusvc - ok

22:38:27.0759 5932 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys

22:38:27.0759 5932 hcw85cir - ok

22:38:27.0837 5932 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys

22:38:27.0837 5932 HdAudAddService - ok

22:38:27.0884 5932 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys

22:38:27.0884 5932 HDAudBus - ok

22:38:27.0899 5932 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys

22:38:27.0899 5932 HidBatt - ok

22:38:27.0915 5932 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys

22:38:27.0915 5932 HidBth - ok

22:38:27.0962 5932 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys

22:38:27.0962 5932 HidIr - ok

22:38:27.0977 5932 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\System32\hidserv.dll

22:38:27.0977 5932 hidserv - ok

22:38:28.0055 5932 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys

22:38:28.0055 5932 HidUsb - ok

22:38:28.0118 5932 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll

22:38:28.0118 5932 hkmsvc - ok

22:38:28.0149 5932 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll

22:38:28.0149 5932 HomeGroupListener - ok

22:38:28.0180 5932 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll

22:38:28.0196 5932 HomeGroupProvider - ok

22:38:28.0243 5932 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys

22:38:28.0243 5932 HpSAMD - ok

22:38:28.0321 5932 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys

22:38:28.0321 5932 HTTP - ok

22:38:28.0336 5932 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys

22:38:28.0336 5932 hwpolicy - ok

22:38:28.0414 5932 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys

22:38:28.0414 5932 i8042prt - ok

22:38:28.0539 5932 IAANTMON (7548066df68a8a1a56b043359f915f37) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

22:38:28.0539 5932 IAANTMON - ok

22:38:28.0586 5932 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys

22:38:28.0586 5932 iaStor - ok

22:38:28.0648 5932 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys

22:38:28.0648 5932 iaStorV - ok

22:38:28.0789 5932 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

22:38:28.0804 5932 idsvc - ok

22:38:29.0225 5932 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\windows\system32\DRIVERS\igdkmd32.sys

22:38:29.0428 5932 igfx - ok

22:38:29.0631 5932 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys

22:38:29.0647 5932 iirsp - ok

22:38:29.0803 5932 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll

22:38:29.0803 5932 IKEEXT - ok

22:38:29.0990 5932 IntcAzAudAddService (5ceef2cccb4fe00d3ffbfeb12bcfa07f) C:\windows\system32\drivers\RTKVHDA.sys

22:38:30.0021 5932 IntcAzAudAddService - ok

22:38:30.0146 5932 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys

22:38:30.0146 5932 intelide - ok

22:38:30.0193 5932 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys

22:38:30.0193 5932 intelppm - ok

22:38:30.0224 5932 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll

22:38:30.0224 5932 IPBusEnum - ok

22:38:30.0255 5932 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys

22:38:30.0271 5932 IpFilterDriver - ok

22:38:30.0333 5932 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\windows\System32\iphlpsvc.dll

22:38:30.0333 5932 iphlpsvc - ok

22:38:30.0364 5932 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys

22:38:30.0364 5932 IPMIDRV - ok

22:38:30.0395 5932 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys

22:38:30.0395 5932 IPNAT - ok

22:38:30.0536 5932 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Program Files\iPod\bin\iPodService.exe

22:38:30.0551 5932 iPod Service - ok

22:38:30.0598 5932 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys

22:38:30.0598 5932 IRENUM - ok

22:38:30.0629 5932 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys

22:38:30.0629 5932 isapnp - ok

22:38:30.0676 5932 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys

22:38:30.0676 5932 iScsiPrt - ok

22:38:30.0739 5932 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys

22:38:30.0739 5932 kbdclass - ok

22:38:30.0785 5932 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys

22:38:30.0785 5932 kbdhid - ok

22:38:30.0817 5932 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:30.0832 5932 KeyIso - ok

22:38:30.0832 5932 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys

22:38:30.0832 5932 KSecDD - ok

22:38:30.0848 5932 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys

22:38:30.0863 5932 KSecPkg - ok

22:38:30.0895 5932 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll

22:38:30.0895 5932 KtmRm - ok

22:38:30.0941 5932 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\System32\srvsvc.dll

22:38:30.0957 5932 LanmanServer - ok

22:38:31.0019 5932 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll

22:38:31.0035 5932 LanmanWorkstation - ok

22:38:31.0097 5932 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\windows\system32\DRIVERS\lirsgt.sys

22:38:31.0097 5932 lirsgt - ok

22:38:31.0409 5932 LiveUpdate (e34152d03caaaaa81dd66d803f392522) C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

22:38:31.0456 5932 LiveUpdate - ok

22:38:31.0597 5932 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys

22:38:31.0597 5932 lltdio - ok

22:38:31.0628 5932 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll

22:38:31.0628 5932 lltdsvc - ok

22:38:31.0643 5932 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll

22:38:31.0659 5932 lmhosts - ok

22:38:31.0721 5932 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys

22:38:31.0721 5932 LSI_FC - ok

22:38:31.0737 5932 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys

22:38:31.0737 5932 LSI_SAS - ok

22:38:31.0753 5932 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys

22:38:31.0753 5932 LSI_SAS2 - ok

22:38:31.0768 5932 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys

22:38:31.0768 5932 LSI_SCSI - ok

22:38:31.0831 5932 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys

22:38:31.0831 5932 luafv - ok

22:38:31.0940 5932 lxeeCATSCustConnectService (a9d8d63c7378dd34e4e19036093a9264) C:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe

22:38:31.0955 5932 lxeeCATSCustConnectService - ok

22:38:31.0971 5932 lxee_device - ok

22:38:32.0018 5932 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll

22:38:32.0018 5932 Mcx2Svc - ok

22:38:32.0049 5932 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys

22:38:32.0049 5932 megasas - ok

22:38:32.0111 5932 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys

22:38:32.0111 5932 MegaSR - ok

22:38:32.0205 5932 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

22:38:32.0205 5932 Microsoft Office Groove Audit Service - ok

22:38:32.0236 5932 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:38:32.0236 5932 MMCSS - ok

22:38:32.0252 5932 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys

22:38:32.0252 5932 Modem - ok

22:38:32.0299 5932 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys

22:38:32.0299 5932 monitor - ok

22:38:32.0423 5932 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys

22:38:32.0423 5932 mouclass - ok

22:38:32.0486 5932 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys

22:38:32.0486 5932 mouhid - ok

22:38:32.0533 5932 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys

22:38:32.0533 5932 mountmgr - ok

22:38:32.0564 5932 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys

22:38:32.0564 5932 mpio - ok

22:38:32.0595 5932 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys

22:38:32.0595 5932 mpsdrv - ok

22:38:32.0704 5932 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\windows\system32\mpssvc.dll

22:38:32.0720 5932 MpsSvc - ok

22:38:32.0751 5932 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys

22:38:32.0751 5932 MRxDAV - ok

22:38:32.0813 5932 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys

22:38:32.0813 5932 mrxsmb - ok

22:38:32.0876 5932 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys

22:38:32.0876 5932 mrxsmb10 - ok

22:38:32.0891 5932 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys

22:38:32.0891 5932 mrxsmb20 - ok

22:38:32.0923 5932 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys

22:38:32.0938 5932 msahci - ok

22:38:32.0954 5932 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys

22:38:32.0969 5932 msdsm - ok

22:38:32.0985 5932 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe

22:38:33.0001 5932 MSDTC - ok

22:38:33.0063 5932 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys

22:38:33.0063 5932 Msfs - ok

22:38:33.0079 5932 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys

22:38:33.0079 5932 mshidkmdf - ok

22:38:33.0110 5932 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys

22:38:33.0110 5932 msisadrv - ok

22:38:33.0188 5932 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll

22:38:33.0188 5932 MSiSCSI - ok

22:38:33.0188 5932 msiserver - ok

22:38:33.0203 5932 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys

22:38:33.0219 5932 MSKSSRV - ok

22:38:33.0250 5932 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys

22:38:33.0250 5932 MSPCLOCK - ok

22:38:33.0297 5932 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys

22:38:33.0313 5932 MSPQM - ok

22:38:33.0344 5932 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys

22:38:33.0344 5932 MsRPC - ok

22:38:33.0391 5932 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys

22:38:33.0391 5932 mssmbios - ok

22:38:33.0500 5932 MSSQL$MSSMLBIZ - ok

22:38:33.0531 5932 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe

22:38:33.0531 5932 MSSQLServerADHelper - ok

22:38:33.0578 5932 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys

22:38:33.0578 5932 MSTEE - ok

22:38:33.0593 5932 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys

22:38:33.0593 5932 MTConfig - ok

22:38:33.0625 5932 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys

22:38:33.0625 5932 Mup - ok

22:38:33.0671 5932 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll

22:38:33.0671 5932 napagent - ok

22:38:33.0749 5932 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys

22:38:33.0749 5932 NativeWifiP - ok

22:38:33.0859 5932 NAVENG (f11033730b38260b6892e837c457fb4b) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVENG.SYS

22:38:33.0859 5932 NAVENG - ok

22:38:34.0015 5932 NAVEX15 (4e4e7c0259d3bb97de24a636c0e06aba) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVEX15.SYS

22:38:34.0046 5932 NAVEX15 - ok

22:38:34.0202 5932 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys

22:38:34.0217 5932 NDIS - ok

22:38:34.0264 5932 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys

22:38:34.0264 5932 NdisCap - ok

22:38:34.0311 5932 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys

22:38:34.0311 5932 NdisTapi - ok

22:38:34.0373 5932 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys

22:38:34.0373 5932 Ndisuio - ok

22:38:34.0405 5932 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys

22:38:34.0405 5932 NdisWan - ok

22:38:34.0451 5932 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys

22:38:34.0451 5932 NDProxy - ok

22:38:34.0498 5932 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys

22:38:34.0498 5932 NetBIOS - ok

22:38:34.0529 5932 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys

22:38:34.0545 5932 NetBT - ok

22:38:34.0561 5932 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:34.0576 5932 Netlogon - ok

22:38:34.0639 5932 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll

22:38:34.0654 5932 Netman - ok

22:38:34.0717 5932 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll

22:38:34.0717 5932 netprofm - ok

22:38:34.0779 5932 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

22:38:34.0795 5932 NetTcpPortSharing - ok

22:38:34.0841 5932 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys

22:38:34.0841 5932 nfrd960 - ok

22:38:34.0888 5932 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll

22:38:34.0888 5932 NlaSvc - ok

22:38:34.0904 5932 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys

22:38:34.0904 5932 Npfs - ok

22:38:34.0951 5932 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll

22:38:34.0951 5932 nsi - ok

22:38:34.0951 5932 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys

22:38:34.0966 5932 nsiproxy - ok

22:38:35.0060 5932 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys

22:38:35.0075 5932 Ntfs - ok

22:38:35.0107 5932 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys

22:38:35.0107 5932 Null - ok

22:38:35.0138 5932 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys

22:38:35.0138 5932 nvraid - ok

22:38:35.0169 5932 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys

22:38:35.0169 5932 nvstor - ok

22:38:35.0185 5932 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys

22:38:35.0185 5932 nv_agp - ok

22:38:35.0278 5932 OberonGameConsoleService (b5d5da8230d3d3525839d939a9196c3e) C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

22:38:35.0278 5932 OberonGameConsoleService - ok

22:38:35.0387 5932 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

22:38:35.0387 5932 odserv - ok

22:38:35.0434 5932 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys

22:38:35.0434 5932 ohci1394 - ok

22:38:35.0465 5932 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

22:38:35.0465 5932 ose - ok

22:38:35.0512 5932 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:38:35.0512 5932 p2pimsvc - ok

22:38:35.0543 5932 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll

22:38:35.0543 5932 p2psvc - ok

22:38:35.0606 5932 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys

22:38:35.0606 5932 Parport - ok

22:38:35.0621 5932 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\windows\system32\drivers\partmgr.sys

22:38:35.0637 5932 partmgr - ok

22:38:35.0653 5932 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys

22:38:35.0653 5932 Parvdm - ok

22:38:35.0684 5932 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll

22:38:35.0684 5932 PcaSvc - ok

22:38:35.0731 5932 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys

22:38:35.0731 5932 pci - ok

22:38:35.0777 5932 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys

22:38:35.0777 5932 pciide - ok

22:38:35.0809 5932 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys

22:38:35.0809 5932 pcmcia - ok

22:38:35.0824 5932 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys

22:38:35.0824 5932 pcw - ok

22:38:35.0871 5932 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys

22:38:35.0887 5932 PEAUTH - ok

22:38:35.0996 5932 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll

22:38:36.0027 5932 pla - ok

22:38:36.0136 5932 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll

22:38:36.0136 5932 PlugPlay - ok

22:38:36.0167 5932 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll

22:38:36.0167 5932 PNRPAutoReg - ok

22:38:36.0199 5932 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:38:36.0199 5932 PNRPsvc - ok

22:38:36.0245 5932 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll

22:38:36.0245 5932 PolicyAgent - ok

22:38:36.0292 5932 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll

22:38:36.0308 5932 Power - ok

22:38:36.0370 5932 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys

22:38:36.0370 5932 PptpMiniport - ok

22:38:36.0386 5932 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys

22:38:36.0386 5932 Processor - ok

22:38:36.0448 5932 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\windows\system32\profsvc.dll

22:38:36.0448 5932 ProfSvc - ok

22:38:36.0479 5932 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:36.0479 5932 ProtectedStorage - ok

22:38:36.0526 5932 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys

22:38:36.0526 5932 Psched - ok

22:38:36.0635 5932 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys

22:38:36.0651 5932 ql2300 - ok

22:38:36.0791 5932 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys

22:38:36.0791 5932 ql40xx - ok

22:38:36.0838 5932 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll

22:38:36.0838 5932 QWAVE - ok

22:38:36.0854 5932 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys

22:38:36.0854 5932 QWAVEdrv - ok

22:38:36.0869 5932 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys

22:38:36.0869 5932 RasAcd - ok

22:38:36.0916 5932 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys

22:38:36.0916 5932 RasAgileVpn - ok

22:38:36.0932 5932 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll

22:38:36.0932 5932 RasAuto - ok

22:38:36.0963 5932 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys

22:38:36.0963 5932 Rasl2tp - ok

22:38:37.0041 5932 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll

22:38:37.0041 5932 RasMan - ok

22:38:37.0057 5932 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys

22:38:37.0057 5932 RasPppoe - ok

22:38:37.0103 5932 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys

22:38:37.0119 5932 RasSstp - ok

22:38:37.0135 5932 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys

22:38:37.0135 5932 rdbss - ok

22:38:37.0150 5932 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys

22:38:37.0150 5932 rdpbus - ok

22:38:37.0181 5932 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys

22:38:37.0181 5932 RDPCDD - ok

22:38:37.0228 5932 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys

22:38:37.0228 5932 RDPENCDD - ok

22:38:37.0244 5932 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys

22:38:37.0244 5932 RDPREFMP - ok

22:38:37.0275 5932 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\windows\system32\drivers\RDPWD.sys

22:38:37.0275 5932 RDPWD - ok

22:38:37.0337 5932 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys

22:38:37.0353 5932 rdyboost - ok

22:38:37.0369 5932 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll

22:38:37.0369 5932 RemoteAccess - ok

22:38:37.0400 5932 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll

22:38:37.0400 5932 RemoteRegistry - ok

22:38:37.0447 5932 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll

22:38:37.0447 5932 RpcEptMapper - ok

22:38:37.0478 5932 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe

22:38:37.0478 5932 RpcLocator - ok

22:38:37.0540 5932 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:38:37.0540 5932 RpcSs - ok

22:38:37.0603 5932 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys

22:38:37.0603 5932 rspndr - ok

22:38:37.0634 5932 RTL8167 (6465166dd9b2f841dabad16abdadbe98) C:\windows\system32\DRIVERS\Rt86win7.sys

22:38:37.0634 5932 RTL8167 - ok

22:38:37.0696 5932 SABI (6e5fbb7cbaec47038b945d5e9b144a64) C:\windows\system32\Drivers\SABI.sys

22:38:37.0696 5932 SABI - ok

22:38:37.0727 5932 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:37.0727 5932 SamSs - ok

22:38:37.0774 5932 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys

22:38:37.0790 5932 sbp2port - ok

22:38:37.0837 5932 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll

22:38:37.0837 5932 SCardSvr - ok

22:38:37.0883 5932 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys

22:38:37.0883 5932 scfilter - ok

22:38:37.0946 5932 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll

22:38:37.0961 5932 Schedule - ok

22:38:37.0993 5932 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:38:37.0993 5932 SCPolicySvc - ok

22:38:38.0024 5932 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll

22:38:38.0039 5932 SDRSVC - ok

22:38:38.0086 5932 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys

22:38:38.0086 5932 secdrv - ok

22:38:38.0117 5932 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll

22:38:38.0117 5932 seclogon - ok

22:38:38.0164 5932 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\system32\sens.dll

22:38:38.0164 5932 SENS - ok

22:38:38.0242 5932 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll

22:38:38.0258 5932 SensrSvc - ok

22:38:38.0305 5932 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys

22:38:38.0305 5932 Serenum - ok

22:38:38.0320 5932 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys

22:38:38.0320 5932 Serial - ok

22:38:38.0367 5932 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys

22:38:38.0367 5932 sermouse - ok

22:38:38.0429 5932 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll

22:38:38.0429 5932 SessionEnv - ok

22:38:38.0461 5932 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys

22:38:38.0461 5932 sffdisk - ok

22:38:38.0476 5932 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys

22:38:38.0476 5932 sffp_mmc - ok

22:38:38.0492 5932 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys

22:38:38.0492 5932 sffp_sd - ok

22:38:38.0539 5932 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys

22:38:38.0539 5932 sfloppy - ok

22:38:38.0617 5932 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\windows\System32\ipnathlp.dll

22:38:38.0632 5932 SharedAccess - ok

22:38:38.0679 5932 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll

22:38:38.0695 5932 ShellHWDetection - ok

22:38:38.0726 5932 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys

22:38:38.0726 5932 sisagp - ok

22:38:38.0773 5932 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys

22:38:38.0773 5932 SiSRaid2 - ok

22:38:38.0788 5932 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys

22:38:38.0788 5932 SiSRaid4 - ok

22:38:38.0835 5932 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys

22:38:38.0835 5932 Smb - ok

22:38:39.0038 5932 SmcService (a58c1a086d9c09c6572c948f22cc0e94) C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

22:38:39.0053 5932 SmcService - ok

22:38:39.0100 5932 SNAC (d2c222441255131e29de351475f98f6d) C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE

22:38:39.0100 5932 SNAC - ok

22:38:39.0225 5932 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe

22:38:39.0225 5932 SNMPTRAP - ok

22:38:39.0397 5932 SPBBCDrv (e621bb5839cf45fa477f48092edd2b40) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

22:38:39.0412 5932 SPBBCDrv - ok

22:38:39.0459 5932 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys

22:38:39.0459 5932 spldr - ok

22:38:39.0537 5932 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe

22:38:39.0537 5932 Spooler - ok

22:38:39.0693 5932 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe

22:38:39.0724 5932 sppsvc - ok

22:38:39.0849 5932 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll

22:38:39.0849 5932 sppuinotify - ok

22:38:39.0958 5932 SpyHunter 4 Service (63f2b52947577dbb075fe646bc758a2f) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

22:38:39.0974 5932 SpyHunter 4 Service - ok

22:38:40.0068 5932 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

22:38:40.0083 5932 SQLBrowser - ok

22:38:40.0130 5932 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

22:38:40.0130 5932 SQLWriter - ok

22:38:40.0177 5932 SRTSP (2abf82c8452ab0b9ffc74a2d5da91989) C:\windows\system32\Drivers\SRTSP.SYS

22:38:40.0192 5932 SRTSP - ok

22:38:40.0224 5932 SRTSPL (e2f9e5887bea5bd8784d337e06eda31b) C:\windows\system32\Drivers\SRTSPL.SYS

22:38:40.0224 5932 SRTSPL - ok

22:38:40.0270 5932 SRTSPX (3b974c158fabd910186f98df8d3e23f3) C:\windows\system32\Drivers\SRTSPX.SYS

22:38:40.0270 5932 SRTSPX - ok

22:38:40.0302 5932 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys

22:38:40.0317 5932 srv - ok

22:38:40.0364 5932 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys

22:38:40.0364 5932 srv2 - ok

22:38:40.0395 5932 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys

22:38:40.0395 5932 srvnet - ok

22:38:40.0426 5932 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll

22:38:40.0442 5932 SSDPSRV - ok

22:38:40.0458 5932 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll

22:38:40.0458 5932 SstpSvc - ok

22:38:40.0489 5932 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys

22:38:40.0489 5932 stexstor - ok

22:38:40.0536 5932 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll

22:38:40.0551 5932 StiSvc - ok

22:38:40.0598 5932 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys

22:38:40.0598 5932 swenum - ok

22:38:40.0645 5932 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll

22:38:40.0645 5932 swprv - ok

22:38:40.0863 5932 Symantec AntiVirus (ba2fb8f8ab24d0279caa98a4c118150e) C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

22:38:40.0879 5932 Symantec AntiVirus - ok

22:38:41.0035 5932 SymEvent (a54ff04bd6e75dc4d8cb6f3e352635e0) C:\windows\system32\Drivers\SYMEVENT.SYS

22:38:41.0035 5932 SymEvent - ok

22:38:41.0097 5932 SYMREDRV (394b2368212114d538316812af60fddd) C:\windows\System32\Drivers\SYMREDRV.SYS

22:38:41.0097 5932 SYMREDRV - ok

22:38:41.0128 5932 SYMTDI (d46676bb414c7531bdffe637a33f5033) C:\windows\System32\Drivers\SYMTDI.SYS

22:38:41.0128 5932 SYMTDI - ok

22:38:41.0206 5932 SynTP (7a9025d8f7852b06d6d08ed536135e7e) C:\windows\system32\DRIVERS\SynTP.sys

22:38:41.0206 5932 SynTP - ok

22:38:41.0316 5932 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll

22:38:41.0331 5932 SysMain - ok

22:38:41.0362 5932 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll

22:38:41.0362 5932 TabletInputService - ok

22:38:41.0425 5932 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll

22:38:41.0425 5932 TapiSrv - ok

22:38:41.0440 5932 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll

22:38:41.0456 5932 TBS - ok

22:38:41.0550 5932 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\drivers\tcpip.sys

22:38:41.0565 5932 Tcpip - ok

22:38:41.0612 5932 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\DRIVERS\tcpip.sys

22:38:41.0612 5932 TCPIP6 - ok

22:38:41.0659 5932 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys

22:38:41.0659 5932 tcpipreg - ok

22:38:41.0690 5932 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys

22:38:41.0690 5932 TDPIPE - ok

22:38:41.0721 5932 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys

22:38:41.0721 5932 TDTCP - ok

22:38:41.0784 5932 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys

22:38:41.0784 5932 tdx - ok

22:38:42.0096 5932 TeamViewer6 (839e88db24d2d8f05b72e12b175951ca) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

22:38:42.0111 5932 TeamViewer6 - ok

22:38:42.0236 5932 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys

22:38:42.0252 5932 TermDD - ok

22:38:42.0298 5932 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll

22:38:42.0314 5932 TermService - ok

22:38:42.0330 5932 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll

22:38:42.0345 5932 Themes - ok

22:38:42.0376 5932 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:38:42.0376 5932 THREADORDER - ok

22:38:42.0423 5932 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll

22:38:42.0423 5932 TrkWks - ok

22:38:42.0486 5932 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe

22:38:42.0486 5932 TrustedInstaller - ok

22:38:42.0517 5932 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys

22:38:42.0517 5932 tssecsrv - ok

22:38:42.0548 5932 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys

22:38:42.0548 5932 TsUsbFlt - ok

22:38:42.0626 5932 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys

22:38:42.0626 5932 tunnel - ok

22:38:42.0657 5932 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys

22:38:42.0657 5932 uagp35 - ok

22:38:42.0735 5932 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys

22:38:42.0735 5932 udfs - ok

22:38:42.0782 5932 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe

22:38:42.0782 5932 UI0Detect - ok

22:38:42.0844 5932 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys

22:38:42.0844 5932 uliagpkx - ok

22:38:42.0891 5932 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys

22:38:42.0891 5932 umbus - ok

22:38:42.0938 5932 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys

22:38:42.0938 5932 UmPass - ok

22:38:43.0047 5932 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll

22:38:43.0047 5932 upnphost - ok

22:38:43.0110 5932 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\windows\system32\Drivers\usbaapl.sys

22:38:43.0110 5932 USBAAPL - ok

22:38:43.0156 5932 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys

22:38:43.0156 5932 usbccgp - ok

22:38:43.0188 5932 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys

22:38:43.0203 5932 usbcir - ok

22:38:43.0219 5932 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys

22:38:43.0219 5932 usbehci - ok

22:38:43.0281 5932 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys

22:38:43.0281 5932 usbhub - ok

22:38:43.0312 5932 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\drivers\usbohci.sys

22:38:43.0312 5932 usbohci - ok

22:38:43.0375 5932 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys

22:38:43.0375 5932 usbprint - ok

22:38:43.0422 5932 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys

22:38:43.0422 5932 usbscan - ok

22:38:43.0468 5932 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\drivers\USBSTOR.SYS

22:38:43.0468 5932 USBSTOR - ok

22:38:43.0484 5932 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\DRIVERS\usbuhci.sys

22:38:43.0484 5932 usbuhci - ok

22:38:43.0546 5932 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys

22:38:43.0546 5932 usbvideo - ok

22:38:43.0578 5932 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll

22:38:43.0578 5932 UxSms - ok

22:38:43.0609 5932 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:38:43.0609 5932 VaultSvc - ok

22:38:43.0671 5932 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys

22:38:43.0671 5932 vdrvroot - ok

22:38:43.0749 5932 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe

22:38:43.0765 5932 vds - ok

22:38:43.0780 5932 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys

22:38:43.0796 5932 vga - ok

22:38:43.0812 5932 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys

22:38:43.0812 5932 VgaSave - ok

22:38:43.0843 5932 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys

22:38:43.0843 5932 vhdmp - ok

22:38:43.0905 5932 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys

22:38:43.0905 5932 viaagp - ok

22:38:43.0921 5932 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys

22:38:43.0921 5932 ViaC7 - ok

22:38:43.0936 5932 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys

22:38:43.0936 5932 viaide - ok

22:38:43.0952 5932 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys

22:38:43.0952 5932 volmgr - ok

22:38:43.0983 5932 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys

22:38:43.0983 5932 volmgrx - ok

22:38:44.0030 5932 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys

22:38:44.0030 5932 volsnap - ok

22:38:44.0108 5932 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys

22:38:44.0108 5932 vsmraid - ok

22:38:44.0202 5932 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe

22:38:44.0217 5932 VSS - ok

22:38:44.0233 5932 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys

22:38:44.0233 5932 vwifibus - ok

22:38:44.0280 5932 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys

22:38:44.0280 5932 vwififlt - ok

22:38:44.0326 5932 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys

22:38:44.0326 5932 vwifimp - ok

22:38:44.0373 5932 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll

22:38:44.0373 5932 W32Time - ok

22:38:44.0404 5932 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys

22:38:44.0420 5932 WacomPen - ok

22:38:44.0467 5932 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:38:44.0467 5932 WANARP - ok

22:38:44.0482 5932 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:38:44.0482 5932 Wanarpv6 - ok

22:38:44.0607 5932 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe

22:38:44.0623 5932 WatAdminSvc - ok

22:38:44.0701 5932 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe

22:38:44.0716 5932 wbengine - ok

22:38:44.0763 5932 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll

22:38:44.0763 5932 WbioSrvc - ok

22:38:44.0810 5932 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll

22:38:44.0826 5932 wcncsvc - ok

22:38:44.0841 5932 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll

22:38:44.0841 5932 WcsPlugInService - ok

22:38:44.0904 5932 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys

22:38:44.0904 5932 Wd - ok

22:38:44.0935 5932 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys

22:38:44.0935 5932 Wdf01000 - ok

22:38:44.0966 5932 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:38:44.0966 5932 WdiServiceHost - ok

22:38:44.0966 5932 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:38:44.0966 5932 WdiSystemHost - ok

22:38:45.0013 5932 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll

22:38:45.0013 5932 WebClient - ok

22:38:45.0044 5932 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll

22:38:45.0044 5932 Wecsvc - ok

22:38:45.0060 5932 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll

22:38:45.0060 5932 wercplsupport - ok

22:38:45.0106 5932 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll

22:38:45.0106 5932 WerSvc - ok

22:38:45.0153 5932 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys

22:38:45.0169 5932 WfpLwf - ok

22:38:45.0184 5932 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys

22:38:45.0184 5932 WIMMount - ok

22:38:45.0262 5932 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

22:38:45.0262 5932 WinDefend - ok

22:38:45.0278 5932 WinHttpAutoProxySvc - ok

22:38:45.0356 5932 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll

22:38:45.0356 5932 Winmgmt - ok

22:38:45.0434 5932 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll

22:38:45.0465 5932 WinRM - ok

22:38:45.0559 5932 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys

22:38:45.0559 5932 WinUsb - ok

22:38:45.0621 5932 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll

22:38:45.0637 5932 Wlansvc - ok

22:38:45.0840 5932 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

22:38:45.0855 5932 wlidsvc - ok

22:38:45.0980 5932 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys

22:38:45.0980 5932 WmiAcpi - ok

22:38:46.0042 5932 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe

22:38:46.0042 5932 wmiApSrv - ok

22:38:46.0198 5932 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

22:38:46.0214 5932 WMPNetworkSvc - ok

22:38:46.0245 5932 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll

22:38:46.0261 5932 WPCSvc - ok

22:38:46.0308 5932 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll

22:38:46.0308 5932 WPDBusEnum - ok

22:38:46.0354 5932 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys

22:38:46.0354 5932 ws2ifsl - ok

22:38:46.0386 5932 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\system32\wscsvc.dll

22:38:46.0401 5932 wscsvc - ok

22:38:46.0401 5932 WSearch - ok

22:38:46.0542 5932 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\windows\system32\wuaueng.dll

22:38:46.0557 5932 wuauserv - ok

22:38:46.0682 5932 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys

22:38:46.0682 5932 WudfPf - ok

22:38:46.0729 5932 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys

22:38:46.0744 5932 WUDFRd - ok

22:38:46.0791 5932 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll

22:38:46.0807 5932 wudfsvc - ok

22:38:46.0838 5932 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll

22:38:46.0838 5932 WwanSvc - ok

22:38:46.0900 5932 MBR (0x1B8) (2e5debb2116b3417023e0d6562d7ed07) \Device\Harddisk0\DR0

22:38:47.0134 5932 \Device\Harddisk0\DR0 - ok

22:38:47.0134 5932 Boot (0x1200) (5fb009d8d1bbe104d22d071977f32a2a) \Device\Harddisk0\DR0\Partition0

22:38:47.0134 5932 \Device\Harddisk0\DR0\Partition0 - ok

22:38:47.0150 5932 Boot (0x1200) (d5688b55e165a627667567455a328efc) \Device\Harddisk0\DR0\Partition1

22:38:47.0166 5932 \Device\Harddisk0\DR0\Partition1 - ok

22:38:47.0181 5932 Boot (0x1200) (78ee0a60b0242cd51c89824323794145) \Device\Harddisk0\DR0\Partition2

22:38:47.0181 5932 \Device\Harddisk0\DR0\Partition2 - ok

22:38:47.0181 5932 ============================================================

22:38:47.0181 5932 Scan finished

22:38:47.0181 5932 ============================================================

22:38:47.0197 5708 Detected object count: 0

22:38:47.0197 5708 Actual detected object count: 0

22:40:10.0251 4324 ============================================================

22:40:10.0251 4324 Scan started

22:40:10.0251 4324 Mode: Manual; SigCheck; TDLFS;

22:40:10.0251 4324 ============================================================

22:40:10.0532 4324 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys

22:40:10.0626 4324 1394ohci - ok

22:40:10.0672 4324 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys

22:40:10.0704 4324 ACPI - ok

22:40:10.0719 4324 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys

22:40:10.0797 4324 AcpiPmi - ok

22:40:10.0844 4324 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys

22:40:10.0891 4324 adp94xx - ok

22:40:10.0922 4324 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys

22:40:10.0938 4324 adpahci - ok

22:40:10.0969 4324 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys

22:40:10.0969 4324 adpu320 - ok

22:40:11.0000 4324 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll

22:40:11.0062 4324 AeLookupSvc - ok

22:40:11.0094 4324 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys

22:40:11.0172 4324 AFD - ok

22:40:11.0203 4324 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys

22:40:11.0218 4324 agp440 - ok

22:40:11.0296 4324 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys

22:40:11.0312 4324 aic78xx - ok

22:40:11.0343 4324 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe

22:40:11.0374 4324 ALG - ok

22:40:11.0406 4324 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys

22:40:11.0406 4324 aliide - ok

22:40:11.0437 4324 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys

22:40:11.0452 4324 amdagp - ok

22:40:11.0484 4324 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys

22:40:11.0499 4324 amdide - ok

22:40:11.0515 4324 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys

22:40:11.0562 4324 AmdK8 - ok

22:40:11.0577 4324 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys

22:40:11.0608 4324 AmdPPM - ok

22:40:11.0655 4324 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys

22:40:11.0655 4324 amdsata - ok

22:40:11.0686 4324 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys

22:40:11.0702 4324 amdsbs - ok

22:40:11.0718 4324 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys

22:40:11.0733 4324 amdxata - ok

22:40:11.0780 4324 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys

22:40:11.0874 4324 AppID - ok

22:40:11.0889 4324 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll

22:40:11.0936 4324 AppIDSvc - ok

22:40:11.0967 4324 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll

22:40:12.0014 4324 Appinfo - ok

22:40:12.0108 4324 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

22:40:12.0123 4324 Apple Mobile Device - ok

22:40:12.0186 4324 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys

22:40:12.0217 4324 arc - ok

22:40:12.0217 4324 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys

22:40:12.0232 4324 arcsas - ok

22:40:12.0248 4324 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys

22:40:12.0279 4324 AsyncMac - ok

22:40:12.0326 4324 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys

22:40:12.0342 4324 atapi - ok

22:40:12.0420 4324 athr (de0fbcccd6af0f0e7bf12e8d041cc48f) C:\windows\system32\DRIVERS\athr.sys

22:40:12.0482 4324 athr - ok

22:40:12.0544 4324 atksgt (6e996cf8459a2594e0e9609d0e34d41f) C:\windows\system32\DRIVERS\atksgt.sys

22:40:12.0560 4324 atksgt ( UnsignedFile.Multi.Generic ) - warning

22:40:12.0560 4324 atksgt - detected UnsignedFile.Multi.Generic (1)

22:40:12.0622 4324 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:40:12.0654 4324 AudioEndpointBuilder - ok

22:40:12.0669 4324 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:40:12.0700 4324 Audiosrv - ok

22:40:12.0732 4324 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll

22:40:12.0778 4324 AxInstSV - ok

22:40:12.0856 4324 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys

22:40:12.0888 4324 b06bdrv - ok

22:40:12.0919 4324 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys

22:40:12.0950 4324 b57nd60x - ok

22:40:13.0012 4324 BcmSqlStartupSvc (6163664c7e9cd110af70180c126c3fdc) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

22:40:13.0028 4324 BcmSqlStartupSvc - ok

22:40:13.0059 4324 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll

22:40:13.0090 4324 BDESVC - ok

22:40:13.0122 4324 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys

22:40:13.0153 4324 Beep - ok

22:40:13.0200 4324 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll

22:40:13.0246 4324 BFE - ok

22:40:13.0293 4324 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\system32\qmgr.dll

22:40:13.0324 4324 BITS - ok

22:40:13.0340 4324 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys

22:40:13.0371 4324 blbdrive - ok

22:40:13.0465 4324 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe

22:40:13.0480 4324 Bonjour Service - ok

22:40:13.0512 4324 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys

22:40:13.0574 4324 bowser - ok

22:40:13.0590 4324 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys

22:40:13.0668 4324 BrFiltLo - ok

22:40:13.0683 4324 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys

22:40:13.0714 4324 BrFiltUp - ok

22:40:13.0730 4324 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\windows\system32\DRIVERS\bridge.sys

22:40:13.0792 4324 BridgeMP - ok

22:40:13.0824 4324 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll

22:40:13.0855 4324 Browser - ok

22:40:13.0886 4324 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys

22:40:13.0902 4324 Brserid - ok

22:40:13.0933 4324 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys

22:40:13.0964 4324 BrSerWdm - ok

22:40:13.0980 4324 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys

22:40:14.0011 4324 BrUsbMdm - ok

22:40:14.0026 4324 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys

22:40:14.0073 4324 BrUsbSer - ok

22:40:14.0089 4324 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys

22:40:14.0104 4324 BTHMODEM - ok

22:40:14.0136 4324 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll

22:40:14.0182 4324 bthserv - ok

22:40:14.0245 4324 catchme - ok

22:40:14.0338 4324 ccEvtMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:40:14.0354 4324 ccEvtMgr - ok

22:40:14.0354 4324 ccSetMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:40:14.0370 4324 ccSetMgr - ok

22:40:14.0401 4324 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys

22:40:14.0432 4324 cdfs - ok

22:40:14.0463 4324 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\DRIVERS\cdrom.sys

22:40:14.0479 4324 cdrom - ok

22:40:14.0510 4324 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:40:14.0572 4324 CertPropSvc - ok

22:40:14.0604 4324 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys

22:40:14.0635 4324 circlass - ok

22:40:14.0666 4324 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys

22:40:14.0682 4324 CLFS - ok

22:40:14.0760 4324 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

22:40:14.0775 4324 clr_optimization_v2.0.50727_32 - ok

22:40:14.0838 4324 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

22:40:14.0853 4324 clr_optimization_v4.0.30319_32 - ok

22:40:14.0869 4324 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys

22:40:14.0916 4324 CmBatt - ok

22:40:14.0947 4324 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys

22:40:14.0962 4324 cmdide - ok

22:40:15.0009 4324 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys

22:40:15.0056 4324 CNG - ok

22:40:15.0072 4324 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys

22:40:15.0072 4324 Compbatt - ok

22:40:15.0103 4324 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys

22:40:15.0150 4324 CompositeBus - ok

22:40:15.0150 4324 COMSysApp - ok

22:40:15.0181 4324 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys

22:40:15.0196 4324 crcdisk - ok

22:40:15.0243 4324 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\windows\system32\cryptsvc.dll

22:40:15.0274 4324 CryptSvc - ok

22:40:15.0306 4324 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\windows\system32\DRIVERS\ctxusbm.sys

22:40:15.0321 4324 ctxusbm - ok

22:40:15.0384 4324 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:40:15.0415 4324 DcomLaunch - ok

22:40:15.0446 4324 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll

22:40:15.0493 4324 defragsvc - ok

22:40:15.0540 4324 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys

22:40:15.0602 4324 DfsC - ok

22:40:15.0633 4324 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll

22:40:15.0664 4324 Dhcp - ok

22:40:15.0696 4324 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys

22:40:15.0727 4324 discache - ok

22:40:15.0742 4324 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys

22:40:15.0758 4324 Disk - ok

22:40:15.0805 4324 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll

22:40:15.0867 4324 Dnscache - ok

22:40:15.0898 4324 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll

22:40:15.0945 4324 dot3svc - ok

22:40:15.0992 4324 Dot4 (b5e479eb83707dd698f66953e922042c) C:\windows\system32\DRIVERS\Dot4.sys

22:40:16.0008 4324 Dot4 - ok

22:40:16.0054 4324 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\windows\system32\drivers\Dot4Prt.sys

22:40:16.0086 4324 Dot4Print - ok

22:40:16.0101 4324 dot4usb (cf491ff38d62143203c065260567e2f7) C:\windows\system32\DRIVERS\dot4usb.sys

22:40:16.0148 4324 dot4usb - ok

22:40:16.0195 4324 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll

22:40:16.0242 4324 DPS - ok

22:40:16.0273 4324 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys

22:40:16.0288 4324 drmkaud - ok

22:40:16.0351 4324 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\windows\system32\DRIVERS\dtsoftbus01.sys

22:40:16.0382 4324 dtsoftbus01 - ok

22:40:16.0444 4324 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys

22:40:16.0460 4324 DXGKrnl - ok

22:40:16.0491 4324 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll

22:40:16.0538 4324 EapHost - ok

22:40:16.0694 4324 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys

22:40:16.0756 4324 ebdrv - ok

22:40:16.0850 4324 eeCtrl (fce87ba643d5e9a8b6e0378508d1b22d) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

22:40:16.0881 4324 eeCtrl - ok

22:40:16.0975 4324 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe

22:40:16.0990 4324 EFS - ok

22:40:17.0084 4324 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe

22:40:17.0131 4324 ehRecvr - ok

22:40:17.0162 4324 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe

22:40:17.0193 4324 ehSched - ok

22:40:17.0271 4324 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys

22:40:17.0302 4324 elxstor - ok

22:40:17.0380 4324 EraserUtilRebootDrv (115dc729465a8c386615207f28875255) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

22:40:17.0396 4324 EraserUtilRebootDrv - ok

22:40:17.0427 4324 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys

22:40:17.0458 4324 ErrDev - ok

22:40:17.0521 4324 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll

22:40:17.0568 4324 EventSystem - ok

22:40:17.0599 4324 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys

22:40:17.0661 4324 exfat - ok

22:40:17.0692 4324 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys

22:40:17.0739 4324 fastfat - ok

22:40:17.0786 4324 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe

22:40:17.0817 4324 Fax - ok

22:40:17.0848 4324 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys

22:40:17.0880 4324 fdc - ok

22:40:17.0911 4324 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll

22:40:17.0958 4324 fdPHost - ok

22:40:17.0973 4324 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll

22:40:18.0020 4324 FDResPub - ok

22:40:18.0051 4324 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys

22:40:18.0051 4324 FileInfo - ok

22:40:18.0082 4324 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys

22:40:18.0129 4324 Filetrace - ok

22:40:18.0145 4324 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys

22:40:18.0192 4324 flpydisk - ok

22:40:18.0207 4324 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys

22:40:18.0223 4324 FltMgr - ok

22:40:18.0285 4324 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll

22:40:18.0332 4324 FontCache - ok

22:40:18.0394 4324 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

22:40:18.0410 4324 FontCache3.0.0.0 - ok

22:40:18.0426 4324 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys

22:40:18.0441 4324 FsDepends - ok

22:40:18.0472 4324 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys

22:40:18.0488 4324 fssfltr - ok

22:40:18.0660 4324 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

22:40:18.0691 4324 fsssvc - ok

22:40:18.0816 4324 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys

22:40:18.0831 4324 Fs_Rec - ok

22:40:18.0862 4324 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys

22:40:18.0878 4324 fvevol - ok

22:40:18.0909 4324 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys

22:40:18.0925 4324 gagp30kx - ok

22:40:18.0956 4324 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys

22:40:18.0972 4324 GEARAspiWDM - ok

22:40:19.0034 4324 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll

22:40:19.0096 4324 gpsvc - ok

22:40:19.0190 4324 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:40:19.0206 4324 gupdate - ok

22:40:19.0206 4324 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:40:19.0221 4324 gupdatem - ok

22:40:19.0252 4324 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

22:40:19.0268 4324 gusvc - ok

22:40:19.0299 4324 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys

22:40:19.0330 4324 hcw85cir - ok

22:40:19.0377 4324 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys

22:40:19.0408 4324 HdAudAddService - ok

22:40:19.0440 4324 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys

22:40:19.0471 4324 HDAudBus - ok

22:40:19.0518 4324 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys

22:40:19.0549 4324 HidBatt - ok

22:40:19.0580 4324 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys

22:40:19.0627 4324 HidBth - ok

22:40:19.0642 4324 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys

22:40:19.0689 4324 HidIr - ok

22:40:19.0720 4324 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\System32\hidserv.dll

22:40:19.0767 4324 hidserv - ok

22:40:19.0798 4324 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys

22:40:19.0830 4324 HidUsb - ok

22:40:19.0876 4324 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll

22:40:19.0908 4324 hkmsvc - ok

22:40:19.0939 4324 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll

22:40:19.0986 4324 HomeGroupListener - ok

22:40:20.0017 4324 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll

22:40:20.0064 4324 HomeGroupProvider - ok

22:40:20.0079 4324 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys

22:40:20.0095 4324 HpSAMD - ok

22:40:20.0157 4324 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys

22:40:20.0204 4324 HTTP - ok

22:40:20.0220 4324 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys

22:40:20.0235 4324 hwpolicy - ok

22:40:20.0266 4324 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys

22:40:20.0298 4324 i8042prt - ok

22:40:20.0360 4324 IAANTMON (7548066df68a8a1a56b043359f915f37) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

22:40:20.0391 4324 IAANTMON - ok

22:40:20.0438 4324 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys

22:40:20.0454 4324 iaStor - ok

22:40:20.0485 4324 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys

22:40:20.0516 4324 iaStorV - ok

22:40:20.0625 4324 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

22:40:20.0656 4324 idsvc - ok

22:40:21.0062 4324 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\windows\system32\DRIVERS\igdkmd32.sys

22:40:21.0265 4324 igfx - ok

22:40:21.0390 4324 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys

22:40:21.0405 4324 iirsp - ok

22:40:21.0468 4324 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll

22:40:21.0530 4324 IKEEXT - ok

22:40:21.0670 4324 IntcAzAudAddService (5ceef2cccb4fe00d3ffbfeb12bcfa07f) C:\windows\system32\drivers\RTKVHDA.sys

22:40:21.0717 4324 IntcAzAudAddService - ok

22:40:21.0842 4324 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys

22:40:21.0858 4324 intelide - ok

22:40:21.0889 4324 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys

22:40:21.0920 4324 intelppm - ok

22:40:21.0967 4324 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll

22:40:22.0014 4324 IPBusEnum - ok

22:40:22.0029 4324 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys

22:40:22.0076 4324 IpFilterDriver - ok

22:40:22.0138 4324 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\windows\System32\iphlpsvc.dll

22:40:22.0170 4324 iphlpsvc - ok

22:40:22.0201 4324 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys

22:40:22.0232 4324 IPMIDRV - ok

22:40:22.0263 4324 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys

22:40:22.0294 4324 IPNAT - ok

22:40:22.0388 4324 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Program Files\iPod\bin\iPodService.exe

22:40:22.0404 4324 iPod Service - ok

22:40:22.0435 4324 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys

22:40:22.0466 4324 IRENUM - ok

22:40:22.0497 4324 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys

22:40:22.0513 4324 isapnp - ok

22:40:22.0544 4324 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys

22:40:22.0560 4324 iScsiPrt - ok

22:40:22.0591 4324 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys

22:40:22.0606 4324 kbdclass - ok

22:40:22.0622 4324 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys

22:40:22.0669 4324 kbdhid - ok

22:40:22.0731 4324 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:22.0747 4324 KeyIso - ok

22:40:22.0747 4324 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys

22:40:22.0762 4324 KSecDD - ok

22:40:22.0778 4324 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys

22:40:22.0794 4324 KSecPkg - ok

22:40:22.0825 4324 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll

22:40:22.0856 4324 KtmRm - ok

22:40:22.0887 4324 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\System32\srvsvc.dll

22:40:22.0934 4324 LanmanServer - ok

22:40:22.0965 4324 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll

22:40:23.0012 4324 LanmanWorkstation - ok

22:40:23.0059 4324 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\windows\system32\DRIVERS\lirsgt.sys

22:40:23.0074 4324 lirsgt ( UnsignedFile.Multi.Generic ) - warning

22:40:23.0074 4324 lirsgt - detected UnsignedFile.Multi.Generic (1)

22:40:23.0293 4324 LiveUpdate (e34152d03caaaaa81dd66d803f392522) C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

22:40:23.0340 4324 LiveUpdate - ok

22:40:23.0449 4324 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys

22:40:23.0511 4324 lltdio - ok

22:40:23.0558 4324 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll

22:40:23.0605 4324 lltdsvc - ok

22:40:23.0620 4324 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll

22:40:23.0683 4324 lmhosts - ok

22:40:23.0698 4324 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys

22:40:23.0714 4324 LSI_FC - ok

22:40:23.0745 4324 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys

22:40:23.0761 4324 LSI_SAS - ok

22:40:23.0792 4324 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys

22:40:23.0808 4324 LSI_SAS2 - ok

22:40:23.0808 4324 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys

22:40:23.0823 4324 LSI_SCSI - ok

22:40:23.0854 4324 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys

22:40:23.0901 4324 luafv - ok

22:40:23.0979 4324 lxeeCATSCustConnectService (a9d8d63c7378dd34e4e19036093a9264) C:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe

22:40:24.0010 4324 lxeeCATSCustConnectService - ok

22:40:24.0010 4324 lxee_device - ok

22:40:24.0042 4324 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll

22:40:24.0057 4324 Mcx2Svc - ok

22:40:24.0088 4324 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys

22:40:24.0104 4324 megasas - ok

22:40:24.0120 4324 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys

22:40:24.0135 4324 MegaSR - ok

22:40:24.0229 4324 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

22:40:24.0244 4324 Microsoft Office Groove Audit Service - ok

22:40:24.0276 4324 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:40:24.0307 4324 MMCSS - ok

22:40:24.0307 4324 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys

22:40:24.0354 4324 Modem - ok

22:40:24.0385 4324 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys

22:40:24.0416 4324 monitor - ok

22:40:24.0463 4324 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys

22:40:24.0478 4324 mouclass - ok

22:40:24.0494 4324 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys

22:40:24.0525 4324 mouhid - ok

22:40:24.0556 4324 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys

22:40:24.0572 4324 mountmgr - ok

22:40:24.0603 4324 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys

22:40:24.0619 4324 mpio - ok

22:40:24.0650 4324 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys

22:40:24.0697 4324 mpsdrv - ok

22:40:24.0759 4324 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\windows\system32\mpssvc.dll

22:40:24.0822 4324 MpsSvc - ok

22:40:24.0868 4324 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys

22:40:24.0884 4324 MRxDAV - ok

22:40:24.0915 4324 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys

22:40:24.0978 4324 mrxsmb - ok

22:40:25.0009 4324 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys

22:40:25.0040 4324 mrxsmb10 - ok

22:40:25.0071 4324 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys

22:40:25.0118 4324 mrxsmb20 - ok

22:40:25.0149 4324 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys

22:40:25.0165 4324 msahci - ok

22:40:25.0196 4324 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys

22:40:25.0212 4324 msdsm - ok

22:40:25.0243 4324 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe

22:40:25.0258 4324 MSDTC - ok

22:40:25.0290 4324 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys

22:40:25.0336 4324 Msfs - ok

22:40:25.0368 4324 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys

22:40:25.0430 4324 mshidkmdf - ok

22:40:25.0461 4324 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys

22:40:25.0477 4324 msisadrv - ok

22:40:25.0508 4324 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll

22:40:25.0539 4324 MSiSCSI - ok

22:40:25.0539 4324 msiserver - ok

22:40:25.0555 4324 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys

22:40:25.0602 4324 MSKSSRV - ok

22:40:25.0633 4324 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys

22:40:25.0695 4324 MSPCLOCK - ok

22:40:25.0711 4324 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys

22:40:25.0742 4324 MSPQM - ok

22:40:25.0758 4324 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys

22:40:25.0773 4324 MsRPC - ok

22:40:25.0804 4324 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys

22:40:25.0836 4324 mssmbios - ok

22:40:25.0929 4324 MSSQL$MSSMLBIZ - ok

22:40:25.0960 4324 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe

22:40:25.0976 4324 MSSQLServerADHelper - ok

22:40:25.0992 4324 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys

22:40:26.0023 4324 MSTEE - ok

22:40:26.0038 4324 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys

22:40:26.0070 4324 MTConfig - ok

22:40:26.0085 4324 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys

22:40:26.0101 4324 Mup - ok

22:40:26.0148 4324 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll

22:40:26.0194 4324 napagent - ok

22:40:26.0226 4324 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys

22:40:26.0272 4324 NativeWifiP - ok

22:40:26.0382 4324 NAVENG (f11033730b38260b6892e837c457fb4b) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVENG.SYS

22:40:26.0397 4324 NAVENG - ok

22:40:26.0475 4324 NAVEX15 (4e4e7c0259d3bb97de24a636c0e06aba) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVEX15.SYS

22:40:26.0506 4324 NAVEX15 - ok

22:40:26.0662 4324 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys

22:40:26.0709 4324 NDIS - ok

22:40:26.0740 4324 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys

22:40:26.0772 4324 NdisCap - ok

22:40:26.0787 4324 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys

22:40:26.0834 4324 NdisTapi - ok

22:40:26.0865 4324 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys

22:40:26.0928 4324 Ndisuio - ok

22:40:26.0974 4324 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys

22:40:27.0037 4324 NdisWan - ok

22:40:27.0068 4324 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys

22:40:27.0099 4324 NDProxy - ok

22:40:27.0115 4324 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys

22:40:27.0162 4324 NetBIOS - ok

22:40:27.0193 4324 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys

22:40:27.0240 4324 NetBT - ok

22:40:27.0271 4324 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:27.0286 4324 Netlogon - ok

22:40:27.0318 4324 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll

22:40:27.0349 4324 Netman - ok

22:40:27.0396 4324 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll

22:40:27.0442 4324 netprofm - ok

22:40:27.0505 4324 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

22:40:27.0536 4324 NetTcpPortSharing - ok

22:40:27.0552 4324 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys

22:40:27.0567 4324 nfrd960 - ok

22:40:27.0614 4324 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll

22:40:27.0676 4324 NlaSvc - ok

22:40:27.0692 4324 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys

22:40:27.0739 4324 Npfs - ok

22:40:27.0786 4324 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll

22:40:27.0817 4324 nsi - ok

22:40:27.0832 4324 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys

22:40:27.0879 4324 nsiproxy - ok

22:40:27.0973 4324 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys

22:40:28.0004 4324 Ntfs - ok

22:40:28.0020 4324 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys

22:40:28.0051 4324 Null - ok

22:40:28.0082 4324 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys

22:40:28.0098 4324 nvraid - ok

22:40:28.0129 4324 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys

22:40:28.0144 4324 nvstor - ok

22:40:28.0160 4324 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys

22:40:28.0176 4324 nv_agp - ok

22:40:28.0238 4324 OberonGameConsoleService (b5d5da8230d3d3525839d939a9196c3e) C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

22:40:28.0254 4324 OberonGameConsoleService - ok

22:40:28.0347 4324 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

22:40:28.0378 4324 odserv - ok

22:40:28.0394 4324 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys

22:40:28.0410 4324 ohci1394 - ok

22:40:28.0441 4324 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

22:40:28.0456 4324 ose - ok

22:40:28.0488 4324 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:40:28.0534 4324 p2pimsvc - ok

22:40:28.0566 4324 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll

22:40:28.0581 4324 p2psvc - ok

22:40:28.0612 4324 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys

22:40:28.0628 4324 Parport - ok

22:40:28.0659 4324 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\windows\system32\drivers\partmgr.sys

22:40:28.0675 4324 partmgr - ok

22:40:28.0706 4324 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys

22:40:28.0737 4324 Parvdm - ok

22:40:28.0784 4324 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll

22:40:28.0815 4324 PcaSvc - ok

22:40:28.0862 4324 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys

22:40:28.0893 4324 pci - ok

22:40:28.0924 4324 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys

22:40:28.0924 4324 pciide - ok

22:40:28.0956 4324 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys

22:40:28.0971 4324 pcmcia - ok

22:40:28.0987 4324 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys

22:40:29.0002 4324 pcw - ok

22:40:29.0034 4324 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys

22:40:29.0080 4324 PEAUTH - ok

22:40:29.0190 4324 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll

22:40:29.0236 4324 pla - ok

22:40:29.0361 4324 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll

22:40:29.0424 4324 PlugPlay - ok

22:40:29.0455 4324 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll

22:40:29.0502 4324 PNRPAutoReg - ok

22:40:29.0533 4324 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:40:29.0564 4324 PNRPsvc - ok

22:40:29.0595 4324 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll

22:40:29.0642 4324 PolicyAgent - ok

22:40:29.0720 4324 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll

22:40:29.0782 4324 Power - ok

22:40:29.0829 4324 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys

22:40:29.0876 4324 PptpMiniport - ok

22:40:29.0907 4324 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys

22:40:29.0923 4324 Processor - ok

22:40:29.0954 4324 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\windows\system32\profsvc.dll

22:40:30.0001 4324 ProfSvc - ok

22:40:30.0032 4324 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:30.0048 4324 ProtectedStorage - ok

22:40:30.0094 4324 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys

22:40:30.0110 4324 Psched - ok

22:40:30.0188 4324 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys

22:40:30.0219 4324 ql2300 - ok

22:40:30.0313 4324 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys

22:40:30.0328 4324 ql40xx - ok

22:40:30.0360 4324 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll

22:40:30.0406 4324 QWAVE - ok

22:40:30.0438 4324 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys

22:40:30.0453 4324 QWAVEdrv - ok

22:40:30.0469 4324 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys

22:40:30.0500 4324 RasAcd - ok

22:40:30.0516 4324 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys

22:40:30.0562 4324 RasAgileVpn - ok

22:40:30.0578 4324 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll

22:40:30.0609 4324 RasAuto - ok

22:40:30.0625 4324 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys

22:40:30.0687 4324 Rasl2tp - ok

22:40:30.0734 4324 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll

22:40:30.0781 4324 RasMan - ok

22:40:30.0796 4324 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys

22:40:30.0828 4324 RasPppoe - ok

22:40:30.0874 4324 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys

22:40:30.0952 4324 RasSstp - ok

22:40:30.0984 4324 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys

22:40:31.0015 4324 rdbss - ok

22:40:31.0030 4324 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys

22:40:31.0062 4324 rdpbus - ok

22:40:31.0108 4324 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys

22:40:31.0140 4324 RDPCDD - ok

22:40:31.0171 4324 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys

22:40:31.0202 4324 RDPENCDD - ok

22:40:31.0249 4324 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys

22:40:31.0264 4324 RDPREFMP - ok

22:40:31.0311 4324 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\windows\system32\drivers\RDPWD.sys

22:40:31.0374 4324 RDPWD - ok

22:40:31.0405 4324 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys

22:40:31.0420 4324 rdyboost - ok

22:40:31.0436 4324 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll

22:40:31.0483 4324 RemoteAccess - ok

22:40:31.0530 4324 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll

22:40:31.0545 4324 RemoteRegistry - ok

22:40:31.0561 4324 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll

22:40:31.0608 4324 RpcEptMapper - ok

22:40:31.0639 4324 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe

22:40:31.0670 4324 RpcLocator - ok

22:40:31.0718 4324 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:40:31.0749 4324 RpcSs - ok

22:40:31.0796 4324 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys

22:40:31.0843 4324 rspndr - ok

22:40:31.0874 4324 RTL8167 (6465166dd9b2f841dabad16abdadbe98) C:\windows\system32\DRIVERS\Rt86win7.sys

22:40:31.0921 4324 RTL8167 - ok

22:40:31.0952 4324 SABI (6e5fbb7cbaec47038b945d5e9b144a64) C:\windows\system32\Drivers\SABI.sys

22:40:32.0014 4324 SABI - ok

22:40:32.0045 4324 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:32.0061 4324 SamSs - ok

22:40:32.0092 4324 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys

22:40:32.0108 4324 sbp2port - ok

22:40:32.0139 4324 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll

22:40:32.0170 4324 SCardSvr - ok

22:40:32.0201 4324 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys

22:40:32.0248 4324 scfilter - ok

22:40:32.0326 4324 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll

22:40:32.0357 4324 Schedule - ok

22:40:32.0389 4324 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:40:32.0420 4324 SCPolicySvc - ok

22:40:32.0451 4324 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll

22:40:32.0482 4324 SDRSVC - ok

22:40:32.0513 4324 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys

22:40:32.0560 4324 secdrv - ok

22:40:32.0591 4324 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll

22:40:32.0623 4324 seclogon - ok

22:40:32.0638 4324 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\system32\sens.dll

22:40:32.0669 4324 SENS - ok

22:40:32.0716 4324 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll

22:40:32.0732 4324 SensrSvc - ok

22:40:32.0747 4324 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys

22:40:32.0779 4324 Serenum - ok

22:40:32.0794 4324 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys

22:40:32.0810 4324 Serial - ok

22:40:32.0857 4324 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys

22:40:32.0888 4324 sermouse - ok

22:40:32.0935 4324 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll

22:40:33.0010 4324 SessionEnv - ok

22:40:33.0041 4324 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys

22:40:33.0088 4324 sffdisk - ok

22:40:33.0103 4324 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys

22:40:33.0119 4324 sffp_mmc - ok

22:40:33.0166 4324 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys

22:40:33.0181 4324 sffp_sd - ok

22:40:33.0197 4324 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys

22:40:33.0228 4324 sfloppy - ok

22:40:33.0259 4324 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\windows\System32\ipnathlp.dll

22:40:33.0306 4324 SharedAccess - ok

22:40:33.0353 4324 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll

22:40:33.0384 4324 ShellHWDetection - ok

22:40:33.0415 4324 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys

22:40:33.0431 4324 sisagp - ok

22:40:33.0462 4324 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys

22:40:33.0478 4324 SiSRaid2 - ok

22:40:33.0493 4324 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys

22:40:33.0493 4324 SiSRaid4 - ok

22:40:33.0524 4324 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys

22:40:33.0571 4324 Smb - ok

22:40:33.0758 4324 SmcService (a58c1a086d9c09c6572c948f22cc0e94) C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

22:40:33.0821 4324 SmcService - ok

22:40:33.0852 4324 SNAC (d2c222441255131e29de351475f98f6d) C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE

22:40:33.0868 4324 SNAC - ok

22:40:33.0961 4324 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe

22:40:33.0992 4324 SNMPTRAP - ok

22:40:34.0189 4324 SPBBCDrv (e621bb5839cf45fa477f48092edd2b40) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

22:40:34.0205 4324 SPBBCDrv - ok

22:40:34.0270 4324 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys

22:40:34.0301 4324 spldr - ok

22:40:34.0384 4324 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe

22:40:34.0418 4324 Spooler - ok

22:40:34.0576 4324 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe

22:40:34.0641 4324 sppsvc - ok

22:40:34.0767 4324 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll

22:40:34.0824 4324 sppuinotify - ok

22:40:34.0904 4324 SpyHunter 4 Service (63f2b52947577dbb075fe646bc758a2f) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

22:40:34.0934 4324 SpyHunter 4 Service - ok

22:40:35.0077 4324 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

22:40:35.0093 4324 SQLBrowser - ok

22:40:35.0124 4324 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

22:40:35.0137 4324 SQLWriter - ok

22:40:35.0190 4324 SRTSP (2abf82c8452ab0b9ffc74a2d5da91989) C:\windows\system32\Drivers\SRTSP.SYS

22:40:35.0193 4324 SRTSP - ok

22:40:35.0224 4324 SRTSPL (e2f9e5887bea5bd8784d337e06eda31b) C:\windows\system32\Drivers\SRTSPL.SYS

22:40:35.0263 4324 SRTSPL - ok

22:40:35.0278 4324 SRTSPX (3b974c158fabd910186f98df8d3e23f3) C:\windows\system32\Drivers\SRTSPX.SYS

22:40:35.0293 4324 SRTSPX - ok

22:40:35.0312 4324 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys

22:40:35.0343 4324 srv - ok

22:40:35.0394 4324 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys

22:40:35.0410 4324 srv2 - ok

22:40:35.0448 4324 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys

22:40:35.0478 4324 srvnet - ok

22:40:35.0514 4324 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll

22:40:35.0546 4324 SSDPSRV - ok

22:40:35.0571 4324 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll

22:40:35.0592 4324 SstpSvc - ok

22:40:35.0623 4324 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys

22:40:35.0639 4324 stexstor - ok

22:40:35.0685 4324 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll

22:40:35.0716 4324 StiSvc - ok

22:40:35.0747 4324 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys

22:40:35.0763 4324 swenum - ok

22:40:35.0778 4324 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll

22:40:35.0810 4324 swprv - ok

22:40:36.0321 4324 Symantec AntiVirus (ba2fb8f8ab24d0279caa98a4c118150e) C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

22:40:36.0373 4324 Symantec AntiVirus - ok

22:40:36.0788 4324 SymEvent (a54ff04bd6e75dc4d8cb6f3e352635e0) C:\windows\system32\Drivers\SYMEVENT.SYS

22:40:36.0811 4324 SymEvent - ok

22:40:36.0858 4324 SYMREDRV (394b2368212114d538316812af60fddd) C:\windows\System32\Drivers\SYMREDRV.SYS

22:40:36.0876 4324 SYMREDRV - ok

22:40:36.0951 4324 SYMTDI (d46676bb414c7531bdffe637a33f5033) C:\windows\System32\Drivers\SYMTDI.SYS

22:40:36.0966 4324 SYMTDI - ok

22:40:37.0021 4324 SynTP (7a9025d8f7852b06d6d08ed536135e7e) C:\windows\system32\DRIVERS\SynTP.sys

22:40:37.0036 4324 SynTP - ok

22:40:37.0130 4324 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll

22:40:37.0177 4324 SysMain - ok

22:40:37.0512 4324 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll

22:40:37.0527 4324 TabletInputService - ok

22:40:37.0574 4324 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll

22:40:37.0605 4324 TapiSrv - ok

22:40:37.0636 4324 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll

22:40:37.0683 4324 TBS - ok

22:40:37.0808 4324 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\drivers\tcpip.sys

22:40:37.0839 4324 Tcpip - ok

22:40:37.0855 4324 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\DRIVERS\tcpip.sys

22:40:37.0886 4324 TCPIP6 - ok

22:40:37.0933 4324 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys

22:40:37.0980 4324 tcpipreg - ok

22:40:38.0026 4324 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys

22:40:38.0073 4324 TDPIPE - ok

22:40:38.0120 4324 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys

22:40:38.0136 4324 TDTCP - ok

22:40:38.0214 4324 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys

22:40:38.0229 4324 tdx - ok

22:40:38.0510 4324 TeamViewer6 (839e88db24d2d8f05b72e12b175951ca) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

22:40:38.0557 4324 TeamViewer6 - ok

22:40:38.0697 4324 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys

22:40:38.0744 4324 TermDD - ok

22:40:38.0791 4324 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll

22:40:38.0822 4324 TermService - ok

22:40:38.0853 4324 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll

22:40:38.0900 4324 Themes - ok

22:40:38.0931 4324 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:40:38.0962 4324 THREADORDER - ok

22:40:38.0978 4324 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll

22:40:39.0025 4324 TrkWks - ok

22:40:39.0103 4324 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe

22:40:39.0134 4324 TrustedInstaller - ok

22:40:39.0165 4324 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys

22:40:39.0196 4324 tssecsrv - ok

22:40:39.0243 4324 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys

22:40:39.0259 4324 TsUsbFlt - ok

22:40:39.0290 4324 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys

22:40:39.0337 4324 tunnel - ok

22:40:39.0368 4324 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys

22:40:39.0384 4324 uagp35 - ok

22:40:39.0430 4324 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys

22:40:39.0462 4324 udfs - ok

22:40:39.0477 4324 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe

22:40:39.0508 4324 UI0Detect - ok

22:40:39.0555 4324 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys

22:40:39.0571 4324 uliagpkx - ok

22:40:39.0602 4324 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys

22:40:39.0618 4324 umbus - ok

22:40:39.0649 4324 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys

22:40:39.0680 4324 UmPass - ok

22:40:39.0711 4324 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll

22:40:39.0742 4324 upnphost - ok

22:40:39.0774 4324 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\windows\system32\Drivers\usbaapl.sys

22:40:39.0805 4324 USBAAPL - ok

22:40:39.0852 4324 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys

22:40:39.0914 4324 usbccgp - ok

22:40:39.0945 4324 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys

22:40:39.0992 4324 usbcir - ok

22:40:40.0008 4324 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys

22:40:40.0023 4324 usbehci - ok

22:40:40.0054 4324 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys

22:40:40.0086 4324 usbhub - ok

22:40:40.0117 4324 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\drivers\usbohci.sys

22:40:40.0148 4324 usbohci - ok

22:40:40.0179 4324 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys

22:40:40.0195 4324 usbprint - ok

22:40:40.0226 4324 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys

22:40:40.0242 4324 usbscan - ok

22:40:40.0257 4324 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\drivers\USBSTOR.SYS

22:40:40.0320 4324 USBSTOR - ok

22:40:40.0351 4324 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\DRIVERS\usbuhci.sys

22:40:40.0382 4324 usbuhci - ok

22:40:40.0429 4324 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys

22:40:40.0476 4324 usbvideo - ok

22:40:40.0522 4324 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll

22:40:40.0569 4324 UxSms - ok

22:40:40.0600 4324 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:40:40.0616 4324 VaultSvc - ok

22:40:40.0647 4324 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys

22:40:40.0663 4324 vdrvroot - ok

22:40:40.0725 4324 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe

22:40:40.0756 4324 vds - ok

22:40:40.0788 4324 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys

22:40:40.0803 4324 vga - ok

22:40:40.0819 4324 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys

22:40:40.0866 4324 VgaSave - ok

22:40:40.0912 4324 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys

22:40:40.0928 4324 vhdmp - ok

22:40:40.0975 4324 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys

22:40:40.0975 4324 viaagp - ok

22:40:40.0990 4324 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys

22:40:41.0006 4324 ViaC7 - ok

22:40:41.0037 4324 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys

22:40:41.0053 4324 viaide - ok

22:40:41.0084 4324 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys

22:40:41.0100 4324 volmgr - ok

22:40:41.0131 4324 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys

22:40:41.0146 4324 volmgrx - ok

22:40:41.0193 4324 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys

22:40:41.0209 4324 volsnap - ok

22:40:41.0224 4324 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys

22:40:41.0240 4324 vsmraid - ok

22:40:41.0318 4324 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe

22:40:41.0380 4324 VSS - ok

22:40:41.0412 4324 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys

22:40:41.0443 4324 vwifibus - ok

22:40:41.0474 4324 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys

22:40:41.0490 4324 vwififlt - ok

22:40:41.0505 4324 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys

22:40:41.0552 4324 vwifimp - ok

22:40:41.0599 4324 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll

22:40:41.0630 4324 W32Time - ok

22:40:41.0661 4324 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys

22:40:41.0708 4324 WacomPen - ok

22:40:41.0739 4324 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:40:41.0770 4324 WANARP - ok

22:40:41.0770 4324 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:40:41.0802 4324 Wanarpv6 - ok

22:40:41.0880 4324 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe

22:40:41.0911 4324 WatAdminSvc - ok

22:40:41.0989 4324 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe

22:40:42.0036 4324 wbengine - ok

22:40:42.0082 4324 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll

22:40:42.0129 4324 WbioSrvc - ok

22:40:42.0176 4324 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll

22:40:42.0223 4324 wcncsvc - ok

22:40:42.0238 4324 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll

22:40:42.0270 4324 WcsPlugInService - ok

22:40:42.0332 4324 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys

22:40:42.0348 4324 Wd - ok

22:40:42.0379 4324 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys

22:40:42.0410 4324 Wdf01000 - ok

22:40:42.0426 4324 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:40:42.0472 4324 WdiServiceHost - ok

22:40:42.0472 4324 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:40:42.0488 4324 WdiSystemHost - ok

22:40:42.0535 4324 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll

22:40:42.0582 4324 WebClient - ok

22:40:42.0597 4324 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll

22:40:42.0644 4324 Wecsvc - ok

22:40:42.0675 4324 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll

22:40:42.0722 4324 wercplsupport - ok

22:40:42.0753 4324 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll

22:40:42.0784 4324 WerSvc - ok

22:40:42.0800 4324 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys

22:40:42.0862 4324 WfpLwf - ok

22:40:42.0878 4324 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys

22:40:42.0894 4324 WIMMount - ok

22:40:42.0972 4324 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

22:40:43.0018 4324 WinDefend - ok

22:40:43.0034 4324 WinHttpAutoProxySvc - ok

22:40:43.0096 4324 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll

22:40:43.0143 4324 Winmgmt - ok

22:40:43.0221 4324 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll

22:40:43.0268 4324 WinRM - ok

22:40:43.0330 4324 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys

22:40:43.0377 4324 WinUsb - ok

22:40:43.0471 4324 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll

22:40:43.0518 4324 Wlansvc - ok

22:40:43.0658 4324 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

22:40:43.0720 4324 wlidsvc - ok

22:40:43.0830 4324 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys

22:40:43.0876 4324 WmiAcpi - ok

22:40:43.0954 4324 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe

22:40:43.0986 4324 wmiApSrv - ok

22:40:44.0110 4324 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

22:40:44.0142 4324 WMPNetworkSvc - ok

22:40:44.0173 4324 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll

22:40:44.0204 4324 WPCSvc - ok

22:40:44.0235 4324 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll

22:40:44.0266 4324 WPDBusEnum - ok

22:40:44.0329 4324 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys

22:40:44.0360 4324 ws2ifsl - ok

22:40:44.0391 4324 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\system32\wscsvc.dll

22:40:44.0407 4324 wscsvc - ok

22:40:44.0407 4324 WSearch - ok

22:40:44.0516 4324 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\windows\system32\wuaueng.dll

22:40:44.0563 4324 wuauserv - ok

22:40:44.0688 4324 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys

22:40:44.0750 4324 WudfPf - ok

22:40:44.0766 4324 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys

22:40:44.0797 4324 WUDFRd - ok

22:40:44.0828 4324 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll

22:40:44.0875 4324 wudfsvc - ok

22:40:44.0922 4324 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll

22:40:44.0953 4324 WwanSvc - ok

22:40:44.0984 4324 MBR (0x1B8) (2e5debb2116b3417023e0d6562d7ed07) \Device\Harddisk0\DR0

22:40:45.0327 4324 \Device\Harddisk0\DR0 - ok

22:40:45.0327 4324 Boot (0x1200) (5fb009d8d1bbe104d22d071977f32a2a) \Device\Harddisk0\DR0\Partition0

22:40:45.0327 4324 \Device\Harddisk0\DR0\Partition0 - ok

22:40:45.0358 4324 Boot (0x1200) (d5688b55e165a627667567455a328efc) \Device\Harddisk0\DR0\Partition1

22:40:45.0358 4324 \Device\Harddisk0\DR0\Partition1 - ok

22:40:45.0390 4324 Boot (0x1200) (78ee0a60b0242cd51c89824323794145) \Device\Harddisk0\DR0\Partition2

22:40:45.0390 4324 \Device\Harddisk0\DR0\Partition2 - ok

22:40:45.0390 4324 ============================================================

22:40:45.0390 4324 Scan finished

22:40:45.0390 4324 ============================================================

22:40:45.0405 5164 Detected object count: 2

22:40:45.0405 5164 Actual detected object count: 2

22:41:23.0208 5164 atksgt ( UnsignedFile.Multi.Generic ) - skipped by user

22:41:23.0208 5164 atksgt ( UnsignedFile.Multi.Generic ) - User select action: Skip

22:41:23.0224 5164 lirsgt ( UnsignedFile.Multi.Generic ) - skipped by user

22:41:23.0224 5164 lirsgt ( UnsignedFile.Multi.Generic ) - User select action: Skip

22:41:50.0368 4036 ============================================================

22:41:50.0368 4036 Scan started

22:41:50.0368 4036 Mode: Manual; SigCheck; TDLFS;

22:41:50.0368 4036 ============================================================

22:41:50.0618 4036 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys

22:41:50.0664 4036 1394ohci - ok

22:41:50.0711 4036 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys

22:41:50.0727 4036 ACPI - ok

22:41:50.0742 4036 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys

22:41:50.0758 4036 AcpiPmi - ok

22:41:50.0789 4036 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys

22:41:50.0820 4036 adp94xx - ok

22:41:50.0836 4036 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys

22:41:50.0852 4036 adpahci - ok

22:41:50.0883 4036 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys

22:41:50.0883 4036 adpu320 - ok

22:41:50.0914 4036 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll

22:41:50.0930 4036 AeLookupSvc - ok

22:41:50.0976 4036 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys

22:41:50.0992 4036 AFD - ok

22:41:51.0023 4036 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys

22:41:51.0023 4036 agp440 - ok

22:41:51.0054 4036 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys

22:41:51.0070 4036 aic78xx - ok

22:41:51.0086 4036 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe

22:41:51.0101 4036 ALG - ok

22:41:51.0132 4036 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys

22:41:51.0148 4036 aliide - ok

22:41:51.0164 4036 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys

22:41:51.0179 4036 amdagp - ok

22:41:51.0210 4036 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys

22:41:51.0210 4036 amdide - ok

22:41:51.0226 4036 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys

22:41:51.0242 4036 AmdK8 - ok

22:41:51.0288 4036 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys

22:41:51.0304 4036 AmdPPM - ok

22:41:51.0335 4036 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys

22:41:51.0335 4036 amdsata - ok

22:41:51.0382 4036 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys

22:41:51.0398 4036 amdsbs - ok

22:41:51.0413 4036 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys

22:41:51.0429 4036 amdxata - ok

22:41:51.0460 4036 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys

22:41:51.0491 4036 AppID - ok

22:41:51.0507 4036 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll

22:41:51.0538 4036 AppIDSvc - ok

22:41:51.0569 4036 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll

22:41:51.0600 4036 Appinfo - ok

22:41:51.0678 4036 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

22:41:51.0710 4036 Apple Mobile Device - ok

22:41:51.0741 4036 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys

22:41:51.0772 4036 arc - ok

22:41:51.0788 4036 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys

22:41:51.0803 4036 arcsas - ok

22:41:51.0819 4036 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys

22:41:51.0850 4036 AsyncMac - ok

22:41:51.0881 4036 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys

22:41:51.0897 4036 atapi - ok

22:41:51.0959 4036 athr (de0fbcccd6af0f0e7bf12e8d041cc48f) C:\windows\system32\DRIVERS\athr.sys

22:41:51.0990 4036 athr - ok

22:41:52.0037 4036 atksgt (6e996cf8459a2594e0e9609d0e34d41f) C:\windows\system32\DRIVERS\atksgt.sys

22:41:52.0037 4036 atksgt ( UnsignedFile.Multi.Generic ) - warning

22:41:52.0037 4036 atksgt - detected UnsignedFile.Multi.Generic (1)

22:41:52.0334 4036 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:41:52.0380 4036 AudioEndpointBuilder - ok

22:41:52.0380 4036 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll

22:41:52.0412 4036 Audiosrv - ok

22:41:52.0443 4036 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll

22:41:52.0458 4036 AxInstSV - ok

22:41:52.0505 4036 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys

22:41:52.0521 4036 b06bdrv - ok

22:41:52.0536 4036 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys

22:41:52.0552 4036 b57nd60x - ok

22:41:52.0599 4036 BcmSqlStartupSvc (6163664c7e9cd110af70180c126c3fdc) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

22:41:52.0614 4036 BcmSqlStartupSvc - ok

22:41:52.0646 4036 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll

22:41:52.0661 4036 BDESVC - ok

22:41:52.0724 4036 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys

22:41:52.0755 4036 Beep - ok

22:41:52.0802 4036 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll

22:41:52.0833 4036 BFE - ok

22:41:52.0864 4036 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\system32\qmgr.dll

22:41:52.0895 4036 BITS - ok

22:41:52.0911 4036 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys

22:41:52.0926 4036 blbdrive - ok

22:41:52.0989 4036 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe

22:41:53.0020 4036 Bonjour Service - ok

22:41:53.0051 4036 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys

22:41:53.0067 4036 bowser - ok

22:41:53.0082 4036 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys

22:41:53.0098 4036 BrFiltLo - ok

22:41:53.0129 4036 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys

22:41:53.0129 4036 BrFiltUp - ok

22:41:53.0145 4036 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\windows\system32\DRIVERS\bridge.sys

22:41:53.0176 4036 BridgeMP - ok

22:41:53.0223 4036 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll

22:41:53.0238 4036 Browser - ok

22:41:53.0285 4036 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys

22:41:53.0301 4036 Brserid - ok

22:41:53.0301 4036 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys

22:41:53.0316 4036 BrSerWdm - ok

22:41:53.0348 4036 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys

22:41:53.0363 4036 BrUsbMdm - ok

22:41:53.0394 4036 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys

22:41:53.0394 4036 BrUsbSer - ok

22:41:53.0410 4036 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys

22:41:53.0426 4036 BTHMODEM - ok

22:41:53.0457 4036 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll

22:41:53.0488 4036 bthserv - ok

22:41:53.0535 4036 catchme - ok

22:41:53.0613 4036 ccEvtMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:41:53.0628 4036 ccEvtMgr - ok

22:41:53.0644 4036 ccSetMgr (27d036fb3d22ca8a6662fe960d1a937d) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

22:41:53.0660 4036 ccSetMgr - ok

22:41:53.0675 4036 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys

22:41:53.0706 4036 cdfs - ok

22:41:53.0738 4036 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\DRIVERS\cdrom.sys

22:41:53.0753 4036 cdrom - ok

22:41:53.0784 4036 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:41:53.0816 4036 CertPropSvc - ok

22:41:53.0831 4036 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys

22:41:53.0847 4036 circlass - ok

22:41:53.0878 4036 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys

22:41:53.0894 4036 CLFS - ok

22:41:53.0956 4036 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

22:41:53.0972 4036 clr_optimization_v2.0.50727_32 - ok

22:41:54.0034 4036 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

22:41:54.0065 4036 clr_optimization_v4.0.30319_32 - ok

22:41:54.0096 4036 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys

22:41:54.0096 4036 CmBatt - ok

22:41:54.0128 4036 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys

22:41:54.0143 4036 cmdide - ok

22:41:54.0190 4036 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys

22:41:54.0206 4036 CNG - ok

22:41:54.0221 4036 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys

22:41:54.0237 4036 Compbatt - ok

22:41:54.0268 4036 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys

22:41:54.0284 4036 CompositeBus - ok

22:41:54.0284 4036 COMSysApp - ok

22:41:54.0299 4036 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys

22:41:54.0315 4036 crcdisk - ok

22:41:54.0346 4036 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\windows\system32\cryptsvc.dll

22:41:54.0362 4036 CryptSvc - ok

22:41:54.0393 4036 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\windows\system32\DRIVERS\ctxusbm.sys

22:41:54.0408 4036 ctxusbm - ok

22:41:54.0455 4036 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:41:54.0486 4036 DcomLaunch - ok

22:41:54.0518 4036 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll

22:41:54.0549 4036 defragsvc - ok

22:41:54.0580 4036 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys

22:41:54.0611 4036 DfsC - ok

22:41:54.0627 4036 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll

22:41:54.0658 4036 Dhcp - ok

22:41:54.0689 4036 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys

22:41:54.0720 4036 discache - ok

22:41:54.0720 4036 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys

22:41:54.0736 4036 Disk - ok

22:41:54.0783 4036 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll

22:41:54.0798 4036 Dnscache - ok

22:41:54.0845 4036 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll

22:41:54.0861 4036 dot3svc - ok

22:41:54.0892 4036 Dot4 (b5e479eb83707dd698f66953e922042c) C:\windows\system32\DRIVERS\Dot4.sys

22:41:54.0908 4036 Dot4 - ok

22:41:54.0939 4036 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\windows\system32\drivers\Dot4Prt.sys

22:41:54.0954 4036 Dot4Print - ok

22:41:54.0986 4036 dot4usb (cf491ff38d62143203c065260567e2f7) C:\windows\system32\DRIVERS\dot4usb.sys

22:41:55.0001 4036 dot4usb - ok

22:41:55.0032 4036 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll

22:41:55.0064 4036 DPS - ok

22:41:55.0079 4036 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys

22:41:55.0095 4036 drmkaud - ok

22:41:55.0126 4036 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\windows\system32\DRIVERS\dtsoftbus01.sys

22:41:55.0142 4036 dtsoftbus01 - ok

22:41:55.0204 4036 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys

22:41:55.0235 4036 DXGKrnl - ok

22:41:55.0266 4036 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll

22:41:55.0298 4036 EapHost - ok

22:41:55.0454 4036 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys

22:41:55.0500 4036 ebdrv - ok

22:41:55.0594 4036 eeCtrl (fce87ba643d5e9a8b6e0378508d1b22d) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

22:41:55.0610 4036 eeCtrl - ok

22:41:55.0719 4036 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe

22:41:55.0734 4036 EFS - ok

22:41:55.0937 4036 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe

22:41:55.0968 4036 ehRecvr - ok

22:41:55.0984 4036 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe

22:41:56.0000 4036 ehSched - ok

22:41:56.0062 4036 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys

22:41:56.0078 4036 elxstor - ok

22:41:56.0156 4036 EraserUtilRebootDrv (115dc729465a8c386615207f28875255) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

22:41:56.0171 4036 EraserUtilRebootDrv - ok

22:41:56.0202 4036 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys

22:41:56.0234 4036 ErrDev - ok

22:41:56.0280 4036 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll

22:41:56.0312 4036 EventSystem - ok

22:41:56.0343 4036 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys

22:41:56.0374 4036 exfat - ok

22:41:56.0390 4036 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys

22:41:56.0421 4036 fastfat - ok

22:41:56.0468 4036 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe

22:41:56.0483 4036 Fax - ok

22:41:56.0499 4036 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys

22:41:56.0514 4036 fdc - ok

22:41:56.0530 4036 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll

22:41:56.0561 4036 fdPHost - ok

22:41:56.0577 4036 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll

22:41:56.0608 4036 FDResPub - ok

22:41:56.0624 4036 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys

22:41:56.0639 4036 FileInfo - ok

22:41:56.0655 4036 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys

22:41:56.0686 4036 Filetrace - ok

22:41:56.0702 4036 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys

22:41:56.0717 4036 flpydisk - ok

22:41:56.0733 4036 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys

22:41:56.0748 4036 FltMgr - ok

22:41:56.0811 4036 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll

22:41:56.0842 4036 FontCache - ok

22:41:56.0904 4036 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

22:41:56.0920 4036 FontCache3.0.0.0 - ok

22:41:56.0936 4036 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys

22:41:56.0951 4036 FsDepends - ok

22:41:56.0982 4036 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys

22:41:56.0982 4036 fssfltr - ok

22:41:57.0154 4036 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

22:41:57.0185 4036 fsssvc - ok

22:41:57.0310 4036 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys

22:41:57.0341 4036 Fs_Rec - ok

22:41:57.0372 4036 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys

22:41:57.0404 4036 fvevol - ok

22:41:57.0419 4036 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys

22:41:57.0435 4036 gagp30kx - ok

22:41:57.0482 4036 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys

22:41:57.0482 4036 GEARAspiWDM - ok

22:41:57.0544 4036 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll

22:41:57.0575 4036 gpsvc - ok

22:41:57.0653 4036 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:41:57.0669 4036 gupdate - ok

22:41:57.0669 4036 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe

22:41:57.0684 4036 gupdatem - ok

22:41:57.0716 4036 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

22:41:57.0731 4036 gusvc - ok

22:41:57.0762 4036 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys

22:41:57.0778 4036 hcw85cir - ok

22:41:57.0809 4036 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys

22:41:57.0840 4036 HdAudAddService - ok

22:41:57.0856 4036 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys

22:41:57.0872 4036 HDAudBus - ok

22:41:57.0872 4036 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys

22:41:57.0887 4036 HidBatt - ok

22:41:57.0903 4036 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys

22:41:57.0918 4036 HidBth - ok

22:41:57.0950 4036 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys

22:41:57.0965 4036 HidIr - ok

22:41:57.0981 4036 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\System32\hidserv.dll

22:41:58.0012 4036 hidserv - ok

22:41:58.0043 4036 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys

22:41:58.0059 4036 HidUsb - ok

22:41:58.0090 4036 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll

22:41:58.0137 4036 hkmsvc - ok

22:41:58.0152 4036 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll

22:41:58.0168 4036 HomeGroupListener - ok

22:41:58.0215 4036 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll

22:41:58.0230 4036 HomeGroupProvider - ok

22:41:58.0262 4036 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys

22:41:58.0277 4036 HpSAMD - ok

22:41:58.0308 4036 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys

22:41:58.0355 4036 HTTP - ok

22:41:58.0371 4036 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys

22:41:58.0371 4036 hwpolicy - ok

22:41:58.0418 4036 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys

22:41:58.0433 4036 i8042prt - ok

22:41:58.0496 4036 IAANTMON (7548066df68a8a1a56b043359f915f37) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

22:41:58.0511 4036 IAANTMON - ok

22:41:58.0558 4036 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys

22:41:58.0574 4036 iaStor - ok

22:41:58.0620 4036 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys

22:41:58.0636 4036 iaStorV - ok

22:41:58.0730 4036 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

22:41:58.0761 4036 idsvc - ok

22:41:59.0166 4036 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\windows\system32\DRIVERS\igdkmd32.sys

22:41:59.0291 4036 igfx - ok

22:41:59.0400 4036 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys

22:41:59.0416 4036 iirsp - ok

22:41:59.0478 4036 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll

22:41:59.0525 4036 IKEEXT - ok

22:41:59.0666 4036 IntcAzAudAddService (5ceef2cccb4fe00d3ffbfeb12bcfa07f) C:\windows\system32\drivers\RTKVHDA.sys

22:41:59.0728 4036 IntcAzAudAddService - ok

22:41:59.0837 4036 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys

22:41:59.0853 4036 intelide - ok

22:41:59.0884 4036 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys

22:41:59.0915 4036 intelppm - ok

22:41:59.0946 4036 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll

22:41:59.0962 4036 IPBusEnum - ok

22:41:59.0993 4036 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys

22:42:00.0024 4036 IpFilterDriver - ok

22:42:00.0056 4036 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\windows\System32\iphlpsvc.dll

22:42:00.0087 4036 iphlpsvc - ok

22:42:00.0134 4036 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys

22:42:00.0149 4036 IPMIDRV - ok

22:42:00.0180 4036 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys

22:42:00.0227 4036 IPNAT - ok

22:42:00.0305 4036 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Program Files\iPod\bin\iPodService.exe

22:42:00.0336 4036 iPod Service - ok

22:42:00.0368 4036 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys

22:42:00.0383 4036 IRENUM - ok

22:42:00.0399 4036 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys

22:42:00.0414 4036 isapnp - ok

22:42:00.0446 4036 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys

22:42:00.0461 4036 iScsiPrt - ok

22:42:00.0492 4036 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys

22:42:00.0508 4036 kbdclass - ok

22:42:00.0524 4036 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys

22:42:00.0539 4036 kbdhid - ok

22:42:00.0570 4036 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:00.0586 4036 KeyIso - ok

22:42:00.0602 4036 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys

22:42:00.0617 4036 KSecDD - ok

22:42:00.0633 4036 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys

22:42:00.0633 4036 KSecPkg - ok

22:42:00.0664 4036 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll

22:42:00.0695 4036 KtmRm - ok

22:42:00.0742 4036 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\System32\srvsvc.dll

22:42:00.0773 4036 LanmanServer - ok

22:42:00.0820 4036 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll

22:42:00.0851 4036 LanmanWorkstation - ok

22:42:00.0882 4036 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\windows\system32\DRIVERS\lirsgt.sys

22:42:00.0898 4036 lirsgt ( UnsignedFile.Multi.Generic ) - warning

22:42:00.0898 4036 lirsgt - detected UnsignedFile.Multi.Generic (1)

22:42:01.0101 4036 LiveUpdate (e34152d03caaaaa81dd66d803f392522) C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

22:42:01.0163 4036 LiveUpdate - ok

22:42:01.0272 4036 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys

22:42:01.0304 4036 lltdio - ok

22:42:01.0350 4036 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll

22:42:01.0382 4036 lltdsvc - ok

22:42:01.0382 4036 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll

22:42:01.0413 4036 lmhosts - ok

22:42:01.0444 4036 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys

22:42:01.0460 4036 LSI_FC - ok

22:42:01.0460 4036 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys

22:42:01.0475 4036 LSI_SAS - ok

22:42:01.0506 4036 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys

22:42:01.0522 4036 LSI_SAS2 - ok

22:42:01.0522 4036 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys

22:42:01.0538 4036 LSI_SCSI - ok

22:42:01.0569 4036 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys

22:42:01.0600 4036 luafv - ok

22:42:01.0678 4036 lxeeCATSCustConnectService (a9d8d63c7378dd34e4e19036093a9264) C:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe

22:42:01.0694 4036 lxeeCATSCustConnectService - ok

22:42:01.0709 4036 lxee_device - ok

22:42:01.0740 4036 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll

22:42:01.0756 4036 Mcx2Svc - ok

22:42:01.0772 4036 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys

22:42:01.0787 4036 megasas - ok

22:42:01.0818 4036 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys

22:42:01.0834 4036 MegaSR - ok

22:42:01.0912 4036 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

22:42:01.0943 4036 Microsoft Office Groove Audit Service - ok

22:42:01.0959 4036 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:42:02.0006 4036 MMCSS - ok

22:42:02.0021 4036 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys

22:42:02.0052 4036 Modem - ok

22:42:02.0068 4036 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys

22:42:02.0084 4036 monitor - ok

22:42:02.0130 4036 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys

22:42:02.0130 4036 mouclass - ok

22:42:02.0146 4036 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys

22:42:02.0162 4036 mouhid - ok

22:42:02.0193 4036 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys

22:42:02.0208 4036 mountmgr - ok

22:42:02.0255 4036 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys

22:42:02.0255 4036 mpio - ok

22:42:02.0286 4036 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys

22:42:02.0318 4036 mpsdrv - ok

22:42:02.0364 4036 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\windows\system32\mpssvc.dll

22:42:02.0396 4036 MpsSvc - ok

22:42:02.0442 4036 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys

22:42:02.0458 4036 MRxDAV - ok

22:42:02.0505 4036 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys

22:42:02.0520 4036 mrxsmb - ok

22:42:02.0567 4036 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys

22:42:02.0583 4036 mrxsmb10 - ok

22:42:02.0598 4036 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys

22:42:02.0614 4036 mrxsmb20 - ok

22:42:02.0645 4036 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys

22:42:02.0661 4036 msahci - ok

22:42:02.0692 4036 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys

22:42:02.0708 4036 msdsm - ok

22:42:02.0723 4036 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe

22:42:02.0739 4036 MSDTC - ok

22:42:02.0786 4036 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys

22:42:02.0801 4036 Msfs - ok

22:42:02.0817 4036 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys

22:42:02.0848 4036 mshidkmdf - ok

22:42:02.0879 4036 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys

22:42:02.0895 4036 msisadrv - ok

22:42:02.0926 4036 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll

22:42:02.0942 4036 MSiSCSI - ok

22:42:02.0957 4036 msiserver - ok

22:42:02.0973 4036 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys

22:42:03.0004 4036 MSKSSRV - ok

22:42:03.0020 4036 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys

22:42:03.0051 4036 MSPCLOCK - ok

22:42:03.0051 4036 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys

22:42:03.0082 4036 MSPQM - ok

22:42:03.0113 4036 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys

22:42:03.0129 4036 MsRPC - ok

22:42:03.0176 4036 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys

22:42:03.0191 4036 mssmbios - ok

22:42:03.0285 4036 MSSQL$MSSMLBIZ - ok

22:42:03.0316 4036 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe

22:42:03.0332 4036 MSSQLServerADHelper - ok

22:42:03.0363 4036 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys

22:42:03.0378 4036 MSTEE - ok

22:42:03.0394 4036 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys

22:42:03.0410 4036 MTConfig - ok

22:42:03.0425 4036 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys

22:42:03.0441 4036 Mup - ok

22:42:03.0488 4036 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll

22:42:03.0519 4036 napagent - ok

22:42:03.0534 4036 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys

22:42:03.0566 4036 NativeWifiP - ok

22:42:03.0675 4036 NAVENG (f11033730b38260b6892e837c457fb4b) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVENG.SYS

22:42:03.0690 4036 NAVENG - ok

22:42:03.0768 4036 NAVEX15 (4e4e7c0259d3bb97de24a636c0e06aba) C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20120706.036\NAVEX15.SYS

22:42:03.0815 4036 NAVEX15 - ok

22:42:03.0940 4036 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys

22:42:03.0971 4036 NDIS - ok

22:42:04.0002 4036 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys

22:42:04.0034 4036 NdisCap - ok

22:42:04.0049 4036 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys

22:42:04.0065 4036 NdisTapi - ok

22:42:04.0112 4036 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys

22:42:04.0127 4036 Ndisuio - ok

22:42:04.0174 4036 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys

22:42:04.0190 4036 NdisWan - ok

22:42:04.0236 4036 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys

22:42:04.0252 4036 NDProxy - ok

22:42:04.0268 4036 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys

22:42:04.0299 4036 NetBIOS - ok

22:42:04.0346 4036 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys

22:42:04.0377 4036 NetBT - ok

22:42:04.0408 4036 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:04.0424 4036 Netlogon - ok

22:42:04.0455 4036 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll

22:42:04.0486 4036 Netman - ok

22:42:04.0502 4036 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll

22:42:04.0533 4036 netprofm - ok

22:42:04.0595 4036 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

22:42:04.0626 4036 NetTcpPortSharing - ok

22:42:04.0642 4036 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys

22:42:04.0658 4036 nfrd960 - ok

22:42:04.0704 4036 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll

22:42:04.0736 4036 NlaSvc - ok

22:42:04.0751 4036 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys

22:42:04.0767 4036 Npfs - ok

22:42:04.0798 4036 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll

22:42:04.0829 4036 nsi - ok

22:42:04.0845 4036 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys

22:42:04.0876 4036 nsiproxy - ok

22:42:04.0970 4036 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys

22:42:05.0001 4036 Ntfs - ok

22:42:05.0032 4036 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys

22:42:05.0063 4036 Null - ok

22:42:05.0094 4036 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys

22:42:05.0110 4036 nvraid - ok

22:42:05.0141 4036 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys

22:42:05.0157 4036 nvstor - ok

22:42:05.0172 4036 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys

22:42:05.0188 4036 nv_agp - ok

22:42:05.0250 4036 OberonGameConsoleService (b5d5da8230d3d3525839d939a9196c3e) C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

22:42:05.0266 4036 OberonGameConsoleService - ok

22:42:05.0360 4036 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

22:42:05.0391 4036 odserv - ok

22:42:05.0406 4036 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys

22:42:05.0422 4036 ohci1394 - ok

22:42:05.0453 4036 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

22:42:05.0469 4036 ose - ok

22:42:05.0500 4036 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:42:05.0516 4036 p2pimsvc - ok

22:42:05.0562 4036 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll

22:42:05.0578 4036 p2psvc - ok

22:42:05.0609 4036 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys

22:42:05.0625 4036 Parport - ok

22:42:05.0656 4036 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\windows\system32\drivers\partmgr.sys

22:42:05.0672 4036 partmgr - ok

22:42:05.0672 4036 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys

22:42:05.0687 4036 Parvdm - ok

22:42:05.0703 4036 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll

22:42:05.0734 4036 PcaSvc - ok

22:42:05.0765 4036 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys

22:42:05.0781 4036 pci - ok

22:42:05.0812 4036 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys

22:42:05.0828 4036 pciide - ok

22:42:05.0859 4036 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys

22:42:05.0874 4036 pcmcia - ok

22:42:05.0874 4036 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys

22:42:05.0890 4036 pcw - ok

22:42:05.0921 4036 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys

22:42:05.0968 4036 PEAUTH - ok

22:42:06.0062 4036 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll

22:42:06.0108 4036 pla - ok

22:42:06.0218 4036 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll

22:42:06.0249 4036 PlugPlay - ok

22:42:06.0264 4036 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll

22:42:06.0280 4036 PNRPAutoReg - ok

22:42:06.0311 4036 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll

22:42:06.0327 4036 PNRPsvc - ok

22:42:06.0374 4036 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll

22:42:06.0405 4036 PolicyAgent - ok

22:42:06.0452 4036 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll

22:42:06.0467 4036 Power - ok

22:42:06.0530 4036 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys

22:42:06.0545 4036 PptpMiniport - ok

22:42:06.0561 4036 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys

22:42:06.0576 4036 Processor - ok

22:42:06.0592 4036 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\windows\system32\profsvc.dll

22:42:06.0608 4036 ProfSvc - ok

22:42:06.0623 4036 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:06.0639 4036 ProtectedStorage - ok

22:42:06.0654 4036 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys

22:42:06.0686 4036 Psched - ok

22:42:06.0764 4036 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys

22:42:06.0810 4036 ql2300 - ok

22:42:06.0904 4036 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys

22:42:06.0920 4036 ql40xx - ok

22:42:06.0951 4036 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll

22:42:06.0966 4036 QWAVE - ok

22:42:06.0982 4036 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys

22:42:06.0998 4036 QWAVEdrv - ok

22:42:07.0013 4036 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys

22:42:07.0044 4036 RasAcd - ok

22:42:07.0060 4036 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys

22:42:07.0091 4036 RasAgileVpn - ok

22:42:07.0122 4036 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll

22:42:07.0138 4036 RasAuto - ok

22:42:07.0169 4036 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys

22:42:07.0185 4036 Rasl2tp - ok

22:42:07.0232 4036 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll

22:42:07.0263 4036 RasMan - ok

22:42:07.0294 4036 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys

22:42:07.0310 4036 RasPppoe - ok

22:42:07.0325 4036 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys

22:42:07.0356 4036 RasSstp - ok

22:42:07.0372 4036 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys

22:42:07.0403 4036 rdbss - ok

22:42:07.0419 4036 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys

22:42:07.0434 4036 rdpbus - ok

22:42:07.0466 4036 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys

22:42:07.0497 4036 RDPCDD - ok

22:42:07.0512 4036 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys

22:42:07.0544 4036 RDPENCDD - ok

22:42:07.0559 4036 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys

22:42:07.0575 4036 RDPREFMP - ok

22:42:07.0606 4036 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\windows\system32\drivers\RDPWD.sys

22:42:07.0622 4036 RDPWD - ok

22:42:07.0653 4036 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys

22:42:07.0668 4036 rdyboost - ok

22:42:07.0700 4036 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll

22:42:07.0731 4036 RemoteAccess - ok

22:42:07.0746 4036 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll

22:42:07.0778 4036 RemoteRegistry - ok

22:42:07.0793 4036 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll

22:42:07.0824 4036 RpcEptMapper - ok

22:42:07.0824 4036 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe

22:42:07.0840 4036 RpcLocator - ok

22:42:07.0902 4036 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll

22:42:07.0918 4036 RpcSs - ok

22:42:07.0949 4036 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys

22:42:07.0980 4036 rspndr - ok

22:42:07.0996 4036 RTL8167 (6465166dd9b2f841dabad16abdadbe98) C:\windows\system32\DRIVERS\Rt86win7.sys

22:42:08.0012 4036 RTL8167 - ok

22:42:08.0043 4036 SABI (6e5fbb7cbaec47038b945d5e9b144a64) C:\windows\system32\Drivers\SABI.sys

22:42:08.0058 4036 SABI - ok

22:42:08.0090 4036 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:08.0105 4036 SamSs - ok

22:42:08.0136 4036 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys

22:42:08.0152 4036 sbp2port - ok

22:42:08.0168 4036 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll

22:42:08.0199 4036 SCardSvr - ok

22:42:08.0230 4036 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys

22:42:08.0277 4036 scfilter - ok

22:42:08.0339 4036 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll

22:42:08.0386 4036 Schedule - ok

22:42:08.0417 4036 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll

22:42:08.0448 4036 SCPolicySvc - ok

22:42:08.0464 4036 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll

22:42:08.0480 4036 SDRSVC - ok

22:42:08.0511 4036 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys

22:42:08.0526 4036 secdrv - ok

22:42:08.0573 4036 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll

22:42:08.0604 4036 seclogon - ok

22:42:08.0620 4036 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\system32\sens.dll

22:42:08.0651 4036 SENS - ok

22:42:08.0682 4036 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll

22:42:08.0698 4036 SensrSvc - ok

22:42:08.0698 4036 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys

22:42:08.0714 4036 Serenum - ok

22:42:08.0729 4036 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys

22:42:08.0745 4036 Serial - ok

22:42:08.0776 4036 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys

22:42:08.0792 4036 sermouse - ok

22:42:08.0838 4036 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll

22:42:08.0870 4036 SessionEnv - ok

22:42:08.0901 4036 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys

22:42:08.0916 4036 sffdisk - ok

22:42:08.0932 4036 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys

22:42:08.0948 4036 sffp_mmc - ok

22:42:08.0963 4036 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys

22:42:08.0979 4036 sffp_sd - ok

22:42:08.0994 4036 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys

22:42:09.0010 4036 sfloppy - ok

22:42:09.0041 4036 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\windows\System32\ipnathlp.dll

22:42:09.0072 4036 SharedAccess - ok

22:42:09.0119 4036 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll

22:42:09.0150 4036 ShellHWDetection - ok

22:42:09.0197 4036 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys

22:42:09.0197 4036 sisagp - ok

22:42:09.0228 4036 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys

22:42:09.0244 4036 SiSRaid2 - ok

22:42:09.0260 4036 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys

22:42:09.0275 4036 SiSRaid4 - ok

22:42:09.0291 4036 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys

22:42:09.0322 4036 Smb - ok

22:42:09.0462 4036 SmcService (a58c1a086d9c09c6572c948f22cc0e94) C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

22:42:09.0509 4036 SmcService - ok

22:42:09.0540 4036 SNAC (d2c222441255131e29de351475f98f6d) C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE

22:42:09.0556 4036 SNAC - ok

22:42:09.0650 4036 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe

22:42:09.0681 4036 SNMPTRAP - ok

22:42:09.0790 4036 SPBBCDrv (e621bb5839cf45fa477f48092edd2b40) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

22:42:09.0806 4036 SPBBCDrv - ok

22:42:09.0852 4036 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys

22:42:09.0868 4036 spldr - ok

22:42:09.0930 4036 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe

22:42:09.0962 4036 Spooler - ok

22:42:10.0118 4036 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe

22:42:10.0180 4036 sppsvc - ok

22:42:10.0289 4036 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll

22:42:10.0336 4036 sppuinotify - ok

22:42:10.0414 4036 SpyHunter 4 Service (63f2b52947577dbb075fe646bc758a2f) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

22:42:10.0430 4036 SpyHunter 4 Service - ok

22:42:10.0492 4036 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

22:42:10.0508 4036 SQLBrowser - ok

22:42:10.0539 4036 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

22:42:10.0554 4036 SQLWriter - ok

22:42:10.0617 4036 SRTSP (2abf82c8452ab0b9ffc74a2d5da91989) C:\windows\system32\Drivers\SRTSP.SYS

22:42:10.0617 4036 SRTSP - ok

22:42:10.0648 4036 SRTSPL (e2f9e5887bea5bd8784d337e06eda31b) C:\windows\system32\Drivers\SRTSPL.SYS

22:42:10.0664 4036 SRTSPL - ok

22:42:10.0695 4036 SRTSPX (3b974c158fabd910186f98df8d3e23f3) C:\windows\system32\Drivers\SRTSPX.SYS

22:42:10.0695 4036 SRTSPX - ok

22:42:10.0726 4036 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys

22:42:10.0742 4036 srv - ok

22:42:10.0773 4036 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys

22:42:10.0788 4036 srv2 - ok

22:42:10.0804 4036 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys

22:42:10.0820 4036 srvnet - ok

22:42:10.0851 4036 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll

22:42:10.0882 4036 SSDPSRV - ok

22:42:10.0882 4036 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll

22:42:10.0913 4036 SstpSvc - ok

22:42:10.0929 4036 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys

22:42:10.0944 4036 stexstor - ok

22:42:11.0007 4036 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll

22:42:11.0022 4036 StiSvc - ok

22:42:11.0054 4036 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys

22:42:11.0069 4036 swenum - ok

22:42:11.0100 4036 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll

22:42:11.0132 4036 swprv - ok

22:42:11.0319 4036 Symantec AntiVirus (ba2fb8f8ab24d0279caa98a4c118150e) C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

22:42:11.0366 4036 Symantec AntiVirus - ok

22:42:11.0475 4036 SymEvent (a54ff04bd6e75dc4d8cb6f3e352635e0) C:\windows\system32\Drivers\SYMEVENT.SYS

22:42:11.0490 4036 SymEvent - ok

22:42:11.0506 4036 SYMREDRV (394b2368212114d538316812af60fddd) C:\windows\System32\Drivers\SYMREDRV.SYS

22:42:11.0522 4036 SYMREDRV - ok

22:42:11.0553 4036 SYMTDI (d46676bb414c7531bdffe637a33f5033) C:\windows\System32\Drivers\SYMTDI.SYS

22:42:11.0553 4036 SYMTDI - ok

22:42:11.0600 4036 SynTP (7a9025d8f7852b06d6d08ed536135e7e) C:\windows\system32\DRIVERS\SynTP.sys

22:42:11.0600 4036 SynTP - ok

22:42:11.0678 4036 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll

22:42:11.0724 4036 SysMain - ok

22:42:11.0756 4036 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll

22:42:11.0771 4036 TabletInputService - ok

22:42:11.0802 4036 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll

22:42:11.0834 4036 TapiSrv - ok

22:42:11.0865 4036 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll

22:42:11.0896 4036 TBS - ok

22:42:12.0005 4036 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\drivers\tcpip.sys

22:42:12.0052 4036 Tcpip - ok

22:42:12.0068 4036 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\DRIVERS\tcpip.sys

22:42:12.0099 4036 TCPIP6 - ok

22:42:12.0130 4036 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys

22:42:12.0161 4036 tcpipreg - ok

22:42:12.0192 4036 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys

22:42:12.0208 4036 TDPIPE - ok

22:42:12.0239 4036 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys

22:42:12.0239 4036 TDTCP - ok

22:42:12.0270 4036 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys

22:42:12.0302 4036 tdx - ok

22:42:12.0442 4036 TeamViewer6 (839e88db24d2d8f05b72e12b175951ca) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

22:42:12.0489 4036 TeamViewer6 - ok

22:42:12.0614 4036 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys

22:42:12.0645 4036 TermDD - ok

22:42:12.0692 4036 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll

22:42:12.0723 4036 TermService - ok

22:42:12.0754 4036 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll

22:42:12.0770 4036 Themes - ok

22:42:12.0801 4036 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll

22:42:12.0832 4036 THREADORDER - ok

22:42:12.0848 4036 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll

22:42:12.0879 4036 TrkWks - ok

22:42:12.0941 4036 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe

22:42:12.0957 4036 TrustedInstaller - ok

22:42:12.0988 4036 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys

22:42:13.0019 4036 tssecsrv - ok

22:42:13.0050 4036 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys

22:42:13.0066 4036 TsUsbFlt - ok

22:42:13.0113 4036 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys

22:42:13.0129 4036 tunnel - ok

22:42:13.0160 4036 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys

22:42:13.0175 4036 uagp35 - ok

22:42:13.0222 4036 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys

22:42:13.0253 4036 udfs - ok

22:42:13.0300 4036 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe

22:42:13.0316 4036 UI0Detect - ok

22:42:13.0363 4036 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys

22:42:13.0378 4036 uliagpkx - ok

22:42:13.0409 4036 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys

22:42:13.0425 4036 umbus - ok

22:42:13.0441 4036 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys

22:42:13.0456 4036 UmPass - ok

22:42:13.0487 4036 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll

22:42:13.0519 4036 upnphost - ok

22:42:13.0550 4036 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\windows\system32\Drivers\usbaapl.sys

22:42:13.0565 4036 USBAAPL - ok

22:42:13.0565 4036 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys

22:42:13.0581 4036 usbccgp - ok

22:42:13.0612 4036 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys

22:42:13.0628 4036 usbcir - ok

22:42:13.0643 4036 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys

22:42:13.0659 4036 usbehci - ok

22:42:13.0706 4036 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys

22:42:13.0737 4036 usbhub - ok

22:42:13.0753 4036 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\drivers\usbohci.sys

22:42:13.0768 4036 usbohci - ok

22:42:13.0784 4036 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys

22:42:13.0799 4036 usbprint - ok

22:42:13.0831 4036 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys

22:42:13.0846 4036 usbscan - ok

22:42:13.0877 4036 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\drivers\USBSTOR.SYS

22:42:13.0877 4036 USBSTOR - ok

22:42:13.0893 4036 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\DRIVERS\usbuhci.sys

22:42:13.0909 4036 usbuhci - ok

22:42:13.0955 4036 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys

22:42:13.0971 4036 usbvideo - ok

22:42:13.0987 4036 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll

22:42:14.0018 4036 UxSms - ok

22:42:14.0049 4036 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe

22:42:14.0049 4036 VaultSvc - ok

22:42:14.0096 4036 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys

22:42:14.0111 4036 vdrvroot - ok

22:42:14.0174 4036 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe

22:42:14.0205 4036 vds - ok

22:42:14.0236 4036 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys

22:42:14.0252 4036 vga - ok

22:42:14.0283 4036 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys

22:42:14.0299 4036 VgaSave - ok

22:42:14.0345 4036 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys

22:42:14.0361 4036 vhdmp - ok

22:42:14.0377 4036 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys

22:42:14.0377 4036 viaagp - ok

22:42:14.0392 4036 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys

22:42:14.0408 4036 ViaC7 - ok

22:42:14.0439 4036 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys

22:42:14.0455 4036 viaide - ok

22:42:14.0486 4036 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys

22:42:14.0486 4036 volmgr - ok

22:42:14.0533 4036 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys

22:42:14.0548 4036 volmgrx - ok

22:42:14.0564 4036 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys

22:42:14.0579 4036 volsnap - ok

22:42:14.0595 4036 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys

22:42:14.0611 4036 vsmraid - ok

22:42:14.0689 4036 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe

22:42:14.0735 4036 VSS - ok

22:42:14.0751 4036 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys

22:42:14.0767 4036 vwifibus - ok

22:42:14.0782 4036 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys

22:42:14.0798 4036 vwififlt - ok

22:42:14.0813 4036 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys

22:42:14.0829 4036 vwifimp - ok

22:42:14.0860 4036 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll

22:42:14.0891 4036 W32Time - ok

22:42:14.0923 4036 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys

22:42:14.0938 4036 WacomPen - ok

22:42:14.0969 4036 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:42:15.0001 4036 WANARP - ok

22:42:15.0001 4036 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys

22:42:15.0016 4036 Wanarpv6 - ok

22:42:15.0094 4036 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe

22:42:15.0125 4036 WatAdminSvc - ok

22:42:15.0219 4036 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe

22:42:15.0250 4036 wbengine - ok

22:42:15.0281 4036 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll

22:42:15.0313 4036 WbioSrvc - ok

22:42:15.0359 4036 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll

22:42:15.0375 4036 wcncsvc - ok

22:42:15.0391 4036 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll

22:42:15.0406 4036 WcsPlugInService - ok

22:42:15.0453 4036 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys

22:42:15.0469 4036 Wd - ok

22:42:15.0500 4036 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys

22:42:15.0515 4036 Wdf01000 - ok

22:42:15.0547 4036 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:42:15.0562 4036 WdiServiceHost - ok

22:42:15.0562 4036 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll

22:42:15.0593 4036 WdiSystemHost - ok

22:42:15.0625 4036 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll

22:42:15.0656 4036 WebClient - ok

22:42:15.0671 4036 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll

22:42:15.0703 4036 Wecsvc - ok

22:42:15.0718 4036 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll

22:42:15.0749 4036 wercplsupport - ok

22:42:15.0765 4036 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll

22:42:15.0796 4036 WerSvc - ok

22:42:15.0812 4036 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys

22:42:15.0843 4036 WfpLwf - ok

22:42:15.0859 4036 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys

22:42:15.0874 4036 WIMMount - ok

22:42:15.0937 4036 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

22:42:15.0983 4036 WinDefend - ok

22:42:15.0983 4036 WinHttpAutoProxySvc - ok

22:42:16.0046 4036 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll

22:42:16.0093 4036 Winmgmt - ok

22:42:16.0171 4036 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll

22:42:16.0202 4036 WinRM - ok

22:42:16.0264 4036 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys

22:42:16.0280 4036 WinUsb - ok

22:42:16.0342 4036 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll

22:42:16.0373 4036 Wlansvc - ok

22:42:16.0514 4036 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

22:42:16.0545 4036 wlidsvc - ok

22:42:16.0670 4036 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys

22:42:16.0685 4036 WmiAcpi - ok

22:42:16.0748 4036 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe

22:42:16.0779 4036 wmiApSrv - ok

22:42:16.0888 4036 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

22:42:16.0919 4036 WMPNetworkSvc - ok

22:42:16.0951 4036 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll

22:42:16.0966 4036 WPCSvc - ok

22:42:17.0013 4036 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll

22:42:17.0029 4036 WPDBusEnum - ok

22:42:17.0075 4036 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys

22:42:17.0122 4036 ws2ifsl - ok

22:42:17.0138 4036 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\system32\wscsvc.dll

22:42:17.0153 4036 wscsvc - ok

22:42:17.0153 4036 WSearch - ok

22:42:17.0278 4036 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\windows\system32\wuaueng.dll

22:42:17.0325 4036 wuauserv - ok

22:42:17.0450 4036 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys

22:42:17.0481 4036 WudfPf - ok

22:42:17.0497 4036 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys

22:42:17.0528 4036 WUDFRd - ok

22:42:17.0559 4036 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll

22:42:17.0590 4036 wudfsvc - ok

22:42:17.0606 4036 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll

22:42:17.0621 4036 WwanSvc - ok

22:42:17.0653 4036 MBR (0x1B8) (2e5debb2116b3417023e0d6562d7ed07) \Device\Harddisk0\DR0

22:42:17.0965 4036 \Device\Harddisk0\DR0 - ok

22:42:17.0965 4036 Boot (0x1200) (5fb009d8d1bbe104d22d071977f32a2a) \Device\Harddisk0\DR0\Partition0

22:42:17.0980 4036 \Device\Harddisk0\DR0\Partition0 - ok

22:42:17.0996 4036 Boot (0x1200) (d5688b55e165a627667567455a328efc) \Device\Harddisk0\DR0\Partition1

22:42:17.0996 4036 \Device\Harddisk0\DR0\Partition1 - ok

22:42:18.0027 4036 Boot (0x1200) (78ee0a60b0242cd51c89824323794145) \Device\Harddisk0\DR0\Partition2

22:42:18.0027 4036 \Device\Harddisk0\DR0\Partition2 - ok

22:42:18.0027 4036 ============================================================

22:42:18.0027 4036 Scan finished

22:42:18.0027 4036 ============================================================

22:42:18.0043 2232 Detected object count: 2

22:42:18.0043 2232 Actual detected object count: 2

22:42:44.0361 2232 C:\windows\system32\DRIVERS\atksgt.sys - copied to quarantine

22:42:44.0361 2232 HKLM\SYSTEM\ControlSet001\services\atksgt - will be deleted on reboot

22:42:44.0408 2232 HKLM\SYSTEM\ControlSet002\services\atksgt - will be deleted on reboot

22:42:44.0564 2232 C:\windows\system32\DRIVERS\atksgt.sys - will be deleted on reboot

22:42:44.0564 2232 atksgt ( UnsignedFile.Multi.Generic ) - User select action: Delete

22:42:44.0579 2232 C:\windows\system32\DRIVERS\lirsgt.sys - copied to quarantine

22:42:44.0579 2232 HKLM\SYSTEM\ControlSet001\services\lirsgt - will be deleted on reboot

22:42:44.0579 2232 HKLM\SYSTEM\ControlSet002\services\lirsgt - will be deleted on reboot

22:42:44.0579 2232 C:\windows\system32\DRIVERS\lirsgt.sys - will be deleted on reboot

22:42:44.0579 2232 lirsgt ( UnsignedFile.Multi.Generic ) - User select action: Delete

[kape]

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

c:\windows\system32\drivers\atksgt.sys

c:\windows\system32\drivers\lirsgt.sys

Folder::

c:\users\Jonas\AppData\Roaming\Ygehze

Registry::

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Iguhogv"=-

Driver::

SpyHunter 4 Service

Sla dit bestand op je bureaublad op als CFScript.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

[jarsteve]

Dit is het volgende logje:

ComboFix 12-07-08.02 - Jonas 10/07/2012 0:07.3.2 - x86

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.3005.1849 [GMT 2:00]

Gestart vanuit: c:\users\Jonas\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Jonas\Desktop\CFScript.txt

AV: Symantec Endpoint Protection *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

SP: Symantec Endpoint Protection *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

FILE ::

"c:\windows\system32\drivers\atksgt.sys"

"c:\windows\system32\drivers\lirsgt.sys"

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Jonas\AppData\Roaming\Ygehze

c:\users\Jonas\AppData\Roaming\Ygehze\fuehd.exe

.

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Service_SpyHunter 4 Service

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-06-09 to 2012-07-09 ))))))))))))))))))))))))))))))

.

.

2012-07-09 22:15 . 2012-07-09 22:17 -------- d-----w- c:\users\Jonas\AppData\Local\temp

2012-07-09 22:15 . 2012-07-09 22:15 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-09 22:15 . 2012-07-09 22:15 -------- d-----w- c:\users\Danny\AppData\Local\temp

2012-07-09 22:09 . 2012-07-09 22:09 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC8DF5B6-422F-4E46-8557-5EAB2EC58C80}\offreg.dll

2012-07-09 20:52 . 2012-07-09 20:57 -------- d-----w- c:\users\Jonas\AppData\Roaming\Ylapf

2012-07-09 13:52 . 2012-07-09 13:52 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys

2012-07-08 10:13 . 2012-07-08 10:13 -------- d-----w- c:\program files\Common Files\SWF Studio

2012-07-07 23:10 . 2012-07-09 22:16 -------- d-----w- c:\users\Jonas\AppData\Roaming\DAEMON Tools Lite

2012-07-07 23:08 . 2012-07-09 22:16 -------- d-----w- c:\programdata\DAEMON Tools Lite

2012-07-07 22:38 . 2012-07-07 22:38 -------- d-----w- c:\users\Jonas\AppData\Local\CRE

2012-07-07 22:37 . 2012-07-09 16:21 -------- d-----w- c:\users\Jonas\AppData\Roaming\BitTorrent

2012-07-07 20:44 . 2012-07-07 22:33 -------- d-----w- c:\users\Jonas\AppData\Roaming\uTorrent

2012-07-07 20:05 . 2012-07-09 13:07 -------- d-----w- c:\users\Jonas\anno

2012-06-21 08:36 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-21 08:36 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

2012-06-21 08:36 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-21 08:36 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

2012-06-21 08:35 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

2012-06-21 08:35 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

2012-06-21 08:35 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

2012-06-21 08:35 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

2012-06-21 08:35 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe

2012-06-20 18:22 . 2012-06-20 18:22 -------- d-----w- c:\programdata\jmhjsleidlvueef

2012-06-13 07:08 . 2012-04-28 03:17 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-06-13 07:08 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\system32\msi.dll

2012-06-13 07:08 . 2012-05-15 01:05 2343936 ----a-w- c:\windows\system32\win32k.sys

2012-06-13 07:08 . 2012-04-26 04:45 58880 ----a-w- c:\windows\system32\rdpwsx.dll

2012-06-13 07:08 . 2012-04-26 04:45 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll

2012-06-13 07:08 . 2012-04-26 04:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe

2012-06-13 07:08 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll

2012-06-13 07:08 . 2012-04-24 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll

2012-06-13 07:08 . 2012-04-24 04:36 1158656 ----a-w- c:\windows\system32\crypt32.dll

2012-06-13 07:08 . 2012-04-24 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll

2012-06-10 14:22 . 2012-06-10 14:22 -------- d-----w- c:\programdata\Lexmark Pro700 Series

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-07-05 16:03 . 2012-03-29 18:58 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-07-05 16:03 . 2011-05-17 15:17 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-06-09 13:25 . 2012-06-09 13:25 135680 ----a-w- c:\users\Jonas\AppData\Roaming\pkg_0ll.exe

2012-05-30 08:29 . 2012-05-30 08:29 121856 ----a-w- c:\users\Jonas\AppData\Roaming\opret0l.exe

2012-05-08 16:40 . 2012-06-01 07:01 6737808 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC8DF5B6-422F-4E46-8557-5EAB2EC58C80}\mpengine.dll

2012-04-18 18:56 . 2012-04-18 18:56 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2012-04-18 18:56 . 2012-04-18 18:56 69632 ----a-w- c:\windows\system32\QuickTime.qts

2009-10-26 14:05 . 2009-10-26 14:05 124240 ----a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll

2009-10-26 14:10 . 2009-10-26 14:10 13136 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll

2009-10-26 14:08 . 2009-10-26 14:08 70488 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll

2009-10-26 14:09 . 2009-10-26 14:09 91480 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll

2009-10-26 14:08 . 2009-10-26 14:08 22360 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll

2009-10-26 14:06 . 2009-10-26 14:06 255312 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll

2009-10-26 14:08 . 2009-10-26 14:08 31064 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll

2009-10-26 14:09 . 2009-10-26 14:09 40280 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll

2009-10-19 16:58 . 2009-10-19 16:58 652640 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll

2009-10-26 14:08 . 2009-10-26 14:08 23896 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="c:\users\Jonas\anno\daemon tools\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-08-19 7711264]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-14 1541416]

"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2009-07-08 115560]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 136216]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 171032]

"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 170520]

"ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2009-10-26 103768]

"MRT"="c:\windows\system32\MRT.exe" [2012-06-14 56731752]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"lxeemon.exe"="c:\program files\Lexmark Pro700 Series\lxeemon.exe" [2011-01-24 770728]

"EzPrint"="c:\program files\Lexmark Pro700 Series\ezprint.exe" [2011-01-24 148280]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-27 421736]

.

c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]

R2 lxeeCATSCustConnectService;lxeeCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [x]

R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [x]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]

S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 lxee_device;lxee_device;c:\windows\system32\lxeecoms.exe [x]

S2 OberonGameConsoleService;Oberon Media Game Console service;c:\program files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [x]

S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [x]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

HPService REG_MULTI_SZ HPSLPSVC

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.

Inhoud van de 'Gedeelde Taken' map

.

2012-07-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 20:57]

.

2012-07-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 20:57]

.

2012-03-29 c:\windows\Tasks\SpeedyPC Registration3.job

- c:\program files\Common Files\SpeedyPC Software\UUS3\UUS3.dll [2011-10-06 16:18]

.

2012-03-29 c:\windows\Tasks\SpeedyPC Update Version3.job

- c:\program files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe [2011-10-06 16:18]

.

2012-07-08 c:\windows\Tasks\SyncBack Backup Jonas Bibliotheken.job

- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2009-12-30 11:00]

.

2012-07-08 c:\windows\Tasks\SyncBack Synchronise Folder RECHTEN.job

- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2009-12-30 11:00]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

uInternet Settings,ProxyOverride = *.local

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 55758

FF - prefs.js: network.proxy.type - 1

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

- - - - ORPHANS VERWIJDERD - - - -

.

SafeBoot-49504850.sys

.

.

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files\Symantec\Symantec Endpoint Protection\Smc.exe

c:\program files\Common Files\Symantec Shared\ccSvcHst.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe

c:\program files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\windows\system32\taskhost.exe

c:\program files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe

c:\program files\Samsung\Easy Display Manager\dmhkcore.exe

c:\program files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe

c:\program files\Samsung\Samsung Support Center\SSCKbdHk.exe

c:\program files\Samsung\Samsung Update Plus\SUPBackground.exe

c:\program files\TeamViewer\Version6\TeamViewer.exe

c:\program files\Symantec\Symantec Endpoint Protection\SmcGui.exe

c:\program files\TeamViewer\Version6\tv_w32.exe

c:\windows\servicing\TrustedInstaller.exe

c:\windows\system32\conhost.exe

c:\windows\system32\igfxext.exe

c:\windows\system32\igfxsrvc.exe

c:\windows\system32\DllHost.exe

c:\windows\system32\sppsvc.exe

c:\program files\Windows Media Player\wmpnetwk.exe

.

**************************************************************************

.

Voltooingstijd: 2012-07-10 00:23:06 - machine werd herstart

ComboFix-quarantined-files.txt 2012-07-09 22:23

ComboFix2.txt 2012-07-09 19:52

ComboFix3.txt 2012-07-09 17:37

.

Pre-Run: 141.457.633.280 bytes beschikbaar

Post-Run: 141.132.476.416 bytes beschikbaar

.

- - End Of File - - B532F0E664A7A87A131CE1476FFD2CFA

[kape]

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

c:\windows\system32\drivers\dtsoftbus01.sys

Folder::

c:\users\Jonas\AppData\Roaming\Ylapf

Driver::

dtsoftbus01.sys

Firefox::

FF - ProfilePath - c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

Sla dit bestand op je bureaublad op als CFScript.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

[jarsteve]

Er moet blijkbaar veel verwijderd worden? Hier is het volgende logje:

ComboFix 12-07-08.02 - Jonas 10/07/2012 12:51:44.4.2 - x86

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.3005.2135 [GMT 2:00]

Gestart vanuit: c:\users\Jonas\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Jonas\Desktop\CFScript.txt

AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

FILE ::

"c:\windows\system32\drivers\dtsoftbus01.sys"

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome.manifest

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.js

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.xul

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\install.rdf

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome.manifest

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.js

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.xul

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\install.rdf

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome.manifest

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.js

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\content\ffjcext\ffjcext.xul

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext\ffjcext.dtd

c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\install.rdf

c:\users\Jonas\AppData\Roaming\Ubyti

c:\users\Jonas\AppData\Roaming\Ubyti\uvtae.exe

c:\users\Jonas\AppData\Roaming\Ylapf

c:\users\Jonas\AppData\Roaming\Ylapf\wiil.goz

c:\users\Jonas\AppData\Roaming\Ylapf\wiil.tmp

c:\windows\system32\drivers\dtsoftbus01.sys

.

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Service_dtsoftbus01

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-06-10 to 2012-07-10 ))))))))))))))))))))))))))))))

.

.

2012-07-10 10:58 . 2012-07-10 11:03 -------- d-----w- c:\users\Jonas\AppData\Local\temp

2012-07-10 10:58 . 2012-07-10 10:58 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-10 10:58 . 2012-07-10 10:58 -------- d-----w- c:\users\Danny\AppData\Local\temp

2012-07-10 10:46 . 2012-07-10 10:50 -------- d-----w- c:\users\Jonas\AppData\Roaming\Pemuy

2012-07-10 10:46 . 2012-07-10 10:46 -------- d-----w- c:\users\Jonas\AppData\Roaming\Ymiqo

2012-07-09 22:09 . 2012-07-10 10:46 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC8DF5B6-422F-4E46-8557-5EAB2EC58C80}\offreg.dll

2012-07-08 10:13 . 2012-07-08 10:13 -------- d-----w- c:\program files\Common Files\SWF Studio

2012-07-07 23:10 . 2012-07-09 22:16 -------- d-----w- c:\users\Jonas\AppData\Roaming\DAEMON Tools Lite

2012-07-07 23:08 . 2012-07-09 22:16 -------- d-----w- c:\programdata\DAEMON Tools Lite

2012-07-07 22:38 . 2012-07-07 22:38 -------- d-----w- c:\users\Jonas\AppData\Local\CRE

2012-07-07 22:37 . 2012-07-09 16:21 -------- d-----w- c:\users\Jonas\AppData\Roaming\BitTorrent

2012-07-07 20:44 . 2012-07-07 22:33 -------- d-----w- c:\users\Jonas\AppData\Roaming\uTorrent

2012-07-07 20:05 . 2012-07-09 13:07 -------- d-----w- c:\users\Jonas\anno

2012-06-21 08:36 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-21 08:36 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

2012-06-21 08:36 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-21 08:36 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

2012-06-21 08:35 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

2012-06-21 08:35 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

2012-06-21 08:35 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

2012-06-21 08:35 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

2012-06-21 08:35 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe

2012-06-20 18:22 . 2012-06-20 18:22 -------- d-----w- c:\programdata\jmhjsleidlvueef

2012-06-13 07:08 . 2012-04-28 03:17 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-06-13 07:08 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\system32\msi.dll

2012-06-13 07:08 . 2012-05-15 01:05 2343936 ----a-w- c:\windows\system32\win32k.sys

2012-06-13 07:08 . 2012-04-26 04:45 58880 ----a-w- c:\windows\system32\rdpwsx.dll

2012-06-13 07:08 . 2012-04-26 04:45 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll

2012-06-13 07:08 . 2012-04-26 04:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe

2012-06-13 07:08 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll

2012-06-13 07:08 . 2012-04-24 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll

2012-06-13 07:08 . 2012-04-24 04:36 1158656 ----a-w- c:\windows\system32\crypt32.dll

2012-06-13 07:08 . 2012-04-24 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll

2012-06-10 14:22 . 2012-06-10 14:22 -------- d-----w- c:\programdata\Lexmark Pro700 Series

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-07-05 16:03 . 2012-03-29 18:58 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-07-05 16:03 . 2011-05-17 15:17 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-06-09 13:25 . 2012-06-09 13:25 135680 ----a-w- c:\users\Jonas\AppData\Roaming\pkg_0ll.exe

2012-05-30 08:29 . 2012-05-30 08:29 121856 ----a-w- c:\users\Jonas\AppData\Roaming\opret0l.exe

2012-05-08 16:40 . 2012-06-01 07:01 6737808 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC8DF5B6-422F-4E46-8557-5EAB2EC58C80}\mpengine.dll

2012-04-18 18:56 . 2012-04-18 18:56 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2012-04-18 18:56 . 2012-04-18 18:56 69632 ----a-w- c:\windows\system32\QuickTime.qts

2009-10-26 14:05 . 2009-10-26 14:05 124240 ----a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll

2009-10-26 14:10 . 2009-10-26 14:10 13136 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll

2009-10-26 14:08 . 2009-10-26 14:08 70488 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll

2009-10-26 14:09 . 2009-10-26 14:09 91480 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll

2009-10-26 14:08 . 2009-10-26 14:08 22360 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll

2009-10-26 14:06 . 2009-10-26 14:06 255312 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll

2009-10-26 14:08 . 2009-10-26 14:08 31064 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll

2009-10-26 14:09 . 2009-10-26 14:09 40280 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll

2009-10-19 16:58 . 2009-10-19 16:58 652640 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll

2009-10-26 14:08 . 2009-10-26 14:08 23896 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="c:\users\Jonas\anno\daemon tools\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-08-19 7711264]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-14 1541416]

"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2009-07-08 115560]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 136216]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 171032]

"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 170520]

"ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2009-10-26 103768]

"MRT"="c:\windows\system32\MRT.exe" [2012-06-14 56731752]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"lxeemon.exe"="c:\program files\Lexmark Pro700 Series\lxeemon.exe" [2011-01-24 770728]

"EzPrint"="c:\program files\Lexmark Pro700 Series\ezprint.exe" [2011-01-24 148280]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-27 421736]

.

c:\users\Jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]

R2 lxeeCATSCustConnectService;lxeeCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [x]

R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [x]

S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 lxee_device;lxee_device;c:\windows\system32\lxeecoms.exe [x]

S2 OberonGameConsoleService;Oberon Media Game Console service;c:\program files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [x]

S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [x]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

HPService REG_MULTI_SZ HPSLPSVC

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.

Inhoud van de 'Gedeelde Taken' map

.

2012-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 20:57]

.

2012-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 20:57]

.

2012-03-29 c:\windows\Tasks\SpeedyPC Registration3.job

- c:\program files\Common Files\SpeedyPC Software\UUS3\UUS3.dll [2011-10-06 16:18]

.

2012-03-29 c:\windows\Tasks\SpeedyPC Update Version3.job

- c:\program files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe [2011-10-06 16:18]

.

2012-07-08 c:\windows\Tasks\SyncBack Backup Jonas Bibliotheken.job

- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2009-12-30 11:00]

.

2012-07-08 c:\windows\Tasks\SyncBack Synchronise Folder RECHTEN.job

- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2009-12-30 11:00]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

uInternet Settings,ProxyOverride = *.local

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\wb6o2362.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 55758

FF - prefs.js: network.proxy.type - 1

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

- - - - ORPHANS VERWIJDERD - - - -

.

HKCU-Run-Curihey - c:\users\Jonas\AppData\Roaming\Ubyti\uvtae.exe

.

.

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files\Symantec\Symantec Endpoint Protection\Smc.exe

c:\program files\Common Files\Symantec Shared\ccSvcHst.exe

c:\windows\system32\taskhost.exe

c:\program files\Samsung\Samsung Support Center\SSCKbdHk.exe

c:\program files\Samsung\Samsung Update Plus\SUPBackground.exe

c:\program files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe

c:\program files\Symantec\Symantec Endpoint Protection\SmcGui.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe

c:\program files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

c:\program files\TeamViewer\Version6\TeamViewer.exe

c:\windows\system32\igfxext.exe

c:\windows\system32\igfxsrvc.exe

c:\program files\TeamViewer\Version6\tv_w32.exe

c:\windows\servicing\TrustedInstaller.exe

c:\windows\system32\conhost.exe

c:\windows\system32\DllHost.exe

c:\windows\system32\sppsvc.exe

c:\program files\Windows Media Player\wmpnetwk.exe

c:\windows\system32\sdclt.exe

.

**************************************************************************

.

Voltooingstijd: 2012-07-10 13:07:27 - machine werd herstart

ComboFix-quarantined-files.txt 2012-07-10 11:07

ComboFix2.txt 2012-07-09 22:23

ComboFix3.txt 2012-07-09 19:52

ComboFix4.txt 2012-07-09 17:37

.

Pre-Run: 140.882.599.936 bytes beschikbaar

Post-Run: 141.093.957.632 bytes beschikbaar

.

- - End Of File - - 5698EF238AC08B6531E3704F97733DEC

Bedankt!

Jarsteve